Windows Analysis Report
resources.dll

AI detected suspicious sample

Source: Yara match	File source: 0000000E.00000003.2300245046.000000007E010000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2300636587.000000007EA30000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2303355956.000000007D920000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: rundll32.exe PID: 3292, type: MEMORYSTR

Source: Submited Sample

Integrated Neural Analysis Model: Matched 96.5% probability

Source: resources.dll

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE, DLL

Source: resources.dll

Static PE information: DYNAMIC_BASE, NX_COMPAT

Source:	Binary string: E:\cpp\git7\dll\WndResizerApp.pdbk source: resources.dll
Source:	Binary string: E:\cpp\git7\dll\WndResizerApp.pdb source: resources.dll

Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData	Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49835 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49872 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49837 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49889 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49836 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49891 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49890 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49873 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49908 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49909 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49925 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49923 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49922 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49871 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49921 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49936 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49935 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49938 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49957 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49892 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49907 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49972 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49939 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49954 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49958 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49973 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49983 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49910 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49986 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50001 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50014 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50002 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49969 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50016 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50027 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50003 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50047 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50049 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50050 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50004 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50051 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49984 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50031 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50015 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50028 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49955 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50029 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49834 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49870 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49985 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50017 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50066 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50065 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50076 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50064 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50077 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50081 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50096 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50098 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50099 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50080 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50061 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50112 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50122 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50108 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50124 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:49971 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50133 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50136 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50141 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50134 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50150 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50135 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50110 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50151 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50142 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50143 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50158 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50159 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50160 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50113 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50152 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50165 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50182 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50157 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50181 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50190 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50205 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50176 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50206 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50199 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50095 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50173 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50183 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50208 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50214 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50200 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50144 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50215 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50223 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50222 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50232 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50238 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50229 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50240 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50216 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50149 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50166 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50197 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50189 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50213 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50168 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50261 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50231 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50262 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50198 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50230 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50174 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50264 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50237 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50239 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50246 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50248 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50207 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50245 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50285 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50184 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50255 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50287 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50278 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50191 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50295 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50286 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50192 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50279 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50294 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50224 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50302 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50277 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50312 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50303 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50253 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50271 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50256 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50123 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50221 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50269 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50280 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50318 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50320 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50247 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50270 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50263 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50301 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50296 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50326 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50272 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50304 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50288 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50328 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50334 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50335 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50336 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50325 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50317 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50310 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50341 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50254 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50327 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50333 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50293 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50343 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50350 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50342 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50344 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50358 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50357 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50349 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50359 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50366 -> 195.133.88.98:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50319 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50360 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50367 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50309 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50175 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50351 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50368 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50365 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50127 -> 62.173.146.41:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50167 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50311 -> 31.41.244.38:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.5:50352 -> 62.173.146.41:443

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\SysWOW64\rundll32.exe	Network Connect: 31.41.244.38 443	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Network Connect: 195.133.88.98 443	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Network Connect: 62.173.146.41 443	Jump to behavior

Source: Joe Sandbox View	IP Address: 31.41.244.38 31.41.244.38
Source: Joe Sandbox View	IP Address: 195.133.88.98 195.133.88.98
Source: Joe Sandbox View	IP Address: 62.173.146.41 62.173.146.41

Source: Joe Sandbox View	ASN Name: AEROEXPRESS-ASRU AEROEXPRESS-ASRU
Source: Joe Sandbox View	ASN Name: ETOP-ASPL ETOP-ASPL
Source: Joe Sandbox View	ASN Name: SPACENET-ASInternetServiceProviderRU SPACENET-ASInternetServiceProviderRU

Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 195.133.88.98
Source: unknown	TCP traffic detected without corresponding DNS query: 195.133.88.98
Source: unknown	TCP traffic detected without corresponding DNS query: 195.133.88.98
Source: unknown	TCP traffic detected without corresponding DNS query: 195.133.88.98
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.38
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.38
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.38
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.38
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 195.133.88.98
Source: unknown	TCP traffic detected without corresponding DNS query: 195.133.88.98
Source: unknown	TCP traffic detected without corresponding DNS query: 195.133.88.98
Source: unknown	TCP traffic detected without corresponding DNS query: 195.133.88.98
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.38
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.38
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.38
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.38
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 195.133.88.98
Source: unknown	TCP traffic detected without corresponding DNS query: 195.133.88.98
Source: unknown	TCP traffic detected without corresponding DNS query: 195.133.88.98
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.38
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.38
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.38
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.38
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41
Source: unknown	TCP traffic detected without corresponding DNS query: 62.173.146.41

Source: rundll32.exe, 0000000E.00000003.3291662100.000000007F570000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2354677127.000000007F560000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: "www.facebook.com": "{\"Tier1\": [1103, 6061], \"Tier2\": [5445, 1780, 8220]}", equals www.facebook.com (Facebook)
Source: rundll32.exe, 0000000E.00000003.3291662100.000000007F570000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2354677127.000000007F560000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: "www.linkedin.com": "{\"Tier1\": [1103, 214, 6061], \"Tier2\": [2771, 9515, 1780, 1303, 1099, 6081, 5581, 9396]}", equals www.linkedin.com (Linkedin)
Source: rundll32.exe, 0000000E.00000003.3291662100.000000007F570000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2354677127.000000007F560000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: "www.youtube.com": "{\"Tier1\": [983, 6061, 1103], \"Tier2\": [2413, 8118, 1720, 5007]}", equals www.youtube.com (Youtube)

Source: rundll32.exe, 0000000E.00000003.2300636587.000000007EA30000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2300545497.000000007E5B0000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2303355956.000000007D920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.css
Source: rundll32.exe, 0000000E.00000003.2300636587.000000007EA30000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2300545497.000000007E5B0000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2303355956.000000007D920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.jpg
Source: rundll32.exe, 0000000E.00000003.2300636587.000000007EA30000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2300545497.000000007E5B0000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2303355956.000000007D920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://html4/loose.dtd
Source: rundll32.exe, 0000000E.00000003.2295319581.0000000005ED0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: rundll32.exe, 0000000E.00000003.2295319581.0000000005ED0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: rundll32.exe, 0000000E.00000003.2295319581.00000000068D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: rundll32.exe, 0000000E.00000003.2295319581.0000000005ED0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.borland.com/namespaces/Types
Source: rundll32.exe, 0000000E.00000003.2300636587.000000007EA30000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2300545497.000000007E5B0000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2303355956.000000007D920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.openssl.org/support/faq.html
Source: rundll32.exe, 0000000E.00000003.2300636587.000000007EA30000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2300545497.000000007E5B0000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2303355956.000000007D920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.openssl.org/support/faq.html.
Source: rundll32.exe, 0000000E.00000003.3215871980.000000007F592000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://azureedge.net
Source: rundll32.exe, 0000000E.00000003.3215871980.000000007F592000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/addressbar_uu_files.en-gb/1.0.2/asset?sv=2017-07-29&sr
Source: rundll32.exe, 0000000E.00000003.3215871980.000000007F592000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?sv=2017-07-29&sr
Source: rundll32.exe, 0000000E.00000003.3215871980.000000007F592000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/signal_triggers/1.13.3/asset?sv=2017-07-29&sr=c&sig=Nt

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50367 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50355 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50333 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 50326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50293 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 50336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50358 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50216
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50215

E-Banking Fraud

Source: Yara match	File source: 0000000E.00000003.2300245046.000000007E010000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2300636587.000000007EA30000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2303355956.000000007D920000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: rundll32.exe PID: 3292, type: MEMORYSTR

Source: C:\Windows\SysWOW64\rundll32.exe

Process Stats: CPU usage > 49%

Source: resources.dll

Binary or memory string: OriginalFilenameWndResizerApp.exeJ vs resources.dll

Source: resources.dll

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE, DLL

Source: classification engine

Classification label: mal100.phis.troj.spyw.evad.winDLL@125/221@0/3

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:728:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1480:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1776:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1252:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3780:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2356:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3840:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1708:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3176:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5860:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5560:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1720:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:712:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5064:120:WilError_03

Source: C:\Windows\SysWOW64\rundll32.exe

File created: C:\Users\user\AppData\Local\Temp\Qwafsoepidseto

Source: Yara match	File source: 14.3.rundll32.exe.5ed0000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000E.00000003.2295319581.0000000005ED0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Source: C:\Windows\SysWOW64\rundll32.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales			Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales			Jump to behavior

Source: C:\Windows\SysWOW64\rundll32.exe

File read: C:\Users\desktop.ini

Source: C:\Windows\System32\loaddll32.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Source: C:\Windows\System32\loaddll32.exe

Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\resources.dll,CIrNTzBaPkppGNf

Source: rundll32.exe, 0000000E.00000003.2300636587.000000007EA30000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2300545497.000000007E5B0000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2303355956.000000007D920000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
Source: rundll32.exe, 0000000E.00000003.2300636587.000000007EA30000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2300545497.000000007E5B0000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2303355956.000000007D920000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
Source: rundll32.exe, 0000000E.00000003.2300636587.000000007EA30000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2300545497.000000007E5B0000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2303355956.000000007D920000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
Source: rundll32.exe, 0000000E.00000003.2300636587.000000007EA30000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2300545497.000000007E5B0000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2303355956.000000007D920000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: rundll32.exe, 0000000E.00000003.3140896312.000000000803A000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.3210469910.000000000803A000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.3288971156.000000000803A000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2981815119.0000000008057000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.3296918701.0000000008039000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.3060499259.0000000008039000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.3143482412.0000000008039000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2984493114.0000000008056000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2352554089.0000000008057000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2355809968.0000000008053000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.3217087911.0000000008039000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: resources.dll

ReversingLabs: Detection: 71%

Source: unknown	Process created: C:\Windows\System32\loaddll32.exe loaddll32.exe "C:\Users\user\Desktop\resources.dll"
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\resources.dll",#1
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\resources.dll,CIrNTzBaPkppGNf
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",#1
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\resources.dll,CZnIUAAeJ
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\resources.dll,FxJWXdx
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",CIrNTzBaPkppGNf
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",CZnIUAAeJ
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",FxJWXdx
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",yVmJFl
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",ukniOqaVKgeX
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",uMRRtkuQVecTfq
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",start
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",rtVNQhSpgienExR
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",nkYPRlgSTnlUkuDTW
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",jERKotJBwfw
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",iBZHcoeoarRd
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",ZfDMgndWxjR
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",UAyCqwHRBMHCdHlVz
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",SOdCGqnNtDWyDo
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",NpZatICsK
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",LKSMdMaTT
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",IYfRriwGvbgbXBXReH
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",HipXGmygXapBRYfa
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",GbmgwMEzKpXc
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /End /tn \Microsoft\Windows\Wininet\CacheTask
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /Run /tn \Microsoft\Windows\Wininet\CacheTask
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /End /tn \Microsoft\Windows\Wininet\CacheTask
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /Run /tn \Microsoft\Windows\Wininet\CacheTask
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /End /tn \Microsoft\Windows\Wininet\CacheTask
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /Run /tn \Microsoft\Windows\Wininet\CacheTask
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /End /tn \Microsoft\Windows\Wininet\CacheTask
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /Run /tn \Microsoft\Windows\Wininet\CacheTask
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /End /tn \Microsoft\Windows\Wininet\CacheTask
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /Run /tn \Microsoft\Windows\Wininet\CacheTask
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /End /tn \Microsoft\Windows\Wininet\CacheTask
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /Run /tn \Microsoft\Windows\Wininet\CacheTask
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /End /tn \Microsoft\Windows\Wininet\CacheTask
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\resources.dll",#1	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\resources.dll,CIrNTzBaPkppGNf	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\resources.dll,CZnIUAAeJ	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\resources.dll,FxJWXdx	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",CIrNTzBaPkppGNf	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",CZnIUAAeJ	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",FxJWXdx	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",yVmJFl	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",ukniOqaVKgeX	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",uMRRtkuQVecTfq	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",start	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",rtVNQhSpgienExR	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",nkYPRlgSTnlUkuDTW	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",jERKotJBwfw	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",iBZHcoeoarRd	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",ZfDMgndWxjR	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",UAyCqwHRBMHCdHlVz	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",SOdCGqnNtDWyDo	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",NpZatICsK	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",LKSMdMaTT	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",IYfRriwGvbgbXBXReH	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",HipXGmygXapBRYfa	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",GbmgwMEzKpXc	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",#1	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",NpZatICsK	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /Run /tn \Microsoft\Windows\Wininet\CacheTask	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",HipXGmygXapBRYfa	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /Run /tn \Microsoft\Windows\Wininet\CacheTask	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /End /tn \Microsoft\Windows\Wininet\CacheTask	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /Run /tn \Microsoft\Windows\Wininet\CacheTask	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /End /tn \Microsoft\Windows\Wininet\CacheTask	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /Run /tn \Microsoft\Windows\Wininet\CacheTask	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /End /tn \Microsoft\Windows\Wininet\CacheTask	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /Run /tn \Microsoft\Windows\Wininet\CacheTask	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /End /tn \Microsoft\Windows\Wininet\CacheTask	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /Run /tn \Microsoft\Windows\Wininet\CacheTask	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /End /tn \Microsoft\Windows\Wininet\CacheTask	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Windows\System32\loaddll32.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Section loaded: msimg32.dll	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll

Source: C:\Windows\SysWOW64\rundll32.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32

Uses schtasks.exe or at.exe to add and modify task schedules

Source: resources.dll

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: resources.dll

Static file information: File size 11922432 > 1048576

Source: resources.dll	Static PE information: Raw size of .text is bigger than: 0x100000 < 0x97d800
Source: resources.dll	Static PE information: Raw size of .rsrc is bigger than: 0x100000 < 0x166400

Source: resources.dll

Static PE information: More than 200 imports for USER32.dll

Source: resources.dll

Static PE information: DYNAMIC_BASE, NX_COMPAT

Source: resources.dll

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: E:\cpp\git7\dll\WndResizerApp.pdbk source: resources.dll
Source:	Binary string: E:\cpp\git7\dll\WndResizerApp.pdb source: resources.dll

Boot Survival

Source: C:\Windows\SysWOW64\rundll32.exe

Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /End /tn \Microsoft\Windows\Wininet\CacheTask

Hooking and other Techniques for Hiding and Protection

May use the Tor software to hide its network traffic

Source: rundll32.exe, 0000000E.00000003.2300245046.000000007E010000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2300636587.000000007EA30000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2303355956.000000007D920000.00000004.00001000.00020000.00000000.sdmp

Binary or memory string: torConnect

Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Windows\SysWOW64\rundll32.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter

Source: C:\Windows\SysWOW64\rundll32.exe	Window / User API: threadDelayed 3901			Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Window / User API: threadDelayed 3790			Jump to behavior

Source: C:\Windows\SysWOW64\rundll32.exe TID: 1576	Thread sleep time: -59160s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe TID: 3720	Thread sleep time: -7802000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe TID: 1784	Thread sleep time: -75075s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe TID: 1292	Thread sleep time: -7580000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe TID: 3720	Thread sleep time: -462000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe TID: 1292	Thread sleep time: -396000s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Windows\SysWOW64\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior

Source: C:\Windows\System32\loaddll32.exe	Thread delayed: delay time: 120000			Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Thread delayed: delay time: 75075			Jump to behavior

Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData	Jump to behavior

HIPS / PFW / Operating System Protection Evasion

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\SysWOW64\rundll32.exe	Network Connect: 31.41.244.38 443	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Network Connect: 195.133.88.98 443	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Network Connect: 62.173.146.41 443	Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe

Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\resources.dll",#1

Source: rundll32.exe, 0000000E.00000003.2300245046.000000007E010000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2299049426.000000007E8D0000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2300636587.000000007EA30000.00000004.00001000.00020000.00000000.sdmp

Binary or memory string: Shell_TrayWndTrayNotifyWndSysPagerToolbarWindow32U

Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior

Source: C:\Windows\SysWOW64\rundll32.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion InstallDate

Source: C:\Windows\SysWOW64\rundll32.exe

Queries volume information: C:\ VolumeInformation

Source: C:\Windows\SysWOW64\rundll32.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Stealing of Sensitive Information

Tries to harvest and steal browser information (history, passwords, etc)

Source: Yara match	File source: 0000000E.00000003.2300245046.000000007E010000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2300636587.000000007EA30000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2303355956.000000007D920000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: rundll32.exe PID: 3292, type: MEMORYSTR

Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\wasm\index-dir\the-real-index	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\MANIFEST-000001	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Scripts\000003.log	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Scripts\MANIFEST-000001	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsSiteData-journal	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\CURRENT	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\commerce_subscription_db\LOCK	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\wasm\index	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\DawnCache\index	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\DIPS	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Affiliation Database-journal	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\MANIFEST-000001	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOCK	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Download Service\EntryDB\LOCK	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\coupon_db\LOG	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\commerce_subscription_db\LOG	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Scripts\LOG	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\CURRENT	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\coupon_db\LOCK	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Affiliation Database	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOCK	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Cookies	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOCK	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db-journal	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOCK	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Scripts\CURRENT	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Download Service\EntryDB\LOG	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Cookies-journal	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Scripts\LOCK	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_1	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_2	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsSiteData	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_3	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\DIPS-journal	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini	Jump to behavior

Tries to steal Instant Messenger accounts or passwords

Source: C:\Windows\SysWOW64\rundll32.exe

File opened: C:\Users\user\AppData\Roaming\Miranda\

Remote Access Functionality

Source: Yara match	File source: 0000000E.00000003.2300245046.000000007E010000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2300636587.000000007EA30000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2303355956.000000007D920000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: rundll32.exe PID: 3292, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Windows Management Instrumentation	1 Scheduled Task/Job	112 Process Injection	111 Virtualization/Sandbox Evasion	1 OS Credential Dumping	1 Security Software Discovery	Remote Services	1 Data from Local System	2 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Scheduled Task/Job	1 DLL Side-Loading	1 Scheduled Task/Job	112 Process Injection	1 Credentials in Registry	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	1 Multi-hop Proxy	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	1 Rundll32	1 Credentials In Files	111 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	1 Proxy	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	2 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	Steganography	Cached Domain Credentials	33 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
resources.dll	71%	ReversingLabs	Win32.Trojan.Danabot
resources.dll	100%	Avira	TR/AD.Nekark.zxftf

Name	Source	Malicious	Reputation
http://html4/loose.dtd	rundll32.exe, 0000000E.00000003.2300636587.000000007EA30000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2300545497.000000007E5B0000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2303355956.000000007D920000.00000004.00001000.00020000.00000000.sdmp	false	high
http://www.apache.org/licenses/LICENSE-2.0	rundll32.exe, 0000000E.00000003.2295319581.00000000068D0000.00000004.00001000.00020000.00000000.sdmp	false	high
http://www.borland.com/namespaces/Types	rundll32.exe, 0000000E.00000003.2295319581.0000000005ED0000.00000004.00001000.00020000.00000000.sdmp	false	high
http://.css	rundll32.exe, 0000000E.00000003.2300636587.000000007EA30000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2300545497.000000007E5B0000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2303355956.000000007D920000.00000004.00001000.00020000.00000000.sdmp	false	high
http://schemas.xmlsoap.org/soap/encoding/	rundll32.exe, 0000000E.00000003.2295319581.0000000005ED0000.00000004.00001000.00020000.00000000.sdmp	false	high
http://.jpg	rundll32.exe, 0000000E.00000003.2300636587.000000007EA30000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2300545497.000000007E5B0000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2303355956.000000007D920000.00000004.00001000.00020000.00000000.sdmp	false	high
http://www.openssl.org/support/faq.html.	rundll32.exe, 0000000E.00000003.2300636587.000000007EA30000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2300545497.000000007E5B0000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2303355956.000000007D920000.00000004.00001000.00020000.00000000.sdmp	false	high
http://www.openssl.org/support/faq.html	rundll32.exe, 0000000E.00000003.2300636587.000000007EA30000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2300545497.000000007E5B0000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 0000000E.00000003.2303355956.000000007D920000.00000004.00001000.00020000.00000000.sdmp	false	high
http://schemas.xmlsoap.org/soap/envelope/	rundll32.exe, 0000000E.00000003.2295319581.0000000005ED0000.00000004.00001000.00020000.00000000.sdmp	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
31.41.244.38	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	true
195.133.88.98	unknown	Russian Federation	20853	ETOP-ASPL	true
62.173.146.41	unknown	Russian Federation	34300	SPACENET-ASInternetServiceProviderRU	true

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1565896
Start date and time:	2024-12-01 00:06:57 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 54s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	55
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	resources.dll
Detection:	MAL
Classification:	mal100.phis.troj.spyw.evad.winDLL@125/221@0/3
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .dll Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtEnumerateKey calls found.
Report size getting too big, too many NtEnumerateValueKey calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtQueryVolumeInformationFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: resources.dll

Simulations

Behavior and APIs

Time	Type	Description
18:08:01	API Interceptor	1x Sleep call for process: loaddll32.exe modified
18:08:15	API Interceptor	11132588x Sleep call for process: rundll32.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
31.41.244.38	resources(2).dll	Get hash	malicious	Unknown	Browse
	resources.dll	Get hash	malicious	Unknown	Browse
	resources(1).dll	Get hash	malicious	Unknown	Browse
	resources(1).dll	Get hash	malicious	Unknown	Browse
	resources.dll	Get hash	malicious	Unknown	Browse
	resources(2).dll	Get hash	malicious	Unknown	Browse
	resources(1).dll	Get hash	malicious	Unknown	Browse
	resources(1).dll	Get hash	malicious	Unknown	Browse
	resources.dll	Get hash	malicious	Unknown	Browse
	resources.dll	Get hash	malicious	Unknown	Browse
195.133.88.98	resources(2).dll	Get hash	malicious	Unknown	Browse
	resources.dll	Get hash	malicious	Unknown	Browse
	resources(1).dll	Get hash	malicious	Unknown	Browse
	resources(1).dll	Get hash	malicious	Unknown	Browse
	resources.dll	Get hash	malicious	Unknown	Browse
	resources(2).dll	Get hash	malicious	Unknown	Browse
	resources(1).dll	Get hash	malicious	Unknown	Browse
	resources(1).dll	Get hash	malicious	Unknown	Browse
	resources.dll	Get hash	malicious	Unknown	Browse
	resources.dll	Get hash	malicious	Unknown	Browse
62.173.146.41	resources(2).dll	Get hash	malicious	Unknown	Browse
	resources.dll	Get hash	malicious	Unknown	Browse
	resources(1).dll	Get hash	malicious	Unknown	Browse
	resources(1).dll	Get hash	malicious	Unknown	Browse
	resources.dll	Get hash	malicious	Unknown	Browse
	resources(2).dll	Get hash	malicious	Unknown	Browse
	resources(1).dll	Get hash	malicious	Unknown	Browse
	resources(1).dll	Get hash	malicious	Unknown	Browse
	resources.dll	Get hash	malicious	Unknown	Browse
	resources.dll	Get hash	malicious	Unknown	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ETOP-ASPL	https://objmapper.com/ctme0s2ztec8buqlnprxjcpb8gagacii7niu-9ox3q2e	Get hash	malicious	Unknown	Browse	194.87.57.210
	https://objmapper.com/	Get hash	malicious	Unknown	Browse	194.87.57.210
	dnlib.exe	Get hash	malicious	Unknown	Browse	194.58.33.172
	2y0EV2jtyQ.exe	Get hash	malicious	Unknown	Browse	194.58.33.172
	SecuriteInfo.com.Win32.BankerX-gen.16604.2792.exe	Get hash	malicious	Unknown	Browse	194.58.33.172
	https://c3y3jw.webwave.dev/	Get hash	malicious	Unknown	Browse	185.73.228.142
	https://t2fe0389a.emailsys2a.net/c/295/7795743/123/0/296632/1/1280/ef7f393dae.html/	Get hash	malicious	Unknown	Browse	185.73.228.142
	https://y4u53x.webwave.dev/	Get hash	malicious	Unknown	Browse	185.73.228.142
	https://jsft.dk/-tZtUGWWlI1l	Get hash	malicious	Unknown	Browse	185.30.124.158
	https://dmnzhd.webwave.dev/	Get hash	malicious	Unknown	Browse	185.30.124.158
SPACENET-ASInternetServiceProviderRU	belks.mips.elf	Get hash	malicious	Mirai	Browse	176.120.80.67
	Inovice_3_ETH.lnk	Get hash	malicious	PureLog Stealer, zgRAT	Browse	62.173.145.78
	x86.elf	Get hash	malicious	Mirai	Browse	176.120.80.41
	x7myVfh5YS.exe	Get hash	malicious	PureLog Stealer, zgRAT	Browse	62.173.145.78
	KBNCt45Gpk.elf	Get hash	malicious	Mirai	Browse	62.173.159.169
	FcMd5XxxZ0.elf	Get hash	malicious	Mirai	Browse	176.120.81.210
	dvrLocker.elf	Get hash	malicious	Unknown	Browse	176.120.80.56
	om4SVF6n0I.elf	Get hash	malicious	Mirai	Browse	176.120.80.91
	muAZlKU0hq.elf	Get hash	malicious	Mirai	Browse	62.173.159.122
	sQSqM58mvl.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse	176.120.79.55
AEROEXPRESS-ASRU	file.exe	Get hash	malicious	Amadey, Cryptbot	Browse	31.41.244.11
	file.exe	Get hash	malicious	Amadey, HTMLPhisher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	31.41.244.11
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	31.41.244.11
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	31.41.244.11
	file.exe	Get hash	malicious	Amadey, XWorm	Browse	31.41.244.11
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, Nymaim, Stealc	Browse	31.41.244.11
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc	Browse	31.41.244.11
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	31.41.244.11
	file.exe	Get hash	malicious	Amadey, Nymaim	Browse	31.41.244.11
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, Nymaim, Stealc, Vidar	Browse	31.41.244.11

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aayqdtapiowtq

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Adateeraudueh

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	EF2E0D18474B2151EF5876B1E89C2F1D
SHA1:	AEF9802FCF76C67D695BC77322BAE5400D3BBE82
SHA-256:	3381DE4CA9F3A477F25989DFC8B744E7916046B7AA369F61A9A2F7DC0963EC9E
SHA-512:	E81185705A3BD73645BF2B190BBF3AEE060C1C72F98FA39665F254A755B0A5723CE8296422874EB50C7B5E8D6BCD90175B0BA28061221039172A3F50E8902CC8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Adswhfuiyefuh

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF235F22DF3E004EDE21041978C24F2E
SHA1:	7188972F71AEE4C62669330FF7776E48094B4D9D
SHA-256:	16FA66A7DC98D93F2A4C5D20BAF5177F59C4C37FC62FACE65690C11C15FE6FF9
SHA-512:	E76D7CBBAA2B3110D38425F7B579C6F94C29A162D3B4A3B9A4FEACEDE7CEC5EA5E30E455F9417A2C230390C78AB2FBC54C7B98C8F8F68955FE071C37C59D4046
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aidetfiepthpt

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aoeiaauioefor

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF235F22DF3E004EDE21041978C24F2E
SHA1:	7188972F71AEE4C62669330FF7776E48094B4D9D
SHA-256:	16FA66A7DC98D93F2A4C5D20BAF5177F59C4C37FC62FACE65690C11C15FE6FF9
SHA-512:	E76D7CBBAA2B3110D38425F7B579C6F94C29A162D3B4A3B9A4FEACEDE7CEC5EA5E30E455F9417A2C230390C78AB2FBC54C7B98C8F8F68955FE071C37C59D4046
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aoerashuawtpd

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	EF2E0D18474B2151EF5876B1E89C2F1D
SHA1:	AEF9802FCF76C67D695BC77322BAE5400D3BBE82
SHA-256:	3381DE4CA9F3A477F25989DFC8B744E7916046B7AA369F61A9A2F7DC0963EC9E
SHA-512:	E81185705A3BD73645BF2B190BBF3AEE060C1C72F98FA39665F254A755B0A5723CE8296422874EB50C7B5E8D6BCD90175B0BA28061221039172A3F50E8902CC8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aqturqrssstwu

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF235F22DF3E004EDE21041978C24F2E
SHA1:	7188972F71AEE4C62669330FF7776E48094B4D9D
SHA-256:	16FA66A7DC98D93F2A4C5D20BAF5177F59C4C37FC62FACE65690C11C15FE6FF9
SHA-512:	E76D7CBBAA2B3110D38425F7B579C6F94C29A162D3B4A3B9A4FEACEDE7CEC5EA5E30E455F9417A2C230390C78AB2FBC54C7B98C8F8F68955FE071C37C59D4046
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ateduuideiiih

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	EF2E0D18474B2151EF5876B1E89C2F1D
SHA1:	AEF9802FCF76C67D695BC77322BAE5400D3BBE82
SHA-256:	3381DE4CA9F3A477F25989DFC8B744E7916046B7AA369F61A9A2F7DC0963EC9E
SHA-512:	E81185705A3BD73645BF2B190BBF3AEE060C1C72F98FA39665F254A755B0A5723CE8296422874EB50C7B5E8D6BCD90175B0BA28061221039172A3F50E8902CC8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Awqwthuesuryr

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Awqwthuesuryr-shm

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aywpuuuefqquh

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Daeoidowqhyti

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dawaoesdewisy

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Deirdeofeuqfqwr

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dfpfdy

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dowadyuypiui

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dsaepfedheiwh

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dwiroieipoq

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dwpuyhfyiq

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dyweedpue

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eaefpete

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	EF2E0D18474B2151EF5876B1E89C2F1D
SHA1:	AEF9802FCF76C67D695BC77322BAE5400D3BBE82
SHA-256:	3381DE4CA9F3A477F25989DFC8B744E7916046B7AA369F61A9A2F7DC0963EC9E
SHA-512:	E81185705A3BD73645BF2B190BBF3AEE060C1C72F98FA39665F254A755B0A5723CE8296422874EB50C7B5E8D6BCD90175B0BA28061221039172A3F50E8902CC8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eattoiaa

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Edirpuwedipduef

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Edttispe

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	EF2E0D18474B2151EF5876B1E89C2F1D
SHA1:	AEF9802FCF76C67D695BC77322BAE5400D3BBE82
SHA-256:	3381DE4CA9F3A477F25989DFC8B744E7916046B7AA369F61A9A2F7DC0963EC9E
SHA-512:	E81185705A3BD73645BF2B190BBF3AEE060C1C72F98FA39665F254A755B0A5723CE8296422874EB50C7B5E8D6BCD90175B0BA28061221039172A3F50E8902CC8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eepuesoqpdwaeyf

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eeyeswuyiswhfwp

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eeyeswuyiswhfwp-shm

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ehdtyateauesuyt

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eieftftq

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF235F22DF3E004EDE21041978C24F2E
SHA1:	7188972F71AEE4C62669330FF7776E48094B4D9D
SHA-256:	16FA66A7DC98D93F2A4C5D20BAF5177F59C4C37FC62FACE65690C11C15FE6FF9
SHA-512:	E76D7CBBAA2B3110D38425F7B579C6F94C29A162D3B4A3B9A4FEACEDE7CEC5EA5E30E455F9417A2C230390C78AB2FBC54C7B98C8F8F68955FE071C37C59D4046
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eisequhpqsiaose

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eofhayreeqehsup

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eqpoysqi

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eqpsoere

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eqtsoptafauuyed

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eqtsoptafauuyed-shm

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Equueefiqhuhfse

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	EF2E0D18474B2151EF5876B1E89C2F1D
SHA1:	AEF9802FCF76C67D695BC77322BAE5400D3BBE82
SHA-256:	3381DE4CA9F3A477F25989DFC8B744E7916046B7AA369F61A9A2F7DC0963EC9E
SHA-512:	E81185705A3BD73645BF2B190BBF3AEE060C1C72F98FA39665F254A755B0A5723CE8296422874EB50C7B5E8D6BCD90175B0BA28061221039172A3F50E8902CC8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eroddhyq

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Etedthfauwohiay

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Etedthfauwohiay-shm

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eupiiowirreshef

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	EF2E0D18474B2151EF5876B1E89C2F1D
SHA1:	AEF9802FCF76C67D695BC77322BAE5400D3BBE82
SHA-256:	3381DE4CA9F3A477F25989DFC8B744E7916046B7AA369F61A9A2F7DC0963EC9E
SHA-512:	E81185705A3BD73645BF2B190BBF3AEE060C1C72F98FA39665F254A755B0A5723CE8296422874EB50C7B5E8D6BCD90175B0BA28061221039172A3F50E8902CC8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eutqsaqrqpardqs

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ewosqdhisitreef

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fddawt

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fdytht

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Feqhsr

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fewpue

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ffqaws

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fpudsf

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fpwrth

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF235F22DF3E004EDE21041978C24F2E
SHA1:	7188972F71AEE4C62669330FF7776E48094B4D9D
SHA-256:	16FA66A7DC98D93F2A4C5D20BAF5177F59C4C37FC62FACE65690C11C15FE6FF9
SHA-512:	E76D7CBBAA2B3110D38425F7B579C6F94C29A162D3B4A3B9A4FEACEDE7CEC5EA5E30E455F9417A2C230390C78AB2FBC54C7B98C8F8F68955FE071C37C59D4046
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fsauoa

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fshtqe

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ftoppe

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fuwyfh

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fwsrsd

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF235F22DF3E004EDE21041978C24F2E
SHA1:	7188972F71AEE4C62669330FF7776E48094B4D9D
SHA-256:	16FA66A7DC98D93F2A4C5D20BAF5177F59C4C37FC62FACE65690C11C15FE6FF9
SHA-512:	E76D7CBBAA2B3110D38425F7B579C6F94C29A162D3B4A3B9A4FEACEDE7CEC5EA5E30E455F9417A2C230390C78AB2FBC54C7B98C8F8F68955FE071C37C59D4046
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fwyyte

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	EF2E0D18474B2151EF5876B1E89C2F1D
SHA1:	AEF9802FCF76C67D695BC77322BAE5400D3BBE82
SHA-256:	3381DE4CA9F3A477F25989DFC8B744E7916046B7AA369F61A9A2F7DC0963EC9E
SHA-512:	E81185705A3BD73645BF2B190BBF3AEE060C1C72F98FA39665F254A755B0A5723CE8296422874EB50C7B5E8D6BCD90175B0BA28061221039172A3F50E8902CC8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fytuye

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hafdthp

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Harpaat

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Harpaat-shm

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hdosday

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hdyrety

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Heieiyu

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Heieiyu-shm

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hfdrqui

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hfdrqui-shm

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hhewepf

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hhuorwe

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hhwapho

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	EF2E0D18474B2151EF5876B1E89C2F1D
SHA1:	AEF9802FCF76C67D695BC77322BAE5400D3BBE82
SHA-256:	3381DE4CA9F3A477F25989DFC8B744E7916046B7AA369F61A9A2F7DC0963EC9E
SHA-512:	E81185705A3BD73645BF2B190BBF3AEE060C1C72F98FA39665F254A755B0A5723CE8296422874EB50C7B5E8D6BCD90175B0BA28061221039172A3F50E8902CC8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hiwwowe

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hooeeqo

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hpefwqq

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hphrpit

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Htfqqyd

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	EF2E0D18474B2151EF5876B1E89C2F1D
SHA1:	AEF9802FCF76C67D695BC77322BAE5400D3BBE82
SHA-256:	3381DE4CA9F3A477F25989DFC8B744E7916046B7AA369F61A9A2F7DC0963EC9E
SHA-512:	E81185705A3BD73645BF2B190BBF3AEE060C1C72F98FA39665F254A755B0A5723CE8296422874EB50C7B5E8D6BCD90175B0BA28061221039172A3F50E8902CC8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Htithhq

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Httthwt

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Iafuhduetdo

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF235F22DF3E004EDE21041978C24F2E
SHA1:	7188972F71AEE4C62669330FF7776E48094B4D9D
SHA-256:	16FA66A7DC98D93F2A4C5D20BAF5177F59C4C37FC62FACE65690C11C15FE6FF9
SHA-512:	E76D7CBBAA2B3110D38425F7B579C6F94C29A162D3B4A3B9A4FEACEDE7CEC5EA5E30E455F9417A2C230390C78AB2FBC54C7B98C8F8F68955FE071C37C59D4046
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Iayuyhioswp

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Iehhwosuios

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Iehriueiufw

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	EF2E0D18474B2151EF5876B1E89C2F1D
SHA1:	AEF9802FCF76C67D695BC77322BAE5400D3BBE82
SHA-256:	3381DE4CA9F3A477F25989DFC8B744E7916046B7AA369F61A9A2F7DC0963EC9E
SHA-512:	E81185705A3BD73645BF2B190BBF3AEE060C1C72F98FA39665F254A755B0A5723CE8296422874EB50C7B5E8D6BCD90175B0BA28061221039172A3F50E8902CC8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ieptupoqpoe

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	EF2E0D18474B2151EF5876B1E89C2F1D
SHA1:	AEF9802FCF76C67D695BC77322BAE5400D3BBE82
SHA-256:	3381DE4CA9F3A477F25989DFC8B744E7916046B7AA369F61A9A2F7DC0963EC9E
SHA-512:	E81185705A3BD73645BF2B190BBF3AEE060C1C72F98FA39665F254A755B0A5723CE8296422874EB50C7B5E8D6BCD90175B0BA28061221039172A3F50E8902CC8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ieutqwyffwa

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ifsrpufthee

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Iifydhywias

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Iiuasitadqq

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Iiuortsoqhq

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF235F22DF3E004EDE21041978C24F2E
SHA1:	7188972F71AEE4C62669330FF7776E48094B4D9D
SHA-256:	16FA66A7DC98D93F2A4C5D20BAF5177F59C4C37FC62FACE65690C11C15FE6FF9
SHA-512:	E76D7CBBAA2B3110D38425F7B579C6F94C29A162D3B4A3B9A4FEACEDE7CEC5EA5E30E455F9417A2C230390C78AB2FBC54C7B98C8F8F68955FE071C37C59D4046
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Iofuueifqpr

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF235F22DF3E004EDE21041978C24F2E
SHA1:	7188972F71AEE4C62669330FF7776E48094B4D9D
SHA-256:	16FA66A7DC98D93F2A4C5D20BAF5177F59C4C37FC62FACE65690C11C15FE6FF9
SHA-512:	E76D7CBBAA2B3110D38425F7B579C6F94C29A162D3B4A3B9A4FEACEDE7CEC5EA5E30E455F9417A2C230390C78AB2FBC54C7B98C8F8F68955FE071C37C59D4046
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Iptyfudiyoa

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF235F22DF3E004EDE21041978C24F2E
SHA1:	7188972F71AEE4C62669330FF7776E48094B4D9D
SHA-256:	16FA66A7DC98D93F2A4C5D20BAF5177F59C4C37FC62FACE65690C11C15FE6FF9
SHA-512:	E76D7CBBAA2B3110D38425F7B579C6F94C29A162D3B4A3B9A4FEACEDE7CEC5EA5E30E455F9417A2C230390C78AB2FBC54C7B98C8F8F68955FE071C37C59D4046
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Iqieoeyuqau

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Iseitphhphp

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	EF2E0D18474B2151EF5876B1E89C2F1D
SHA1:	AEF9802FCF76C67D695BC77322BAE5400D3BBE82
SHA-256:	3381DE4CA9F3A477F25989DFC8B744E7916046B7AA369F61A9A2F7DC0963EC9E
SHA-512:	E81185705A3BD73645BF2B190BBF3AEE060C1C72F98FA39665F254A755B0A5723CE8296422874EB50C7B5E8D6BCD90175B0BA28061221039172A3F50E8902CC8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Iuwotedwoph

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oaoereehfaar

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Odhoaoqfhrso

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Odhoaoqfhrso-shm

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Odreywertara

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Odreywertara-shm

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oesyepeiaqst

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	EF2E0D18474B2151EF5876B1E89C2F1D
SHA1:	AEF9802FCF76C67D695BC77322BAE5400D3BBE82
SHA-256:	3381DE4CA9F3A477F25989DFC8B744E7916046B7AA369F61A9A2F7DC0963EC9E
SHA-512:	E81185705A3BD73645BF2B190BBF3AEE060C1C72F98FA39665F254A755B0A5723CE8296422874EB50C7B5E8D6BCD90175B0BA28061221039172A3F50E8902CC8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ohouaqqdeerf

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oooieraqysef

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF235F22DF3E004EDE21041978C24F2E
SHA1:	7188972F71AEE4C62669330FF7776E48094B4D9D
SHA-256:	16FA66A7DC98D93F2A4C5D20BAF5177F59C4C37FC62FACE65690C11C15FE6FF9
SHA-512:	E76D7CBBAA2B3110D38425F7B579C6F94C29A162D3B4A3B9A4FEACEDE7CEC5EA5E30E455F9417A2C230390C78AB2FBC54C7B98C8F8F68955FE071C37C59D4046
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ordwidperdts

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	EF2E0D18474B2151EF5876B1E89C2F1D
SHA1:	AEF9802FCF76C67D695BC77322BAE5400D3BBE82
SHA-256:	3381DE4CA9F3A477F25989DFC8B744E7916046B7AA369F61A9A2F7DC0963EC9E
SHA-512:	E81185705A3BD73645BF2B190BBF3AEE060C1C72F98FA39665F254A755B0A5723CE8296422874EB50C7B5E8D6BCD90175B0BA28061221039172A3F50E8902CC8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Orrsrerrrqyq

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Osaiaquwysud

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	EF2E0D18474B2151EF5876B1E89C2F1D
SHA1:	AEF9802FCF76C67D695BC77322BAE5400D3BBE82
SHA-256:	3381DE4CA9F3A477F25989DFC8B744E7916046B7AA369F61A9A2F7DC0963EC9E
SHA-512:	E81185705A3BD73645BF2B190BBF3AEE060C1C72F98FA39665F254A755B0A5723CE8296422874EB50C7B5E8D6BCD90175B0BA28061221039172A3F50E8902CC8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Otwopporuyfp

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oudtweiddiah

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ousrfhuttqwf

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF235F22DF3E004EDE21041978C24F2E
SHA1:	7188972F71AEE4C62669330FF7776E48094B4D9D
SHA-256:	16FA66A7DC98D93F2A4C5D20BAF5177F59C4C37FC62FACE65690C11C15FE6FF9
SHA-512:	E76D7CBBAA2B3110D38425F7B579C6F94C29A162D3B4A3B9A4FEACEDE7CEC5EA5E30E455F9417A2C230390C78AB2FBC54C7B98C8F8F68955FE071C37C59D4046
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Owuawtaqooay

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oyhqhfyppwsp

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Paqfwestwtiei

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pdsudeyurt

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF235F22DF3E004EDE21041978C24F2E
SHA1:	7188972F71AEE4C62669330FF7776E48094B4D9D
SHA-256:	16FA66A7DC98D93F2A4C5D20BAF5177F59C4C37FC62FACE65690C11C15FE6FF9
SHA-512:	E76D7CBBAA2B3110D38425F7B579C6F94C29A162D3B4A3B9A4FEACEDE7CEC5EA5E30E455F9417A2C230390C78AB2FBC54C7B98C8F8F68955FE071C37C59D4046
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Phwsehi

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Phwsfee

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF235F22DF3E004EDE21041978C24F2E
SHA1:	7188972F71AEE4C62669330FF7776E48094B4D9D
SHA-256:	16FA66A7DC98D93F2A4C5D20BAF5177F59C4C37FC62FACE65690C11C15FE6FF9
SHA-512:	E76D7CBBAA2B3110D38425F7B579C6F94C29A162D3B4A3B9A4FEACEDE7CEC5EA5E30E455F9417A2C230390C78AB2FBC54C7B98C8F8F68955FE071C37C59D4046
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Piiqewoowee

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pqdhouowuweass

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ptsttho

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	EF2E0D18474B2151EF5876B1E89C2F1D
SHA1:	AEF9802FCF76C67D695BC77322BAE5400D3BBE82
SHA-256:	3381DE4CA9F3A477F25989DFC8B744E7916046B7AA369F61A9A2F7DC0963EC9E
SHA-512:	E81185705A3BD73645BF2B190BBF3AEE060C1C72F98FA39665F254A755B0A5723CE8296422874EB50C7B5E8D6BCD90175B0BA28061221039172A3F50E8902CC8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Puefpopsey

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pweywspf

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pydsfdydo

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	EF2E0D18474B2151EF5876B1E89C2F1D
SHA1:	AEF9802FCF76C67D695BC77322BAE5400D3BBE82
SHA-256:	3381DE4CA9F3A477F25989DFC8B744E7916046B7AA369F61A9A2F7DC0963EC9E
SHA-512:	E81185705A3BD73645BF2B190BBF3AEE060C1C72F98FA39665F254A755B0A5723CE8296422874EB50C7B5E8D6BCD90175B0BA28061221039172A3F50E8902CC8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qeidereaphadyo

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qeryweawhiiwqi

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qeryweawhiiwqi-shm

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qftdeoedoiwiat

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qhrusttyffsqti

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qiyffdweyfrqpe

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF235F22DF3E004EDE21041978C24F2E
SHA1:	7188972F71AEE4C62669330FF7776E48094B4D9D
SHA-256:	16FA66A7DC98D93F2A4C5D20BAF5177F59C4C37FC62FACE65690C11C15FE6FF9
SHA-512:	E76D7CBBAA2B3110D38425F7B579C6F94C29A162D3B4A3B9A4FEACEDE7CEC5EA5E30E455F9417A2C230390C78AB2FBC54C7B98C8F8F68955FE071C37C59D4046
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qsweeieeeeouuf

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	EF2E0D18474B2151EF5876B1E89C2F1D
SHA1:	AEF9802FCF76C67D695BC77322BAE5400D3BBE82
SHA-256:	3381DE4CA9F3A477F25989DFC8B744E7916046B7AA369F61A9A2F7DC0963EC9E
SHA-512:	E81185705A3BD73645BF2B190BBF3AEE060C1C72F98FA39665F254A755B0A5723CE8296422874EB50C7B5E8D6BCD90175B0BA28061221039172A3F50E8902CC8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qttpfrtutytoyp

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qttpfrtutytoyp-shm

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qutfqqithpfoqe

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qwafsoepidseto

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qwthyaaqhqatpa

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qyaeiaatyhurft

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qydryqrreiiqer

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF235F22DF3E004EDE21041978C24F2E
SHA1:	7188972F71AEE4C62669330FF7776E48094B4D9D
SHA-256:	16FA66A7DC98D93F2A4C5D20BAF5177F59C4C37FC62FACE65690C11C15FE6FF9
SHA-512:	E76D7CBBAA2B3110D38425F7B579C6F94C29A162D3B4A3B9A4FEACEDE7CEC5EA5E30E455F9417A2C230390C78AB2FBC54C7B98C8F8F68955FE071C37C59D4046
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rdeotrewsqiioiu

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Reuhiiedpeqhuyi

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Reuhiiedpeqhuyi-shm

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rhpyyeu

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ridtoedapqt

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Riiyfuewqed

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Roypaeooryts

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rpqqwierdihyus

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rqqihtuuriirda

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF235F22DF3E004EDE21041978C24F2E
SHA1:	7188972F71AEE4C62669330FF7776E48094B4D9D
SHA-256:	16FA66A7DC98D93F2A4C5D20BAF5177F59C4C37FC62FACE65690C11C15FE6FF9
SHA-512:	E76D7CBBAA2B3110D38425F7B579C6F94C29A162D3B4A3B9A4FEACEDE7CEC5EA5E30E455F9417A2C230390C78AB2FBC54C7B98C8F8F68955FE071C37C59D4046
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rrrqsyriwqowoa

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rsfoss

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rurtyeeeeu

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ryfhtdqis

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Saryyprtirdoq

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Sedddhqw

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Seqaaotq

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Sfaeew

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF235F22DF3E004EDE21041978C24F2E
SHA1:	7188972F71AEE4C62669330FF7776E48094B4D9D
SHA-256:	16FA66A7DC98D93F2A4C5D20BAF5177F59C4C37FC62FACE65690C11C15FE6FF9
SHA-512:	E76D7CBBAA2B3110D38425F7B579C6F94C29A162D3B4A3B9A4FEACEDE7CEC5EA5E30E455F9417A2C230390C78AB2FBC54C7B98C8F8F68955FE071C37C59D4046
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Sffpho

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Sorraurodhyw

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Sorraurodhyw-shm

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Souhyowpttri

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Sqrpwqrwoayysh

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Suiyiahwqt

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	EF2E0D18474B2151EF5876B1E89C2F1D
SHA1:	AEF9802FCF76C67D695BC77322BAE5400D3BBE82
SHA-256:	3381DE4CA9F3A477F25989DFC8B744E7916046B7AA369F61A9A2F7DC0963EC9E
SHA-512:	E81185705A3BD73645BF2B190BBF3AEE060C1C72F98FA39665F254A755B0A5723CE8296422874EB50C7B5E8D6BCD90175B0BA28061221039172A3F50E8902CC8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Teiuqiqrfohifor

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tfirua

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Thhfhwe

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Thhfhwe-shm

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Thqyyeq

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF235F22DF3E004EDE21041978C24F2E
SHA1:	7188972F71AEE4C62669330FF7776E48094B4D9D
SHA-256:	16FA66A7DC98D93F2A4C5D20BAF5177F59C4C37FC62FACE65690C11C15FE6FF9
SHA-512:	E76D7CBBAA2B3110D38425F7B579C6F94C29A162D3B4A3B9A4FEACEDE7CEC5EA5E30E455F9417A2C230390C78AB2FBC54C7B98C8F8F68955FE071C37C59D4046
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tifeudyqopi

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Toqrourpspia

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tpererwihuiwewy

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF235F22DF3E004EDE21041978C24F2E
SHA1:	7188972F71AEE4C62669330FF7776E48094B4D9D
SHA-256:	16FA66A7DC98D93F2A4C5D20BAF5177F59C4C37FC62FACE65690C11C15FE6FF9
SHA-512:	E76D7CBBAA2B3110D38425F7B579C6F94C29A162D3B4A3B9A4FEACEDE7CEC5EA5E30E455F9417A2C230390C78AB2FBC54C7B98C8F8F68955FE071C37C59D4046
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tqphoyudstwier

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tqphoyudstwier-shm

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tqtpqeuarsyree

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tyedyiarp

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uaqhiirihs

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF235F22DF3E004EDE21041978C24F2E
SHA1:	7188972F71AEE4C62669330FF7776E48094B4D9D
SHA-256:	16FA66A7DC98D93F2A4C5D20BAF5177F59C4C37FC62FACE65690C11C15FE6FF9
SHA-512:	E76D7CBBAA2B3110D38425F7B579C6F94C29A162D3B4A3B9A4FEACEDE7CEC5EA5E30E455F9417A2C230390C78AB2FBC54C7B98C8F8F68955FE071C37C59D4046
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Udeowftqtp

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uhareiqfeh

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uieephriwq

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uisderthuy

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uotdutdust

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uqertedeus

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Usfiesppra

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF235F22DF3E004EDE21041978C24F2E
SHA1:	7188972F71AEE4C62669330FF7776E48094B4D9D
SHA-256:	16FA66A7DC98D93F2A4C5D20BAF5177F59C4C37FC62FACE65690C11C15FE6FF9
SHA-512:	E76D7CBBAA2B3110D38425F7B579C6F94C29A162D3B4A3B9A4FEACEDE7CEC5EA5E30E455F9417A2C230390C78AB2FBC54C7B98C8F8F68955FE071C37C59D4046
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ussetruruf

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Utauheiiqe

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uydpffysuo

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uydpffysuo-shm

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uyiiqaasdq

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uyodeehatd

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wahpirfdauoiw

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF235F22DF3E004EDE21041978C24F2E
SHA1:	7188972F71AEE4C62669330FF7776E48094B4D9D
SHA-256:	16FA66A7DC98D93F2A4C5D20BAF5177F59C4C37FC62FACE65690C11C15FE6FF9
SHA-512:	E76D7CBBAA2B3110D38425F7B579C6F94C29A162D3B4A3B9A4FEACEDE7CEC5EA5E30E455F9417A2C230390C78AB2FBC54C7B98C8F8F68955FE071C37C59D4046
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wderasoa

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	EF2E0D18474B2151EF5876B1E89C2F1D
SHA1:	AEF9802FCF76C67D695BC77322BAE5400D3BBE82
SHA-256:	3381DE4CA9F3A477F25989DFC8B744E7916046B7AA369F61A9A2F7DC0963EC9E
SHA-512:	E81185705A3BD73645BF2B190BBF3AEE060C1C72F98FA39665F254A755B0A5723CE8296422874EB50C7B5E8D6BCD90175B0BA28061221039172A3F50E8902CC8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Weeprseeeduidtp

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF235F22DF3E004EDE21041978C24F2E
SHA1:	7188972F71AEE4C62669330FF7776E48094B4D9D
SHA-256:	16FA66A7DC98D93F2A4C5D20BAF5177F59C4C37FC62FACE65690C11C15FE6FF9
SHA-512:	E76D7CBBAA2B3110D38425F7B579C6F94C29A162D3B4A3B9A4FEACEDE7CEC5EA5E30E455F9417A2C230390C78AB2FBC54C7B98C8F8F68955FE071C37C59D4046
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Weprtufstatfwhh

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Weweyreihuehept

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF235F22DF3E004EDE21041978C24F2E
SHA1:	7188972F71AEE4C62669330FF7776E48094B4D9D
SHA-256:	16FA66A7DC98D93F2A4C5D20BAF5177F59C4C37FC62FACE65690C11C15FE6FF9
SHA-512:	E76D7CBBAA2B3110D38425F7B579C6F94C29A162D3B4A3B9A4FEACEDE7CEC5EA5E30E455F9417A2C230390C78AB2FBC54C7B98C8F8F68955FE071C37C59D4046
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Whwotty

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	EF2E0D18474B2151EF5876B1E89C2F1D
SHA1:	AEF9802FCF76C67D695BC77322BAE5400D3BBE82
SHA-256:	3381DE4CA9F3A477F25989DFC8B744E7916046B7AA369F61A9A2F7DC0963EC9E
SHA-512:	E81185705A3BD73645BF2B190BBF3AEE060C1C72F98FA39665F254A755B0A5723CE8296422874EB50C7B5E8D6BCD90175B0BA28061221039172A3F50E8902CC8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Woyqdouqauut

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wqaprfuriqufqe

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wraowiyhaowph

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wsedaefhttfsehu

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wsedaefhttfsehu-shm

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wtetdarqtetowuf

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wtetdarqtetowuf-shm

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wtosseufoahf

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wtosseufoahf-shm

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wuiwehqfes

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wutetfwwte

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wwsdwiiwhip

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yaypipywe

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yesetesqe

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yhqaywhuo

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	EF2E0D18474B2151EF5876B1E89C2F1D
SHA1:	AEF9802FCF76C67D695BC77322BAE5400D3BBE82
SHA-256:	3381DE4CA9F3A477F25989DFC8B744E7916046B7AA369F61A9A2F7DC0963EC9E
SHA-512:	E81185705A3BD73645BF2B190BBF3AEE060C1C72F98FA39665F254A755B0A5723CE8296422874EB50C7B5E8D6BCD90175B0BA28061221039172A3F50E8902CC8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yhstaituy

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yidrqrpie

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yidrqrpie-shm

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yoehhpqta

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yoehhpqta-shm

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yosaffdyd

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yosafqywr

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	DAA100DF6E6711906B61C9AB5AA16032
SHA1:	963FF6C2D517D188014D2EF3682C4797888E6D26
SHA-256:	CC61635DA46B2C9974335EA37E0B5FD660A5C8A42A89B271FA7EC2AC4B8B26F6
SHA-512:	548FAEE346D6C5700BB37D3D44B593E3C343CA7DC6B564F6D3DC7BD5463FBB925765D9C6EA3065BF19F3CCF7B2E1CB5C34C908057C60B62BE866D2566C0B9393
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yosfaufte

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yosfaufte-shm

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ypdfptoaq

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	EF2E0D18474B2151EF5876B1E89C2F1D
SHA1:	AEF9802FCF76C67D695BC77322BAE5400D3BBE82
SHA-256:	3381DE4CA9F3A477F25989DFC8B744E7916046B7AA369F61A9A2F7DC0963EC9E
SHA-512:	E81185705A3BD73645BF2B190BBF3AEE060C1C72F98FA39665F254A755B0A5723CE8296422874EB50C7B5E8D6BCD90175B0BA28061221039172A3F50E8902CC8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ypuweorqe

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ypuweorqe-shm

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ysoeiqsiq

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yuqpotopw

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yuroyhwsq

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	EF2E0D18474B2151EF5876B1E89C2F1D
SHA1:	AEF9802FCF76C67D695BC77322BAE5400D3BBE82
SHA-256:	3381DE4CA9F3A477F25989DFC8B744E7916046B7AA369F61A9A2F7DC0963EC9E
SHA-512:	E81185705A3BD73645BF2B190BBF3AEE060C1C72F98FA39665F254A755B0A5723CE8296422874EB50C7B5E8D6BCD90175B0BA28061221039172A3F50E8902CC8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yutsseoes

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yutsseoes-shm

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yweptuewf

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ywsihdtuu

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yyydqddfo

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.73662427253772
TrID:	Win32 Dynamic Link Library (generic) (1002004/3) 95.32% InstallShield setup (43055/19) 4.10% Win16/32 Executable Delphi generic (2074/23) 0.20% Generic Win/DOS Executable (2004/3) 0.19% DOS Executable Generic (2002/1) 0.19%
File name:	resources.dll
File size:	11'922'432 bytes
MD5:	e758e07113016aca55d9eda2b0ffeebe
SHA1:	8c1e63a01148e20085d418c0b23021bc5eca0709
SHA256:	2597322a49a6252445ca4c8d713320b238113b3b8fd8a2d6fc1088a5934cee0e
SHA512:	86141f5913b6fdf7e008d082c3a296f0aab803737d84c1847f8136bfa49a049af12528be9f8e21cb77dd574d7562b2704f8b3ce5123a080e368e415f208da70a
SSDEEP:	196608:JWx2zpdra2YbT8yN+8Mne5nd7g25FjZC8OH7RbFd/Or+GvJbU9RDf/kuFLOyomFI:JYCrdiNTF5nZ9C8Ud29JuF
TLSH:	72C601A03CDA0026F0AF11716AA9FF79E12F6F722F3525535150BA19FD322436E14F6A
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....UQ...........!.........V......M........................................`......wZ....@................................

File Icon


Icon Hash:	9e1f191f6777733a

Static PE Info

General

Entrypoint:	0x1095074d
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x10000000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE, DLL
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT
Time Stamp:	0x515504DE [Fri Mar 29 03:05:02 2013 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	607d0c9fedb370b1ce70573304bcd084

Entrypoint Preview

Instruction
push ebp
mov ebp, esp
cmp dword ptr [ebp+0Ch], 01h
jne 00007FD048B167C7h
call 00007FD048B173C8h
push dword ptr [ebp+10h]
push dword ptr [ebp+0Ch]
push dword ptr [ebp+08h]
call 00007FD048B16673h
add esp, 0Ch
pop ebp
retn 000Ch
mov ecx, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], ecx
pop ecx
pop edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
push ecx
ret
mov ecx, dword ptr [ebp-10h]
xor ecx, ebp
call 00007FD048B16036h
jmp 00007FD048B167A2h
mov ecx, dword ptr [ebp-14h]
xor ecx, ebp
call 00007FD048B16027h
jmp 00007FD048B16793h
push eax
push dword ptr fs:[00000000h]
lea eax, dword ptr [esp+0Ch]
sub esp, dword ptr [esp+0Ch]
push ebx
push esi
push edi
mov dword ptr [eax], ebp
mov ebp, eax
mov eax, dword ptr [109D3000h]
xor eax, ebp
push eax
push dword ptr [ebp-04h]
mov dword ptr [ebp-04h], FFFFFFFFh
lea eax, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], eax
ret
push eax
push dword ptr fs:[00000000h]
lea eax, dword ptr [esp+0Ch]
sub esp, dword ptr [esp+0Ch]
push ebx
push esi
push edi
mov dword ptr [eax], ebp
mov ebp, eax
mov eax, dword ptr [109D3000h]
xor eax, ebp
push eax
mov dword ptr [ebp-10h], eax
push dword ptr [ebp-04h]
mov dword ptr [ebp-04h], FFFFFFFFh
lea eax, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], eax
ret
push eax
push dword ptr fs:[00000000h]
lea eax, dword ptr [eax+eax+00h]

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x9cdf90	0x1f0	.rdata
IMAGE_DIRECTORY_ENTRY_IMPORT	0x9ce180	0x154	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x9dc000	0x166230	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xb43000	0x22b38	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x9b5460	0x70	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x9b5500	0x18	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x9b53a0	0x40	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x97d68a	0x97d800	52fae2e7815692ccd8c7ce7e77472437	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x97f000	0x524ae	0x52600	a65a36ab32148d408df1a94cd19684ce	False	0.29099487860394535	data	5.402555106677256	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.data	0x9d2000	0x9e64	0x5a00	32f219c5e9e6d0ea77b7d093abcdbbfa	False	0.23823784722222222	DOS executable (block device driver \377\377w\354\377\377v)	4.824651797597867	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x9dc000	0x166230	0x166400	7537a7d90706eddd02baf307acf79d0e	False	0.6163417818824145	data	7.56401972694149	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0xb43000	0x22b38	0x22c00	5efc48fb2191611bd706dd5a77ec7c3e	False	0.4524435139388489	data	6.561131761514714	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
PNG	0xa0dbc0	0x77	PNG image data, 4 x 4, 8-bit/color RGB, non-interlaced	English	United States	0.9915966386554622
PNG	0xa0a500	0x2f5	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	1.0145310435931307
PNG	0xa0aa80	0x301	PNG image data, 70 x 31, 8-bit/color RGBA, non-interlaced	English	United States	1.0143042912873863
PNG	0xa0a7f8	0x287	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	1.017001545595054
PNG	0xa0d470	0x36e	PNG image data, 22 x 40, 8-bit/color RGB, non-interlaced	English	United States	1.0125284738041003
PNG	0xa0c388	0x15d	PNG image data, 55 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.0315186246418337
PNG	0xa0c4e8	0x13e	PNG image data, 55 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.0345911949685536
PNG	0xa0c628	0x115	PNG image data, 30 x 24, 8-bit/color RGB, non-interlaced	English	United States	1.03971119133574
PNG	0xa0c740	0x12a	PNG image data, 20 x 40, 8-bit/color RGBA, non-interlaced	English	United States	1.0302013422818792
PNG	0xa0c178	0x20c	PNG image data, 10 x 28, 8-bit/color RGB, non-interlaced	English	United States	1.0209923664122138
PNG	0xa0dac0	0xfd	PNG image data, 10 x 28, 8-bit/color RGB, non-interlaced	English	United States	1.0276679841897234
PNG	0xa0d7e0	0xa6	PNG image data, 7 x 7, 8-bit/color RGB, non-interlaced	English	United States	1.0120481927710843
PNG	0xa0d888	0x7c	PNG image data, 3 x 11, 8-bit/color RGBA, non-interlaced	English	United States	0.9919354838709677
PNG	0xa0d908	0x96	PNG image data, 9 x 8, 8-bit/color RGB, non-interlaced	English	United States	1.0133333333333334
PNG	0xa0d9a0	0x91	PNG image data, 9 x 8, 8-bit/color RGB, non-interlaced	English	United States	1.006896551724138
PNG	0xa0da38	0x84	PNG image data, 15 x 3, 8-bit/color RGB, non-interlaced	English	United States	0.9848484848484849
PNG	0xa21688	0xa3	PNG image data, 7 x 7, 8-bit/color RGB, non-interlaced	English	United States	1.0122699386503067
PNG	0xa1d0d0	0x771	PNG image data, 13 x 156, 8-bit/color RGB, non-interlaced	English	United States	1.005774278215223
PNG	0xa17a70	0x697	PNG image data, 52 x 268, 8-bit/color RGBA, non-interlaced	English	United States	1.006520450503853
PNG	0xa18108	0x342	PNG image data, 30 x 16, 8-bit/color RGBA, non-interlaced	English	United States	1.013189448441247
PNG	0xa21228	0x45f	PNG image data, 24 x 72, 8-bit/color RGB, non-interlaced	English	United States	1.0098302055406614
PNG	0xa1da18	0x1a3	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced	English	United States	1.026252983293556
PNG	0xa1a5d8	0xac8	PNG image data, 24 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0039855072463768
PNG	0xa1b0a0	0x37c	PNG image data, 8 x 88, 8-bit/color RGBA, non-interlaced	English	United States	1.0123318385650224
PNG	0xa1c1f0	0xa50	PNG image data, 24 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0041666666666667
PNG	0xa1cc40	0x48e	PNG image data, 9 x 88, 8-bit/color RGBA, non-interlaced	English	United States	1.009433962264151
PNG	0xa1b420	0xa50	PNG image data, 24 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0041666666666667
PNG	0xa1be70	0x380	PNG image data, 8 x 88, 8-bit/color RGBA, non-interlaced	English	United States	1.0122767857142858
PNG	0xa12928	0xab0	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0040204678362572
PNG	0xa13e68	0xb1f	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0038637161924833
PNG	0xa133d8	0xa8e	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0040710584752035
PNG	0xa14988	0xb30	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.003840782122905
PNG	0xa165a8	0x3a6	PNG image data, 48 x 12, 8-bit/color RGBA, non-interlaced	English	United States	1.011777301927195
PNG	0xa16950	0x111b	PNG image data, 38 x 114, 8-bit/color RGBA, non-interlaced	English	United States	1.0025119890385932
PNG	0xa18d18	0x3d1	PNG image data, 23 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0112589559877174
PNG	0xa190f0	0x21b	PNG image data, 11 x 88, 8-bit/color RGB, non-interlaced	English	United States	1.0204081632653061
PNG	0xa19310	0xb12	PNG image data, 50 x 273, 8-bit/color RGBA, non-interlaced	English	United States	1.003881439661256
PNG	0xa19e28	0x7ac	PNG image data, 50 x 162, 8-bit/color RGBA, non-interlaced	English	United States	1.005600814663951
PNG	0xa15860	0xd43	PNG image data, 50 x 264, 8-bit/color RGB, non-interlaced	English	United States	1.003240058910162
PNG	0xa154b8	0x3a4	PNG image data, 22 x 88, 8-bit/color RGBA, non-interlaced	English	United States	1.011802575107296
PNG	0xa217e8	0x320	PNG image data, 14 x 246, 8-bit/color RGBA, non-interlaced	English	United States	1.01375
PNG	0xa21b08	0x31f	PNG image data, 14 x 246, 8-bit/color RGBA, non-interlaced	English	United States	1.0137672090112642
PNG	0xa1e108	0x2bd	PNG image data, 15 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.0156918687589158
PNG	0xa1de90	0x273	PNG image data, 15 x 76, 8-bit/color RGBA, non-interlaced	English	United States	1.0175438596491229
PNG	0xa1dbc0	0x2c9	PNG image data, 15 x 84, 8-bit/color RGBA, non-interlaced	English	United States	1.0154277699859748
PNG	0xa1d8b0	0x163	PNG image data, 70 x 66, 8-bit/color RGBA, non-interlaced	English	United States	1.0112676056338028
PNG	0xa1e3c8	0x152	PNG image data, 41 x 36, 8-bit/color RGBA, non-interlaced	English	United States	1.032544378698225
PNG	0xa18450	0x38a	PNG image data, 64 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.0121412803532008
PNG	0xa187e0	0x532	PNG image data, 64 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.0082706766917293
PNG	0xa101b0	0x19c	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	0.8810679611650486
PNG	0xa10350	0x2296	PNG image data, 72 x 125, 8-bit/color RGBA, non-interlaced	English	United States	1.001242376327084
PNG	0xa2e7c8	0x69e	PNG image data, 52 x 268, 8-bit/color RGBA, non-interlaced	English	United States	1.0064935064935066
PNG	0xa31808	0x1c4	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	0.8252212389380531
PNG	0xa312e0	0x522	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.008371385083714
PNG	0xa2ee68	0x2475	PNG image data, 76 x 125, 8-bit/color RGBA, non-interlaced	English	United States	1.000750026786671
PNG	0xa2b580	0x69e	PNG image data, 52 x 268, 8-bit/color RGBA, non-interlaced	English	United States	1.0064935064935066
PNG	0xa2e600	0x1c3	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	0.8314855875831486
PNG	0xa2e0f8	0x505	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0085603112840467
PNG	0xa2bc20	0x24d3	PNG image data, 76 x 125, 8-bit/color RGBA, non-interlaced	English	United States	1.0004243131430997
PNG	0xa319d0	0x69e	PNG image data, 52 x 268, 8-bit/color RGBA, non-interlaced	English	United States	1.0064935064935066
PNG	0xa34a98	0x1c7	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	0.832967032967033
PNG	0xa34560	0x536	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0082458770614693
PNG	0xa32070	0x24f0	PNG image data, 76 x 125, 8-bit/color RGBA, non-interlaced	English	United States	1.0011632825719121
PNG	0xa25340	0x69e	PNG image data, 52 x 268, 8-bit/color RGBA, non-interlaced	English	United States	1.0064935064935066
PNG	0xa28298	0x1c5	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	0.8388520971302428
PNG	0xa27db8	0x4d9	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.008863819500403
PNG	0xa259e0	0x23d3	PNG image data, 76 x 125, 8-bit/color RGBA, non-interlaced	English	United States	1.0
PNG	0xa21e28	0x189	PNG image data, 100 x 34, 8-bit/color RGBA, non-interlaced	English	United States	1.0279898218829517
PNG	0xa21fb8	0x1bc	PNG image data, 100 x 136, 8-bit/color RGBA, non-interlaced	English	United States	0.7027027027027027
PNG	0xa22240	0x69e	PNG image data, 52 x 268, 8-bit/color RGBA, non-interlaced	English	United States	1.0064935064935066
PNG	0xa25178	0x1c4	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	0.827433628318584
PNG	0xa24c88	0x4ef	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0087094220110848
PNG	0xa228e0	0x23a2	PNG image data, 76 x 125, 8-bit/color RGBA, non-interlaced	English	United States	1.0007673755755317
PNG	0xa22178	0xc5	PNG image data, 3 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.0253807106598984
PNG	0xa34c60	0x69e	PNG image data, 52 x 268, 8-bit/color RGBA, non-interlaced	English	United States	1.0064935064935066
PNG	0xa37cf8	0x1ba	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	0.8212669683257918
PNG	0xa37810	0x4e4	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0087859424920127
PNG	0xa35300	0x250f	PNG image data, 76 x 125, 8-bit/color RGBA, non-interlaced	English	United States	1.0005270369979973
PNG	0xa28460	0x69e	PNG image data, 52 x 268, 8-bit/color RGBA, non-interlaced	English	United States	1.0064935064935066
PNG	0xa2b3b8	0x1c2	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	0.8288888888888889
PNG	0xa2aec8	0x4e9	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0087509944311854
PNG	0xa28b00	0x23c6	PNG image data, 76 x 125, 8-bit/color RGBA, non-interlaced	English	United States	1.000436776588775
PNG	0xa21730	0xb5	PNG image data, 15 x 15, 8-bit/color RGB, non-interlaced	English	United States	1.0165745856353592
PNG	0xa127a0	0x186	PNG image data, 100 x 34, 8-bit/color RGBA, non-interlaced	English	United States	1.028205128205128
PNG	0xa125e8	0x1b5	PNG image data, 100 x 136, 8-bit/color RGBA, non-interlaced	English	United States	0.6864988558352403
PNG	0xa1d848	0x66	PNG image data, 1 x 46, 8-bit/color RGBA, non-interlaced	English	United States	0.9803921568627451
PNG	0xa1f660	0xf9	PNG image data, 90 x 12, 8-bit/color RGBA, non-interlaced	English	United States	1.0321285140562249
PNG	0xa1fa60	0x17c3	PNG image data, 86 x 240, 8-bit/color RGBA, non-interlaced	English	United States	0.992931119513398
PNG	0xa1f760	0x283	PNG image data, 86 x 8, 8-bit/color RGBA, non-interlaced	English	United States	1.0171073094867806
PNG	0xa1f9e8	0x71	PNG image data, 5 x 8, 8-bit/color RGBA, non-interlaced	English	United States	0.9823008849557522
PNG	0xa1ef40	0x71d	PNG image data, 16 x 48, 8-bit/color RGBA, non-interlaced	English	United States	1.0060406370126305
PNG	0xa1e7a8	0x794	PNG image data, 16 x 48, 8-bit/color RGBA, non-interlaced	English	United States	1.0056701030927835
PNG	0xa1e520	0x284	PNG image data, 7 x 39, 8-bit/color RGBA, non-interlaced	English	United States	1.0170807453416149
PNG	0xa0ad88	0x203	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	1.021359223300971
PNG	0xa0af90	0x1b5	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	1.0251716247139588
PNG	0xa0b220	0xb2	PNG image data, 2 x 20, 8-bit/color RGB, non-interlaced	English	United States	1.0168539325842696
PNG	0xa0b148	0xd1	PNG image data, 11 x 11, 8-bit/color RGBA, non-interlaced	English	United States	0.9760765550239234
PNG	0xa0b2d8	0x21c	PNG image data, 21 x 42, 8-bit/color RGBA, non-interlaced	English	United States	1.0203703703703704
PNG	0xa0b4f8	0x21c	PNG image data, 21 x 42, 8-bit/color RGBA, non-interlaced	English	United States	1.0203703703703704
PNG	0xa0b718	0x1ae	PNG image data, 21 x 84, 8-bit/color RGBA, non-interlaced	English	United States	1.0186046511627906
PNG	0xa0b8c8	0x13a	PNG image data, 16 x 56, 8-bit/color RGBA, non-interlaced	English	United States	1.0222929936305734
PNG	0xa0bbb0	0x13f	PNG image data, 21 x 84, 8-bit/color RGBA, non-interlaced	English	United States	1.0344827586206897
PNG	0xa0bcf0	0x135	PNG image data, 16 x 56, 8-bit/color RGBA, non-interlaced	English	United States	0.9967637540453075
PNG	0xa0ba08	0xdb	PNG image data, 21 x 84, 8-bit/color RGBA, non-interlaced	English	United States	1.0228310502283104
PNG	0xa0bae8	0xc6	PNG image data, 16 x 56, 8-bit/color RGBA, non-interlaced	English	United States	1.0252525252525253
PNG	0xa0be28	0x1a9	PNG image data, 21 x 84, 8-bit/color RGBA, non-interlaced	English	United States	1.0141176470588236
PNG	0xa0bfd8	0x19b	PNG image data, 16 x 56, 8-bit/color RGBA, non-interlaced	English	United States	1.0194647201946472
PNG	0xa0ddd8	0x2296	PNG image data, 72 x 125, 8-bit/color RGBA, non-interlaced	English	United States	1.001242376327084
PNG	0xa10070	0x13e	PNG image data, 72 x 15, 8-bit/color RGB, non-interlaced	English	United States	1.0345911949685536
PNG	0xa0dcc0	0x115	PNG image data, 30 x 24, 8-bit/color RGB, non-interlaced	English	United States	1.03971119133574
PNG	0xa0dc38	0x83	PNG image data, 35 x 3, 8-bit/color RGB, non-interlaced	English	United States	1.0076335877862594
PNG	0xa0d3a0	0xce	PNG image data, 7 x 7, 8-bit/color RGB, non-interlaced	English	United States	1.0242718446601942
PNG	0xa0c870	0xb30	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.003840782122905
PNG	0xa40328	0x25f	PNG image data, 72 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.0181219110378912
PNG	0xa40110	0x79	PNG image data, 4 x 4, 8-bit/color RGB, non-interlaced	English	United States	0.9752066115702479
PNG	0xa3c9c8	0x170	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	0.9755434782608695
PNG	0xa3cc40	0x26b	PNG image data, 70 x 31, 8-bit/color RGBA, non-interlaced	English	United States	1.0177705977382876
PNG	0xa3cb38	0x105	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	0.9731800766283525
PNG	0xa3fc40	0xe6	PNG image data, 22 x 38, 8-bit/color RGB, non-interlaced	English	United States	1.0260869565217392
PNG	0xa3ed88	0x38d	PNG image data, 55 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.012101210121012
PNG	0xa3f118	0x265	PNG image data, 55 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.0179445350734095
PNG	0xa3f430	0x11a	PNG image data, 30 x 24, 8-bit/color RGBA, non-interlaced	English	United States	1.0319148936170213
PNG	0xa3f380	0xaa	PNG image data, 2 x 19, 8-bit/color RGB, non-interlaced	English	United States	1.011764705882353
PNG	0xa3f550	0x12a	PNG image data, 20 x 40, 8-bit/color RGBA, non-interlaced	English	United States	1.0268456375838926
PNG	0xa3eb78	0x209	PNG image data, 10 x 28, 8-bit/color RGB, non-interlaced	English	United States	1.021113243761996
PNG	0xa40018	0xf5	PNG image data, 10 x 28, 8-bit/color RGB, non-interlaced	English	United States	1.0244897959183674
PNG	0xa415d8	0xa6	PNG image data, 54 x 31, 8-bit/color RGB, non-interlaced	English	United States	1.0180722891566265
PNG	0xa41488	0x150	PNG image data, 54 x 124, 8-bit/color RGB, non-interlaced	English	United States	1.0327380952380953
PNG	0xa3fd28	0xac	PNG image data, 7 x 7, 8-bit/color RGBA, non-interlaced	English	United States	1.0174418604651163
PNG	0xa3fdd8	0x89	PNG image data, 3 x 11, 8-bit/color RGBA, non-interlaced	English	United States	1.0
PNG	0xa3fe68	0x98	PNG image data, 9 x 8, 8-bit/color RGB, non-interlaced	English	United States	1.006578947368421
PNG	0xa3ff00	0x91	PNG image data, 9 x 8, 8-bit/color RGB, non-interlaced	English	United States	1.006896551724138
PNG	0xa3ff98	0x7d	PNG image data, 15 x 3, 8-bit/color RGB, non-interlaced	English	United States	1.008
PNG	0xa56598	0xa6	PNG image data, 7 x 7, 8-bit/color RGB, non-interlaced	English	United States	1.0120481927710843
PNG	0xa564d8	0xbc	PNG image data, 7 x 7, 8-bit/color RGBA, non-interlaced	English	United States	1.0159574468085106
PNG	0xa51490	0xa07	PNG image data, 13 x 156, 8-bit/color RGBA, non-interlaced	English	United States	1.004285157771718
PNG	0xa48ed0	0x1de1	PNG image data, 52 x 336, 8-bit/color RGBA, non-interlaced	English	United States	1.0014380964832004
PNG	0xa4acb8	0x1be	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced	English	United States	1.0246636771300448
PNG	0xa4ae78	0x53b	PNG image data, 30 x 16, 8-bit/color RGBA, non-interlaced	English	United States	1.0082150858849888
PNG	0xa56098	0x440	PNG image data, 22 x 66, 8-bit/color RGBA, non-interlaced	English	United States	1.010110294117647
PNG	0xa52320	0x12e	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced	English	United States	1.0298013245033113
PNG	0xa4f928	0x5b1	PNG image data, 23 x 154, 8-bit/color RGBA, non-interlaced	English	United States	1.0075497597803706
PNG	0xa4fee0	0x408	PNG image data, 9 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0106589147286822
PNG	0xa50b60	0x471	PNG image data, 23 x 154, 8-bit/color RGBA, non-interlaced	English	United States	1.009674582233949
PNG	0xa50fd8	0x4b7	PNG image data, 10 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0091135045567523
PNG	0xa502e8	0x481	PNG image data, 23 x 154, 8-bit/color RGBA, non-interlaced	English	United States	1.0095403295750216
PNG	0xa50770	0x3ec	PNG image data, 9 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0109561752988048
PNG	0xa42fe8	0x452	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0099457504520795
PNG	0xa437e0	0x414	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.010536398467433
PNG	0xa43440	0x39e	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.011879049676026
PNG	0xa43bf8	0x48d	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.009442060085837
PNG	0xa47148	0x1b3	PNG image data, 15 x 56, 8-bit/color RGBA, non-interlaced	English	United States	1.025287356321839
PNG	0xa47300	0xea	PNG image data, 32 x 8, 8-bit/color RGBA, non-interlaced	English	United States	1.0299145299145298
PNG	0xa473f0	0x1ae0	PNG image data, 38 x 114, 8-bit/color RGBA, non-interlaced	English	United States	1.0015988372093023
PNG	0xa4bda8	0xb43	PNG image data, 22 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0038154699965314
PNG	0xa4c8f0	0x609	PNG image data, 11 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0071197411003237
PNG	0xa4cf00	0x18ae	PNG image data, 43 x 234, 8-bit/color RGBA, non-interlaced	English	United States	1.0017410572966128
PNG	0xa4e7b0	0x1177	PNG image data, 43 x 135, 8-bit/color RGBA, non-interlaced	English	United States	1.0024602997092373
PNG	0xa44b58	0x25ec	PNG image data, 43 x 330, 8-bit/color RGBA, non-interlaced	English	United States	1.0011330861145447
PNG	0xa44088	0xacb	PNG image data, 22 x 88, 8-bit/color RGBA, non-interlaced	English	United States	1.0039811798769454
PNG	0xa566e8	0xbc8	PNG image data, 14 x 276, 8-bit/color RGBA, non-interlaced	English	United States	1.0036472148541113
PNG	0xa572b0	0xc2e	PNG image data, 14 x 276, 8-bit/color RGBA, non-interlaced	English	United States	1.0035279025016035
PNG	0xa530f8	0x5dd	PNG image data, 15 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.0073284477015323
PNG	0xa52b60	0x597	PNG image data, 15 x 76, 8-bit/color RGBA, non-interlaced	English	United States	1.0076869322152342
PNG	0xa52568	0x5f8	PNG image data, 15 x 84, 8-bit/color RGBA, non-interlaced	English	United States	1.007198952879581
PNG	0xa520e8	0x237	PNG image data, 54 x 69, 8-bit/color RGBA, non-interlaced	English	United States	1.0194003527336861
PNG	0xa536d8	0x588	PNG image data, 22 x 44, 8-bit/color RGBA, non-interlaced	English	United States	1.0077683615819208
PNG	0xa4b3b8	0x4b6	PNG image data, 64 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.0091210613598673
PNG	0xa4b870	0x532	PNG image data, 64 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.0082706766917293
PNG	0xa41680	0x5fe	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0071707953063884
PNG	0xa41c80	0xdd3	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	0.9960440802486578
PNG	0xa42a58	0x7c	PNG image data, 1 x 23, 8-bit/color RGBA, non-interlaced	English	United States	0.9919354838709677
PNG	0xa638c0	0x13c1	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021752026893416
PNG	0xa66280	0x37d	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0123180291153415
PNG	0xa65ee8	0x395	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0119956379498365
PNG	0xa64c88	0x125e	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0023394300297745
PNG	0xa60aa8	0x13b4	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021808088818398
PNG	0xa63550	0x369	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0126002290950744
PNG	0xa63180	0x3cc	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0113168724279835
PNG	0xa61e60	0x1320	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.002246732026144
PNG	0xa66600	0x13ac	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021842732327244
PNG	0xa68fe8	0x364	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.012672811059908
PNG	0xa68c28	0x3ba	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0115303983228512
PNG	0xa679b0	0x1274	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0023285351397122
PNG	0xa5b1b8	0x139f	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021899263388414
PNG	0xa5db38	0x380	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0122767857142858
PNG	0xa5d7e0	0x352	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0129411764705882
PNG	0xa5c558	0x1288	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.002318718381113
PNG	0xa57ee0	0x211	PNG image data, 100 x 34, 8-bit/color RGBA, non-interlaced	English	United States	1.0207939508506616
PNG	0xa580f8	0x2e4	PNG image data, 100 x 136, 8-bit/color RGBA, non-interlaced	English	United States	1.0148648648648648
PNG	0xa584b8	0x13ad	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021838395870557
PNG	0xa5ae50	0x365	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0126582278481013
PNG	0xa5aad8	0x374	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.012443438914027
PNG	0xa59868	0x126b	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0023329798515377
PNG	0xa583e0	0xd4	PNG image data, 3 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.028301886792453
PNG	0xa69350	0x1394	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.00219473264166
PNG	0xa6bde8	0x374	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.012443438914027
PNG	0xa6b9f0	0x3f4	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0108695652173914
PNG	0xa6a6e8	0x1304	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0022596548890714
PNG	0xa5deb8	0x1397	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021934197407776
PNG	0xa60730	0x373	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0124575311438277
PNG	0xa603f0	0x33d	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0132689987937273
PNG	0xa5f250	0x119e	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.002439024390244
PNG	0xa56640	0xa6	PNG image data, 15 x 15, 8-bit/color RGB, non-interlaced	English	United States	1.0120481927710843
PNG	0xa42dd0	0x211	PNG image data, 100 x 34, 8-bit/color RGBA, non-interlaced	English	United States	1.0207939508506616
PNG	0xa42ad8	0x2f7	PNG image data, 100 x 136, 8-bit/color RGBA, non-interlaced	English	United States	1.0144927536231885
PNG	0xa51f00	0x16e	PNG image data, 9 x 38, 8-bit/color RGBA, non-interlaced	English	United States	1.030054644808743
PNG	0xa52070	0x73	PNG image data, 5 x 5, 8-bit/color RGB, non-interlaced	English	United States	0.9826086956521739
PNG	0xa52450	0x117	PNG image data, 11 x 24, 8-bit/color RGBA, non-interlaced	English	United States	1.021505376344086
PNG	0xa51e98	0x67	PNG image data, 2 x 55, 8-bit/color RGBA, non-interlaced	English	United States	0.9902912621359223
PNG	0xa55268	0xce	PNG image data, 90 x 12, 8-bit/color RGBA, non-interlaced	English	United States	1.0242718446601942
PNG	0xa55658	0xa40	PNG image data, 86 x 240, 8-bit/color RGBA, non-interlaced	English	United States	0.9733231707317073
PNG	0xa55338	0x283	PNG image data, 86 x 8, 8-bit/color RGBA, non-interlaced	English	United States	1.0171073094867806
PNG	0xa555c0	0x93	PNG image data, 5 x 8, 8-bit/color RGBA, non-interlaced	English	United States	1.0136054421768708
PNG	0xa548f8	0x96a	PNG image data, 18 x 54, 8-bit/color RGBA, non-interlaced	English	United States	1.004564315352697
PNG	0xa53f58	0x99b	PNG image data, 18 x 54, 8-bit/color RGBA, non-interlaced	English	United States	1.0044733631557543
PNG	0xa53c60	0x2f7	PNG image data, 11 x 45, 8-bit/color RGBA, non-interlaced	English	United States	1.0144927536231885
PNG	0xa3ceb0	0x1ff	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	1.0215264187866928
PNG	0xa3d0b0	0x1f7	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	1.021868787276342
PNG	0xa3d340	0xb6	PNG image data, 2 x 20, 8-bit/color RGB, non-interlaced	English	United States	1.010989010989011
PNG	0xa3d2a8	0x94	PNG image data, 11 x 11, 8-bit/color RGBA, non-interlaced	English	United States	1.0135135135135136
PNG	0xa3d3f8	0x3e6	PNG image data, 17 x 32, 8-bit/color RGBA, non-interlaced	English	United States	1.0110220440881763
PNG	0xa3d7e0	0x3e6	PNG image data, 17 x 32, 8-bit/color RGBA, non-interlaced	English	United States	1.0110220440881763
PNG	0xa3dbc8	0x315	PNG image data, 17 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.0139416983523448
PNG	0xa3dee0	0x259	PNG image data, 13 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0183028286189684
PNG	0xa3e340	0x205	PNG image data, 17 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.0212765957446808
PNG	0xa3e548	0x176	PNG image data, 13 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0294117647058822
PNG	0xa3e140	0x124	PNG image data, 17 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.0136986301369864
PNG	0xa3e268	0xd7	PNG image data, 13 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0
PNG	0xa3e6c0	0x28f	PNG image data, 17 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.016793893129771
PNG	0xa3e950	0x225	PNG image data, 13 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0200364298724955
PNG	0xa40588	0xdd3	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	0.9960440802486578
PNG	0xa41360	0x123	PNG image data, 72 x 15, 8-bit/color RGB, non-interlaced	English	United States	1.0378006872852235
PNG	0xa40218	0x10b	PNG image data, 30 x 24, 8-bit/color RGB, non-interlaced	English	United States	1.0337078651685394
PNG	0xa40190	0x83	PNG image data, 35 x 3, 8-bit/color RGB, non-interlaced	English	United States	1.0076335877862594
PNG	0xa3fb10	0x12f	PNG image data, 9 x 9, 8-bit/color RGB, non-interlaced	English	United States	1.0264026402640265
PNG	0xa3f680	0x48d	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.009442060085837
PNG	0xa741f0	0x261	PNG image data, 72 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.0180623973727423
PNG	0xa73fd8	0x79	PNG image data, 4 x 4, 8-bit/color RGB, non-interlaced	English	United States	0.9752066115702479
PNG	0xa70c08	0x1b5	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	0.9931350114416476
PNG	0xa70ee0	0x293	PNG image data, 70 x 31, 8-bit/color RGBA, non-interlaced	English	United States	1.0166919575113809
PNG	0xa70dc0	0x11a	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	0.9716312056737588
PNG	0xa73af8	0xde	PNG image data, 22 x 38, 8-bit/color RGB, non-interlaced	English	United States	1.027027027027027
PNG	0xa72c10	0x38d	PNG image data, 55 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.012101210121012
PNG	0xa72fa0	0x265	PNG image data, 55 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.0179445350734095
PNG	0xa732b8	0x124	PNG image data, 30 x 24, 8-bit/color RGBA, non-interlaced	English	United States	1.0308219178082192
PNG	0xa73208	0xaa	PNG image data, 2 x 19, 8-bit/color RGB, non-interlaced	English	United States	1.011764705882353
PNG	0xa733e0	0x12a	PNG image data, 20 x 40, 8-bit/color RGBA, non-interlaced	English	United States	1.0268456375838926
PNG	0xa72a00	0x209	PNG image data, 10 x 28, 8-bit/color RGB, non-interlaced	English	United States	1.021113243761996
PNG	0xa73ee0	0xf5	PNG image data, 10 x 28, 8-bit/color RGB, non-interlaced	English	United States	1.0244897959183674
PNG	0xa75658	0x9f	PNG image data, 54 x 31, 8-bit/color RGB, non-interlaced	English	United States	1.0125786163522013
PNG	0xa75510	0x148	PNG image data, 54 x 124, 8-bit/color RGB, non-interlaced	English	United States	1.0335365853658536
PNG	0xa73bd8	0xac	PNG image data, 7 x 7, 8-bit/color RGBA, non-interlaced	English	United States	1.0174418604651163
PNG	0xa73c88	0x8b	PNG image data, 3 x 11, 8-bit/color RGBA, non-interlaced	English	United States	1.014388489208633
PNG	0xa73d18	0xa4	PNG image data, 9 x 8, 8-bit/color RGB, non-interlaced	English	United States	1.0
PNG	0xa73dc0	0x94	PNG image data, 9 x 8, 8-bit/color RGB, non-interlaced	English	United States	1.0067567567567568
PNG	0xa73e58	0x87	PNG image data, 15 x 3, 8-bit/color RGB, non-interlaced	English	United States	1.0
PNG	0xa8aca0	0xa6	PNG image data, 7 x 7, 8-bit/color RGB, non-interlaced	English	United States	1.0120481927710843
PNG	0xa8abd8	0xc5	PNG image data, 7 x 7, 8-bit/color RGBA, non-interlaced	English	United States	1.0203045685279188
PNG	0xa859f8	0xa54	PNG image data, 13 x 156, 8-bit/color RGBA, non-interlaced	English	United States	1.004160363086233
PNG	0xa7d2a8	0x1eda	PNG image data, 52 x 336, 8-bit/color RGBA, non-interlaced	English	United States	1.001392757660167
PNG	0xa7f188	0x1cb	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced	English	United States	1.0239651416122004
PNG	0xa7f358	0x53b	PNG image data, 30 x 16, 8-bit/color RGBA, non-interlaced	English	United States	1.0082150858849888
PNG	0xa8a6e0	0x4f3	PNG image data, 22 x 66, 8-bit/color RGBA, non-interlaced	English	United States	1.0086819258089976
PNG	0xa86900	0x11a	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced	English	United States	1.024822695035461
PNG	0xa83ea8	0x5af	PNG image data, 23 x 154, 8-bit/color RGBA, non-interlaced	English	United States	1.0075601374570446
PNG	0xa84458	0x3ff	PNG image data, 9 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.010752688172043
PNG	0xa850c0	0x461	PNG image data, 23 x 154, 8-bit/color RGBA, non-interlaced	English	United States	1.0098126672613739
PNG	0xa85528	0x4cc	PNG image data, 10 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.008957654723127
PNG	0xa84858	0x474	PNG image data, 23 x 154, 8-bit/color RGBA, non-interlaced	English	United States	1.0096491228070175
PNG	0xa84cd0	0x3ef	PNG image data, 9 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0109235352532273
PNG	0xa77280	0x44a	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0100182149362478
PNG	0xa77a70	0x41f	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0104265402843602
PNG	0xa776d0	0x39b	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0119176598049837
PNG	0xa77e90	0x4a1	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.009282700421941
PNG	0xa7b3f0	0x1b3	PNG image data, 15 x 56, 8-bit/color RGBA, non-interlaced	English	United States	1.025287356321839
PNG	0xa7b5a8	0xf9	PNG image data, 32 x 8, 8-bit/color RGBA, non-interlaced	English	United States	1.036144578313253
PNG	0xa7b6a8	0x1bfa	PNG image data, 38 x 114, 8-bit/color RGBA, non-interlaced	English	United States	1.001535883831332
PNG	0xa80328	0xb43	PNG image data, 22 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0038154699965314
PNG	0xa80e70	0x609	PNG image data, 11 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0071197411003237
PNG	0xa81480	0x18ae	PNG image data, 43 x 234, 8-bit/color RGBA, non-interlaced	English	United States	1.0017410572966128
PNG	0xa82d30	0x1177	PNG image data, 43 x 135, 8-bit/color RGBA, non-interlaced	English	United States	1.0024602997092373
PNG	0xa78e00	0x25ec	PNG image data, 43 x 330, 8-bit/color RGBA, non-interlaced	English	United States	1.0011330861145447
PNG	0xa78338	0xac7	PNG image data, 22 x 88, 8-bit/color RGBA, non-interlaced	English	United States	1.0039869517941282
PNG	0xa8ae00	0xa82	PNG image data, 14 x 276, 8-bit/color RGBA, non-interlaced	English	United States	1.004089219330855
PNG	0xa8b888	0xac7	PNG image data, 14 x 276, 8-bit/color RGBA, non-interlaced	English	United States	1.0039869517941282
PNG	0xa876a8	0x5d3	PNG image data, 15 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.0073775989268947
PNG	0xa87130	0x575	PNG image data, 15 x 76, 8-bit/color RGBA, non-interlaced	English	United States	1.0078740157480315
PNG	0xa86b40	0x5ea	PNG image data, 15 x 84, 8-bit/color RGBA, non-interlaced	English	United States	1.0072655217965654
PNG	0xa866d8	0x222	PNG image data, 54 x 69, 8-bit/color RGBA, non-interlaced	English	United States	1.02014652014652
PNG	0xa87c80	0x588	PNG image data, 22 x 44, 8-bit/color RGBA, non-interlaced	English	United States	1.0077683615819208
PNG	0xa7f898	0x552	PNG image data, 64 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.0080763582966226
PNG	0xa7fdf0	0x532	PNG image data, 64 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.0082706766917293
PNG	0xa756f8	0x624	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.006997455470738
PNG	0xa75d20	0xf6f	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0027841052898
PNG	0xa76c90	0x98	PNG image data, 1 x 23, 8-bit/color RGBA, non-interlaced	English	United States	1.013157894736842
PNG	0xa96410	0x13c1	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021752026893416
PNG	0xa98760	0x37d	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0123180291153415
PNG	0xa983c8	0x395	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0119956379498365
PNG	0xa977d8	0xbea	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0036065573770492
PNG	0xa93c60	0x13b4	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021808088818398
PNG	0xa960a0	0x369	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0126002290950744
PNG	0xa95cd0	0x3cc	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0113168724279835
PNG	0xa95018	0xcb2	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0033846153846153
PNG	0xa98ae0	0x13ac	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021842732327244
PNG	0xa9ae50	0x364	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.012672811059908
PNG	0xa9aa90	0x3ba	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0115303983228512
PNG	0xa99e90	0xbff	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0035818951481603
PNG	0xa8f018	0x139f	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021899263388414
PNG	0xa91308	0x380	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0122767857142858
PNG	0xa90fb0	0x352	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0129411764705882
PNG	0xa903b8	0xbf8	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0035900783289817
PNG	0xa8c350	0x1e3	PNG image data, 100 x 34, 8-bit/color RGBA, non-interlaced	English	United States	1.0227743271221532
PNG	0xa8c538	0x3d2	PNG image data, 100 x 136, 8-bit/color RGBA, non-interlaced	English	United States	1.0112474437627812
PNG	0xa8c9e8	0x13ad	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021838395870557
PNG	0xa8ecb0	0x365	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0126582278481013
PNG	0xa8e938	0x374	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.012443438914027
PNG	0xa8dd98	0xb9a	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0037037037037038
PNG	0xa8c910	0xd4	PNG image data, 3 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.028301886792453
PNG	0xa9b1b8	0x1394	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.00219473264166
PNG	0xa9d5b0	0x374	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.012443438914027
PNG	0xa9d1b8	0x3f4	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0108695652173914
PNG	0xa9c550	0xc62	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0034700315457412
PNG	0xa91688	0x1397	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021934197407776
PNG	0xa938e8	0x373	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0124575311438277
PNG	0xa935a8	0x33d	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0132689987937273
PNG	0xa92a20	0xb84	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0003392130257802
PNG	0xa8ad48	0xb1	PNG image data, 15 x 15, 8-bit/color RGB, non-interlaced	English	United States	1.0169491525423728
PNG	0xa770a0	0x1da	PNG image data, 100 x 34, 8-bit/color RGBA, non-interlaced	English	United States	1.0232067510548524
PNG	0xa76d28	0x375	PNG image data, 100 x 136, 8-bit/color RGBA, non-interlaced	English	United States	1.0124293785310734
PNG	0xa864b8	0x1a5	PNG image data, 9 x 38, 8-bit/color RGBA, non-interlaced	English	United States	1.0261282660332542
PNG	0xa86660	0x71	PNG image data, 5 x 5, 8-bit/color RGB, non-interlaced	English	United States	0.9911504424778761
PNG	0xa86a20	0x11a	PNG image data, 11 x 24, 8-bit/color RGBA, non-interlaced	English	United States	1.0283687943262412
PNG	0xa86450	0x67	PNG image data, 2 x 55, 8-bit/color RGBA, non-interlaced	English	United States	0.9902912621359223
PNG	0xa898a0	0xe0	PNG image data, 90 x 12, 8-bit/color RGBA, non-interlaced	English	United States	1.03125
PNG	0xa89ca0	0xa40	PNG image data, 86 x 240, 8-bit/color RGBA, non-interlaced	English	United States	0.9733231707317073
PNG	0xa89980	0x283	PNG image data, 86 x 8, 8-bit/color RGBA, non-interlaced	English	United States	1.0171073094867806
PNG	0xa89c08	0x93	PNG image data, 5 x 8, 8-bit/color RGBA, non-interlaced	English	United States	1.0136054421768708
PNG	0xa88f18	0x985	PNG image data, 18 x 54, 8-bit/color RGBA, non-interlaced	English	United States	1.00451374640952
PNG	0xa88548	0x9ca	PNG image data, 18 x 54, 8-bit/color RGBA, non-interlaced	English	United States	1.00438946528332
PNG	0xa88208	0x339	PNG image data, 11 x 45, 8-bit/color RGBA, non-interlaced	English	United States	1.0133333333333334
PNG	0xa71178	0x214	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	1.0206766917293233
PNG	0xa71390	0x22e	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	1.0197132616487454
PNG	0xa71658	0xb3	PNG image data, 2 x 20, 8-bit/color RGB, non-interlaced	English	United States	1.011173184357542
PNG	0xa715c0	0x95	PNG image data, 11 x 11, 8-bit/color RGBA, non-interlaced	English	United States	0.9932885906040269
PNG	0xa71710	0x414	PNG image data, 17 x 32, 8-bit/color RGBA, non-interlaced	English	United States	1.010536398467433
PNG	0xa71b28	0x414	PNG image data, 17 x 32, 8-bit/color RGBA, non-interlaced	English	United States	1.010536398467433
PNG	0xa71f40	0x1fb	PNG image data, 17 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.0216962524654833
PNG	0xa72140	0x179	PNG image data, 13 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0159151193633953
PNG	0xa72488	0x179	PNG image data, 17 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.0053050397877985
PNG	0xa72608	0x114	PNG image data, 13 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0289855072463767
PNG	0xa722c0	0x10e	PNG image data, 17 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.011111111111111
PNG	0xa723d0	0xb6	PNG image data, 13 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0054945054945055
PNG	0xa72720	0x17e	PNG image data, 17 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.0287958115183247
PNG	0xa728a0	0x15c	PNG image data, 13 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0201149425287357
PNG	0xa74458	0xf6f	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0027841052898
PNG	0xa753c8	0x143	PNG image data, 72 x 15, 8-bit/color RGB, non-interlaced	English	United States	1.0340557275541795
PNG	0xa740e0	0x110	PNG image data, 30 x 24, 8-bit/color RGB, non-interlaced	English	United States	1.0294117647058822
PNG	0xa74058	0x87	PNG image data, 35 x 3, 8-bit/color RGB, non-interlaced	English	United States	1.0074074074074073
PNG	0xa739b8	0x13b	PNG image data, 9 x 9, 8-bit/color RGB, non-interlaced	English	United States	1.0253968253968253
PNG	0xa73510	0x4a1	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.009282700421941
PNG	0xaa55c0	0x25e	PNG image data, 72 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.018151815181518
PNG	0xaa53a8	0x79	PNG image data, 4 x 4, 8-bit/color RGB, non-interlaced	English	United States	0.9752066115702479
PNG	0xaa2340	0x167	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	0.9972144846796658
PNG	0xaa25c8	0x278	PNG image data, 70 x 31, 8-bit/color RGBA, non-interlaced	English	United States	1.0174050632911393
PNG	0xaa24a8	0x11a	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	0.9680851063829787
PNG	0xaa4ee8	0xd4	PNG image data, 22 x 38, 8-bit/color RGB, non-interlaced	English	United States	1.0235849056603774
PNG	0xaa4030	0x38d	PNG image data, 55 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.012101210121012
PNG	0xaa43c0	0x265	PNG image data, 55 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.0179445350734095
PNG	0xaa46d8	0x11a	PNG image data, 30 x 24, 8-bit/color RGBA, non-interlaced	English	United States	1.0319148936170213
PNG	0xaa4628	0xaa	PNG image data, 2 x 19, 8-bit/color RGB, non-interlaced	English	United States	1.011764705882353
PNG	0xaa47f8	0x12a	PNG image data, 20 x 40, 8-bit/color RGBA, non-interlaced	English	United States	1.0268456375838926
PNG	0xaa3e20	0x209	PNG image data, 10 x 28, 8-bit/color RGB, non-interlaced	English	United States	1.021113243761996
PNG	0xaa52b0	0xf5	PNG image data, 10 x 28, 8-bit/color RGB, non-interlaced	English	United States	1.0244897959183674
PNG	0xaa6878	0xa6	PNG image data, 54 x 31, 8-bit/color RGB, non-interlaced	English	United States	1.0180722891566265
PNG	0xaa6728	0x150	PNG image data, 54 x 124, 8-bit/color RGB, non-interlaced	English	United States	1.0327380952380953
PNG	0xaa4fc0	0xac	PNG image data, 7 x 7, 8-bit/color RGBA, non-interlaced	English	United States	1.0174418604651163
PNG	0xaa5070	0x8b	PNG image data, 3 x 11, 8-bit/color RGBA, non-interlaced	English	United States	1.0
PNG	0xaa5100	0x98	PNG image data, 9 x 8, 8-bit/color RGB, non-interlaced	English	United States	1.006578947368421
PNG	0xaa5198	0x91	PNG image data, 9 x 8, 8-bit/color RGB, non-interlaced	English	United States	1.006896551724138
PNG	0xaa5230	0x7d	PNG image data, 15 x 3, 8-bit/color RGB, non-interlaced	English	United States	1.008
PNG	0xabc6f8	0xa6	PNG image data, 7 x 7, 8-bit/color RGB, non-interlaced	English	United States	1.0120481927710843
PNG	0xabc638	0xbd	PNG image data, 7 x 7, 8-bit/color RGBA, non-interlaced	English	United States	1.0105820105820107
PNG	0xab7638	0xa07	PNG image data, 13 x 156, 8-bit/color RGBA, non-interlaced	English	United States	1.004285157771718
PNG	0xaaec18	0x1de1	PNG image data, 52 x 336, 8-bit/color RGBA, non-interlaced	English	United States	1.0014380964832004
PNG	0xab0a00	0x1be	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced	English	United States	1.0246636771300448
PNG	0xab0bc0	0x53b	PNG image data, 30 x 16, 8-bit/color RGBA, non-interlaced	English	United States	1.0082150858849888
PNG	0xabc1c8	0x46c	PNG image data, 22 x 66, 8-bit/color RGBA, non-interlaced	English	United States	1.0097173144876326
PNG	0xab84c8	0xaf	PNG image data, 20 x 12, 8-bit/color RGBA, non-interlaced	English	United States	1.0171428571428571
PNG	0xab5548	0x701	PNG image data, 23 x 154, 8-bit/color RGBA, non-interlaced	English	United States	1.0061349693251533
PNG	0xab5c50	0x498	PNG image data, 9 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0093537414965987
PNG	0xab6b30	0x5c1	PNG image data, 23 x 154, 8-bit/color RGBA, non-interlaced	English	United States	1.0074677528852682
PNG	0xab70f8	0x539	PNG image data, 10 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0082273747195214
PNG	0xab60e8	0x5c7	PNG image data, 23 x 154, 8-bit/color RGBA, non-interlaced	English	United States	1.0074374577417173
PNG	0xab66b0	0x47f	PNG image data, 9 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.009556907037359
PNG	0xaa8860	0x585	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0077848549186128
PNG	0xaa92d0	0x546	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0081481481481482
PNG	0xaa8de8	0x4e1	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0088070456365092
PNG	0xaa9818	0x5b0	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.007554945054945
PNG	0xaace90	0x1b3	PNG image data, 15 x 56, 8-bit/color RGBA, non-interlaced	English	United States	1.025287356321839
PNG	0xaad048	0xea	PNG image data, 32 x 8, 8-bit/color RGBA, non-interlaced	English	United States	1.0299145299145298
PNG	0xaad138	0x1ad9	PNG image data, 38 x 114, 8-bit/color RGBA, non-interlaced	English	United States	1.0016004655899897
PNG	0xab19c8	0xb43	PNG image data, 22 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0038154699965314
PNG	0xab2510	0x609	PNG image data, 11 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0071197411003237
PNG	0xab2b20	0x18ae	PNG image data, 43 x 234, 8-bit/color RGBA, non-interlaced	English	United States	1.0017410572966128
PNG	0xab43d0	0x1177	PNG image data, 43 x 135, 8-bit/color RGBA, non-interlaced	English	United States	1.0024602997092373
PNG	0xaaa8a0	0x25ec	PNG image data, 43 x 330, 8-bit/color RGBA, non-interlaced	English	United States	1.0011330861145447
PNG	0xaa9dc8	0xad3	PNG image data, 22 x 88, 8-bit/color RGBA, non-interlaced	English	United States	1.0039696860339227
PNG	0xabc848	0xbc8	PNG image data, 14 x 276, 8-bit/color RGBA, non-interlaced	English	United States	1.0036472148541113
PNG	0xabd410	0xc2e	PNG image data, 14 x 276, 8-bit/color RGBA, non-interlaced	English	United States	1.0035279025016035
PNG	0xab9220	0x5dd	PNG image data, 15 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.0073284477015323
PNG	0xab8c88	0x597	PNG image data, 15 x 76, 8-bit/color RGBA, non-interlaced	English	United States	1.0076869322152342
PNG	0xab8690	0x5f8	PNG image data, 15 x 84, 8-bit/color RGBA, non-interlaced	English	United States	1.007198952879581
PNG	0xab82a0	0x228	PNG image data, 54 x 69, 8-bit/color RGBA, non-interlaced	English	United States	1.019927536231884
PNG	0xab9800	0x588	PNG image data, 22 x 44, 8-bit/color RGBA, non-interlaced	English	United States	1.0077683615819208
PNG	0xab1100	0x38a	PNG image data, 64 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.0121412803532008
PNG	0xab1490	0x532	PNG image data, 64 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.0082706766917293
PNG	0xaa6920	0x32f	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0134969325153373
PNG	0xaa6c50	0xef8	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	0.9950417536534447
PNG	0xaa7b48	0x7c	PNG image data, 1 x 23, 8-bit/color RGBA, non-interlaced	English	United States	0.9919354838709677
PNG	0xaca1a8	0x13c1	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021752026893416
PNG	0xaccb68	0x37d	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0123180291153415
PNG	0xacc7d0	0x395	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0119956379498365
PNG	0xacb570	0x125e	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0023394300297745
PNG	0xac7390	0x13b4	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021808088818398
PNG	0xac9e38	0x369	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0126002290950744
PNG	0xac9a68	0x3cc	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0113168724279835
PNG	0xac8748	0x1320	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.002246732026144
PNG	0xaccee8	0x13ac	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021842732327244
PNG	0xacf8d0	0x364	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.012672811059908
PNG	0xacf510	0x3ba	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0115303983228512
PNG	0xace298	0x1274	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0023285351397122
PNG	0xac1aa0	0x139f	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021899263388414
PNG	0xac4420	0x380	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0122767857142858
PNG	0xac40c8	0x352	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0129411764705882
PNG	0xac2e40	0x1288	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.002318718381113
PNG	0xabe040	0x99d	PNG image data, 100 x 34, 8-bit/color RGBA, non-interlaced	English	United States	1.004469727752946
PNG	0xabe9e0	0x2e6	PNG image data, 100 x 136, 8-bit/color RGBA, non-interlaced	English	United States	1.0148247978436657
PNG	0xabeda0	0x13ad	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021838395870557
PNG	0xac1738	0x365	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0126582278481013
PNG	0xac13c0	0x374	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.012443438914027
PNG	0xac0150	0x126b	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0023329798515377
PNG	0xabecc8	0xd4	PNG image data, 3 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.028301886792453
PNG	0xacfc38	0x1394	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.00219473264166
PNG	0xad26d0	0x374	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.012443438914027
PNG	0xad22d8	0x3f4	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0108695652173914
PNG	0xad0fd0	0x1304	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.0022596548890714
PNG	0xac47a0	0x1397	PNG image data, 52 x 252, 8-bit/color RGBA, non-interlaced	English	United States	1.0021934197407776
PNG	0xac7018	0x373	PNG image data, 80 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0124575311438277
PNG	0xac6cd8	0x33d	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0132689987937273
PNG	0xac5b38	0x119e	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	1.002439024390244
PNG	0xabc7a0	0xa6	PNG image data, 15 x 15, 8-bit/color RGB, non-interlaced	English	United States	1.0120481927710843
PNG	0xaa7ec0	0x99d	PNG image data, 100 x 34, 8-bit/color RGBA, non-interlaced	English	United States	1.004469727752946
PNG	0xaa7bc8	0x2f7	PNG image data, 100 x 136, 8-bit/color RGBA, non-interlaced	English	United States	1.0144927536231885
PNG	0xab80a8	0x17e	PNG image data, 9 x 38, 8-bit/color RGBA, non-interlaced	English	United States	1.0287958115183247
PNG	0xab8228	0x71	PNG image data, 5 x 5, 8-bit/color RGB, non-interlaced	English	United States	0.9911504424778761
PNG	0xab8578	0x117	PNG image data, 11 x 24, 8-bit/color RGBA, non-interlaced	English	United States	1.021505376344086
PNG	0xab8040	0x67	PNG image data, 2 x 55, 8-bit/color RGBA, non-interlaced	English	United States	0.9902912621359223
PNG	0xabb390	0xd7	PNG image data, 90 x 12, 8-bit/color RGBA, non-interlaced	English	United States	1.0232558139534884
PNG	0xabb788	0xa40	PNG image data, 86 x 240, 8-bit/color RGBA, non-interlaced	English	United States	0.9733231707317073
PNG	0xabb468	0x283	PNG image data, 86 x 8, 8-bit/color RGBA, non-interlaced	English	United States	1.0171073094867806
PNG	0xabb6f0	0x93	PNG image data, 5 x 8, 8-bit/color RGBA, non-interlaced	English	United States	1.0136054421768708
PNG	0xabaa20	0x96a	PNG image data, 18 x 54, 8-bit/color RGBA, non-interlaced	English	United States	1.004564315352697
PNG	0xaba080	0x99b	PNG image data, 18 x 54, 8-bit/color RGBA, non-interlaced	English	United States	1.0044733631557543
PNG	0xab9d88	0x2f7	PNG image data, 11 x 45, 8-bit/color RGBA, non-interlaced	English	United States	1.0144927536231885
PNG	0xaa2840	0x1d3	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	1.019271948608137
PNG	0xaa2a18	0x1f8	PNG image data, 70 x 23, 8-bit/color RGBA, non-interlaced	English	United States	1.0138888888888888
PNG	0xaa2ca8	0x67	PNG image data, 2 x 20, 8-bit/color RGB, non-interlaced	English	United States	0.9514563106796117
PNG	0xaa2c10	0x95	PNG image data, 11 x 11, 8-bit/color RGBA, non-interlaced	English	United States	1.0
PNG	0xaa2d10	0x39d	PNG image data, 17 x 32, 8-bit/color RGBA, non-interlaced	English	United States	1.011891891891892
PNG	0xaa30b0	0x39d	PNG image data, 17 x 32, 8-bit/color RGBA, non-interlaced	English	United States	1.011891891891892
PNG	0xaa3450	0x1c1	PNG image data, 17 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.024498886414254
PNG	0xaa3618	0x153	PNG image data, 13 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0324483775811208
PNG	0xaa3930	0x15f	PNG image data, 17 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.0113960113960114
PNG	0xaa3a90	0x100	PNG image data, 13 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.03515625
PNG	0xaa3770	0x108	PNG image data, 17 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.018939393939394
PNG	0xaa3878	0xb6	PNG image data, 13 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.010989010989011
PNG	0xaa3b90	0x151	PNG image data, 17 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.032640949554896
PNG	0xaa3ce8	0x135	PNG image data, 13 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.029126213592233
PNG	0xaa5820	0xdd3	PNG image data, 57 x 120, 8-bit/color RGBA, non-interlaced	English	United States	0.9960440802486578
PNG	0xaa65f8	0x129	PNG image data, 72 x 15, 8-bit/color RGB, non-interlaced	English	United States	1.0303030303030303
PNG	0xaa54b0	0x10b	PNG image data, 30 x 24, 8-bit/color RGB, non-interlaced	English	United States	1.0337078651685394
PNG	0xaa5428	0x87	PNG image data, 35 x 3, 8-bit/color RGB, non-interlaced	English	United States	1.0074074074074073
PNG	0xaa4db8	0x12f	PNG image data, 9 x 9, 8-bit/color RGB, non-interlaced	English	United States	1.0264026402640265
PNG	0xaa4928	0x48d	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.009442060085837
PNG	0xad43a0	0xdd1	PNG image data, 72 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.003109980209217
PNG	0xad9a58	0xd61	PNG image data, 55 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.0032116788321168
PNG	0xada7c0	0x265	PNG image data, 55 x 22, 8-bit/color RGBA, non-interlaced	English	United States	1.0179445350734095
PNG	0xadaa28	0xbb9	PNG image data, 20 x 40, 8-bit/color RGBA, non-interlaced	English	United States	1.0036654448517162
PNG	0xadb5e8	0xc66	PNG image data, 10 x 28, 8-bit/color RGBA, non-interlaced	English	United States	1.0034656584751103
PNG	0xadc250	0xb90	PNG image data, 10 x 28, 8-bit/color RGBA, non-interlaced	English	United States	1.0037162162162163
PNG	0xaff488	0xb07	PNG image data, 5 x 5, 8-bit/color RGBA, non-interlaced	English	United States	1.003896563939072
PNG	0xafe938	0xb50	PNG image data, 7 x 7, 8-bit/color RGBA, non-interlaced	English	United States	1.0037983425414365
PNG	0xae77a8	0x2885	PNG image data, 42 x 348, 8-bit/color RGBA, non-interlaced	English	United States	1.0010604453870626
PNG	0xaea030	0xd8e	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced	English	United States	1.0031700288184437
PNG	0xaeadc0	0x53b	PNG image data, 30 x 16, 8-bit/color RGBA, non-interlaced	English	United States	1.0082150858849888
PNG	0xafbf98	0x4f3	PNG image data, 22 x 66, 8-bit/color RGBA, non-interlaced	English	United States	1.0086819258089976
PNG	0xaef610	0x130f	PNG image data, 22 x 154, 8-bit/color RGBA, non-interlaced	English	United States	1.0022545603607296
PNG	0xaf0920	0xe74	PNG image data, 10 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.002972972972973
PNG	0xaf37d0	0x11ba	PNG image data, 22 x 154, 8-bit/color RGBA, non-interlaced	English	United States	1.002423975319524
PNG	0xaf4990	0xece	PNG image data, 11 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0029023746701846
PNG	0xaf1798	0x11ba	PNG image data, 22 x 154, 8-bit/color RGBA, non-interlaced	English	United States	1.002423975319524
PNG	0xaf2958	0xe74	PNG image data, 10 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.002972972972973
PNG	0xadcde0	0x1206	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0023840485478976
PNG	0xadf118	0x11bc	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0024229074889868
PNG	0xaddfe8	0x112a	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0025034137460174
PNG	0xae02d8	0x127a	PNG image data, 22 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0023255813953489
PNG	0xae3e78	0xd3e	PNG image data, 15 x 56, 8-bit/color RGBA, non-interlaced	English	United States	1.003244837758112
PNG	0xae4bb8	0xbac	PNG image data, 32 x 8, 8-bit/color RGBA, non-interlaced	English	United States	1.0036813922356091
PNG	0xae6338	0x146a	PNG image data, 56 x 69, 8-bit/color RGBA, non-interlaced	English	United States	1.0021048603138156
PNG	0xaeb300	0x122f	PNG image data, 22 x 132, 8-bit/color RGBA, non-interlaced	English	United States	1.0023630504833512
PNG	0xaec530	0xdec	PNG image data, 11 x 110, 8-bit/color RGBA, non-interlaced	English	United States	1.0030864197530864
PNG	0xaed320	0x1100	PNG image data, 42 x 228, 8-bit/color RGBA, non-interlaced	English	United States	1.0025275735294117
PNG	0xaee420	0x11ed	PNG image data, 42 x 140, 8-bit/color RGBA, non-interlaced	English	United States	1.0023970363913706
PNG	0xae2610	0x1864	PNG image data, 42 x 330, 8-bit/color RGBA, non-interlaced	English	United States	1.0003203074951954
PNG	0xae1558	0x10b5	PNG image data, 22 x 88, 8-bit/color RGBA, non-interlaced	English	United States	1.0025718961889174
PNG	0xafc490	0x124b	PNG image data, 14 x 276, 8-bit/color RGBA, non-interlaced	English	United States	1.0023489216314327
PNG	0xafd6e0	0x1256	PNG image data, 14 x 276, 8-bit/color RGBA, non-interlaced	English	United States	1.0023434171282488
PNG	0xaf76b0	0xf2c	PNG image data, 15 x 80, 8-bit/color RGBA, non-interlaced	English	United States	1.002832131822863
PNG	0xaf67d0	0xede	PNG image data, 15 x 76, 8-bit/color RGBA, non-interlaced	English	United States	1.0028901734104045
PNG	0xaf5860	0xf69	PNG image data, 15 x 84, 8-bit/color RGBA, non-interlaced	English	United States	1.0027883396704689
PNG	0xaf85e0	0xe20	PNG image data, 22 x 44, 8-bit/color RGBA, non-interlaced	English	United States	1.0030420353982301
PNG	0xafff90	0xdc7	PNG image data, 64 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.0031187978451943
PNG	0xad5178	0xbae	PNG image data, 3 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0036789297658864
PNG	0xad5d28	0xd91	PNG image data, 13 x 72, 8-bit/color RGBA, non-interlaced	English	United States	1.003167290526922
PNG	0xad6ac0	0xb12	PNG image data, 1 x 23, 8-bit/color RGBA, non-interlaced	English	United States	1.003881439661256
PNG	0xb0c060	0xbc3	PNG image data, 3 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0036532713384259
PNG	0xb0b3c0	0xc9f	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.003404518724853
PNG	0xb0a640	0xd7d	PNG image data, 13 x 72, 8-bit/color RGBA, non-interlaced	English	United States	1.0031856356791196
PNG	0xb09a48	0xbf7	PNG image data, 3 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0035912504080966
PNG	0xb08db0	0xc96	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0034140285536934
PNG	0xb08020	0xd8c	PNG image data, 13 x 72, 8-bit/color RGBA, non-interlaced	English	United States	1.0031718569780854
PNG	0xb0e648	0xbda	PNG image data, 3 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0036255767963085
PNG	0xb0d9a8	0xca0	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0034034653465347
PNG	0xb0cc28	0xd80	PNG image data, 13 x 72, 8-bit/color RGBA, non-interlaced	English	United States	1.0031828703703705
PNG	0xb04e40	0xbe2	PNG image data, 3 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0036160420775806
PNG	0xb041b0	0xc8c	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0034246575342465
PNG	0xb03430	0xd7b	PNG image data, 13 x 72, 8-bit/color RGBA, non-interlaced	English	United States	1.0031874818893074
PNG	0xb02848	0xbe7	PNG image data, 3 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0036101083032491
PNG	0xb01bb0	0xc94	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0034161490683229
PNG	0xb00e30	0xd80	PNG image data, 13 x 72, 8-bit/color RGBA, non-interlaced	English	United States	1.0031828703703705
PNG	0xb00d58	0xd4	PNG image data, 3 x 26, 8-bit/color RGBA, non-interlaced	English	United States	1.028301886792453
PNG	0xb10c40	0xbd0	PNG image data, 3 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.003637566137566
PNG	0xb0ffa8	0xc97	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.0034129692832765
PNG	0xb0f228	0xd7a	PNG image data, 13 x 72, 8-bit/color RGBA, non-interlaced	English	United States	1.0031884057971014
PNG	0xb07440	0xbda	PNG image data, 3 x 92, 8-bit/color RGBA, non-interlaced	English	United States	1.0036255767963085
PNG	0xb067b0	0xc8f	PNG image data, 80 x 19, 8-bit/color RGBA, non-interlaced	English	United States	1.003421461897356
PNG	0xb05a28	0xd86	PNG image data, 13 x 72, 8-bit/color RGBA, non-interlaced	English	United States	1.0031773541305604
PNG	0xad75d8	0x1908	PNG image data, 50 x 178, 8-bit/color RGBA, non-interlaced	English	United States	0.9887640449438202
PNG	0xad8ee0	0xb75	PNG image data, 3 x 61, 8-bit/color RGBA, non-interlaced	English	United States	1.0037504261847938
PNG	0xae5768	0xbd0	PNG image data, 9 x 51, 8-bit/color RGBA, non-interlaced	English	United States	1.003637566137566
PNG	0xafaa28	0x1570	PNG image data, 18 x 72, 8-bit/color RGBA, non-interlaced	English	United States	1.0020043731778425
PNG	0xaf9400	0x1623	PNG image data, 18 x 72, 8-bit/color RGBA, non-interlaced	English	United States	1.0019410622904534
STYLE_XML	0xa056f8	0x4e01	HTML document, ASCII text, with CRLF line terminators	English	United States	0.1839851770243878
STYLE_XML	0xa37eb8	0x4b09	HTML document, ASCII text, with CRLF line terminators	English	United States	0.20396689052006872
STYLE_XML	0xa6c160	0x4aa6	HTML document, ASCII text, with CRLF line terminators	English	United States	0.20460491889063318
STYLE_XML	0xa9d928	0x4a18	HTML document, ASCII text, with CRLF line terminators	English	United States	0.20397511598481655
STYLE_XML	0xad2a48	0x1955	HTML document, ASCII text, with CRLF line terminators	English	United States	0.1918272937548188
RT_CURSOR	0xa03f60	0x134	Targa image data - RGB 64 x 65536 x 1 +32 "\001"	English	United States	0.4805194805194805
RT_CURSOR	0xa04098	0xb4	Targa image data - Map 32 x 65536 x 1 +16 "\001"	English	United States	0.7
RT_CURSOR	0xa04178	0x134	AmigaOS bitmap font "(", fc_YSize 4294967264, 5120 elements, 2nd "\377\360?\377\377\370\177\377\377\374\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377", 3rd	English	United States	0.36363636363636365
RT_CURSOR	0xa042c8	0x134	Targa image data - RLE 64 x 65536 x 1 +32 "\001"	English	United States	0.35714285714285715
RT_CURSOR	0xa04418	0x134	data	English	United States	0.37337662337662336
RT_CURSOR	0xa04568	0x134	data	English	United States	0.37662337662337664
RT_CURSOR	0xa046b8	0x134	Targa image data 64 x 65536 x 1 +32 "\001"	English	United States	0.36688311688311687
RT_CURSOR	0xa04808	0x134	Targa image data 64 x 65536 x 1 +32 "\001"	English	United States	0.37662337662337664
RT_CURSOR	0xa04958	0x134	Targa image data - Mono - RLE 64 x 65536 x 1 +32 "\001"	English	United States	0.36688311688311687
RT_CURSOR	0xa04aa8	0x134	Targa image data - RGB - RLE 64 x 65536 x 1 +32 "\001"	English	United States	0.38636363636363635
RT_CURSOR	0xa04bf8	0x134	data	English	United States	0.44155844155844154
RT_CURSOR	0xa04d48	0x134	data	English	United States	0.4155844155844156
RT_CURSOR	0xa04e98	0x134	AmigaOS bitmap font "(", fc_YSize 4294966847, 3840 elements, 2nd "\377?\374\377\377\300\003\377\377\300\003\377\377\340\007\377\377\360\017\377\377\370\037\377\377\374?\377\377\376\177\377\377\377\377\377\377\377\377\377\377\377\377\377", 3rd	English	United States	0.5422077922077922
RT_CURSOR	0xa04fe8	0x134	data	English	United States	0.2662337662337662
RT_CURSOR	0xa05138	0x134	data	English	United States	0.2824675324675325
RT_CURSOR	0xa05288	0x134	data	English	United States	0.3246753246753247
RT_CURSOR	0xb3ab28	0x134	data	English	United States	0.20454545454545456
RT_CURSOR	0xb3ac78	0x134	data	English	United States	0.2857142857142857
RT_CURSOR	0xb3adc8	0x134	data	English	United States	0.4675324675324675
RT_CURSOR	0xb3af18	0x134	data	English	United States	0.2532467532467532
RT_CURSOR	0xb3b068	0x134	Targa image data - RLE 64 x 65536 x 1 +32 "\001"	English	United States	0.40584415584415584
RT_CURSOR	0xb3b1b8	0x134	data	English	United States	0.4383116883116883
RT_CURSOR	0xb3b308	0x134	Targa image data - Mono 64 x 65536 x 1 +32 "\001"	English	United States	0.4967532467532468
RT_CURSOR	0xb3b458	0x134	Targa image data - Mono 64 x 65536 x 1 +32 "\001"	English	United States	0.39285714285714285
RT_CURSOR	0xb3b5a8	0x134	Targa image data - Mono 64 x 65536 x 1 +32 "\001"	English	United States	0.4512987012987013
RT_CURSOR	0xb3b6f8	0x134	data	English	United States	0.37337662337662336
RT_CURSOR	0xb3b848	0x134	data	English	United States	0.4448051948051948
RT_CURSOR	0xb3b998	0x134	data	English	United States	0.525974025974026
RT_BITMAP	0xb14268	0x62c	Device independent bitmap graphic, 324 x 9 x 4, image size 1476	English	United States	0.2430379746835443
RT_BITMAP	0xb14180	0xe8	Device independent bitmap graphic, 16 x 16 x 4, image size 128	English	United States	0.5818965517241379
RT_BITMAP	0xb14898	0x4a0	Device independent bitmap graphic, 144 x 15 x 4, image size 1080	English	United States	0.3783783783783784
RT_BITMAP	0xb14d38	0x197a	Device independent bitmap graphic, 144 x 15 x 24, image size 6482, resolution 2834 x 2834 px/m	English	United States	0.380098129408157
RT_BITMAP	0xb166b8	0xc8	Device independent bitmap graphic, 13 x 12 x 4, image size 96	English	United States	0.51
RT_BITMAP	0xb16990	0xc8	Device independent bitmap graphic, 13 x 12 x 4, image size 96	English	United States	0.515
RT_BITMAP	0xb16c68	0xc8	Device independent bitmap graphic, 13 x 12 x 4, image size 96	English	United States	0.43
RT_BITMAP	0xb16f40	0xc8	Device independent bitmap graphic, 13 x 12 x 4, image size 96	English	United States	0.44
RT_BITMAP	0xb17680	0x182a	Device independent bitmap graphic, 128 x 16 x 24, image size 6146, resolution 2834 x 2834 px/m	English	United States	0.2924345295829292
RT_BITMAP	0xb17218	0x468	Device independent bitmap graphic, 128 x 16 x 4, image size 1024	English	United States	0.3058510638297872
RT_BITMAP	0xb18eb0	0x528	Device independent bitmap graphic, 16 x 16 x 8, image size 256	English	United States	0.4803030303030303
RT_BITMAP	0xb19708	0x528	Device independent bitmap graphic, 16 x 16 x 8, image size 256	English	United States	0.4765151515151515
RT_BITMAP	0xb19f60	0x158	Device independent bitmap graphic, 32 x 15 x 4, image size 240	English	United States	0.41569767441860467
RT_BITMAP	0xb1a0b8	0x188	Device independent bitmap graphic, 48 x 12 x 4, image size 288	English	United States	0.39285714285714285
RT_BITMAP	0xb1ae70	0x1e8	Device independent bitmap graphic, 48 x 16 x 4, image size 384	English	United States	0.5081967213114754
RT_BITMAP	0xb1b980	0xad2	Device independent bitmap graphic, 29 x 31 x 24, image size 2730, resolution 2834 x 2834 px/m	English	United States	0.18736462093862816
RT_BITMAP	0xb1c458	0xad2	Device independent bitmap graphic, 29 x 31 x 24, image size 2730, resolution 2834 x 2834 px/m	English	United States	0.1844765342960289
RT_BITMAP	0xb1cf30	0xb0a	Device independent bitmap graphic, 31 x 29 x 24, image size 2786, resolution 2834 x 2834 px/m	English	United States	0.19497523000707714
RT_BITMAP	0xb1da40	0x7e2	Device independent bitmap graphic, 25 x 26 x 24, image size 1978, resolution 2834 x 2834 px/m	English	United States	0.24033696729435083
RT_BITMAP	0xb1e228	0xb0a	Device independent bitmap graphic, 31 x 29 x 24, image size 2786, resolution 2834 x 2834 px/m	English	United States	0.1935598018400566
RT_BITMAP	0xb1ed38	0x134	Device independent bitmap graphic, 17 x 17 x 4, image size 204	English	United States	0.37337662337662336
RT_BITMAP	0xb1b058	0x928	Device independent bitmap graphic, 48 x 16 x 24, image size 0, resolution 2834 x 2834 px/m	English	United States	0.533703071672355
RT_BITMAP	0xb193d8	0x32a	Device independent bitmap graphic, 16 x 16 x 24, image size 770, resolution 2834 x 2834 px/m	English	United States	0.7518518518518519
RT_BITMAP	0xb19c30	0x32a	Device independent bitmap graphic, 16 x 16 x 24, image size 770, resolution 2834 x 2834 px/m	English	United States	0.3790123456790123
RT_BITMAP	0xb1a240	0xc2a	Device independent bitmap graphic, 64 x 16 x 24, image size 3074, resolution 2834 x 2834 px/m	English	United States	0.42485549132947975
RT_BITMAP	0xb16780	0x20a	Device independent bitmap graphic, 13 x 12 x 24, image size 482, resolution 2834 x 2834 px/m	English	United States	0.9367816091954023
RT_BITMAP	0xb16a58	0x20a	Device independent bitmap graphic, 13 x 12 x 24, image size 482, resolution 2834 x 2834 px/m	English	United States	0.4482758620689655
RT_BITMAP	0xb16d30	0x20a	Device independent bitmap graphic, 13 x 12 x 24, image size 482, resolution 2834 x 2834 px/m	English	United States	0.33524904214559387
RT_BITMAP	0xb17008	0x20a	Device independent bitmap graphic, 13 x 12 x 24, image size 482, resolution 2834 x 2834 px/m	English	United States	0.3371647509578544
RT_BITMAP	0xb1ee70	0x32a	Device independent bitmap graphic, 16 x 16 x 24, image size 770, resolution 2834 x 2834 px/m	English	United States	0.6320987654320988
RT_BITMAP	0xb1f1a0	0x2256	Device independent bitmap graphic, 324 x 9 x 24, image size 8750, resolution 2834 x 2834 px/m	English	United States	0.0608646188850967
RT_BITMAP	0xb213f8	0x602a	Device independent bitmap graphic, 192 x 32 x 32, image size 24578, resolution 2834 x 2834 px/m	English	United States	0.2250385896498497
RT_BITMAP	0xb27428	0x2028	Device independent bitmap graphic, 128 x 16 x 32, image size 0	English	United States	0.24708454810495628
RT_BITMAP	0xb29450	0x13da	Device independent bitmap graphic, 35 x 36 x 32, image size 5042, resolution 2834 x 2834 px/m	English	United States	0.11570247933884298
RT_BITMAP	0xb2a830	0x13da	Device independent bitmap graphic, 35 x 36 x 32, image size 5042, resolution 2834 x 2834 px/m	English	United States	0.10999606454151908
RT_BITMAP	0xb2bc10	0x13da	Device independent bitmap graphic, 36 x 35 x 32, image size 5042, resolution 2834 x 2834 px/m	English	United States	0.11511216056670602
RT_BITMAP	0xb2cff0	0xeb2	Device independent bitmap graphic, 31 x 30 x 32, image size 3722, resolution 2834 x 2834 px/m	English	United States	0.13157894736842105
RT_BITMAP	0xb2dea8	0x13da	Device independent bitmap graphic, 36 x 35 x 32, image size 5042, resolution 2834 x 2834 px/m	English	United States	0.11983471074380166
RT_BITMAP	0xb2f288	0x13da	Device independent bitmap graphic, 35 x 36 x 32, image size 5042, resolution 2834 x 2834 px/m	English	United States	0.27371113734750097
RT_BITMAP	0xb30668	0x13da	Device independent bitmap graphic, 35 x 36 x 32, image size 5042, resolution 2834 x 2834 px/m	English	United States	0.2699724517906336
RT_BITMAP	0xb31a48	0x13da	Device independent bitmap graphic, 36 x 35 x 32, image size 5042, resolution 2834 x 2834 px/m	English	United States	0.2426210153482881
RT_BITMAP	0xb32e28	0xeb2	Device independent bitmap graphic, 31 x 30 x 32, image size 3722, resolution 2834 x 2834 px/m	English	United States	0.3413078149920255
RT_BITMAP	0xb33ce0	0x13da	Device independent bitmap graphic, 36 x 35 x 32, image size 5042, resolution 2834 x 2834 px/m	English	United States	0.23868555686737505
RT_BITMAP	0xb350c0	0x5a66	Device independent bitmap graphic, 77 x 75 x 32, image size 23102, resolution 2834 x 2834 px/m	English	United States	0.046365914786967416
RT_BITMAP	0xa054f8	0xb8	Device independent bitmap graphic, 12 x 10 x 4, image size 80	English	United States	0.44565217391304346
RT_BITMAP	0xa055b0	0x144	Device independent bitmap graphic, 33 x 11 x 4, image size 220	English	United States	0.37962962962962965
RT_ICON	0x9f0740	0x668	Device independent bitmap graphic, 48 x 96 x 4, image size 1152	English	United States	0.5335365853658537
RT_ICON	0x9f0da8	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 512	English	United States	0.646505376344086
RT_ICON	0x9f1090	0x1e8	Device independent bitmap graphic, 24 x 48 x 4, image size 288	English	United States	0.6598360655737705
RT_ICON	0x9f1278	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 128	English	United States	0.6385135135135135
RT_ICON	0x9f13a0	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 2304, 256 important colors	English	United States	0.6260660980810234
RT_ICON	0x9f2248	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1024, 256 important colors	English	United States	0.7793321299638989
RT_ICON	0x9f2af0	0x6c8	Device independent bitmap graphic, 24 x 48 x 8, image size 576, 256 important colors	English	United States	0.8231566820276498
RT_ICON	0x9f31b8	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 256, 256 important colors	English	United States	0.6575144508670521
RT_ICON	0x9f3720	0x93cb	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced	English	United States	0.9988106250825954
RT_ICON	0x9fcaf0	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9600	English	United States	0.5116182572614107
RT_ICON	0x9ff098	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4224	English	United States	0.6109287054409006
RT_ICON	0xa00140	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	English	United States	0.6221311475409836
RT_ICON	0xa00ac8	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.7402482269503546
RT_ICON	0xb3bb20	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 640	English	United States	0.33198924731182794
RT_ICON	0xb3be08	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 192	English	United States	0.41216216216216217
RT_ICON	0xb3bf58	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 192	English	United States	0.42905405405405406
RT_ICON	0xb3c080	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 640	English	United States	0.2661290322580645
RT_ICON	0xb3c390	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 512	English	United States	0.18010752688172044
RT_ICON	0xb3c678	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 128	English	United States	0.35135135135135137
RT_ICON	0xb3c7a0	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1024, 256 important colors	English	United States	0.06092057761732852
RT_ICON	0xb3d048	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 256, 256 important colors	English	United States	0.07658959537572255
RT_ICON	0xb3d5b0	0xca8	Device independent bitmap graphic, 32 x 64 x 24, image size 3072	English	United States	0.042901234567901236
RT_ICON	0xb3e258	0x368	Device independent bitmap graphic, 16 x 32 x 24, image size 768	English	United States	0.10550458715596331
RT_ICON	0xb3e620	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 0	English	United States	0.6400709219858156
RT_ICON	0xb3ea88	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 192	English	United States	0.5
RT_MENU	0xb3ebd8	0x11c	data	English	United States	0.573943661971831
RT_DIALOG	0xa03900	0x330	data	English	United States	0.47671568627450983
RT_DIALOG	0xa00ff0	0x10e	data	English	United States	0.662962962962963
RT_DIALOG	0xa03248	0x2ca	data	English	United States	0.48599439775910364
RT_DIALOG	0xa02cb0	0x598	data	English	United States	0.35963687150837986
RT_DIALOG	0xa028f8	0x3b8	data	English	United States	0.43067226890756305
RT_DIALOG	0xa02670	0x288	data	English	United States	0.4861111111111111
RT_DIALOG	0xa011b0	0x5dc	data	English	United States	0.36666666666666664
RT_DIALOG	0xa02288	0x3e8	data	English	United States	0.421
RT_DIALOG	0xa01f88	0x2fa	data	English	United States	0.44750656167979
RT_DIALOG	0xa01e88	0xfe	data	English	United States	0.6299212598425197
RT_DIALOG	0xa01100	0xac	data	English	United States	0.6918604651162791
RT_DIALOG	0xa01ae0	0x3a6	data	English	United States	0.44325481798715205
RT_DIALOG	0xa018d0	0x210	data	English	United States	0.5492424242424242
RT_DIALOG	0xa01790	0x13e	data	English	United States	0.5660377358490566
RT_DIALOG	0xa03518	0x3e6	data	English	United States	0.39478957915831664
RT_DIALOG	0xb11f00	0x13c	data	English	United States	0.5949367088607594
RT_DIALOG	0xb12040	0x1a4	data	English	United States	0.5380952380952381
RT_DIALOG	0xb11868	0xe6	data	English	United States	0.6347826086956522
RT_DIALOG	0xb11950	0x390	data	English	United States	0.4418859649122807
RT_DIALOG	0xb11ce0	0x21c	data	English	United States	0.5037037037037037
RT_DIALOG	0xb121e8	0x390	data	English	United States	0.4692982456140351
RT_DIALOG	0xb12578	0x1dc	data	English	United States	0.5441176470588235
RT_DIALOG	0xb12758	0x346	data	English	United States	0.46897374701670647
RT_DIALOG	0xb12aa0	0x334	data	English	United States	0.43658536585365854
RT_DIALOG	0xb11810	0x58	data	English	United States	0.8068181818181818
RT_DIALOG	0xb12dd8	0x23c	data	English	United States	0.5122377622377622
RT_DIALOG	0xb137a8	0x1c2	data	English	United States	0.5066666666666667
RT_DIALOG	0xb13018	0x160	data	English	United States	0.5994318181818182
RT_DIALOG	0xb13178	0xb2	data	English	United States	0.7191011235955056
RT_DIALOG	0xb13230	0x3d4	data	English	United States	0.3408163265306122
RT_DIALOG	0xb13608	0x19e	data	English	United States	0.6280193236714976
RT_DIALOG	0xb13970	0x1a2	data	English	United States	0.5741626794258373
RT_DIALOG	0xb13b18	0x34	data	English	United States	0.8076923076923077
RT_DIALOG	0xb13b50	0x2a8	data	English	United States	0.5338235294117647
RT_DIALOG	0xb13df8	0x382	data	English	United States	0.48552338530066813
RT_DIALOG	0xa053d8	0xe8	data	English	United States	0.6336206896551724
RT_DIALOG	0xa054c0	0x34	data	English	United States	0.9038461538461539
RT_STRING	0xb407d0	0x32c	data	English	United States	0.4125615763546798
RT_STRING	0xb40b00	0x248	data	English	United States	0.5085616438356164
RT_STRING	0xb417f8	0x84	data	English	United States	0.5833333333333334
RT_STRING	0xb40d48	0x2a8	data	English	United States	0.36176470588235293
RT_STRING	0xb40ff0	0x20e	data	English	United States	0.3155893536121673
RT_STRING	0xb41200	0x24c	data	English	United States	0.4370748299319728
RT_STRING	0xb41880	0x3c	data	English	United States	0.65
RT_STRING	0xb41450	0x16e	data	English	United States	0.39344262295081966
RT_STRING	0xb415c0	0xa6	Matlab v4 mat-file (little endian) T, numeric, rows 0, columns 0	English	United States	0.7228915662650602
RT_STRING	0xb418c0	0x184	data	English	United States	0.4742268041237113
RT_STRING	0xb41a48	0x66	data	English	United States	0.696078431372549
RT_STRING	0xb41cf0	0x1d6	Matlab v4 mat-file (little endian) S, numeric, rows 0, columns 0	English	United States	0.35319148936170214
RT_STRING	0xb41ab0	0x186	data	English	United States	0.5384615384615384
RT_STRING	0xb41c38	0xb2	data	English	United States	0.6179775280898876
RT_STRING	0xb41ec8	0x48	Matlab v4 mat-file (little endian) a, numeric, rows 0, columns 0	English	United States	0.7083333333333334
RT_STRING	0xb41668	0x18c	data	English	United States	0.398989898989899
RT_STRING	0xb3ecf8	0x82	StarOffice Gallery theme p, 536899072 objects, 1st n	English	United States	0.7153846153846154
RT_STRING	0xb3ed80	0x2a	data	English	United States	0.5476190476190477
RT_STRING	0xb3edb0	0x184	data	English	United States	0.48711340206185566
RT_STRING	0xb3ef38	0x4ee	data	English	United States	0.375594294770206
RT_STRING	0xb3f7b8	0x264	data	English	United States	0.3333333333333333
RT_STRING	0xb3f4d8	0x2da	data	English	United States	0.3698630136986301
RT_STRING	0xb40200	0x8a	data	English	United States	0.6594202898550725
RT_STRING	0xb3f428	0xac	data	English	United States	0.45348837209302323
RT_STRING	0xb400f0	0xde	data	English	United States	0.536036036036036
RT_STRING	0xb3fa20	0x4a8	data	English	United States	0.3221476510067114
RT_STRING	0xb3fec8	0x228	data	English	United States	0.4003623188405797
RT_STRING	0xb401d0	0x2c	data	English	United States	0.5227272727272727
RT_STRING	0xb40290	0x53e	data	English	United States	0.2965722801788376
RT_GROUP_CURSOR	0xb3b6e0	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xb3b440	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xb3ac60	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xb3adb0	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xb3af00	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.25
RT_GROUP_CURSOR	0xb3b050	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xb3b1a0	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xb3b2f0	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xb3b590	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xb3b830	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xb3b980	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xb3bad0	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xa04150	0x22	Lotus unknown worksheet or configuration, revision 0x2	English	United States	1.0294117647058822
RT_GROUP_CURSOR	0xa04940	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xa042b0	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xa047f0	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xa046a0	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xa04fd0	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xa04550	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xa04be0	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xa04400	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xa04a90	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xa04d30	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xa04e80	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xa05120	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xa05270	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xa053c0	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_ICON	0xa00f30	0xbc	data	English	United States	0.6117021276595744
RT_GROUP_ICON	0xb3bf30	0x22	data	English	United States	1.0588235294117647
RT_GROUP_ICON	0xb3c368	0x22	data	English	United States	1.0588235294117647
RT_GROUP_ICON	0xb3e5c0	0x5a	data	English	United States	0.7666666666666667
RT_GROUP_ICON	0xb3ebb0	0x22	data	English	United States	1.1176470588235294
RT_VERSION	0xa03c30	0x330	data	English	United States	0.42892156862745096
RT_MANIFEST	0xb41f10	0x31c	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (736), with CRLF line terminators	English	United States	0.5238693467336684
None	0xb3bae8	0x1c	data	English	United States	1.2857142857142858
None	0xb3bb08	0x18	data	English	United States	1.2916666666666667

Imports

DLL	Import
KERNEL32.dll	LCMapStringW, GetStdHandle, GetFileType, SetStdHandle, QueryPerformanceFrequency, VirtualQuery, VirtualAlloc, GetSystemInfo, ExitThread, CreateThread, GetCommandLineW, GetCommandLineA, GetModuleHandleExW, InterlockedFlushSList, RtlUnwind, RaiseException, OutputDebugStringW, GetTimeZoneInformation, GetConsoleOutputCP, HeapQueryInformation, SetFilePointerEx, FindFirstFileExW, FindNextFileW, GetACP, GetOEMCP, GetCPInfo, GetEnvironmentStringsW, FreeEnvironmentStringsW, SetEnvironmentVariableW, GetStringTypeW, InitializeSListHead, GetSystemTimeAsFileTime, QueryPerformanceCounter, GetStartupInfoW, IsDebuggerPresent, IsProcessorFeaturePresent, GetConsoleMode, TerminateProcess, SetUnhandledExceptionFilter, UnhandledExceptionFilter, SleepConditionVariableSRW, WakeAllConditionVariable, AcquireSRWLockExclusive, ReleaseSRWLockExclusive, SearchPathW, GetProfileIntW, GetTickCount64, GetTempPathW, SystemTimeToTzSpecificLocalTime, GetFileSizeEx, GetFileAttributesExW, FileTimeToLocalFileTime, GetWindowsDirectoryW, lstrcmpiW, GetCurrentProcess, DuplicateHandle, WriteFile, UnlockFile, SetFilePointer, SetEndOfFile, ReadFile, LockFile, GetVolumeInformationW, FlushFileBuffers, FindFirstFileW, FindClose, GetFileSize, CreateFileW, VerifyVersionInfoW, VerSetConditionMask, DeleteFileW, GetCurrentDirectoryW, FileTimeToSystemTime, GetTempFileNameW, GetFullPathNameW, GetFileTime, GetFileAttributesW, FindResourceExW, GetUserDefaultUILanguage, GetSystemDefaultUILanguage, GetLocaleInfoW, LocalReAlloc, LocalAlloc, GlobalHandle, TlsFree, TlsSetValue, TlsGetValue, TlsAlloc, InitializeCriticalSection, GlobalFlags, ResumeThread, SetThreadPriority, WaitForSingleObject, WritePrivateProfileStringW, GetPrivateProfileStringW, GetPrivateProfileIntW, lstrcpyW, GetVersionExW, GetCurrentThread, lstrcmpA, CopyFileW, FormatMessageW, LocalFree, GlobalSize, InitializeCriticalSectionAndSpinCount, WideCharToMultiByte, GlobalGetAtomNameW, GetCurrentProcessId, MultiByteToWideChar, VirtualProtect, MulDiv, CompareStringW, GlobalFindAtomW, GlobalAddAtomW, lstrcmpW, GlobalDeleteAtom, LoadLibraryA, LoadLibraryExW, FreeLibrary, GetSystemDirectoryW, GetCurrentThreadId, EncodePointer, GlobalLock, GlobalUnlock, LoadLibraryW, GetProcAddress, GetModuleHandleW, GetModuleHandleA, GetModuleFileNameW, SetLastError, OutputDebugStringA, Sleep, VirtualAllocEx, LoadLibraryExA, ExitProcess, CloseHandle, IsValidCodePage, GlobalReAlloc, GlobalFree, GlobalAlloc, FindResourceW, LoadResource, LockResource, SizeofResource, GetProcessHeap, DeleteCriticalSection, DecodePointer, HeapAlloc, HeapReAlloc, HeapFree, GetLastError, HeapSize, InitializeCriticalSectionEx, LeaveCriticalSection, EnterCriticalSection, FreeLibraryAndExitThread, WriteConsoleW
USER32.dll	PostQuitMessage, RemoveMenu, AppendMenuW, InsertMenuW, GetMenuState, GetMenuStringW, SystemParametersInfoW, IsRectEmpty, GetCursorPos, SetWindowRgn, KillTimer, SetTimer, ReuseDDElParam, UnpackDDElParam, LoadImageW, DestroyIcon, GetWindowThreadProcessId, SetRectEmpty, InsertMenuItemW, DestroyMenu, CreatePopupMenu, LoadMenuW, TranslateAcceleratorW, LoadAcceleratorsW, BringWindowToTop, MapVirtualKeyW, GetKeyNameTextW, MapDialogRect, GetAsyncKeyState, ReleaseDC, GetWindowDC, GetDC, TabbedTextOutW, GrayStringW, DrawTextExW, DrawTextW, IsDialogMessageW, SetWindowTextW, CheckDlgButton, MoveWindow, ShowWindow, LoadBitmapW, SetMenuItemInfoW, GetMenuCheckMarkDimensions, SetMenuItemBitmaps, EnableMenuItem, CheckMenuItem, GetMonitorInfoW, MonitorFromWindow, WinHelpW, GetScrollInfo, SetScrollInfo, CallNextHookEx, UnhookWindowsHookEx, SetWindowsHookExW, GetWindow, GetLastActivePopup, DrawEdge, GetClassNameW, GetClassLongW, EqualRect, MapWindowPoints, ScreenToClient, MessageBoxW, GetWindowTextLengthW, GetWindowTextW, RemovePropW, GetPropW, SetPropW, ShowScrollBar, GetScrollRange, SetScrollRange, GetScrollPos, EmptyClipboard, ScrollWindow, RedrawWindow, ValidateRect, EndPaint, BeginPaint, SetForegroundWindow, GetForegroundWindow, UpdateWindow, TrackPopupMenu, GetMenuItemCount, GetMenuItemID, GetSubMenu, SetMenu, GetMenu, GetCapture, GetKeyState, GetFocus, SetFocus, GetDlgCtrlID, IsWindowVisible, SetWindowPlacement, GetWindowPlacement, SetWindowPos, IsChild, MonitorFromPoint, TrackMouseEvent, IsZoomed, EnableWindow, GetWindowRect, UnionRect, GetClientRect, SendMessageW, IsMenu, CreateWindowExW, GetClassInfoExW, GetClassInfoW, RegisterClassW, DefWindowProcW, PostMessageW, GetMessageTime, GetMessagePos, PeekMessageW, DispatchMessageW, RegisterWindowMessageW, GetParent, GetDesktopWindow, SetActiveWindow, DrawStateW, GetSysColorBrush, DrawFocusRect, InflateRect, DrawIconEx, GetMessageW, TranslateMessage, ShowOwnedPopups, SendDlgItemMessageA, RealChildWindowFromPoint, GetMenuItemInfoW, CopyImage, GetSystemMenu, IsWindowEnabled, GetActiveWindow, DeleteMenu, SetParent, WaitMessage, SetLayeredWindowAttributes, EnumDisplayMonitors, OpenClipboard, CloseClipboard, GetTopWindow, FillRect, OffsetRect, CopyRect, GetSystemMetrics, SetWindowLongW, BeginDeferWindowPos, DeferWindowPos, EndDeferWindowPos, InvalidateRect, ClientToScreen, WindowFromPoint, PtInRect, ReleaseCapture, SetCursor, DestroyCursor, SetCapture, LoadCursorW, GetWindowLongW, AdjustWindowRectEx, CallWindowProcW, SetRect, SubtractRect, IntersectRect, DrawFrameControl, GetSysColor, CreateDialogParamA, GetWindowLongA, LoadIconW, IsIconic, DrawIcon, IsWindow, DestroyWindow, CreateDialogIndirectParamW, EndDialog, GetDlgItem, GetNextDlgTabItem, CharUpperW, MessageBeep, NotifyWinEvent, SetCursorPos, SetClipboardData, LockWindowUpdate, EnableScrollBar, GetWindowRgn, CreateMenu, InvertRect, HideCaret, GetComboBoxInfo, TranslateMDISysAccel, DefMDIChildProcW, DefFrameProcW, DrawMenuBar, MapVirtualKeyExW, IsCharLowerW, GetNextDlgGroupItem, PostThreadMessageW, IsClipboardFormatAvailable, FrameRect, CharUpperBuffW, RegisterClipboardFormatW, CopyAcceleratorTableW, CreateAcceleratorTableW, GetKeyboardState, GetKeyboardLayout, ToUnicodeEx, UpdateLayeredWindow, GetUpdateRect, SetClassLongW, DestroyAcceleratorTable, ModifyMenuW, SetMenuDefaultItem, GetMenuDefaultItem, CopyIcon, GetIconInfo, SetScrollPos, GetDoubleClickTime
GDI32.dll	GetDeviceCaps, GetObjectType, GetPixel, GetStockObject, GetViewportExtEx, GetWindowExtEx, IntersectClipRect, LineTo, PtVisible, RectVisible, RestoreDC, SaveDC, SelectClipRgn, ExtSelectClipRgn, SelectObject, SelectPalette, SetBkMode, SetMapMode, SetLayout, GetLayout, SetPolyFillMode, SetROP2, SetTextAlign, MoveToEx, TextOutW, ExtTextOutW, SetViewportExtEx, SetViewportOrgEx, SetWindowExtEx, SetWindowOrgEx, OffsetViewportOrgEx, OffsetWindowOrgEx, ScaleViewportExtEx, ScaleWindowExtEx, CreateRectRgnIndirect, PatBlt, CreateCompatibleBitmap, CreateEllipticRgn, GetClipBox, CreateDIBSection, DPtoLP, LPtoDP, CopyMetaFileW, CreateDCW, CombineRgn, GetBkColor, GetTextColor, GetTextExtentPoint32W, CreatePolygonRgn, Polygon, Polyline, GetTextMetricsW, CreateFontIndirectW, SetRectRgn, EnumFontFamiliesExW, CreateDIBitmap, EnumFontFamiliesW, GetTextCharsetInfo, RealizePalette, SetPixel, StretchBlt, SetDIBColorTable, CreateRoundRectRgn, GetRgnBox, OffsetRgn, RoundRect, CreatePalette, GetPaletteEntries, GetNearestPaletteIndex, GetSystemPaletteEntries, ExtFloodFill, SetPaletteEntries, FillRgn, FrameRgn, GetBoundsRect, PtInRegion, GetViewportOrgEx, GetWindowOrgEx, SetPixelV, GetTextFaceW, ExcludeClipRect, Escape, DeleteObject, CreateSolidBrush, CreateRectRgn, CreatePatternBrush, CreatePen, CreateHatchBrush, CreateCompatibleDC, CreateBitmap, GetObjectW, SetTextColor, SetBkColor, Rectangle, Ellipse, BitBlt, DeleteDC
MSIMG32.dll	TransparentBlt, AlphaBlend
WINSPOOL.DRV	OpenPrinterW, DocumentPropertiesW, ClosePrinter
ADVAPI32.dll	RegSetValueExW, RegEnumKeyExW, RegEnumValueW, RegQueryValueW, RegEnumKeyW, RegCloseKey, RegDeleteValueW, RegDeleteKeyW, RegCreateKeyExW, RegQueryValueExW, RegOpenKeyExW
SHELL32.dll	DragFinish, SHGetMalloc, SHGetPathFromIDListW, SHGetSpecialFolderLocation, SHBrowseForFolderW, SHGetDesktopFolder, SHAppBarMessage, ShellExecuteW, SHGetFileInfoW, DragQueryFileW
COMCTL32.dll	InitCommonControlsEx
SHLWAPI.dll	PathFindExtensionW, PathStripToRootW, StrFormatKBSizeW, PathRemoveFileSpecW, PathIsUNCW, PathFindFileNameW
UxTheme.dll	GetThemeSysColor, GetWindowTheme, GetThemePartSize, DrawThemeParentBackground, IsThemeBackgroundPartiallyTransparent, CloseThemeData, OpenThemeData, DrawThemeBackground, GetThemeColor, GetCurrentThemeName, IsAppThemed, DrawThemeText
ole32.dll	RegisterDragDrop, CoLockObjectExternal, OleLockRunning, OleCreateMenuDescriptor, OleDestroyMenuDescriptor, OleTranslateAccelerator, IsAccelerator, RevokeDragDrop, OleGetClipboard, DoDragDrop, CoInitializeEx, CreateStreamOnHGlobal, CoDisconnectObject, CoInitialize, CoCreateInstance, CoCreateGuid, CoUninitialize, ReleaseStgMedium, OleDuplicateData, CoTaskMemFree, CoTaskMemAlloc
OLEAUT32.dll	SysStringLen, SystemTimeToVariantTime, VariantTimeToSystemTime, VariantChangeType, LoadTypeLib, VariantCopy, VarBstrFromDate, VariantClear, SysAllocString, SysFreeString, VariantInit, SysAllocStringLen
gdiplus.dll	GdipDrawImageRectI, GdipSetInterpolationMode, GdipCreateFromHDC, GdipCreateBitmapFromHBITMAP, GdipDrawImageI, GdipDeleteGraphics, GdipBitmapUnlockBits, GdipBitmapLockBits, GdipCreateBitmapFromScan0, GdipCreateBitmapFromStream, GdipGetImagePaletteSize, GdipGetImagePalette, GdipGetImagePixelFormat, GdipGetImageHeight, GdipGetImageWidth, GdipGetImageGraphicsContext, GdipDisposeImage, GdipCloneImage, GdiplusStartup, GdipFree, GdipAlloc, GdiplusShutdown
OLEACC.dll	AccessibleObjectFromWindow, LresultFromObject, CreateStdAccessibleObject
IMM32.dll	ImmReleaseContext, ImmGetOpenStatus, ImmGetContext
WINMM.dll	PlaySoundW

Exports

Name	Ordinal	Address
CIrNTzBaPkppGNf	1	0x108093e0
CZnIUAAeJ	2	0x108093e0
FxJWXdx	3	0x108093e0
GbmgwMEzKpXc	4	0x108093e0
HipXGmygXapBRYfa	5	0x108093e0
IYfRriwGvbgbXBXReH	6	0x108093e0
LKSMdMaTT	7	0x108093e0
NpZatICsK	8	0x108093e0
SOdCGqnNtDWyDo	9	0x108093e0
UAyCqwHRBMHCdHlVz	10	0x108093e0
ZfDMgndWxjR	11	0x108093e0
iBZHcoeoarRd	12	0x108093e0
jERKotJBwfw	13	0x108093e0
nkYPRlgSTnlUkuDTW	14	0x108093e0
rtVNQhSpgienExR	15	0x108093e0
start	16	0x10813180
uMRRtkuQVecTfq	17	0x108093e0
ukniOqaVKgeX	18	0x108093e0
yVmJFl	19	0x108093e0

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-01T00:09:02.819612+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49834	62.173.146.41	443	TCP
2024-12-01T00:09:02.878724+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49835	195.133.88.98	443	TCP
2024-12-01T00:09:02.952006+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49836	31.41.244.38	443	TCP
2024-12-01T00:09:03.003098+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49837	62.173.146.41	443	TCP
2024-12-01T00:09:13.537112+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49870	62.173.146.41	443	TCP
2024-12-01T00:09:13.696546+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49871	195.133.88.98	443	TCP
2024-12-01T00:09:13.762133+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49872	31.41.244.38	443	TCP
2024-12-01T00:09:13.826067+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49873	62.173.146.41	443	TCP
2024-12-01T00:09:18.215931+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49889	62.173.146.41	443	TCP
2024-12-01T00:09:18.271579+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49890	195.133.88.98	443	TCP
2024-12-01T00:09:18.333810+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49891	31.41.244.38	443	TCP
2024-12-01T00:09:18.396207+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49892	62.173.146.41	443	TCP
2024-12-01T00:09:22.779536+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49907	62.173.146.41	443	TCP
2024-12-01T00:09:22.856236+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49908	195.133.88.98	443	TCP
2024-12-01T00:09:22.959695+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49909	31.41.244.38	443	TCP
2024-12-01T00:09:23.049514+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49910	62.173.146.41	443	TCP
2024-12-01T00:09:25.544776+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49921	62.173.146.41	443	TCP
2024-12-01T00:09:25.610236+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49922	195.133.88.98	443	TCP
2024-12-01T00:09:25.693378+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49923	31.41.244.38	443	TCP
2024-12-01T00:09:25.761817+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49925	62.173.146.41	443	TCP
2024-12-01T00:09:28.185063+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49935	62.173.146.41	443	TCP
2024-12-01T00:09:28.248932+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49936	195.133.88.98	443	TCP
2024-12-01T00:09:28.304225+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49938	31.41.244.38	443	TCP
2024-12-01T00:09:28.362779+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49939	62.173.146.41	443	TCP
2024-12-01T00:09:32.748603+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49954	62.173.146.41	443	TCP
2024-12-01T00:09:32.823807+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49955	195.133.88.98	443	TCP
2024-12-01T00:09:32.913321+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49957	31.41.244.38	443	TCP
2024-12-01T00:09:32.994235+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49958	62.173.146.41	443	TCP
2024-12-01T00:09:35.789624+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49969	62.173.146.41	443	TCP
2024-12-01T00:09:35.863245+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49971	195.133.88.98	443	TCP
2024-12-01T00:09:36.028261+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49972	31.41.244.38	443	TCP
2024-12-01T00:09:36.105354+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49973	62.173.146.41	443	TCP
2024-12-01T00:09:38.609015+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49983	62.173.146.41	443	TCP
2024-12-01T00:09:38.675828+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49984	195.133.88.98	443	TCP
2024-12-01T00:09:38.787561+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49985	31.41.244.38	443	TCP
2024-12-01T00:09:38.853084+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	49986	62.173.146.41	443	TCP
2024-12-01T00:09:43.287721+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50001	62.173.146.41	443	TCP
2024-12-01T00:09:43.360262+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50002	195.133.88.98	443	TCP
2024-12-01T00:09:43.419675+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50003	31.41.244.38	443	TCP
2024-12-01T00:09:43.489110+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50004	62.173.146.41	443	TCP
2024-12-01T00:09:45.912082+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50014	62.173.146.41	443	TCP
2024-12-01T00:09:45.992172+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50015	195.133.88.98	443	TCP
2024-12-01T00:09:46.064975+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50016	31.41.244.38	443	TCP
2024-12-01T00:09:46.135875+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50017	62.173.146.41	443	TCP
2024-12-01T00:09:48.540563+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50027	62.173.146.41	443	TCP
2024-12-01T00:09:48.613478+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50028	195.133.88.98	443	TCP
2024-12-01T00:09:48.698836+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50029	31.41.244.38	443	TCP
2024-12-01T00:09:48.810247+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50031	62.173.146.41	443	TCP
2024-12-01T00:09:53.250236+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50047	62.173.146.41	443	TCP
2024-12-01T00:09:53.354231+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50049	195.133.88.98	443	TCP
2024-12-01T00:09:53.442234+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50050	31.41.244.38	443	TCP
2024-12-01T00:09:53.526237+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50051	62.173.146.41	443	TCP
2024-12-01T00:09:56.085836+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50061	62.173.146.41	443	TCP
2024-12-01T00:09:56.214598+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50064	195.133.88.98	443	TCP
2024-12-01T00:09:56.373770+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50065	31.41.244.38	443	TCP
2024-12-01T00:09:56.473696+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50066	62.173.146.41	443	TCP
2024-12-01T00:09:58.854232+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50076	62.173.146.41	443	TCP
2024-12-01T00:09:59.927429+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50077	195.133.88.98	443	TCP
2024-12-01T00:09:59.992501+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50080	31.41.244.38	443	TCP
2024-12-01T00:10:00.077437+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50081	62.173.146.41	443	TCP
2024-12-01T00:10:04.747642+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50095	62.173.146.41	443	TCP
2024-12-01T00:10:04.812605+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50096	195.133.88.98	443	TCP
2024-12-01T00:10:04.893710+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50098	31.41.244.38	443	TCP
2024-12-01T00:10:04.952718+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50099	62.173.146.41	443	TCP
2024-12-01T00:10:07.286229+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50108	62.173.146.41	443	TCP
2024-12-01T00:10:07.373403+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50110	195.133.88.98	443	TCP
2024-12-01T00:10:07.437746+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50112	31.41.244.38	443	TCP
2024-12-01T00:10:07.487026+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50113	62.173.146.41	443	TCP
2024-12-01T00:10:09.762245+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50122	62.173.146.41	443	TCP
2024-12-01T00:10:09.816523+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50123	195.133.88.98	443	TCP
2024-12-01T00:10:09.906997+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50124	31.41.244.38	443	TCP
2024-12-01T00:10:09.955126+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50127	62.173.146.41	443	TCP
2024-12-01T00:10:14.453347+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50133	62.173.146.41	443	TCP
2024-12-01T00:10:14.530095+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50134	195.133.88.98	443	TCP
2024-12-01T00:10:14.601659+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50135	31.41.244.38	443	TCP
2024-12-01T00:10:14.656589+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50136	62.173.146.41	443	TCP
2024-12-01T00:10:16.969602+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50141	62.173.146.41	443	TCP
2024-12-01T00:10:17.034291+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50142	195.133.88.98	443	TCP
2024-12-01T00:10:17.080482+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50143	31.41.244.38	443	TCP
2024-12-01T00:10:17.149760+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50144	62.173.146.41	443	TCP
2024-12-01T00:10:19.860519+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50149	62.173.146.41	443	TCP
2024-12-01T00:10:19.969984+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50150	195.133.88.98	443	TCP
2024-12-01T00:10:20.043951+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50151	31.41.244.38	443	TCP
2024-12-01T00:10:20.123532+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50152	62.173.146.41	443	TCP
2024-12-01T00:10:24.917613+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50157	62.173.146.41	443	TCP
2024-12-01T00:10:25.997143+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50158	195.133.88.98	443	TCP
2024-12-01T00:10:26.097262+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50159	31.41.244.38	443	TCP
2024-12-01T00:10:26.175896+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50160	62.173.146.41	443	TCP
2024-12-01T00:10:28.671750+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50165	62.173.146.41	443	TCP
2024-12-01T00:10:28.746685+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50166	195.133.88.98	443	TCP
2024-12-01T00:10:28.814961+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50167	31.41.244.38	443	TCP
2024-12-01T00:10:28.876278+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50168	62.173.146.41	443	TCP
2024-12-01T00:10:31.206942+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50173	62.173.146.41	443	TCP
2024-12-01T00:10:31.256567+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50174	195.133.88.98	443	TCP
2024-12-01T00:10:31.306177+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50175	31.41.244.38	443	TCP
2024-12-01T00:10:32.397813+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50176	62.173.146.41	443	TCP
2024-12-01T00:10:36.722564+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50181	62.173.146.41	443	TCP
2024-12-01T00:10:36.775511+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50182	195.133.88.98	443	TCP
2024-12-01T00:10:36.869228+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50183	31.41.244.38	443	TCP
2024-12-01T00:10:36.982308+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50184	62.173.146.41	443	TCP
2024-12-01T00:10:39.861862+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50189	62.173.146.41	443	TCP
2024-12-01T00:10:39.934229+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50190	195.133.88.98	443	TCP
2024-12-01T00:10:39.994362+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50191	31.41.244.38	443	TCP
2024-12-01T00:10:40.102229+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50192	62.173.146.41	443	TCP
2024-12-01T00:10:43.436457+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50197	62.173.146.41	443	TCP
2024-12-01T00:10:43.496405+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50198	195.133.88.98	443	TCP
2024-12-01T00:10:43.585780+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50199	31.41.244.38	443	TCP
2024-12-01T00:10:43.642229+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50200	62.173.146.41	443	TCP
2024-12-01T00:10:47.968645+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50205	62.173.146.41	443	TCP
2024-12-01T00:10:48.047887+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50206	195.133.88.98	443	TCP
2024-12-01T00:10:48.100335+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50207	31.41.244.38	443	TCP
2024-12-01T00:10:48.148232+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50208	62.173.146.41	443	TCP
2024-12-01T00:10:51.585398+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50213	62.173.146.41	443	TCP
2024-12-01T00:10:51.708722+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50214	195.133.88.98	443	TCP
2024-12-01T00:10:51.769017+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50215	31.41.244.38	443	TCP
2024-12-01T00:10:51.835300+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50216	62.173.146.41	443	TCP
2024-12-01T00:10:54.173009+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50221	62.173.146.41	443	TCP
2024-12-01T00:10:54.232277+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50222	195.133.88.98	443	TCP
2024-12-01T00:10:55.302062+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50223	31.41.244.38	443	TCP
2024-12-01T00:10:55.364365+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50224	62.173.146.41	443	TCP
2024-12-01T00:10:59.747709+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50229	62.173.146.41	443	TCP
2024-12-01T00:10:59.803311+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50230	195.133.88.98	443	TCP
2024-12-01T00:10:59.852934+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50231	31.41.244.38	443	TCP
2024-12-01T00:10:59.896974+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50232	62.173.146.41	443	TCP
2024-12-01T00:11:02.184768+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50237	62.173.146.41	443	TCP
2024-12-01T00:11:02.235182+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50238	195.133.88.98	443	TCP
2024-12-01T00:11:02.282837+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50239	31.41.244.38	443	TCP
2024-12-01T00:11:02.339097+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50240	62.173.146.41	443	TCP
2024-12-01T00:11:05.763520+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50245	62.173.146.41	443	TCP
2024-12-01T00:11:05.857670+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50246	195.133.88.98	443	TCP
2024-12-01T00:11:05.961270+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50247	31.41.244.38	443	TCP
2024-12-01T00:11:06.044359+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50248	62.173.146.41	443	TCP
2024-12-01T00:11:10.694620+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50253	62.173.146.41	443	TCP
2024-12-01T00:11:10.751292+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50254	195.133.88.98	443	TCP
2024-12-01T00:11:10.814232+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50255	31.41.244.38	443	TCP
2024-12-01T00:11:10.869632+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50256	62.173.146.41	443	TCP
2024-12-01T00:11:14.718399+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50261	62.173.146.41	443	TCP
2024-12-01T00:11:14.766239+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50262	195.133.88.98	443	TCP
2024-12-01T00:11:14.826229+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50263	31.41.244.38	443	TCP
2024-12-01T00:11:15.908992+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50264	62.173.146.41	443	TCP
2024-12-01T00:11:18.210050+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50269	62.173.146.41	443	TCP
2024-12-01T00:11:18.274249+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50270	195.133.88.98	443	TCP
2024-12-01T00:11:18.353913+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50271	31.41.244.38	443	TCP
2024-12-01T00:11:18.417126+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50272	62.173.146.41	443	TCP
2024-12-01T00:11:22.778231+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50277	62.173.146.41	443	TCP
2024-12-01T00:11:22.824358+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50278	195.133.88.98	443	TCP
2024-12-01T00:11:22.875248+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50279	31.41.244.38	443	TCP
2024-12-01T00:11:22.927122+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50280	62.173.146.41	443	TCP
2024-12-01T00:11:25.378638+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50285	62.173.146.41	443	TCP
2024-12-01T00:11:25.451253+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50286	195.133.88.98	443	TCP
2024-12-01T00:11:25.546556+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50287	31.41.244.38	443	TCP
2024-12-01T00:11:25.614748+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50288	62.173.146.41	443	TCP
2024-12-01T00:11:27.953442+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50293	62.173.146.41	443	TCP
2024-12-01T00:11:28.002232+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50294	195.133.88.98	443	TCP
2024-12-01T00:11:28.050228+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50295	31.41.244.38	443	TCP
2024-12-01T00:11:28.094885+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50296	62.173.146.41	443	TCP
2024-12-01T00:11:32.482227+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50301	62.173.146.41	443	TCP
2024-12-01T00:11:32.528909+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50302	195.133.88.98	443	TCP
2024-12-01T00:11:32.590227+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50303	31.41.244.38	443	TCP
2024-12-01T00:11:32.642228+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50304	62.173.146.41	443	TCP
2024-12-01T00:11:34.975547+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50309	62.173.146.41	443	TCP
2024-12-01T00:11:35.035740+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50310	195.133.88.98	443	TCP
2024-12-01T00:11:35.112722+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50311	31.41.244.38	443	TCP
2024-12-01T00:11:35.198550+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50312	62.173.146.41	443	TCP
2024-12-01T00:11:37.633108+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50317	62.173.146.41	443	TCP
2024-12-01T00:11:37.774658+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50318	195.133.88.98	443	TCP
2024-12-01T00:11:37.835742+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50319	31.41.244.38	443	TCP
2024-12-01T00:11:37.902782+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50320	62.173.146.41	443	TCP
2024-12-01T00:11:43.477777+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50325	62.173.146.41	443	TCP
2024-12-01T00:11:43.572168+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50326	195.133.88.98	443	TCP
2024-12-01T00:11:43.650358+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50327	31.41.244.38	443	TCP
2024-12-01T00:11:43.728685+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50328	62.173.146.41	443	TCP
2024-12-01T00:11:47.155748+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50333	62.173.146.41	443	TCP
2024-12-01T00:11:47.221850+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50334	195.133.88.98	443	TCP
2024-12-01T00:11:47.305340+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50335	31.41.244.38	443	TCP
2024-12-01T00:11:47.393856+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50336	62.173.146.41	443	TCP
2024-12-01T00:11:49.869097+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50341	62.173.146.41	443	TCP
2024-12-01T00:11:49.947729+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50342	195.133.88.98	443	TCP
2024-12-01T00:11:50.032547+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50343	31.41.244.38	443	TCP
2024-12-01T00:11:50.096478+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50344	62.173.146.41	443	TCP
2024-12-01T00:11:54.425801+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50349	62.173.146.41	443	TCP
2024-12-01T00:11:54.471702+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50350	195.133.88.98	443	TCP
2024-12-01T00:11:54.535835+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50351	31.41.244.38	443	TCP
2024-12-01T00:11:54.598363+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50352	62.173.146.41	443	TCP
2024-12-01T00:11:57.559203+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50357	62.173.146.41	443	TCP
2024-12-01T00:11:57.708896+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50358	195.133.88.98	443	TCP
2024-12-01T00:11:57.771985+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50359	31.41.244.38	443	TCP
2024-12-01T00:11:57.846496+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50360	62.173.146.41	443	TCP
2024-12-01T00:12:00.148551+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50365	62.173.146.41	443	TCP
2024-12-01T00:12:00.196732+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50366	195.133.88.98	443	TCP
2024-12-01T00:12:00.244478+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50367	31.41.244.38	443	TCP
2024-12-01T00:12:00.288288+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.5	50368	62.173.146.41	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 1, 2024 00:08:16.690958977 CET	49730	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:08:16.690994978 CET	443	49730	62.173.146.41	192.168.2.5
Dec 1, 2024 00:08:16.691179991 CET	49730	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:08:16.745584965 CET	49730	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:08:16.745599031 CET	443	49730	62.173.146.41	192.168.2.5
Dec 1, 2024 00:08:16.745652914 CET	443	49730	62.173.146.41	192.168.2.5
Dec 1, 2024 00:08:16.745667934 CET	49730	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:08:16.745678902 CET	443	49730	62.173.146.41	192.168.2.5
Dec 1, 2024 00:08:16.753761053 CET	49731	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:08:16.753828049 CET	443	49731	195.133.88.98	192.168.2.5
Dec 1, 2024 00:08:16.753910065 CET	49731	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:08:16.807338953 CET	49731	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:08:16.807389975 CET	443	49731	195.133.88.98	192.168.2.5
Dec 1, 2024 00:08:16.807434082 CET	443	49731	195.133.88.98	192.168.2.5
Dec 1, 2024 00:08:16.807447910 CET	49731	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:08:16.807470083 CET	443	49731	195.133.88.98	192.168.2.5
Dec 1, 2024 00:08:16.815185070 CET	49732	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:08:16.815254927 CET	443	49732	31.41.244.38	192.168.2.5
Dec 1, 2024 00:08:16.815326929 CET	49732	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:08:16.874890089 CET	49732	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:08:16.874926090 CET	443	49732	31.41.244.38	192.168.2.5
Dec 1, 2024 00:08:16.874946117 CET	49732	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:08:16.874954939 CET	443	49732	31.41.244.38	192.168.2.5
Dec 1, 2024 00:08:16.874982119 CET	443	49732	31.41.244.38	192.168.2.5
Dec 1, 2024 00:08:16.884550095 CET	49733	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:08:16.884586096 CET	443	49733	62.173.146.41	192.168.2.5
Dec 1, 2024 00:08:16.884654999 CET	49733	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:08:16.937169075 CET	49733	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:08:16.937189102 CET	443	49733	62.173.146.41	192.168.2.5
Dec 1, 2024 00:08:16.937202930 CET	49733	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:08:16.937212944 CET	443	49733	62.173.146.41	192.168.2.5
Dec 1, 2024 00:08:16.937236071 CET	443	49733	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:02.752665043 CET	49834	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:02.752691031 CET	443	49834	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:02.752768040 CET	49834	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:02.819612026 CET	49834	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:02.819626093 CET	443	49834	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:02.819674969 CET	49834	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:02.819680929 CET	443	49834	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:02.819745064 CET	443	49834	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:02.826755047 CET	49835	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:02.826781988 CET	443	49835	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:02.826879025 CET	49835	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:02.878724098 CET	49835	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:02.878742933 CET	443	49835	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:02.878767967 CET	443	49835	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:02.878796101 CET	49835	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:02.878807068 CET	443	49835	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:02.885823011 CET	49836	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:02.885843039 CET	443	49836	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:02.885937929 CET	49836	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:02.952006102 CET	49836	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:02.952023983 CET	443	49836	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:02.952070951 CET	49836	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:02.952075958 CET	443	49836	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:02.952182055 CET	443	49836	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:02.959542990 CET	49837	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:02.959559917 CET	443	49837	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:02.959662914 CET	49837	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:03.003098011 CET	49837	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:03.003110886 CET	443	49837	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:03.003163099 CET	49837	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:03.003168106 CET	443	49837	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:03.003190041 CET	443	49837	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:03.010004044 CET	49838	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:03.010024071 CET	443	49838	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:03.010118961 CET	49838	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:03.056334972 CET	49838	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:03.056353092 CET	443	49838	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:03.056413889 CET	443	49838	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:03.056417942 CET	49838	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:03.056428909 CET	443	49838	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:03.063210964 CET	49839	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:03.063235044 CET	443	49839	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:03.063299894 CET	49839	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:03.130201101 CET	49839	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:03.130213976 CET	443	49839	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:03.130377054 CET	443	49839	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:03.137038946 CET	49840	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:03.137062073 CET	443	49840	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:03.137156010 CET	49840	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:03.189373970 CET	49840	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:03.189385891 CET	443	49840	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:03.189407110 CET	49840	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:03.189414024 CET	443	49840	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:03.189471006 CET	443	49840	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:03.196986914 CET	49841	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:03.197000980 CET	443	49841	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:03.197066069 CET	49841	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:03.252521038 CET	49841	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:03.252532959 CET	443	49841	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:03.252563000 CET	49841	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:03.252593040 CET	443	49841	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:03.252645969 CET	443	49841	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:13.420300961 CET	49870	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:13.420319080 CET	443	49870	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:13.420416117 CET	49870	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:13.537111998 CET	49870	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:13.537126064 CET	443	49870	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:13.537174940 CET	49870	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:13.537189007 CET	443	49870	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:13.557993889 CET	49871	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:13.558015108 CET	443	49871	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:13.558077097 CET	49871	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:13.696546078 CET	49871	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:13.696564913 CET	443	49871	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:13.696621895 CET	443	49871	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:13.696649075 CET	49871	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:13.696666002 CET	443	49871	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:13.707828999 CET	49872	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:13.707849979 CET	443	49872	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:13.707925081 CET	49872	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:13.762132883 CET	49872	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:13.762145996 CET	443	49872	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:13.762173891 CET	443	49872	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:13.762197971 CET	49872	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:13.762204885 CET	443	49872	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:13.771089077 CET	49873	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:13.771097898 CET	443	49873	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:13.771152020 CET	49873	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:13.826066971 CET	49873	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:13.826081991 CET	443	49873	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:13.826128006 CET	49873	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:13.826134920 CET	443	49873	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:13.826149940 CET	443	49873	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:17.893357992 CET	49885	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:17.893374920 CET	443	49885	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:17.893469095 CET	49885	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:17.959600925 CET	49885	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:17.959616899 CET	443	49885	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:17.959693909 CET	49885	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:17.959693909 CET	443	49885	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:17.959702015 CET	443	49885	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:17.969849110 CET	49886	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:17.969871998 CET	443	49886	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:17.969949961 CET	49886	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:18.024348021 CET	49886	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:18.024362087 CET	443	49886	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:18.024389029 CET	443	49886	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:18.024452925 CET	49886	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:18.024461985 CET	443	49886	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:18.037561893 CET	49887	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:18.037583113 CET	443	49887	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:18.037672997 CET	49887	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:18.093960047 CET	49887	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:18.093981028 CET	443	49887	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:18.094031096 CET	443	49887	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:18.094048023 CET	49887	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:18.094059944 CET	443	49887	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:18.101850986 CET	49888	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:18.101877928 CET	443	49888	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:18.101960897 CET	49888	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:18.158195972 CET	49888	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:18.158220053 CET	443	49888	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:18.158261061 CET	443	49888	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:18.158272028 CET	49888	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:18.158288002 CET	443	49888	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:18.165767908 CET	49889	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:18.165790081 CET	443	49889	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:18.165868998 CET	49889	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:18.215930939 CET	49889	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:18.215944052 CET	443	49889	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:18.215977907 CET	443	49889	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:18.223838091 CET	49890	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:18.223865032 CET	443	49890	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:18.223968029 CET	49890	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:18.271579027 CET	49890	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:18.271591902 CET	443	49890	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:18.271614075 CET	443	49890	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:18.281325102 CET	49891	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:18.281347990 CET	443	49891	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:18.281467915 CET	49891	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:18.333810091 CET	49891	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:18.333825111 CET	443	49891	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:18.333848953 CET	443	49891	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:18.333872080 CET	49891	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:18.333880901 CET	443	49891	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:18.340971947 CET	49892	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:18.340986967 CET	443	49892	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:18.341065884 CET	49892	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:18.396207094 CET	49892	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:18.396230936 CET	443	49892	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:18.396272898 CET	443	49892	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:18.396290064 CET	49892	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:18.396301031 CET	443	49892	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:20.424642086 CET	49898	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:20.424696922 CET	443	49898	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:20.424803019 CET	49898	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:20.498898983 CET	49898	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:20.498925924 CET	443	49898	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:20.498984098 CET	443	49898	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:20.498987913 CET	49898	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:20.499003887 CET	443	49898	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:20.507658958 CET	49899	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:20.507684946 CET	443	49899	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:20.507749081 CET	49899	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:20.562035084 CET	49899	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:20.562050104 CET	443	49899	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:20.562071085 CET	49899	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:20.562077999 CET	443	49899	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:20.562093019 CET	443	49899	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:20.572474003 CET	49900	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:20.572504997 CET	443	49900	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:20.572561026 CET	49900	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:20.624207973 CET	49900	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:20.624227047 CET	443	49900	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:20.624238968 CET	49900	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:20.624243021 CET	443	49900	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:20.624277115 CET	443	49900	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:20.631680012 CET	49901	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:20.631690025 CET	443	49901	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:20.631756067 CET	49901	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:20.674072027 CET	49901	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:20.674086094 CET	443	49901	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:20.674112082 CET	443	49901	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:20.674134016 CET	49901	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:20.674141884 CET	443	49901	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:22.709064007 CET	49907	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:22.709086895 CET	443	49907	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:22.714133978 CET	49907	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:22.779536009 CET	49907	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:22.779553890 CET	443	49907	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:22.779603004 CET	443	49907	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:22.779627085 CET	49907	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:22.779639006 CET	443	49907	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:22.790950060 CET	49908	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:22.790965080 CET	443	49908	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:22.792470932 CET	49908	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:22.856235981 CET	49908	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:22.856251001 CET	443	49908	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:22.856285095 CET	443	49908	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:22.874964952 CET	49909	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:22.874980927 CET	443	49909	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:22.875087976 CET	49909	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:22.959695101 CET	49909	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:22.959709883 CET	443	49909	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:22.959749937 CET	443	49909	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:22.986193895 CET	49910	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:22.986203909 CET	443	49910	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:22.988490105 CET	49910	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:23.049514055 CET	49910	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:23.049527884 CET	443	49910	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:23.049580097 CET	443	49910	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:23.049609900 CET	49910	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:23.049617052 CET	443	49910	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:23.062654018 CET	49911	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:23.062685013 CET	443	49911	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:23.062769890 CET	49911	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:23.120346069 CET	49911	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:23.120361090 CET	443	49911	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:23.120436907 CET	443	49911	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:23.139585018 CET	49912	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:23.139600992 CET	443	49912	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:23.140341043 CET	49912	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:23.187165976 CET	49912	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:23.187180996 CET	443	49912	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:23.187246084 CET	443	49912	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:23.197011948 CET	49913	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:23.197026014 CET	443	49913	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:23.197138071 CET	49913	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:23.265511036 CET	49913	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:23.265526056 CET	443	49913	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:23.265595913 CET	443	49913	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:23.265611887 CET	49913	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:23.265621901 CET	443	49913	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:23.289810896 CET	49914	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:23.289825916 CET	443	49914	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:23.292939901 CET	49914	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:23.342319012 CET	49914	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:23.342330933 CET	443	49914	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:23.342363119 CET	443	49914	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:25.471375942 CET	49921	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:25.471399069 CET	443	49921	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:25.471954107 CET	49921	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:25.544775963 CET	49921	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:25.544791937 CET	443	49921	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:25.544841051 CET	443	49921	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:25.555136919 CET	49922	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:25.555154085 CET	443	49922	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:25.555757046 CET	49922	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:25.610235929 CET	49922	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:25.610249043 CET	443	49922	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:25.610285044 CET	443	49922	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:25.630207062 CET	49923	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:25.630223036 CET	443	49923	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:25.630389929 CET	49923	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:25.693377972 CET	49923	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:25.693389893 CET	443	49923	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:25.693433046 CET	443	49923	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:25.693459988 CET	49923	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:25.693469048 CET	443	49923	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:25.703809023 CET	49925	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:25.703831911 CET	443	49925	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:25.703969002 CET	49925	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:25.761816978 CET	49925	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:25.761831045 CET	443	49925	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:25.761867046 CET	443	49925	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:25.761883020 CET	49925	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:25.761895895 CET	443	49925	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:27.815632105 CET	49930	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:27.815653086 CET	443	49930	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:27.815716028 CET	49930	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:27.874618053 CET	49930	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:27.874638081 CET	443	49930	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:27.874684095 CET	49930	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:27.874694109 CET	443	49930	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:27.874692917 CET	443	49930	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:27.885874033 CET	49931	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:27.885899067 CET	443	49931	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:27.885972023 CET	49931	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:27.948821068 CET	49931	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:27.948832989 CET	443	49931	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:27.948875904 CET	443	49931	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:27.948887110 CET	49931	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:27.948903084 CET	443	49931	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:27.960886002 CET	49932	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:27.960901976 CET	443	49932	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:27.960957050 CET	49932	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:28.059379101 CET	49932	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:28.059393883 CET	443	49932	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:28.059448957 CET	49932	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:28.059493065 CET	443	49932	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:28.059609890 CET	443	49932	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:28.068722010 CET	49934	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:28.068737984 CET	443	49934	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:28.068814039 CET	49934	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:28.126590014 CET	49934	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:28.126602888 CET	443	49934	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:28.126643896 CET	443	49934	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:28.126656055 CET	49934	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:28.126667976 CET	443	49934	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:28.135262012 CET	49935	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:28.135281086 CET	443	49935	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:28.135348082 CET	49935	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:28.185062885 CET	49935	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:28.185076952 CET	443	49935	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:28.185117006 CET	443	49935	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:28.185142040 CET	49935	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:28.185149908 CET	443	49935	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:28.193366051 CET	49936	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:28.193399906 CET	443	49936	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:28.193484068 CET	49936	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:28.248931885 CET	49936	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:28.248945951 CET	443	49936	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:28.248976946 CET	443	49936	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:28.248997927 CET	49936	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:28.249007940 CET	443	49936	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:28.256493092 CET	49938	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:28.256516933 CET	443	49938	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:28.256591082 CET	49938	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:28.304224968 CET	49938	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:28.304238081 CET	443	49938	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:28.304265022 CET	443	49938	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:28.304295063 CET	49938	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:28.304303885 CET	443	49938	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:28.312319994 CET	49939	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:28.312328100 CET	443	49939	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:28.312402010 CET	49939	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:28.362778902 CET	49939	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:28.362792015 CET	443	49939	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:28.362812042 CET	443	49939	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:28.362838984 CET	49939	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:28.362844944 CET	443	49939	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:30.395425081 CET	49944	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:30.395448923 CET	443	49944	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:30.395509958 CET	49944	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:30.468496084 CET	49944	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:30.468523026 CET	443	49944	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:30.468537092 CET	49944	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:30.468544006 CET	443	49944	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:30.468586922 CET	443	49944	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:30.480345011 CET	49946	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:30.480360985 CET	443	49946	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:30.480424881 CET	49946	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:30.539302111 CET	49946	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:30.539319038 CET	443	49946	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:30.539343119 CET	443	49946	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:30.542896032 CET	49948	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:30.542912006 CET	443	49948	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:30.542973995 CET	49948	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:30.596122026 CET	49948	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:30.596138000 CET	443	49948	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:30.596157074 CET	443	49948	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:30.596185923 CET	49948	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:30.596194029 CET	443	49948	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:30.604275942 CET	49949	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:30.604285002 CET	443	49949	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:30.604357004 CET	49949	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:30.650475979 CET	49949	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:30.650487900 CET	443	49949	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:30.650526047 CET	443	49949	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:30.650532961 CET	49949	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:30.650537968 CET	443	49949	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:32.691976070 CET	49954	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:32.692003012 CET	443	49954	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:32.692050934 CET	49954	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:32.748603106 CET	49954	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:32.748617887 CET	443	49954	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:32.748647928 CET	443	49954	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:32.757961988 CET	49955	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:32.757975101 CET	443	49955	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:32.758073092 CET	49955	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:32.823807001 CET	49955	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:32.823821068 CET	443	49955	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:32.823853016 CET	443	49955	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:32.835886002 CET	49957	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:32.835901022 CET	443	49957	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:32.836126089 CET	49957	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:32.913321018 CET	49957	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:32.913333893 CET	443	49957	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:32.913366079 CET	443	49957	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:32.913393974 CET	49957	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:32.913400888 CET	443	49957	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:32.927469969 CET	49958	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:32.927480936 CET	443	49958	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:32.927623987 CET	49958	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:32.994235039 CET	49958	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:32.994246960 CET	443	49958	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:32.994276047 CET	443	49958	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:32.994319916 CET	49958	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:32.994324923 CET	443	49958	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:33.004055977 CET	49960	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:33.004082918 CET	443	49960	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:33.004189968 CET	49960	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:33.063877106 CET	49960	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:33.063891888 CET	443	49960	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:33.063915014 CET	443	49960	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:33.065967083 CET	49961	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:33.065980911 CET	443	49961	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:33.066231012 CET	49961	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:33.118870974 CET	49961	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:33.118886948 CET	443	49961	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:33.118912935 CET	443	49961	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:33.126203060 CET	49962	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:33.126215935 CET	443	49962	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:33.126528025 CET	49962	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:33.179445028 CET	49962	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:33.179457903 CET	443	49962	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:33.179490089 CET	443	49962	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:33.179524899 CET	49962	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:33.179533005 CET	443	49962	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:33.197369099 CET	49963	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:33.197379112 CET	443	49963	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:33.197632074 CET	49963	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:33.257460117 CET	49963	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:33.257472992 CET	443	49963	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:33.257505894 CET	443	49963	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:33.257535934 CET	49963	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:33.257541895 CET	443	49963	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:35.300879002 CET	49969	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:35.300918102 CET	443	49969	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:35.301853895 CET	49969	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:35.789623976 CET	49969	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:35.789645910 CET	443	49969	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:35.789690018 CET	49969	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:35.789699078 CET	443	49969	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:35.789712906 CET	443	49969	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:35.803766012 CET	49971	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:35.803785086 CET	443	49971	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:35.803867102 CET	49971	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:35.863245010 CET	49971	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:35.863260031 CET	443	49971	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:35.863287926 CET	443	49971	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:35.867099047 CET	49972	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:35.867136955 CET	443	49972	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:35.867219925 CET	49972	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:36.028260946 CET	49972	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:36.028286934 CET	443	49972	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:36.028353930 CET	443	49972	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:36.028395891 CET	49972	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:36.028420925 CET	443	49972	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:36.044547081 CET	49973	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:36.044572115 CET	443	49973	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:36.044692039 CET	49973	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:36.105354071 CET	49973	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:36.105365992 CET	443	49973	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:36.105420113 CET	49973	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:36.105426073 CET	443	49973	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:36.105436087 CET	443	49973	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:38.155500889 CET	49979	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:38.155539036 CET	443	49979	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:38.155617952 CET	49979	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:38.329741001 CET	49979	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:38.329763889 CET	443	49979	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:38.329818964 CET	49979	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:38.329817057 CET	443	49979	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:38.329834938 CET	443	49979	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:38.351372004 CET	49980	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:38.351402998 CET	443	49980	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:38.351465940 CET	49980	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:38.414910078 CET	49980	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:38.414931059 CET	443	49980	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:38.414983034 CET	49980	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:38.414989948 CET	443	49980	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:38.414994955 CET	443	49980	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:38.431058884 CET	49981	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:38.431075096 CET	443	49981	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:38.431163073 CET	49981	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:38.489409924 CET	49981	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:38.489409924 CET	49981	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:38.489427090 CET	443	49981	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:38.489435911 CET	443	49981	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:38.489480972 CET	443	49981	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:38.499133110 CET	49982	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:38.499145031 CET	443	49982	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:38.499248028 CET	49982	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:38.553261995 CET	49982	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:38.553275108 CET	443	49982	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:38.553306103 CET	443	49982	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:38.555711985 CET	49983	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:38.555727959 CET	443	49983	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:38.555794954 CET	49983	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:38.609014988 CET	49983	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:38.609030008 CET	443	49983	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:38.609051943 CET	443	49983	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:38.609091043 CET	49983	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:38.609098911 CET	443	49983	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:38.618031025 CET	49984	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:38.618051052 CET	443	49984	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:38.618169069 CET	49984	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:38.675827980 CET	49984	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:38.675849915 CET	443	49984	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:38.675895929 CET	443	49984	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:38.675942898 CET	49984	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:38.675956964 CET	443	49984	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:38.685328960 CET	49985	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:38.685343981 CET	443	49985	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:38.685400009 CET	49985	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:38.787560940 CET	49985	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:38.787578106 CET	443	49985	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:38.787633896 CET	443	49985	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:38.801250935 CET	49986	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:38.801270962 CET	443	49986	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:38.801353931 CET	49986	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:38.853084087 CET	49986	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:38.853111029 CET	443	49986	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:38.853137016 CET	443	49986	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:38.853164911 CET	49986	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:38.853174925 CET	443	49986	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:40.894258976 CET	49992	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:40.894283056 CET	443	49992	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:40.894471884 CET	49992	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:40.947803974 CET	49992	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:40.947823048 CET	443	49992	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:40.947854042 CET	49992	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:40.947863102 CET	443	49992	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:40.957642078 CET	49993	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:40.957658052 CET	443	49993	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:40.958065033 CET	49993	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:41.026235104 CET	49993	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:41.026249886 CET	443	49993	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:41.026285887 CET	443	49993	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:41.026314974 CET	49993	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:41.026324034 CET	443	49993	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:41.059586048 CET	49994	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:41.059600115 CET	443	49994	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:41.060393095 CET	49994	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:41.115191936 CET	49994	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:41.115214109 CET	443	49994	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:41.115255117 CET	443	49994	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:41.139580965 CET	49995	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:41.139594078 CET	443	49995	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:41.140042067 CET	49995	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:41.192928076 CET	49995	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:41.192939043 CET	443	49995	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:41.192986965 CET	443	49995	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:43.237246037 CET	50001	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:43.237267017 CET	443	50001	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:43.237531900 CET	50001	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:43.287720919 CET	50001	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:43.287740946 CET	443	50001	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:43.287786007 CET	443	50001	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:43.302697897 CET	50002	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:43.302714109 CET	443	50002	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:43.302912951 CET	50002	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:43.360261917 CET	50002	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:43.360275030 CET	443	50002	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:43.360310078 CET	443	50002	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:43.369242907 CET	50003	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:43.369262934 CET	443	50003	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:43.369398117 CET	50003	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:43.419675112 CET	50003	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:43.419689894 CET	443	50003	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:43.419718027 CET	443	50003	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:43.432274103 CET	50004	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:43.432292938 CET	443	50004	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:43.432395935 CET	50004	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:43.489109993 CET	50004	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:43.489124060 CET	443	50004	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:43.489161015 CET	443	50004	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:43.489252090 CET	50004	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:43.489260912 CET	443	50004	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:43.504267931 CET	50005	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:43.504290104 CET	443	50005	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:43.510329962 CET	50005	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:43.574969053 CET	50005	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:43.574989080 CET	443	50005	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:43.575035095 CET	443	50005	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:43.575067043 CET	50005	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:43.575083017 CET	443	50005	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:43.588263035 CET	50006	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:43.588278055 CET	443	50006	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:43.588418961 CET	50006	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:43.654242039 CET	50006	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:43.654256105 CET	443	50006	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:43.654299974 CET	443	50006	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:43.654350996 CET	50006	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:43.654357910 CET	443	50006	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:43.666233063 CET	50007	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:43.666246891 CET	443	50007	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:43.666342020 CET	50007	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:43.736368895 CET	50007	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:43.736380100 CET	443	50007	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:43.736404896 CET	443	50007	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:43.745960951 CET	50008	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:43.745970011 CET	443	50008	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:43.746053934 CET	50008	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:43.816241026 CET	50008	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:43.816258907 CET	443	50008	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:43.816304922 CET	443	50008	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:43.816312075 CET	50008	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:43.816318989 CET	443	50008	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:45.847554922 CET	50014	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:45.847573996 CET	443	50014	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:45.848027945 CET	50014	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:45.912081957 CET	50014	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:45.912098885 CET	443	50014	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:45.912154913 CET	50014	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:45.912158012 CET	443	50014	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:45.912169933 CET	443	50014	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:45.931008101 CET	50015	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:45.931037903 CET	443	50015	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:45.931106091 CET	50015	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:45.992172003 CET	50015	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:45.992182016 CET	443	50015	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:45.992238998 CET	443	50015	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:45.992261887 CET	50015	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:45.992271900 CET	443	50015	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:46.002796888 CET	50016	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:46.002809048 CET	443	50016	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:46.002887964 CET	50016	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:46.064975023 CET	50016	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:46.064985991 CET	443	50016	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:46.065022945 CET	443	50016	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:46.065036058 CET	50016	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:46.065046072 CET	443	50016	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:46.073849916 CET	50017	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:46.073863029 CET	443	50017	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:46.074009895 CET	50017	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:46.135874987 CET	50017	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:46.135890007 CET	443	50017	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:46.135914087 CET	443	50017	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:48.174499989 CET	50022	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:48.174532890 CET	443	50022	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:48.174746037 CET	50022	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:48.228782892 CET	50022	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:48.228801966 CET	443	50022	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:48.228846073 CET	443	50022	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:48.228852987 CET	50022	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:48.228864908 CET	443	50022	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:48.241205931 CET	50023	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:48.241228104 CET	443	50023	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:48.241295099 CET	50023	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:48.296303034 CET	50023	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:48.296317101 CET	443	50023	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:48.296345949 CET	443	50023	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:48.296358109 CET	50023	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:48.296366930 CET	443	50023	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:48.307409048 CET	50025	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:48.307429075 CET	443	50025	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:48.307481050 CET	50025	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:48.395730019 CET	50025	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:48.395730019 CET	50025	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:48.395746946 CET	443	50025	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:48.395751953 CET	443	50025	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:48.395798922 CET	443	50025	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:48.408143044 CET	50026	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:48.408154011 CET	443	50026	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:48.408231974 CET	50026	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:48.468792915 CET	50026	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:48.468802929 CET	443	50026	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:48.468833923 CET	443	50026	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:48.468848944 CET	50026	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:48.468856096 CET	443	50026	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:48.479502916 CET	50027	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:48.479515076 CET	443	50027	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:48.479696035 CET	50027	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:48.540563107 CET	50027	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:48.540575027 CET	443	50027	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:48.540602922 CET	443	50027	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:48.551295042 CET	50028	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:48.551307917 CET	443	50028	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:48.551364899 CET	50028	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:48.613477945 CET	50028	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:48.613492012 CET	443	50028	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:48.613524914 CET	443	50028	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:48.623961926 CET	50029	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:48.623975039 CET	443	50029	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:48.624031067 CET	50029	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:48.698836088 CET	50029	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:48.698851109 CET	443	50029	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:48.698899984 CET	443	50029	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:48.698904037 CET	50029	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:48.698911905 CET	443	50029	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:48.710063934 CET	50031	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:48.710092068 CET	443	50031	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:48.710153103 CET	50031	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:48.810246944 CET	50031	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:48.810273886 CET	443	50031	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:48.810301065 CET	443	50031	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:48.810332060 CET	50031	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:48.810344934 CET	443	50031	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:50.848306894 CET	50036	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:50.848340988 CET	443	50036	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:50.848603010 CET	50036	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:50.896557093 CET	50036	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:50.896575928 CET	443	50036	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:50.896615982 CET	443	50036	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:50.912120104 CET	50038	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:50.912153006 CET	443	50038	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:50.912604094 CET	50038	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:50.972320080 CET	50038	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:50.972331047 CET	443	50038	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:50.972359896 CET	443	50038	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:50.988328934 CET	50040	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:50.988343954 CET	443	50040	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:50.988715887 CET	50040	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:51.043869019 CET	50040	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:51.043880939 CET	443	50040	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:51.043908119 CET	443	50040	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:51.043919086 CET	50040	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:51.043926954 CET	443	50040	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:51.055497885 CET	50042	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:51.055516005 CET	443	50042	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:51.055857897 CET	50042	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:51.149054050 CET	50042	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:51.149065971 CET	443	50042	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:51.149111986 CET	443	50042	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:53.191426992 CET	50047	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:53.191452026 CET	443	50047	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:53.191813946 CET	50047	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:53.250236034 CET	50047	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:53.250255108 CET	443	50047	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:53.250274897 CET	443	50047	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:53.270844936 CET	50049	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:53.270859003 CET	443	50049	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:53.270936012 CET	50049	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:53.354231119 CET	50049	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:53.354249954 CET	443	50049	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:53.354283094 CET	443	50049	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:53.354314089 CET	50049	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:53.354321957 CET	443	50049	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:53.371383905 CET	50050	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:53.371397972 CET	443	50050	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:53.371490955 CET	50050	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:53.442234039 CET	50050	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:53.442245960 CET	443	50050	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:53.442265987 CET	443	50050	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:53.442322016 CET	50050	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:53.442332029 CET	443	50050	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:53.462229013 CET	50051	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:53.462238073 CET	443	50051	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:53.466301918 CET	50051	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:53.526237011 CET	50051	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:53.526248932 CET	443	50051	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:53.526269913 CET	443	50051	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:53.539720058 CET	50052	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:53.539741039 CET	443	50052	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:53.539843082 CET	50052	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:53.594392061 CET	50052	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:53.594408989 CET	443	50052	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:53.594430923 CET	443	50052	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:53.594599962 CET	50052	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:53.594610929 CET	443	50052	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:53.612308979 CET	50053	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:53.612323999 CET	443	50053	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:53.612410069 CET	50053	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:53.666232109 CET	50053	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:53.666245937 CET	443	50053	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:53.666265965 CET	443	50053	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:53.666392088 CET	50053	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:53.666399956 CET	443	50053	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:53.691745996 CET	50054	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:53.691757917 CET	443	50054	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:53.694309950 CET	50054	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:53.771569967 CET	50054	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:53.771588087 CET	443	50054	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:53.771601915 CET	443	50054	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:53.780858994 CET	50057	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:53.780870914 CET	443	50057	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:53.781431913 CET	50057	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:53.844397068 CET	50057	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:53.844409943 CET	443	50057	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:53.844456911 CET	443	50057	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:55.883141994 CET	50061	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:55.883157015 CET	443	50061	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:55.883219004 CET	50061	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:56.085835934 CET	50061	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:56.085848093 CET	443	50061	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:56.085901022 CET	443	50061	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:56.085939884 CET	50061	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:56.085946083 CET	443	50061	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:56.107826948 CET	50064	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:56.107836008 CET	443	50064	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:56.107933998 CET	50064	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:56.214597940 CET	50064	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:56.214612961 CET	443	50064	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:56.214649916 CET	443	50064	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:56.230711937 CET	50065	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:56.230726004 CET	443	50065	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:56.230787992 CET	50065	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:56.373769999 CET	50065	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:56.373785019 CET	443	50065	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:56.373831987 CET	443	50065	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:56.410821915 CET	50066	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:56.410834074 CET	443	50066	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:56.410896063 CET	50066	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:56.473695993 CET	50066	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:56.473710060 CET	443	50066	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:56.473746061 CET	443	50066	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:56.473790884 CET	50066	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:56.473798037 CET	443	50066	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:58.503175974 CET	50072	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:58.503196955 CET	443	50072	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:58.503274918 CET	50072	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:58.561480045 CET	50072	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:58.561496973 CET	443	50072	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:58.561552048 CET	443	50072	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:58.561574936 CET	50072	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:58.561582088 CET	443	50072	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:58.566155910 CET	50073	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:58.566209078 CET	443	50073	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:58.566263914 CET	50073	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:58.676736116 CET	50073	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:58.676763058 CET	443	50073	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:58.676811934 CET	443	50073	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:58.676820040 CET	50073	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:58.676836014 CET	443	50073	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:58.680712938 CET	50074	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:58.680752993 CET	443	50074	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:58.680820942 CET	50074	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:58.730447054 CET	50074	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:58.730460882 CET	443	50074	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:58.730489969 CET	50074	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:58.730492115 CET	443	50074	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:58.730501890 CET	443	50074	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:58.734751940 CET	50075	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:58.734765053 CET	443	50075	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:58.734822989 CET	50075	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:58.784923077 CET	50075	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:58.784951925 CET	443	50075	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:58.784977913 CET	443	50075	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:58.790230989 CET	50076	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:58.790247917 CET	443	50076	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:58.794295073 CET	50076	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:58.854232073 CET	50076	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:58.854247093 CET	443	50076	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:58.854289055 CET	443	50076	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:58.860039949 CET	50077	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:58.860053062 CET	443	50077	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:58.862334013 CET	50077	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:59.927428961 CET	50077	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:59.927444935 CET	443	50077	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:59.927505016 CET	443	50077	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:59.927540064 CET	50077	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:09:59.927548885 CET	443	50077	195.133.88.98	192.168.2.5
Dec 1, 2024 00:09:59.930895090 CET	50080	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:59.930907965 CET	443	50080	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:59.930984974 CET	50080	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:59.992501020 CET	50080	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:59.992517948 CET	443	50080	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:59.992552996 CET	443	50080	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:59.992571115 CET	50080	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:09:59.992580891 CET	443	50080	31.41.244.38	192.168.2.5
Dec 1, 2024 00:09:59.998435020 CET	50081	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:09:59.998451948 CET	443	50081	62.173.146.41	192.168.2.5
Dec 1, 2024 00:09:59.998513937 CET	50081	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:00.077436924 CET	50081	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:00.077450037 CET	443	50081	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:00.077474117 CET	443	50081	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:00.077512980 CET	50081	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:00.077519894 CET	443	50081	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:02.113913059 CET	50086	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:02.113933086 CET	443	50086	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:02.114168882 CET	50086	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:02.356183052 CET	50086	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:02.356210947 CET	443	50086	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:02.356225014 CET	50086	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:02.356244087 CET	443	50086	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:02.356283903 CET	443	50086	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:02.359849930 CET	50088	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:02.359870911 CET	443	50088	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:02.360069036 CET	50088	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:02.446266890 CET	50088	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:02.446285009 CET	443	50088	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:02.446332932 CET	443	50088	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:02.501004934 CET	50089	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:02.501017094 CET	443	50089	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:02.501156092 CET	50089	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:02.588951111 CET	50089	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:02.588963985 CET	443	50089	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:02.588995934 CET	50089	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:02.589001894 CET	443	50089	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:02.589020967 CET	443	50089	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:02.593430996 CET	50090	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:02.593441010 CET	443	50090	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:02.593507051 CET	50090	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:02.663794994 CET	50090	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:02.663811922 CET	443	50090	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:02.663851023 CET	443	50090	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:04.690032005 CET	50095	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:04.690061092 CET	443	50095	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:04.690144062 CET	50095	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:04.747642040 CET	50095	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:04.747658968 CET	443	50095	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:04.747711897 CET	443	50095	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:04.751162052 CET	50096	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:04.751210928 CET	443	50096	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:04.751287937 CET	50096	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:04.812604904 CET	50096	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:04.812624931 CET	443	50096	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:04.812655926 CET	443	50096	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:04.816198111 CET	50098	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:04.816217899 CET	443	50098	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:04.816420078 CET	50098	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:04.893709898 CET	50098	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:04.893724918 CET	443	50098	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:04.893775940 CET	443	50098	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:04.893791914 CET	50098	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:04.893800020 CET	443	50098	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:04.898142099 CET	50099	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:04.898149967 CET	443	50099	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:04.898277044 CET	50099	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:04.952718019 CET	50099	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:04.952730894 CET	443	50099	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:04.952761889 CET	443	50099	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:04.952781916 CET	50099	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:04.952788115 CET	443	50099	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:04.955853939 CET	50100	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:04.955893040 CET	443	50100	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:04.956099033 CET	50100	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:05.035142899 CET	50100	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:05.035159111 CET	443	50100	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:05.035192966 CET	443	50100	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:05.039200068 CET	50102	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:05.039218903 CET	443	50102	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:05.039443970 CET	50102	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:05.105078936 CET	50102	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:05.105092049 CET	443	50102	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:05.105117083 CET	443	50102	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:05.105144024 CET	50102	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:05.105151892 CET	443	50102	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:05.111742020 CET	50104	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:05.111753941 CET	443	50104	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:05.111946106 CET	50104	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:05.166276932 CET	50104	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:05.166290045 CET	443	50104	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:05.166327000 CET	443	50104	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:05.169658899 CET	50105	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:05.169668913 CET	443	50105	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:05.169769049 CET	50105	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:05.216334105 CET	50105	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:05.216348886 CET	443	50105	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:05.216382027 CET	443	50105	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:05.216412067 CET	50105	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:05.216422081 CET	443	50105	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:07.238229036 CET	50108	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:07.238255978 CET	443	50108	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:07.238480091 CET	50108	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:07.286228895 CET	50108	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:07.286252022 CET	443	50108	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:07.286299944 CET	443	50108	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:07.286323071 CET	50108	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:07.286350012 CET	443	50108	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:07.288856983 CET	50110	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:07.288893938 CET	443	50110	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:07.288980961 CET	50110	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:07.373403072 CET	50110	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:07.373428106 CET	443	50110	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:07.373456001 CET	443	50110	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:07.373492002 CET	50110	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:07.373502970 CET	443	50110	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:07.376902103 CET	50112	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:07.376929045 CET	443	50112	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:07.377022028 CET	50112	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:07.437746048 CET	50112	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:07.437761068 CET	443	50112	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:07.437788010 CET	443	50112	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:07.437917948 CET	50112	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:07.437926054 CET	443	50112	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:07.442230940 CET	50113	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:07.442244053 CET	443	50113	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:07.442359924 CET	50113	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:07.487025976 CET	50113	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:07.487037897 CET	443	50113	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:07.487065077 CET	443	50113	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:07.487095118 CET	50113	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:07.487102032 CET	443	50113	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:09.518233061 CET	50115	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:09.518266916 CET	443	50115	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:09.518409014 CET	50115	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:09.557143927 CET	50115	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:09.557157040 CET	443	50115	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:09.557204008 CET	443	50115	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:09.562233925 CET	50116	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:09.562258959 CET	443	50116	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:09.562809944 CET	50116	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:09.606240988 CET	50116	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:09.606259108 CET	443	50116	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:09.606293917 CET	443	50116	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:09.610229969 CET	50119	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:09.610246897 CET	443	50119	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:09.610568047 CET	50119	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:09.658243895 CET	50119	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:09.658243895 CET	50119	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:09.658261061 CET	443	50119	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:09.658269882 CET	443	50119	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:09.658294916 CET	443	50119	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:09.662235022 CET	50120	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:09.662259102 CET	443	50120	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:09.662353992 CET	50120	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:09.718374968 CET	50120	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:09.718389988 CET	443	50120	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:09.718425035 CET	50120	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:09.718426943 CET	443	50120	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:09.718431950 CET	443	50120	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:09.721828938 CET	50122	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:09.721839905 CET	443	50122	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:09.721920967 CET	50122	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:09.762244940 CET	50122	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:09.762257099 CET	443	50122	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:09.762284994 CET	443	50122	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:09.762473106 CET	50122	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:09.762478113 CET	443	50122	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:09.766244888 CET	50123	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:09.766259909 CET	443	50123	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:09.766375065 CET	50123	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:09.816523075 CET	50123	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:09.816536903 CET	443	50123	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:09.816570997 CET	443	50123	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:09.816591978 CET	50123	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:09.816600084 CET	443	50123	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:09.824682951 CET	50124	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:09.824712992 CET	443	50124	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:09.824800014 CET	50124	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:09.906996965 CET	50124	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:09.907021046 CET	443	50124	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:09.907056093 CET	443	50124	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:09.907097101 CET	50124	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:09.907110929 CET	443	50124	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:09.910854101 CET	50127	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:09.910873890 CET	443	50127	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:09.910938025 CET	50127	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:09.955126047 CET	50127	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:09.955149889 CET	443	50127	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:09.955178976 CET	443	50127	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:09.955230951 CET	50127	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:09.955238104 CET	443	50127	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:11.994884968 CET	50129	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:11.994915009 CET	443	50129	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:11.994980097 CET	50129	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:12.080176115 CET	50129	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:12.080190897 CET	443	50129	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:12.080221891 CET	443	50129	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:12.092247009 CET	50130	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:12.092278004 CET	443	50130	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:12.092346907 CET	50130	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:12.190078020 CET	50130	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:12.190120935 CET	443	50130	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:12.190151930 CET	443	50130	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:12.190180063 CET	50130	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:12.190206051 CET	443	50130	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:12.196825981 CET	50131	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:12.196855068 CET	443	50131	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:12.196907997 CET	50131	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:12.274869919 CET	50131	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:12.274883986 CET	443	50131	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:12.274907112 CET	443	50131	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:12.274954081 CET	50131	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:12.274964094 CET	443	50131	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:12.280155897 CET	50132	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:12.280181885 CET	443	50132	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:12.280236959 CET	50132	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:12.370462894 CET	50132	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:12.370476961 CET	443	50132	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:12.370496035 CET	443	50132	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:12.370522976 CET	50132	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:12.370538950 CET	443	50132	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:14.393765926 CET	50133	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:14.393795967 CET	443	50133	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:14.393865108 CET	50133	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:14.453346968 CET	50133	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:14.453361988 CET	443	50133	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:14.453401089 CET	443	50133	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:14.453438997 CET	50133	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:14.453445911 CET	443	50133	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:14.459697962 CET	50134	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:14.459741116 CET	443	50134	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:14.459800005 CET	50134	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:14.530095100 CET	50134	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:14.530121088 CET	443	50134	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:14.530150890 CET	443	50134	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:14.530169010 CET	50134	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:14.530184031 CET	443	50134	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:14.535511017 CET	50135	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:14.535531044 CET	443	50135	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:14.535614967 CET	50135	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:14.601659060 CET	50135	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:14.601672888 CET	443	50135	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:14.601699114 CET	443	50135	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:14.605282068 CET	50136	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:14.605314016 CET	443	50136	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:14.605403900 CET	50136	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:14.656589031 CET	50136	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:14.656608105 CET	443	50136	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:14.656625986 CET	443	50136	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:14.656646967 CET	50136	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:14.656656981 CET	443	50136	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:14.659569025 CET	50137	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:14.659585953 CET	443	50137	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:14.659657001 CET	50137	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:14.700371027 CET	50137	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:14.700383902 CET	443	50137	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:14.700403929 CET	443	50137	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:14.700438976 CET	50137	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:14.700447083 CET	443	50137	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:14.703202963 CET	50138	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:14.703218937 CET	443	50138	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:14.703331947 CET	50138	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:14.750250101 CET	50138	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:14.750267029 CET	443	50138	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:14.750293016 CET	443	50138	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:14.753951073 CET	50139	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:14.753976107 CET	443	50139	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:14.754041910 CET	50139	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:14.826145887 CET	50139	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:14.826147079 CET	50139	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:14.826174974 CET	443	50139	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:14.826186895 CET	443	50139	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:14.826231956 CET	443	50139	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:14.830566883 CET	50140	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:14.830588102 CET	443	50140	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:14.830807924 CET	50140	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:14.886063099 CET	50140	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:14.886077881 CET	443	50140	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:14.886100054 CET	443	50140	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:16.920257092 CET	50141	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:16.920281887 CET	443	50141	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:16.920373917 CET	50141	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:16.969602108 CET	50141	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:16.969621897 CET	443	50141	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:16.969671011 CET	443	50141	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:16.974231958 CET	50142	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:16.974272966 CET	443	50142	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:16.978322029 CET	50142	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:17.034291029 CET	50142	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:17.034308910 CET	443	50142	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:17.034339905 CET	443	50142	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:17.034436941 CET	50142	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:17.034450054 CET	443	50142	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:17.037384987 CET	50143	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:17.037403107 CET	443	50143	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:17.038011074 CET	50143	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:17.080482006 CET	50143	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:17.080495119 CET	443	50143	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:17.080512047 CET	443	50143	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:17.086231947 CET	50144	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:17.086250067 CET	443	50144	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:17.086509943 CET	50144	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:17.149760008 CET	50144	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:17.149772882 CET	443	50144	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:17.149800062 CET	443	50144	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:19.174700975 CET	50145	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:19.174730062 CET	443	50145	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:19.178248882 CET	50145	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:19.222243071 CET	50145	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:19.222243071 CET	50145	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:19.222269058 CET	443	50145	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:19.222275972 CET	443	50145	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:19.222315073 CET	443	50145	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:19.226231098 CET	50146	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:19.226253033 CET	443	50146	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:19.229298115 CET	50146	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:19.394243002 CET	50146	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:19.394243002 CET	50146	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:19.394258022 CET	443	50146	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:19.394267082 CET	443	50146	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:19.394284964 CET	443	50146	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:19.406239033 CET	50147	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:19.406275988 CET	443	50147	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:19.406476974 CET	50147	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:19.674233913 CET	50147	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:19.674254894 CET	443	50147	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:19.674288034 CET	443	50147	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:19.674318075 CET	50147	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:19.674336910 CET	443	50147	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:19.694227934 CET	50148	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:19.694262028 CET	443	50148	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:19.694514036 CET	50148	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:19.795109034 CET	50148	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:19.795149088 CET	443	50148	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:19.795177937 CET	443	50148	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:19.795295000 CET	50148	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:19.795310020 CET	443	50148	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:19.801027060 CET	50149	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:19.801048994 CET	443	50149	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:19.801131964 CET	50149	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:19.860518932 CET	50149	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:19.860533953 CET	443	50149	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:19.860558033 CET	443	50149	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:19.860584974 CET	50149	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:19.860595942 CET	443	50149	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:19.866790056 CET	50150	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:19.866844893 CET	443	50150	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:19.866908073 CET	50150	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:19.969984055 CET	50150	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:19.970016003 CET	443	50150	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:19.970043898 CET	443	50150	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:19.970065117 CET	50150	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:19.970084906 CET	443	50150	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:19.979374886 CET	50151	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:19.979418039 CET	443	50151	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:19.979600906 CET	50151	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:20.043951035 CET	50151	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:20.043970108 CET	443	50151	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:20.043992996 CET	443	50151	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:20.044022083 CET	50151	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:20.044037104 CET	443	50151	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:20.051748037 CET	50152	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:20.051789999 CET	443	50152	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:20.051856995 CET	50152	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:20.123532057 CET	50152	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:20.123559952 CET	443	50152	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:20.123596907 CET	443	50152	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:20.123608112 CET	50152	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:20.123621941 CET	443	50152	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:22.541770935 CET	50153	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:22.541791916 CET	443	50153	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:22.541857004 CET	50153	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:22.625874043 CET	50153	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:22.625891924 CET	443	50153	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:22.625924110 CET	50153	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:22.625929117 CET	443	50153	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:22.625945091 CET	443	50153	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:22.630120039 CET	50154	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:22.630140066 CET	443	50154	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:22.630219936 CET	50154	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:22.672404051 CET	50154	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:22.672416925 CET	443	50154	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:22.672440052 CET	443	50154	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:22.672466040 CET	50154	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:22.672481060 CET	443	50154	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:22.676393986 CET	50155	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:22.676424026 CET	443	50155	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:22.676481962 CET	50155	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:22.780333996 CET	50155	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:22.780363083 CET	443	50155	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:22.780385017 CET	443	50155	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:22.780406952 CET	50155	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:22.780425072 CET	443	50155	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:22.784421921 CET	50156	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:22.784439087 CET	443	50156	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:22.784507036 CET	50156	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:22.844290972 CET	50156	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:22.844290972 CET	50156	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:22.844306946 CET	443	50156	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:22.844315052 CET	443	50156	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:22.844326973 CET	443	50156	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:24.877628088 CET	50157	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:24.877646923 CET	443	50157	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:24.877897978 CET	50157	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:24.917613029 CET	50157	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:24.917629957 CET	443	50157	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:24.917678118 CET	443	50157	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:24.917686939 CET	50157	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:24.917700052 CET	443	50157	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:24.922228098 CET	50158	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:24.922250032 CET	443	50158	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:24.923027039 CET	50158	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:25.997143030 CET	50158	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:25.997162104 CET	443	50158	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:25.997208118 CET	50158	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:25.997214079 CET	443	50158	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:25.997231960 CET	443	50158	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:26.002513885 CET	50159	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:26.002532959 CET	443	50159	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:26.002595901 CET	50159	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:26.097261906 CET	50159	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:26.097276926 CET	443	50159	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:26.097311974 CET	443	50159	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:26.097328901 CET	50159	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:26.097337008 CET	443	50159	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:26.103486061 CET	50160	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:26.103502989 CET	443	50160	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:26.103573084 CET	50160	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:26.175895929 CET	50160	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:26.175910950 CET	443	50160	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:26.175936937 CET	443	50160	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:26.175961018 CET	50160	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:26.175967932 CET	443	50160	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:26.188136101 CET	50161	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:26.188179970 CET	443	50161	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:26.188237906 CET	50161	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:26.266470909 CET	50161	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:26.266490936 CET	443	50161	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:26.266521931 CET	443	50161	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:26.266549110 CET	50161	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:26.266561031 CET	443	50161	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:26.271948099 CET	50162	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:26.271967888 CET	443	50162	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:26.272028923 CET	50162	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:26.339190006 CET	50162	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:26.339202881 CET	443	50162	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:26.339224100 CET	443	50162	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:26.339255095 CET	50162	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:26.339261055 CET	443	50162	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:26.343858957 CET	50163	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:26.343872070 CET	443	50163	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:26.343925953 CET	50163	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:26.426065922 CET	50163	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:26.426079988 CET	443	50163	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:26.426100016 CET	443	50163	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:26.426136971 CET	50163	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:26.426143885 CET	443	50163	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:26.431282997 CET	50164	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:26.431303024 CET	443	50164	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:26.431360006 CET	50164	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:26.548242092 CET	50164	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:26.548255920 CET	443	50164	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:26.548289061 CET	443	50164	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:26.548317909 CET	50164	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:26.548326015 CET	443	50164	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:28.592890978 CET	50165	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:28.592911959 CET	443	50165	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:28.592969894 CET	50165	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:28.671750069 CET	50165	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:28.671765089 CET	443	50165	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:28.671808958 CET	443	50165	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:28.671817064 CET	50165	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:28.671823978 CET	443	50165	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:28.684130907 CET	50166	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:28.684155941 CET	443	50166	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:28.684221983 CET	50166	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:28.746685028 CET	50166	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:28.746700048 CET	443	50166	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:28.746726036 CET	443	50166	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:28.749811888 CET	50167	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:28.749833107 CET	443	50167	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:28.749897957 CET	50167	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:28.814960957 CET	50167	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:28.814977884 CET	443	50167	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:28.815001011 CET	443	50167	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:28.815037012 CET	50167	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:28.815046072 CET	443	50167	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:28.819410086 CET	50168	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:28.819422007 CET	443	50168	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:28.819482088 CET	50168	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:28.876277924 CET	50168	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:28.876291990 CET	443	50168	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:28.876351118 CET	443	50168	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:28.876384974 CET	50168	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:28.876393080 CET	443	50168	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:30.910232067 CET	50169	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:30.910252094 CET	443	50169	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:30.918230057 CET	50169	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:30.973925114 CET	50169	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:30.973942995 CET	443	50169	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:30.973987103 CET	443	50169	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:30.974023104 CET	50169	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:30.974035025 CET	443	50169	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:30.978800058 CET	50170	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:30.978816986 CET	443	50170	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:30.982305050 CET	50170	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:31.034740925 CET	50170	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:31.034754992 CET	443	50170	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:31.034782887 CET	443	50170	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:31.034792900 CET	50170	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:31.034801006 CET	443	50170	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:31.039164066 CET	50171	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:31.039189100 CET	443	50171	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:31.039392948 CET	50171	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:31.095962048 CET	50171	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:31.095978022 CET	443	50171	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:31.095998049 CET	443	50171	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:31.102231026 CET	50172	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:31.102247000 CET	443	50172	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:31.102392912 CET	50172	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:31.152024031 CET	50172	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:31.152024031 CET	50172	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:31.152041912 CET	443	50172	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:31.152060032 CET	443	50172	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:31.152081013 CET	443	50172	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:31.155050039 CET	50173	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:31.155070066 CET	443	50173	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:31.155221939 CET	50173	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:31.206942081 CET	50173	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:31.206964970 CET	443	50173	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:31.206995964 CET	443	50173	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:31.210556030 CET	50174	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:31.210572004 CET	443	50174	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:31.214334011 CET	50174	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:31.256567001 CET	50174	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:31.256582022 CET	443	50174	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:31.256601095 CET	443	50174	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:31.259809971 CET	50175	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:31.259820938 CET	443	50175	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:31.259991884 CET	50175	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:31.306176901 CET	50175	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:31.306186914 CET	443	50175	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:31.306279898 CET	50175	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:31.306283951 CET	443	50175	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:31.306348085 CET	443	50175	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:31.312196970 CET	50176	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:31.312210083 CET	443	50176	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:31.314347982 CET	50176	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:32.397813082 CET	50176	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:32.397831917 CET	443	50176	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:32.397877932 CET	50176	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:32.397881985 CET	443	50176	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:32.397888899 CET	443	50176	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:34.425348043 CET	50177	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:34.425375938 CET	443	50177	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:34.425580978 CET	50177	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:34.496270895 CET	50177	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:34.496295929 CET	443	50177	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:34.496335983 CET	443	50177	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:34.500530005 CET	50178	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:34.500560999 CET	443	50178	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:34.500628948 CET	50178	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:34.547231913 CET	50178	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:34.547251940 CET	443	50178	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:34.547271013 CET	443	50178	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:34.549913883 CET	50179	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:34.549936056 CET	443	50179	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:34.550000906 CET	50179	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:34.593236923 CET	50179	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:34.593252897 CET	443	50179	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:34.593275070 CET	443	50179	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:34.593307018 CET	50179	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:34.593314886 CET	443	50179	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:34.597258091 CET	50180	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:34.597275972 CET	443	50180	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:34.597362995 CET	50180	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:34.647633076 CET	50180	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:34.647648096 CET	443	50180	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:34.647655964 CET	50180	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:34.647660017 CET	443	50180	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:34.647687912 CET	443	50180	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:36.674622059 CET	50181	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:36.674643040 CET	443	50181	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:36.674762964 CET	50181	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:36.722563982 CET	50181	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:36.722579956 CET	443	50181	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:36.722629070 CET	443	50181	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:36.725773096 CET	50182	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:36.725790024 CET	443	50182	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:36.725991011 CET	50182	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:36.775511026 CET	50182	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:36.775525093 CET	443	50182	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:36.775548935 CET	443	50182	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:36.778506994 CET	50183	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:36.778534889 CET	443	50183	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:36.778662920 CET	50183	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:36.869227886 CET	50183	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:36.869251966 CET	443	50183	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:36.869273901 CET	443	50183	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:36.869301081 CET	50183	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:36.869316101 CET	443	50183	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:36.898744106 CET	50184	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:36.898760080 CET	443	50184	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:36.898822069 CET	50184	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:36.982307911 CET	50184	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:36.982323885 CET	443	50184	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:36.982356071 CET	443	50184	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:36.982384920 CET	50184	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:36.982392073 CET	443	50184	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:36.989937067 CET	50185	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:36.989967108 CET	443	50185	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:36.990029097 CET	50185	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:37.069945097 CET	50185	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:37.069968939 CET	443	50185	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:37.069988012 CET	443	50185	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:37.070010900 CET	50185	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:37.070025921 CET	443	50185	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:37.089477062 CET	50186	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:37.089490891 CET	443	50186	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:37.089549065 CET	50186	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:37.262829065 CET	50186	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:37.262847900 CET	443	50186	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:37.262872934 CET	443	50186	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:37.262892008 CET	50186	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:37.262901068 CET	443	50186	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:37.566953897 CET	50187	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:37.566972971 CET	443	50187	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:37.567040920 CET	50187	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:37.694561958 CET	50187	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:37.694577932 CET	443	50187	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:37.694595098 CET	50187	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:37.694601059 CET	443	50187	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:37.694617987 CET	443	50187	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:37.713814020 CET	50188	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:37.713835001 CET	443	50188	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:37.713896036 CET	50188	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:37.783464909 CET	50188	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:37.783480883 CET	443	50188	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:37.783504963 CET	443	50188	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:37.783523083 CET	50188	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:37.783531904 CET	443	50188	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:39.820410967 CET	50189	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:39.820447922 CET	443	50189	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:39.820518970 CET	50189	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:39.861861944 CET	50189	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:39.861879110 CET	443	50189	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:39.861920118 CET	443	50189	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:39.865179062 CET	50190	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:39.865199089 CET	443	50190	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:39.865809917 CET	50190	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:39.934228897 CET	50190	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:39.934242964 CET	443	50190	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:39.934282064 CET	443	50190	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:39.944794893 CET	50191	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:39.944812059 CET	443	50191	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:39.944994926 CET	50191	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:39.994362116 CET	50191	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:39.994375944 CET	443	50191	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:39.994404078 CET	443	50191	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:40.039251089 CET	50192	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:40.039273024 CET	443	50192	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:40.039691925 CET	50192	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:40.102229118 CET	50192	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:40.102250099 CET	443	50192	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:40.102289915 CET	443	50192	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:42.127593994 CET	50193	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:42.127614975 CET	443	50193	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:42.127767086 CET	50193	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:42.179440022 CET	50193	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:42.179454088 CET	443	50193	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:42.179496050 CET	443	50193	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:42.179500103 CET	50193	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:42.179507017 CET	443	50193	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:42.186229944 CET	50194	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:42.186254025 CET	443	50194	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:42.186383963 CET	50194	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:42.238238096 CET	50194	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:42.238239050 CET	50194	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:42.238253117 CET	443	50194	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:42.238259077 CET	443	50194	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:42.238280058 CET	443	50194	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:42.240281105 CET	50195	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:42.240313053 CET	443	50195	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:42.240413904 CET	50195	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:42.282228947 CET	50195	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:42.282248974 CET	443	50195	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:42.282273054 CET	443	50195	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:42.283216953 CET	50195	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:42.283231020 CET	443	50195	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:42.285288095 CET	50196	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:42.285314083 CET	443	50196	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:42.285465956 CET	50196	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:42.338233948 CET	50196	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:42.338233948 CET	50196	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:42.338248968 CET	443	50196	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:42.338258982 CET	443	50196	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:42.338279009 CET	443	50196	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:42.346225023 CET	50197	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:42.346245050 CET	443	50197	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:42.350267887 CET	50197	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:43.436456919 CET	50197	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:43.436475039 CET	443	50197	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:43.436517954 CET	443	50197	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:43.436536074 CET	50197	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:43.436546087 CET	443	50197	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:43.442266941 CET	50198	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:43.442298889 CET	443	50198	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:43.442368984 CET	50198	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:43.496404886 CET	50198	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:43.496427059 CET	443	50198	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:43.496453047 CET	443	50198	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:43.496468067 CET	50198	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:43.496479988 CET	443	50198	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:43.501157999 CET	50199	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:43.501192093 CET	443	50199	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:43.501322985 CET	50199	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:43.585779905 CET	50199	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:43.585797071 CET	443	50199	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:43.585823059 CET	443	50199	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:43.588612080 CET	50200	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:43.588629961 CET	443	50200	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:43.588687897 CET	50200	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:43.642229080 CET	50200	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:43.642251015 CET	443	50200	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:43.642271996 CET	443	50200	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:43.642297983 CET	50200	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:43.642311096 CET	443	50200	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:45.674591064 CET	50201	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:45.674611092 CET	443	50201	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:45.674727917 CET	50201	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:45.722064018 CET	50201	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:45.722080946 CET	443	50201	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:45.722121000 CET	443	50201	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:45.722155094 CET	50201	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:45.722171068 CET	443	50201	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:45.725941896 CET	50202	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:45.725967884 CET	443	50202	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:45.726047039 CET	50202	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:45.774961948 CET	50202	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:45.774961948 CET	50202	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:45.774980068 CET	443	50202	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:45.774992943 CET	443	50202	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:45.775017023 CET	443	50202	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:45.778934002 CET	50203	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:45.778965950 CET	443	50203	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:45.779041052 CET	50203	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:45.855484962 CET	50203	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:45.855516911 CET	443	50203	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:45.855528116 CET	50203	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:45.855537891 CET	443	50203	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:45.861232042 CET	50204	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:45.861249924 CET	443	50204	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:45.861399889 CET	50204	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:45.905894995 CET	50204	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:45.905894995 CET	50204	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:45.905911922 CET	443	50204	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:45.905930042 CET	443	50204	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:45.905945063 CET	443	50204	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:47.924294949 CET	50205	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:47.924314976 CET	443	50205	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:47.924413919 CET	50205	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:47.968645096 CET	50205	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:47.968657970 CET	443	50205	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:47.968704939 CET	443	50205	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:47.976475954 CET	50206	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:47.976497889 CET	443	50206	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:47.984564066 CET	50206	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:48.047887087 CET	50206	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:48.047904015 CET	443	50206	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:48.047931910 CET	443	50206	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:48.047996998 CET	50206	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:48.048008919 CET	443	50206	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:48.052453041 CET	50207	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:48.052474022 CET	443	50207	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:48.056401968 CET	50207	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:48.100334883 CET	50207	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:48.100347996 CET	443	50207	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:48.100366116 CET	443	50207	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:48.104285955 CET	50208	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:48.104302883 CET	443	50208	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:48.104465008 CET	50208	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:48.148231983 CET	50208	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:48.148241997 CET	443	50208	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:48.148302078 CET	443	50208	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:48.152301073 CET	50209	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:48.152319908 CET	443	50209	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:48.152704000 CET	50209	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:48.216340065 CET	50209	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:48.216340065 CET	50209	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:48.216363907 CET	443	50209	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:48.216373920 CET	443	50209	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:48.216393948 CET	443	50209	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:48.220237017 CET	50210	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:48.220252991 CET	443	50210	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:48.223377943 CET	50210	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:49.363785028 CET	50210	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:49.363804102 CET	443	50210	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:49.363842964 CET	443	50210	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:49.363847971 CET	50210	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:49.363861084 CET	443	50210	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:49.369699955 CET	50211	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:49.369734049 CET	443	50211	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:49.369800091 CET	50211	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:49.431811094 CET	50211	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:49.431828022 CET	443	50211	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:49.431839943 CET	50211	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:49.431849003 CET	443	50211	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:49.431862116 CET	443	50211	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:49.435674906 CET	50212	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:49.435703039 CET	443	50212	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:49.435756922 CET	50212	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:49.505198002 CET	50212	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:49.505213976 CET	443	50212	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:49.505243063 CET	50212	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:49.505243063 CET	443	50212	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:49.505256891 CET	443	50212	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:51.534940958 CET	50213	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:51.534961939 CET	443	50213	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:51.535027027 CET	50213	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:51.585397959 CET	50213	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:51.585412025 CET	443	50213	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:51.585453987 CET	50213	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:51.585458994 CET	443	50213	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:51.585463047 CET	443	50213	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:51.589359999 CET	50214	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:51.589401960 CET	443	50214	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:51.589459896 CET	50214	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:51.708722115 CET	50214	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:51.708758116 CET	443	50214	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:51.708776951 CET	443	50214	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:51.708811045 CET	50214	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:51.708828926 CET	443	50214	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:51.714215994 CET	50215	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:51.714253902 CET	443	50215	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:51.714392900 CET	50215	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:51.769016981 CET	50215	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:51.769041061 CET	443	50215	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:51.769072056 CET	443	50215	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:51.769088030 CET	50215	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:51.769099951 CET	443	50215	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:51.773391008 CET	50216	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:51.773416042 CET	443	50216	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:51.773480892 CET	50216	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:51.835299969 CET	50216	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:51.835324049 CET	443	50216	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:51.835350037 CET	443	50216	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:51.835382938 CET	50216	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:51.835396051 CET	443	50216	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:53.863030910 CET	50217	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:53.863055944 CET	443	50217	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:53.863149881 CET	50217	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:53.915309906 CET	50217	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:53.915309906 CET	50217	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:53.915330887 CET	443	50217	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:53.915340900 CET	443	50217	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:53.915370941 CET	443	50217	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:53.920284986 CET	50218	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:53.920305014 CET	443	50218	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:53.920449018 CET	50218	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:53.961760044 CET	50218	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:53.961760044 CET	50218	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:53.961779118 CET	443	50218	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:53.961788893 CET	443	50218	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:53.961803913 CET	443	50218	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:53.965686083 CET	50219	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:53.965720892 CET	443	50219	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:53.966036081 CET	50219	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:54.011866093 CET	50219	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:54.011866093 CET	50219	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:54.011885881 CET	443	50219	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:54.011898041 CET	443	50219	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:54.011919022 CET	443	50219	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:54.016453981 CET	50220	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:54.016470909 CET	443	50220	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:54.016657114 CET	50220	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:54.063915968 CET	50220	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:54.063930035 CET	443	50220	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:54.063952923 CET	443	50220	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:54.064081907 CET	50220	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:54.064090014 CET	443	50220	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:54.072575092 CET	50221	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:54.072599888 CET	443	50221	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:54.072902918 CET	50221	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:54.173008919 CET	50221	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:54.173026085 CET	443	50221	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:54.173057079 CET	443	50221	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:54.176239014 CET	50222	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:54.176276922 CET	443	50222	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:54.176366091 CET	50222	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:54.232276917 CET	50222	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:54.232295990 CET	443	50222	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:54.232321978 CET	443	50222	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:54.236656904 CET	50223	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:54.236682892 CET	443	50223	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:54.236818075 CET	50223	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:55.302062035 CET	50223	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:55.302079916 CET	443	50223	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:55.302112103 CET	443	50223	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:55.302124977 CET	50223	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:55.302136898 CET	443	50223	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:55.306003094 CET	50224	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:55.306020975 CET	443	50224	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:55.306092024 CET	50224	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:55.364365101 CET	50224	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:55.364378929 CET	443	50224	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:55.364404917 CET	443	50224	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:55.364427090 CET	50224	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:55.364437103 CET	443	50224	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:57.394655943 CET	50225	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:57.394680977 CET	443	50225	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:57.394752979 CET	50225	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:57.458036900 CET	50225	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:57.458055019 CET	443	50225	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:57.458066940 CET	50225	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:57.458077908 CET	443	50225	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:57.458103895 CET	443	50225	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:57.463112116 CET	50226	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:57.463133097 CET	443	50226	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:57.463195086 CET	50226	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:57.530613899 CET	50226	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:57.530626059 CET	443	50226	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:57.530651093 CET	443	50226	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:57.530678988 CET	50226	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:57.530687094 CET	443	50226	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:57.544050932 CET	50227	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:57.544066906 CET	443	50227	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:57.544131994 CET	50227	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:57.596417904 CET	50227	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:57.596434116 CET	443	50227	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:57.596463919 CET	443	50227	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:57.596484900 CET	50227	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:57.596493006 CET	443	50227	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:57.601468086 CET	50228	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:57.601488113 CET	443	50228	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:57.601548910 CET	50228	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:57.660512924 CET	50228	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:57.660537004 CET	443	50228	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:57.660578012 CET	443	50228	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:57.660588026 CET	50228	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:57.660597086 CET	443	50228	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:59.691976070 CET	50229	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:59.692013979 CET	443	50229	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:59.692081928 CET	50229	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:59.747709036 CET	50229	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:59.747725010 CET	443	50229	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:59.747770071 CET	443	50229	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:59.747773886 CET	50229	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:59.747785091 CET	443	50229	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:59.752531052 CET	50230	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:59.752572060 CET	443	50230	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:59.752625942 CET	50230	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:59.803311110 CET	50230	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:59.803330898 CET	443	50230	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:59.803350925 CET	443	50230	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:59.803381920 CET	50230	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:59.803394079 CET	443	50230	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:59.807127953 CET	50231	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:59.807154894 CET	443	50231	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:59.807274103 CET	50231	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:59.852933884 CET	50231	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:10:59.852950096 CET	443	50231	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:59.852972984 CET	443	50231	31.41.244.38	192.168.2.5
Dec 1, 2024 00:10:59.855773926 CET	50232	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:59.855796099 CET	443	50232	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:59.855875969 CET	50232	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:59.896974087 CET	50232	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:59.896991014 CET	443	50232	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:59.897011995 CET	443	50232	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:59.897067070 CET	50232	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:59.897075891 CET	443	50232	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:59.899837017 CET	50233	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:59.899873972 CET	443	50233	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:59.899943113 CET	50233	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:59.967048883 CET	50233	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:59.967048883 CET	50233	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:59.967048883 CET	50233	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:10:59.967077971 CET	443	50233	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:59.967087984 CET	443	50233	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:59.967092991 CET	443	50233	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:59.967114925 CET	443	50233	62.173.146.41	192.168.2.5
Dec 1, 2024 00:10:59.969343901 CET	50234	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:10:59.969383001 CET	443	50234	195.133.88.98	192.168.2.5
Dec 1, 2024 00:10:59.969480991 CET	50234	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:00.010883093 CET	50234	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:00.010910034 CET	443	50234	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:00.010926962 CET	443	50234	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:00.011209011 CET	50234	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:00.011223078 CET	443	50234	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:00.013798952 CET	50235	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:00.013830900 CET	443	50235	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:00.013999939 CET	50235	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:00.060270071 CET	50235	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:00.060270071 CET	50235	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:00.060303926 CET	443	50235	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:00.060316086 CET	443	50235	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:00.060326099 CET	443	50235	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:00.062140942 CET	50236	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:00.062175035 CET	443	50236	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:00.062465906 CET	50236	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:00.104540110 CET	50236	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:00.104571104 CET	443	50236	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:00.104609966 CET	443	50236	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:02.128262997 CET	50237	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:02.128300905 CET	443	50237	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:02.132541895 CET	50237	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:02.184767962 CET	50237	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:02.184782982 CET	443	50237	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:02.184839964 CET	443	50237	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:02.191016912 CET	50238	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:02.191046000 CET	443	50238	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:02.192392111 CET	50238	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:02.235182047 CET	50238	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:02.235198975 CET	443	50238	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:02.235218048 CET	443	50238	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:02.240233898 CET	50239	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:02.240267992 CET	443	50239	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:02.240400076 CET	50239	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:02.282836914 CET	50239	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:02.282860041 CET	443	50239	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:02.282877922 CET	443	50239	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:02.288295984 CET	50240	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:02.288311005 CET	443	50240	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:02.292479992 CET	50240	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:02.339097023 CET	50240	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:02.339116096 CET	443	50240	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:02.339167118 CET	443	50240	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:04.420241117 CET	50241	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:04.420296907 CET	443	50241	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:04.424395084 CET	50241	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:05.508018970 CET	50241	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:05.508049011 CET	443	50241	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:05.508070946 CET	50241	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:05.508084059 CET	443	50241	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:05.508100986 CET	443	50241	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:05.513225079 CET	50242	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:05.513269901 CET	443	50242	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:05.513336897 CET	50242	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:05.563371897 CET	50242	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:05.563389063 CET	443	50242	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:05.563453913 CET	443	50242	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:05.563466072 CET	50242	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:05.563477039 CET	443	50242	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:05.567784071 CET	50243	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:05.567821980 CET	443	50243	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:05.567890882 CET	50243	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:05.634335995 CET	50243	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:05.634335995 CET	50243	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:05.634351969 CET	443	50243	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:05.634362936 CET	443	50243	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:05.634427071 CET	443	50243	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:05.637943983 CET	50244	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:05.637974024 CET	443	50244	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:05.638034105 CET	50244	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:05.695480108 CET	50244	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:05.695497990 CET	443	50244	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:05.695538044 CET	50244	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:05.695544004 CET	443	50244	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:05.695564985 CET	443	50244	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:05.699690104 CET	50245	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:05.699738026 CET	443	50245	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:05.699810028 CET	50245	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:05.763520002 CET	50245	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:05.763550043 CET	443	50245	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:05.763614893 CET	443	50245	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:05.763638020 CET	50245	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:05.763653040 CET	443	50245	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:05.768322945 CET	50246	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:05.768367052 CET	443	50246	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:05.768441916 CET	50246	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:05.857670069 CET	50246	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:05.857698917 CET	443	50246	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:05.857753038 CET	50246	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:05.857757092 CET	443	50246	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:05.857772112 CET	443	50246	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:05.874279976 CET	50247	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:05.874311924 CET	443	50247	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:05.874401093 CET	50247	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:05.961270094 CET	50247	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:05.961292028 CET	443	50247	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:05.961358070 CET	443	50247	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:05.961393118 CET	50247	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:05.961410046 CET	443	50247	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:05.964418888 CET	50248	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:05.964469910 CET	443	50248	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:05.968822956 CET	50248	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:06.044358969 CET	50248	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:06.044385910 CET	443	50248	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:06.044435978 CET	443	50248	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:08.083038092 CET	50249	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:08.083101034 CET	443	50249	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:08.086265087 CET	50249	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:08.144484043 CET	50249	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:08.144484043 CET	50249	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:08.144515991 CET	443	50249	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:08.144522905 CET	443	50249	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:08.144579887 CET	443	50249	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:08.154232979 CET	50250	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:08.154277086 CET	443	50250	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:08.155225992 CET	50250	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:08.237128019 CET	50250	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:08.237128019 CET	50250	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:08.237164974 CET	443	50250	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:08.237179041 CET	443	50250	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:08.237224102 CET	443	50250	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:08.242237091 CET	50251	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:08.242285013 CET	443	50251	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:08.242592096 CET	50251	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:08.402240992 CET	50251	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:08.402286053 CET	443	50251	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:08.402328968 CET	443	50251	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:08.458240986 CET	50252	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:08.458292007 CET	443	50252	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:08.466233969 CET	50252	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:08.614645958 CET	50252	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:08.614675045 CET	443	50252	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:08.614712000 CET	443	50252	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:08.614717007 CET	50252	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:08.614736080 CET	443	50252	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:10.646229982 CET	50253	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:10.646251917 CET	443	50253	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:10.646368027 CET	50253	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:10.694619894 CET	50253	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:10.694633007 CET	443	50253	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:10.694673061 CET	443	50253	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:10.698246956 CET	50254	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:10.698268890 CET	443	50254	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:10.698482990 CET	50254	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:10.751291990 CET	50254	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:10.751307964 CET	443	50254	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:10.751337051 CET	443	50254	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:10.758245945 CET	50255	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:10.758266926 CET	443	50255	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:10.758411884 CET	50255	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:10.814232111 CET	50255	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:10.814254999 CET	443	50255	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:10.814276934 CET	443	50255	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:10.814311028 CET	50255	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:10.814325094 CET	443	50255	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:10.817434072 CET	50256	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:10.817457914 CET	443	50256	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:10.820354939 CET	50256	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:10.869632006 CET	50256	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:10.869651079 CET	443	50256	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:10.869674921 CET	443	50256	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:10.869760036 CET	50256	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:10.869771004 CET	443	50256	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:10.877027988 CET	50257	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:10.877049923 CET	443	50257	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:10.877322912 CET	50257	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:10.927146912 CET	50257	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:10.927160025 CET	443	50257	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:10.927179098 CET	443	50257	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:10.930677891 CET	50258	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:10.930691957 CET	443	50258	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:10.930893898 CET	50258	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:11.059921980 CET	50258	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:11.059946060 CET	443	50258	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:11.059958935 CET	50258	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:11.059966087 CET	443	50258	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:11.500286102 CET	50259	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:11.500305891 CET	443	50259	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:11.500480890 CET	50259	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:12.582082033 CET	50259	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:12.582098961 CET	443	50259	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:12.582144976 CET	443	50259	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:12.582174063 CET	50259	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:12.582186937 CET	443	50259	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:12.586221933 CET	50260	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:12.586240053 CET	443	50260	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:12.586345911 CET	50260	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:12.631490946 CET	50260	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:12.631506920 CET	443	50260	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:12.631534100 CET	443	50260	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:14.658893108 CET	50261	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:14.658924103 CET	443	50261	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:14.659015894 CET	50261	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:14.718399048 CET	50261	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:14.718419075 CET	443	50261	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:14.718472958 CET	443	50261	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:14.721746922 CET	50262	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:14.721776962 CET	443	50262	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:14.721908092 CET	50262	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:14.766238928 CET	50262	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:14.766258001 CET	443	50262	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:14.766277075 CET	443	50262	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:14.769253016 CET	50263	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:14.769273996 CET	443	50263	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:14.769423962 CET	50263	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:14.826229095 CET	50263	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:14.826242924 CET	443	50263	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:14.826277018 CET	443	50263	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:14.829241037 CET	50264	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:14.829256058 CET	443	50264	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:14.829341888 CET	50264	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:15.908992052 CET	50264	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:15.909015894 CET	443	50264	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:15.909060955 CET	443	50264	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:15.909066916 CET	50264	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:15.909077883 CET	443	50264	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:17.967725992 CET	50265	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:17.967797041 CET	443	50265	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:17.967924118 CET	50265	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:18.019881964 CET	50265	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:18.019917965 CET	443	50265	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:18.019952059 CET	50265	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:18.019961119 CET	443	50265	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:18.019964933 CET	443	50265	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:18.023451090 CET	50266	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:18.023490906 CET	443	50266	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:18.023602962 CET	50266	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:18.069636106 CET	50266	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:18.069659948 CET	443	50266	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:18.069684029 CET	443	50266	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:18.070009947 CET	50266	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:18.070022106 CET	443	50266	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:18.073236942 CET	50267	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:18.073271990 CET	443	50267	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:18.073415995 CET	50267	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:18.110810041 CET	50267	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:18.110810041 CET	50267	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:18.110826969 CET	443	50267	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:18.110832930 CET	443	50267	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:18.110865116 CET	443	50267	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:18.113907099 CET	50268	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:18.113940001 CET	443	50268	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:18.114141941 CET	50268	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:18.161186934 CET	50268	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:18.161209106 CET	443	50268	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:18.161231995 CET	443	50268	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:18.161264896 CET	50268	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:18.161277056 CET	443	50268	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:18.166227102 CET	50269	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:18.166258097 CET	443	50269	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:18.169610977 CET	50269	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:18.210050106 CET	50269	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:18.210067034 CET	443	50269	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:18.210094929 CET	443	50269	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:18.213162899 CET	50270	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:18.213179111 CET	443	50270	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:18.213546038 CET	50270	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:18.274249077 CET	50270	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:18.274262905 CET	443	50270	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:18.274282932 CET	443	50270	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:18.276894093 CET	50271	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:18.276911020 CET	443	50271	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:18.277328968 CET	50271	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:18.353913069 CET	50271	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:18.353925943 CET	443	50271	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:18.353949070 CET	443	50271	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:18.354034901 CET	50271	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:18.354043961 CET	443	50271	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:18.358335018 CET	50272	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:18.358345985 CET	443	50272	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:18.358428955 CET	50272	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:18.417125940 CET	50272	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:18.417141914 CET	443	50272	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:18.417180061 CET	443	50272	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:20.441564083 CET	50273	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:20.441592932 CET	443	50273	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:20.441679955 CET	50273	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:20.512917042 CET	50273	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:20.512933969 CET	443	50273	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:20.512989998 CET	443	50273	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:20.513016939 CET	50273	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:20.513026953 CET	443	50273	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:20.517540932 CET	50274	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:20.517570019 CET	443	50274	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:20.517956018 CET	50274	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:20.563471079 CET	50274	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:20.563484907 CET	443	50274	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:20.563513041 CET	443	50274	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:20.563534975 CET	50274	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:20.563544989 CET	443	50274	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:20.567289114 CET	50275	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:20.567321062 CET	443	50275	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:20.567759037 CET	50275	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:20.630233049 CET	50275	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:20.630254984 CET	443	50275	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:20.630285978 CET	443	50275	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:20.634824038 CET	50276	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:20.634856939 CET	443	50276	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:20.635019064 CET	50276	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:20.715281010 CET	50276	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:20.715281963 CET	50276	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:20.715301991 CET	443	50276	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:20.715321064 CET	443	50276	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:20.715358973 CET	443	50276	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:22.738229990 CET	50277	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:22.738280058 CET	443	50277	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:22.738462925 CET	50277	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:22.778230906 CET	50277	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:22.778250933 CET	443	50277	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:22.778316021 CET	443	50277	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:22.781317949 CET	50278	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:22.781358004 CET	443	50278	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:22.781516075 CET	50278	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:22.824357986 CET	50278	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:22.824387074 CET	443	50278	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:22.824443102 CET	443	50278	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:22.824495077 CET	50278	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:22.824507952 CET	443	50278	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:22.827435970 CET	50279	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:22.827474117 CET	443	50279	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:22.827596903 CET	50279	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:22.875247955 CET	50279	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:22.875284910 CET	443	50279	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:22.875343084 CET	443	50279	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:22.875358105 CET	50279	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:22.875374079 CET	443	50279	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:22.878427029 CET	50280	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:22.878468037 CET	443	50280	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:22.878606081 CET	50280	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:22.927122116 CET	50280	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:22.927174091 CET	443	50280	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:22.927228928 CET	443	50280	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:22.927269936 CET	50280	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:22.927289009 CET	443	50280	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:22.930383921 CET	50281	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:22.930424929 CET	443	50281	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:22.930553913 CET	50281	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:23.020587921 CET	50281	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:23.020606995 CET	443	50281	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:23.020621061 CET	50281	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:23.020629883 CET	443	50281	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:23.020653963 CET	443	50281	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:23.030073881 CET	50282	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:23.030133009 CET	443	50282	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:23.030194044 CET	50282	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:23.103679895 CET	50282	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:23.103719950 CET	443	50282	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:23.103758097 CET	443	50282	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:23.103776932 CET	50282	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:23.103796005 CET	443	50282	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:23.113871098 CET	50283	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:23.113922119 CET	443	50283	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:23.113981962 CET	50283	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:23.183680058 CET	50283	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:23.183701038 CET	443	50283	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:23.183722973 CET	443	50283	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:23.183747053 CET	50283	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:23.183763027 CET	443	50283	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:23.187391996 CET	50284	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:23.187422991 CET	443	50284	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:23.187542915 CET	50284	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:23.247775078 CET	50284	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:23.247818947 CET	443	50284	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:23.247839928 CET	50284	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:23.247848034 CET	443	50284	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:23.247865915 CET	443	50284	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:25.285017967 CET	50285	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:25.285067081 CET	443	50285	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:25.285131931 CET	50285	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:25.378638029 CET	50285	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:25.378659010 CET	443	50285	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:25.378705025 CET	443	50285	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:25.378710032 CET	50285	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:25.378726006 CET	443	50285	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:25.383275032 CET	50286	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:25.383296967 CET	443	50286	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:25.383364916 CET	50286	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:25.451252937 CET	50286	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:25.451272011 CET	443	50286	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:25.451298952 CET	443	50286	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:25.451330900 CET	50286	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:25.451339960 CET	443	50286	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:25.459408045 CET	50287	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:25.459423065 CET	443	50287	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:25.459489107 CET	50287	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:25.546555996 CET	50287	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:25.546580076 CET	443	50287	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:25.546622992 CET	50287	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:25.546631098 CET	443	50287	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:25.546634912 CET	443	50287	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:25.551805973 CET	50288	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:25.551827908 CET	443	50288	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:25.551898003 CET	50288	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:25.614748001 CET	50288	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:25.614763021 CET	443	50288	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:25.614808083 CET	443	50288	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:25.614833117 CET	50288	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:25.614845037 CET	443	50288	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:27.643496990 CET	50289	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:27.643517971 CET	443	50289	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:27.643584013 CET	50289	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:27.695661068 CET	50289	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:27.695674896 CET	443	50289	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:27.695713997 CET	443	50289	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:27.695719957 CET	50289	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:27.695728064 CET	443	50289	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:27.699944973 CET	50290	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:27.699975014 CET	443	50290	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:27.700032949 CET	50290	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:27.761774063 CET	50290	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:27.761789083 CET	443	50290	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:27.761825085 CET	443	50290	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:27.761833906 CET	50290	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:27.761842966 CET	443	50290	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:27.765887976 CET	50291	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:27.765913963 CET	443	50291	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:27.766014099 CET	50291	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:27.820952892 CET	50291	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:27.820970058 CET	443	50291	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:27.820976019 CET	50291	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:27.820983887 CET	443	50291	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:27.821022034 CET	443	50291	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:27.824763060 CET	50292	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:27.824784040 CET	443	50292	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:27.824837923 CET	50292	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:27.880223036 CET	50292	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:27.880238056 CET	443	50292	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:27.880263090 CET	443	50292	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:27.880281925 CET	50292	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:27.880295038 CET	443	50292	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:27.884237051 CET	50293	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:27.884253979 CET	443	50293	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:27.884426117 CET	50293	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:27.953442097 CET	50293	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:27.953455925 CET	443	50293	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:27.953481913 CET	443	50293	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:27.953505039 CET	50293	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:27.953511000 CET	443	50293	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:27.957284927 CET	50294	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:27.957309008 CET	443	50294	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:27.957371950 CET	50294	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:28.002232075 CET	50294	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:28.002244949 CET	443	50294	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:28.002265930 CET	443	50294	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:28.002294064 CET	50294	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:28.002300978 CET	443	50294	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:28.005415916 CET	50295	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:28.005454063 CET	443	50295	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:28.005568981 CET	50295	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:28.050228119 CET	50295	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:28.050255060 CET	443	50295	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:28.050276995 CET	443	50295	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:28.052339077 CET	50296	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:28.052352905 CET	443	50296	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:28.054294109 CET	50296	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:28.094885111 CET	50296	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:28.094897032 CET	443	50296	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:28.094918966 CET	443	50296	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:30.127598047 CET	50297	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:30.127636909 CET	443	50297	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:30.127923012 CET	50297	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:30.194236040 CET	50297	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:30.194262028 CET	443	50297	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:30.194304943 CET	443	50297	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:30.198307991 CET	50298	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:30.198340893 CET	443	50298	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:30.198473930 CET	50298	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:30.249778032 CET	50298	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:30.249797106 CET	443	50298	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:30.249824047 CET	443	50298	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:30.249865055 CET	50298	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:30.249885082 CET	443	50298	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:30.253809929 CET	50299	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:30.253828049 CET	443	50299	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:30.254256010 CET	50299	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:30.299386978 CET	50299	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:30.299403906 CET	443	50299	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:30.299432039 CET	443	50299	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:30.299446106 CET	50299	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:30.299454927 CET	443	50299	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:30.302741051 CET	50300	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:30.302772999 CET	443	50300	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:30.302855015 CET	50300	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:30.389519930 CET	50300	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:30.389542103 CET	443	50300	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:30.389573097 CET	443	50300	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:30.389595032 CET	50300	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:30.389607906 CET	443	50300	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:32.424551010 CET	50301	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:32.424582958 CET	443	50301	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:32.424910069 CET	50301	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:32.482227087 CET	50301	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:32.482240915 CET	443	50301	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:32.482285023 CET	443	50301	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:32.486223936 CET	50302	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:32.486251116 CET	443	50302	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:32.486490011 CET	50302	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:32.528908968 CET	50302	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:32.528924942 CET	443	50302	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:32.528951883 CET	443	50302	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:32.531614065 CET	50303	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:32.531642914 CET	443	50303	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:32.531960964 CET	50303	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:32.590226889 CET	50303	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:32.590240955 CET	443	50303	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:32.590261936 CET	443	50303	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:32.593278885 CET	50304	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:32.593298912 CET	443	50304	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:32.594300032 CET	50304	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:32.642227888 CET	50304	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:32.642242908 CET	443	50304	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:32.642262936 CET	443	50304	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:32.642371893 CET	50304	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:32.642379999 CET	443	50304	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:32.646243095 CET	50305	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:32.646260023 CET	443	50305	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:32.646445036 CET	50305	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:32.690174103 CET	50305	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:32.690174103 CET	50305	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:32.690191031 CET	443	50305	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:32.690196037 CET	443	50305	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:32.690213919 CET	443	50305	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:32.694225073 CET	50306	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:32.694255114 CET	443	50306	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:32.694477081 CET	50306	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:32.744699955 CET	50306	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:32.744699955 CET	50306	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:32.744719028 CET	443	50306	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:32.744729042 CET	443	50306	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:32.744755983 CET	443	50306	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:32.747970104 CET	50307	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:32.747982979 CET	443	50307	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:32.750299931 CET	50307	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:32.843981028 CET	50307	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:32.843997002 CET	443	50307	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:32.844022036 CET	443	50307	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:32.850231886 CET	50308	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:32.850269079 CET	443	50308	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:32.854337931 CET	50308	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:32.906074047 CET	50308	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:32.906074047 CET	50308	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:32.906092882 CET	443	50308	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:32.906124115 CET	443	50308	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:32.906141996 CET	443	50308	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:34.924314976 CET	50309	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:34.924355984 CET	443	50309	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:34.924731016 CET	50309	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:34.975547075 CET	50309	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:34.975563049 CET	443	50309	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:34.975637913 CET	443	50309	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:34.975670099 CET	50309	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:34.975678921 CET	443	50309	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:34.978997946 CET	50310	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:34.979036093 CET	443	50310	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:34.979135036 CET	50310	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:35.035739899 CET	50310	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:35.035754919 CET	443	50310	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:35.035792112 CET	443	50310	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:35.035799980 CET	50310	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:35.035810947 CET	443	50310	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:35.040102005 CET	50311	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:35.040143013 CET	443	50311	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:35.040209055 CET	50311	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:35.112721920 CET	50311	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:35.112766981 CET	443	50311	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:35.112792969 CET	443	50311	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:35.112817049 CET	50311	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:35.112838030 CET	443	50311	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:35.117242098 CET	50312	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:35.117274046 CET	443	50312	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:35.117336035 CET	50312	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:35.198549986 CET	50312	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:35.198573112 CET	443	50312	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:35.198604107 CET	443	50312	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:35.198626041 CET	50312	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:35.198647022 CET	443	50312	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:37.235114098 CET	50313	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:37.235165119 CET	443	50313	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:37.235256910 CET	50313	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:37.304796934 CET	50313	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:37.304816961 CET	443	50313	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:37.304863930 CET	50313	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:37.304871082 CET	443	50313	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:37.304879904 CET	443	50313	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:37.312072039 CET	50314	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:37.312124968 CET	443	50314	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:37.312199116 CET	50314	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:37.385978937 CET	50314	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:37.385998964 CET	443	50314	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:37.386034966 CET	443	50314	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:37.386049032 CET	50314	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:37.386059999 CET	443	50314	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:37.400785923 CET	50315	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:37.400830030 CET	443	50315	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:37.400891066 CET	50315	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:37.452389956 CET	50315	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:37.452420950 CET	443	50315	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:37.452451944 CET	443	50315	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:37.452485085 CET	50315	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:37.452507973 CET	443	50315	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:37.456028938 CET	50316	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:37.456070900 CET	443	50316	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:37.456145048 CET	50316	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:37.506248951 CET	50316	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:37.506278038 CET	443	50316	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:37.506318092 CET	443	50316	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:37.506329060 CET	50316	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:37.506342888 CET	443	50316	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:37.509771109 CET	50317	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:37.509810925 CET	443	50317	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:37.509896040 CET	50317	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:37.633107901 CET	50317	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:37.633126974 CET	443	50317	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:37.633156061 CET	443	50317	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:37.633177996 CET	50317	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:37.633188963 CET	443	50317	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:37.640535116 CET	50318	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:37.640582085 CET	443	50318	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:37.640686989 CET	50318	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:37.774657965 CET	50318	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:37.774686098 CET	443	50318	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:37.774713993 CET	443	50318	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:37.774739027 CET	50318	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:37.774755955 CET	443	50318	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:37.780617952 CET	50319	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:37.780664921 CET	443	50319	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:37.780726910 CET	50319	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:37.835741997 CET	50319	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:37.835760117 CET	443	50319	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:37.835803032 CET	50319	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:37.835819960 CET	443	50319	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:37.840379953 CET	50320	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:37.840415955 CET	443	50320	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:37.840495110 CET	50320	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:37.902781963 CET	50320	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:37.902808905 CET	443	50320	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:37.902863026 CET	443	50320	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:37.902880907 CET	50320	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:37.902894974 CET	443	50320	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:39.924966097 CET	50321	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:39.925008059 CET	443	50321	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:39.925117970 CET	50321	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:39.975857973 CET	50321	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:39.975879908 CET	443	50321	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:39.975934029 CET	443	50321	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:39.975989103 CET	50321	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:39.976011038 CET	443	50321	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:39.980329990 CET	50322	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:39.980381966 CET	443	50322	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:39.980463982 CET	50322	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:40.038718939 CET	50322	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:40.038743019 CET	443	50322	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:40.038784027 CET	443	50322	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:40.046251059 CET	50323	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:40.046304941 CET	443	50323	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:40.049330950 CET	50323	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:41.311747074 CET	50323	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:41.311774015 CET	443	50323	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:41.311819077 CET	50323	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:41.311820984 CET	443	50323	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:41.311836004 CET	443	50323	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:41.319307089 CET	50324	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:41.319356918 CET	443	50324	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:41.319417953 CET	50324	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:41.385749102 CET	50324	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:41.385771990 CET	443	50324	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:41.385788918 CET	50324	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:41.385795116 CET	443	50324	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:41.385816097 CET	443	50324	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:43.409427881 CET	50325	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:43.409478903 CET	443	50325	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:43.409549952 CET	50325	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:43.477777004 CET	50325	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:43.477802038 CET	443	50325	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:43.477855921 CET	50325	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:43.477864981 CET	443	50325	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:43.477870941 CET	443	50325	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:43.506320953 CET	50326	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:43.506357908 CET	443	50326	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:43.506418943 CET	50326	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:43.572168112 CET	50326	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:43.572190046 CET	443	50326	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:43.572246075 CET	50326	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:43.572249889 CET	443	50326	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:43.572256088 CET	443	50326	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:43.583434105 CET	50327	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:43.583467007 CET	443	50327	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:43.583523035 CET	50327	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:43.650357962 CET	50327	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:43.650384903 CET	443	50327	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:43.650420904 CET	443	50327	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:43.650429010 CET	50327	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:43.650441885 CET	443	50327	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:43.655072927 CET	50328	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:43.655092955 CET	443	50328	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:43.655169010 CET	50328	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:43.728684902 CET	50328	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:43.728702068 CET	443	50328	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:43.728745937 CET	50328	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:43.728749990 CET	443	50328	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:43.728774071 CET	443	50328	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:43.733819962 CET	50329	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:43.733869076 CET	443	50329	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:43.733937025 CET	50329	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:43.854867935 CET	50329	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:43.854907036 CET	443	50329	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:43.854950905 CET	50329	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:43.854954958 CET	443	50329	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:43.854965925 CET	443	50329	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:43.859448910 CET	50330	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:43.859482050 CET	443	50330	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:43.859551907 CET	50330	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:43.942138910 CET	50330	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:43.942164898 CET	443	50330	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:43.942210913 CET	50330	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:43.942215919 CET	443	50330	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:43.942225933 CET	443	50330	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:43.946822882 CET	50331	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:43.946856976 CET	443	50331	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:43.946930885 CET	50331	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:44.011255980 CET	50331	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:44.011280060 CET	443	50331	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:44.011324883 CET	50331	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:44.011336088 CET	443	50331	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:44.011341095 CET	443	50331	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:44.018232107 CET	50332	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:44.018274069 CET	443	50332	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:44.022500038 CET	50332	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:45.085863113 CET	50332	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:45.085902929 CET	443	50332	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:45.085923910 CET	50332	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:45.085932016 CET	443	50332	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:45.085958958 CET	443	50332	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:47.111957073 CET	50333	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:47.112015009 CET	443	50333	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:47.112087965 CET	50333	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:47.155747890 CET	50333	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:47.155800104 CET	443	50333	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:47.155847073 CET	50333	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:47.155853033 CET	443	50333	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:47.155879021 CET	443	50333	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:47.164077044 CET	50334	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:47.164130926 CET	443	50334	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:47.164290905 CET	50334	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:47.221849918 CET	50334	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:47.221890926 CET	443	50334	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:47.221956968 CET	443	50334	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:47.226516008 CET	50335	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:47.226562977 CET	443	50335	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:47.226624012 CET	50335	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:47.305340052 CET	50335	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:47.305388927 CET	443	50335	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:47.305444956 CET	50335	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:47.305454969 CET	443	50335	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:47.305465937 CET	443	50335	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:47.311666012 CET	50336	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:47.311718941 CET	443	50336	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:47.311805010 CET	50336	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:47.393856049 CET	50336	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:47.393904924 CET	443	50336	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:47.393969059 CET	443	50336	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:49.424316883 CET	50337	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:49.424360037 CET	443	50337	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:49.424421072 CET	50337	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:49.509727001 CET	50337	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:49.509753942 CET	443	50337	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:49.509805918 CET	443	50337	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:49.509809971 CET	50337	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:49.509829044 CET	443	50337	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:49.515818119 CET	50338	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:49.515860081 CET	443	50338	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:49.515922070 CET	50338	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:49.587275982 CET	50338	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:49.587291002 CET	443	50338	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:49.587302923 CET	50338	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:49.587310076 CET	443	50338	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:49.587348938 CET	443	50338	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:49.592957020 CET	50339	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:49.592993975 CET	443	50339	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:49.593061924 CET	50339	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:49.703052044 CET	50339	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:49.703077078 CET	443	50339	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:49.703123093 CET	50339	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:49.703129053 CET	443	50339	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:49.703138113 CET	443	50339	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:49.708123922 CET	50340	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:49.708156109 CET	443	50340	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:49.708220959 CET	50340	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:49.798954010 CET	50340	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:49.798969984 CET	443	50340	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:49.798996925 CET	443	50340	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:49.799019098 CET	50340	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:49.799029112 CET	443	50340	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:49.804054022 CET	50341	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:49.804148912 CET	443	50341	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:49.804223061 CET	50341	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:49.869096994 CET	50341	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:49.869148016 CET	443	50341	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:49.869180918 CET	443	50341	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:49.869208097 CET	50341	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:49.869234085 CET	443	50341	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:49.873533964 CET	50342	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:49.873564959 CET	443	50342	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:49.873615026 CET	50342	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:49.947729111 CET	50342	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:49.947751045 CET	443	50342	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:49.947776079 CET	443	50342	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:49.947820902 CET	50342	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:49.947834969 CET	443	50342	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:49.952131033 CET	50343	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:49.952176094 CET	443	50343	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:49.952225924 CET	50343	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:50.032546997 CET	50343	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:50.032581091 CET	443	50343	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:50.032632113 CET	443	50343	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:50.044351101 CET	50344	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:50.044383049 CET	443	50344	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:50.044588089 CET	50344	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:50.096477985 CET	50344	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:50.096498966 CET	443	50344	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:50.096575975 CET	443	50344	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:50.096594095 CET	50344	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:50.096605062 CET	443	50344	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:52.128268957 CET	50345	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:52.128309011 CET	443	50345	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:52.134305000 CET	50345	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:52.190129995 CET	50345	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:52.190129995 CET	50345	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:52.190149069 CET	443	50345	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:52.190157890 CET	443	50345	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:52.190193892 CET	443	50345	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:52.198234081 CET	50346	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:52.198261976 CET	443	50346	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:52.201306105 CET	50346	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:52.246432066 CET	50346	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:52.246448994 CET	443	50346	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:52.246478081 CET	443	50346	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:52.250250101 CET	50347	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:52.250286102 CET	443	50347	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:52.250452042 CET	50347	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:52.295406103 CET	50347	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:52.295423031 CET	443	50347	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:52.295449972 CET	443	50347	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:52.299034119 CET	50348	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:52.299058914 CET	443	50348	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:52.299300909 CET	50348	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:52.345242977 CET	50348	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:52.345268011 CET	443	50348	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:52.345328093 CET	443	50348	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:54.378226995 CET	50349	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:54.378281116 CET	443	50349	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:54.378496885 CET	50349	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:54.425801039 CET	50349	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:54.425818920 CET	443	50349	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:54.425873041 CET	443	50349	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:54.425894022 CET	50349	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:54.425908089 CET	443	50349	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:54.430232048 CET	50350	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:54.430284023 CET	443	50350	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:54.430377007 CET	50350	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:54.471702099 CET	50350	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:54.471716881 CET	443	50350	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:54.471740961 CET	443	50350	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:54.474225998 CET	50351	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:54.474261999 CET	443	50351	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:54.477272034 CET	50351	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:54.535835028 CET	50351	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:54.535856009 CET	443	50351	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:54.535881996 CET	443	50351	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:54.535907984 CET	50351	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:54.535919905 CET	443	50351	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:54.539417028 CET	50352	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:54.539447069 CET	443	50352	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:54.539597034 CET	50352	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:54.598362923 CET	50352	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:54.598385096 CET	443	50352	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:54.598412037 CET	443	50352	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:54.602274895 CET	50353	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:54.602313995 CET	443	50353	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:54.602399111 CET	50353	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:54.649369001 CET	50353	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:54.649384022 CET	443	50353	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:54.649410963 CET	443	50353	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:54.649437904 CET	50353	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:54.649450064 CET	443	50353	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:54.654237986 CET	50354	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:54.654330015 CET	443	50354	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:54.654495955 CET	50354	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:54.698708057 CET	50354	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:54.698771954 CET	443	50354	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:54.698800087 CET	443	50354	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:54.698808908 CET	50354	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:54.698833942 CET	443	50354	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:54.701620102 CET	50355	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:54.701638937 CET	443	50355	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:54.701786995 CET	50355	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:54.741986036 CET	50355	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:54.742000103 CET	443	50355	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:54.742027044 CET	443	50355	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:54.742069960 CET	50355	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:54.742079973 CET	443	50355	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:54.746226072 CET	50356	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:54.746253014 CET	443	50356	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:54.746316910 CET	50356	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:54.827307940 CET	50356	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:54.827327967 CET	443	50356	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:54.827361107 CET	443	50356	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:57.329571962 CET	50357	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:57.329608917 CET	443	50357	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:57.329675913 CET	50357	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:57.559202909 CET	50357	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:57.559242010 CET	443	50357	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:57.559283018 CET	443	50357	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:57.559289932 CET	50357	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:57.559304953 CET	443	50357	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:57.649935007 CET	50358	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:57.649966002 CET	443	50358	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:57.650026083 CET	50358	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:57.708895922 CET	50358	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:57.708909035 CET	443	50358	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:57.708955050 CET	443	50358	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:57.708962917 CET	50358	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:57.708972931 CET	443	50358	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:57.712316990 CET	50359	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:57.712352991 CET	443	50359	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:57.712433100 CET	50359	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:57.771985054 CET	50359	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:57.771998882 CET	443	50359	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:57.772039890 CET	443	50359	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:57.772062063 CET	50359	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:11:57.772069931 CET	443	50359	31.41.244.38	192.168.2.5
Dec 1, 2024 00:11:57.776871920 CET	50360	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:57.776896000 CET	443	50360	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:57.776971102 CET	50360	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:57.846496105 CET	50360	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:57.846510887 CET	443	50360	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:57.846570969 CET	50360	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:57.846575975 CET	443	50360	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:57.846585989 CET	443	50360	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:59.892395973 CET	50361	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:59.892447948 CET	443	50361	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:59.892519951 CET	50361	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:59.956988096 CET	50361	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:59.957011938 CET	443	50361	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:59.957086086 CET	50361	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:11:59.957091093 CET	443	50361	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:59.957113028 CET	443	50361	62.173.146.41	192.168.2.5
Dec 1, 2024 00:11:59.959007025 CET	50362	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:11:59.959045887 CET	443	50362	195.133.88.98	192.168.2.5
Dec 1, 2024 00:11:59.959110975 CET	50362	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:12:00.005260944 CET	50362	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:12:00.005279064 CET	443	50362	195.133.88.98	192.168.2.5
Dec 1, 2024 00:12:00.005320072 CET	50362	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:12:00.005325079 CET	443	50362	195.133.88.98	192.168.2.5
Dec 1, 2024 00:12:00.005373001 CET	443	50362	195.133.88.98	192.168.2.5
Dec 1, 2024 00:12:00.006849051 CET	50363	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:12:00.006885052 CET	443	50363	31.41.244.38	192.168.2.5
Dec 1, 2024 00:12:00.006942034 CET	50363	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:12:00.058751106 CET	50363	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:12:00.058751106 CET	50363	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:12:00.058767080 CET	443	50363	31.41.244.38	192.168.2.5
Dec 1, 2024 00:12:00.058775902 CET	443	50363	31.41.244.38	192.168.2.5
Dec 1, 2024 00:12:00.058796883 CET	443	50363	31.41.244.38	192.168.2.5
Dec 1, 2024 00:12:00.059763908 CET	50364	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:12:00.059803009 CET	443	50364	62.173.146.41	192.168.2.5
Dec 1, 2024 00:12:00.059916973 CET	50364	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:12:00.102320910 CET	50364	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:12:00.102320910 CET	50364	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:12:00.102344990 CET	443	50364	62.173.146.41	192.168.2.5
Dec 1, 2024 00:12:00.102366924 CET	443	50364	62.173.146.41	192.168.2.5
Dec 1, 2024 00:12:00.102416039 CET	443	50364	62.173.146.41	192.168.2.5
Dec 1, 2024 00:12:00.104321957 CET	50365	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:12:00.104351044 CET	443	50365	62.173.146.41	192.168.2.5
Dec 1, 2024 00:12:00.104422092 CET	50365	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:12:00.148550987 CET	50365	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:12:00.148580074 CET	443	50365	62.173.146.41	192.168.2.5
Dec 1, 2024 00:12:00.148601055 CET	443	50365	62.173.146.41	192.168.2.5
Dec 1, 2024 00:12:00.152239084 CET	50366	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:12:00.152270079 CET	443	50366	195.133.88.98	192.168.2.5
Dec 1, 2024 00:12:00.152443886 CET	50366	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:12:00.196732044 CET	50366	443	192.168.2.5	195.133.88.98
Dec 1, 2024 00:12:00.196747065 CET	443	50366	195.133.88.98	192.168.2.5
Dec 1, 2024 00:12:00.196769953 CET	443	50366	195.133.88.98	192.168.2.5
Dec 1, 2024 00:12:00.200414896 CET	50367	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:12:00.200438023 CET	443	50367	31.41.244.38	192.168.2.5
Dec 1, 2024 00:12:00.200834036 CET	50367	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:12:00.244477987 CET	50367	443	192.168.2.5	31.41.244.38
Dec 1, 2024 00:12:00.244493961 CET	443	50367	31.41.244.38	192.168.2.5
Dec 1, 2024 00:12:00.244515896 CET	443	50367	31.41.244.38	192.168.2.5
Dec 1, 2024 00:12:00.248749971 CET	50368	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:12:00.248780966 CET	443	50368	62.173.146.41	192.168.2.5
Dec 1, 2024 00:12:00.248995066 CET	50368	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:12:00.288288116 CET	50368	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:12:00.288304090 CET	443	50368	62.173.146.41	192.168.2.5
Dec 1, 2024 00:12:00.288331985 CET	443	50368	62.173.146.41	192.168.2.5
Dec 1, 2024 00:12:00.288372040 CET	50368	443	192.168.2.5	62.173.146.41
Dec 1, 2024 00:12:00.288382053 CET	443	50368	62.173.146.41	192.168.2.5

Target ID:	0
Start time:	18:07:51
Start date:	30/11/2024
Path:	C:\Windows\System32\loaddll32.exe
Wow64 process (32bit):	true
Commandline:	loaddll32.exe "C:\Users\user\Desktop\resources.dll"
Imagebase:	0xc60000
File size:	126'464 bytes
MD5 hash:	51E6071F9CBA48E79F10C84515AAE618
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	1
Start time:	18:07:51
Start date:	30/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	2
Start time:	18:07:51
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	cmd.exe /C rundll32.exe "C:\Users\user\Desktop\resources.dll",#1
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	3
Start time:	18:07:51
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe C:\Users\user\Desktop\resources.dll,CIrNTzBaPkppGNf
Imagebase:	0x250000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	4
Start time:	18:07:51
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\resources.dll",#1
Imagebase:	0x250000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	6
Start time:	18:07:54
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe C:\Users\user\Desktop\resources.dll,CZnIUAAeJ
Imagebase:	0x250000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	7
Start time:	18:07:57
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe C:\Users\user\Desktop\resources.dll,FxJWXdx
Imagebase:	0x250000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	8
Start time:	18:08:00
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\resources.dll",CIrNTzBaPkppGNf
Imagebase:	0x250000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	9
Start time:	18:08:01
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\resources.dll",CZnIUAAeJ
Imagebase:	0x250000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	10
Start time:	18:08:01
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\resources.dll",FxJWXdx
Imagebase:	0x250000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	11
Start time:	18:08:01
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\resources.dll",yVmJFl
Imagebase:	0x250000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	12
Start time:	18:08:01
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\resources.dll",ukniOqaVKgeX
Imagebase:	0x250000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	13
Start time:	18:08:01
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\resources.dll",uMRRtkuQVecTfq
Imagebase:	0x250000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	14
Start time:	18:08:01
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\resources.dll",start
Imagebase:	0x250000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 0000000E.00000003.2300245046.000000007E010000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 0000000E.00000003.2300636587.000000007EA30000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 0000000E.00000003.2303355956.000000007D920000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: 0000000E.00000003.2295319581.0000000005ED0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Target ID:	15
Start time:	18:08:01
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\resources.dll",rtVNQhSpgienExR
Imagebase:	0x250000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	16
Start time:	18:08:01
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\resources.dll",nkYPRlgSTnlUkuDTW
Imagebase:	0x250000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	17
Start time:	18:08:01
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\resources.dll",jERKotJBwfw
Imagebase:	0x250000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	18
Start time:	18:08:01
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\resources.dll",iBZHcoeoarRd
Imagebase:	0x250000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	19
Start time:	18:08:01
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\resources.dll",ZfDMgndWxjR
Imagebase:	0x250000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	20
Start time:	18:08:01
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\resources.dll",UAyCqwHRBMHCdHlVz
Imagebase:	0x250000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	21
Start time:	18:08:01
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\resources.dll",SOdCGqnNtDWyDo
Imagebase:	0x250000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	22
Start time:	18:08:01
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\resources.dll",NpZatICsK
Imagebase:	0x250000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	23
Start time:	18:08:01
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\resources.dll",LKSMdMaTT
Imagebase:	0x250000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	24
Start time:	18:08:01
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\resources.dll",IYfRriwGvbgbXBXReH
Imagebase:	0x250000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	25
Start time:	18:08:01
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\resources.dll",HipXGmygXapBRYfa
Imagebase:	0x250000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	26
Start time:	18:08:01
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\resources.dll",GbmgwMEzKpXc
Imagebase:	0x250000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	28
Start time:	18:08:19
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /End /tn \Microsoft\Windows\Wininet\CacheTask
Imagebase:	0x6a0000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	29
Start time:	18:08:19
Start date:	30/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	30
Start time:	18:08:21
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /Run /tn \Microsoft\Windows\Wininet\CacheTask
Imagebase:	0x6a0000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	31
Start time:	18:08:21
Start date:	30/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	33
Start time:	18:09:22
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /End /tn \Microsoft\Windows\Wininet\CacheTask
Imagebase:	0x6a0000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	34
Start time:	18:09:22
Start date:	30/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	35
Start time:	18:09:25
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /Run /tn \Microsoft\Windows\Wininet\CacheTask
Imagebase:	0x6a0000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	36
Start time:	18:09:25
Start date:	30/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	37
Start time:	18:09:31
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /End /tn \Microsoft\Windows\Wininet\CacheTask
Imagebase:	0x6a0000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	38
Start time:	18:09:31
Start date:	30/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	39
Start time:	18:09:33
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /Run /tn \Microsoft\Windows\Wininet\CacheTask
Imagebase:	0x6a0000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	40
Start time:	18:09:33
Start date:	30/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	41
Start time:	18:09:38
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /End /tn \Microsoft\Windows\Wininet\CacheTask
Imagebase:	0x6a0000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	42
Start time:	18:09:38
Start date:	30/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	43
Start time:	18:09:40
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /Run /tn \Microsoft\Windows\Wininet\CacheTask
Imagebase:	0x6a0000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	44
Start time:	18:09:40
Start date:	30/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	45
Start time:	18:09:45
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /End /tn \Microsoft\Windows\Wininet\CacheTask
Imagebase:	0x6a0000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	46
Start time:	18:09:45
Start date:	30/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	47
Start time:	18:09:47
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /Run /tn \Microsoft\Windows\Wininet\CacheTask
Imagebase:	0x6a0000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	48
Start time:	18:09:47
Start date:	30/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	49
Start time:	18:09:53
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /End /tn \Microsoft\Windows\Wininet\CacheTask
Imagebase:	0x6a0000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	50
Start time:	18:09:53
Start date:	30/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	51
Start time:	18:09:56
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /Run /tn \Microsoft\Windows\Wininet\CacheTask
Imagebase:	0x6a0000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	52
Start time:	18:09:56
Start date:	30/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	53
Start time:	18:10:00
Start date:	30/11/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /End /tn \Microsoft\Windows\Wininet\CacheTask
Imagebase:	0x6a0000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	54
Start time:	18:10:00
Start date:	30/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true