Windows Analysis Report
UFh7A8CImG.exe

AI detected suspicious sample

Source: Yara match	File source: 00000001.00000003.1771393442.0000000006107000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1766962431.00000000055C1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2753770406.0000000004F46000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.4163904835.000000000547F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1776282835.0000000005B54000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2112045230.0000000007C9E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2111575348.000000000699E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1772025546.0000000005B59000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.4163433694.0000000004ED6000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.4163859568.00000000054E8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2672511181.0000000005485000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2675930453.0000000005476000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1766487852.000000000501F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2757410780.0000000004F43000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2111088801.0000000005B52000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2112762112.000000000699A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2677180622.0000000004933000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2682133919.000000000493C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1769409309.0000000005019000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1770783572.0000000005B5F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2756648118.00000000054E9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.4163368007.00000000049A6000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2680974566.0000000005FD0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2674638334.0000000004ED5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1767758397.0000000004A76000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2681358492.0000000004ED1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2761374837.000000000603D000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2754810471.00000000054E8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2761931254.00000000054E2000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2672015882.0000000004EE0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2115889808.0000000007C9A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1772504401.00000000060FE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2757899973.0000000005A8F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2675208046.0000000005A2A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2758858785.00000000049A7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1770179849.0000000005013000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2762777663.0000000004F4C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: MIs.exe PID: 7028, type: MEMORYSTR

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\Vipro.dll	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\TMP6AC3.tmp	Joe Sandbox ML: detected

Compliance

Detected unpacking (creates a PE file in dynamic memory)

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Unpacked PE file: 8.2.MIs.exe.3070000.1.unpack
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Unpacked PE file: 10.2.MIs.exe.3110000.1.unpack

Source: UFh7A8CImG.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: UFh7A8CImG.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source:	Binary string: C:\MCU_SCM\Development\FixedFunction\CP211x\PC_Applications\InterfaceLibrary\Windows_2K_XP_S2K3_Vista\HIDtoUART\Release\SLABHIDtoUART.pdb source: UFh7A8CImG.exe, 00000000.00000003.1724610247.00000000037A6000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: d:\jenkins-slave\workspace\SLABHIDDevice\SLABHIDDevice\Release\SLABHIDDevice.pdb source: UFh7A8CImG.exe, 00000000.00000003.1724610247.00000000037A6000.00000004.00000020.00020000.00000000.sdmp

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6CE9E6FC FindFirstFileW,FindClose,	8_2_6CE9E6FC
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6CF6DA64 GetLongPathNameW,GetLongPathNameW,FindFirstFileW,FindClose,	8_2_6CF6DA64
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6CE9E6FC FindFirstFileW,FindClose,	10_2_6CE9E6FC
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6CF6DA64 GetLongPathNameW,GetLongPathNameW,FindFirstFileW,FindClose,	10_2_6CF6DA64
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6CE9E118 GetModuleHandleW,GetProcAddress,FindFirstFileW,FindClose,lstrlenW,lstrlenW,	10_2_6CE9E118

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows	Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49767 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49766 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49769 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49836 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49838 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49768 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49866 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49884 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49885 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49859 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49902 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49898 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49901 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49864 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49900 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49913 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49914 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49835 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49931 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49837 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49934 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49944 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49946 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49883 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49964 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49932 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49961 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49982 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49980 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49945 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49862 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49994 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49993 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50007 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49995 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50024 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50023 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50026 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50041 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49959 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50006 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50043 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50042 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50057 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50056 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50079 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50077 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50090 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50025 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50005 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50092 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50108 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50093 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50111 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50080 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49947 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50127 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49979 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50130 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50129 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50110 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50142 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50128 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50141 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50159 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49912 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50175 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50091 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50055 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50176 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50160 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50144 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50184 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50185 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50186 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50192 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49992 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50191 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50177 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50193 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50078 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50207 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50199 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50158 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50008 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50058 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49882 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49930 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49963 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49915 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50109 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:49981 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50044 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50200 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50194 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50143 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50157 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50201 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50208 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50210 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50202 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50217 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50225 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50209 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50216 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50224 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50233 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50223 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50239 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50242 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50234 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50231 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50240 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50248 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50247 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50250 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50249 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50241 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50256 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50263 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50257 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50255 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50272 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50258 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50274 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50266 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50273 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50280 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50264 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50279 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50271 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50282 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50265 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50287 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50289 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50290 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50288 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50296 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50295 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50298 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50281 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50305 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50303 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50312 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50306 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50304 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50320 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50321 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50311 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50328 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50327 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50330 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50314 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50337 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50319 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50336 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50218 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50338 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50335 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50322 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50297 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50215 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50178 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50232 -> 89.116.191.177:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50183 -> 77.221.149.84:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50226 -> 193.188.22.40:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50313 -> 213.210.13.4:443
Source: Network traffic	Suricata IDS: 2034465 - Severity 1 - ET MALWARE Danabot Key Exchange Request : 192.168.2.4:50329 -> 213.210.13.4:443

Source: global traffic

TCP traffic: 192.168.2.4:49774 -> 8.8.8.8:53

Source: Joe Sandbox View	ASN Name: LRTC-ASLT LRTC-ASLT
Source: Joe Sandbox View	ASN Name: INFOBOX-ASInfoboxruAutonomousSystemRU INFOBOX-ASInfoboxruAutonomousSystemRU
Source: Joe Sandbox View	ASN Name: EDGEtaGCIComGB EDGEtaGCIComGB

Source: unknown	TCP traffic detected without corresponding DNS query: 77.221.149.84
Source: unknown	TCP traffic detected without corresponding DNS query: 77.221.149.84
Source: unknown	TCP traffic detected without corresponding DNS query: 77.221.149.84
Source: unknown	TCP traffic detected without corresponding DNS query: 77.221.149.84
Source: unknown	TCP traffic detected without corresponding DNS query: 89.116.191.177
Source: unknown	TCP traffic detected without corresponding DNS query: 89.116.191.177
Source: unknown	TCP traffic detected without corresponding DNS query: 89.116.191.177
Source: unknown	TCP traffic detected without corresponding DNS query: 89.116.191.177
Source: unknown	TCP traffic detected without corresponding DNS query: 193.188.22.40
Source: unknown	TCP traffic detected without corresponding DNS query: 193.188.22.40
Source: unknown	TCP traffic detected without corresponding DNS query: 193.188.22.40
Source: unknown	TCP traffic detected without corresponding DNS query: 193.188.22.40
Source: unknown	TCP traffic detected without corresponding DNS query: 77.221.149.84
Source: unknown	TCP traffic detected without corresponding DNS query: 77.221.149.84
Source: unknown	TCP traffic detected without corresponding DNS query: 77.221.149.84
Source: unknown	TCP traffic detected without corresponding DNS query: 77.221.149.84
Source: unknown	TCP traffic detected without corresponding DNS query: 89.116.191.177
Source: unknown	TCP traffic detected without corresponding DNS query: 89.116.191.177
Source: unknown	TCP traffic detected without corresponding DNS query: 89.116.191.177
Source: unknown	TCP traffic detected without corresponding DNS query: 89.116.191.177
Source: unknown	TCP traffic detected without corresponding DNS query: 193.188.22.40
Source: unknown	TCP traffic detected without corresponding DNS query: 193.188.22.40
Source: unknown	TCP traffic detected without corresponding DNS query: 193.188.22.40
Source: unknown	TCP traffic detected without corresponding DNS query: 77.221.149.84
Source: unknown	TCP traffic detected without corresponding DNS query: 77.221.149.84
Source: unknown	TCP traffic detected without corresponding DNS query: 77.221.149.84
Source: unknown	TCP traffic detected without corresponding DNS query: 77.221.149.84
Source: unknown	TCP traffic detected without corresponding DNS query: 89.116.191.177
Source: unknown	TCP traffic detected without corresponding DNS query: 89.116.191.177
Source: unknown	TCP traffic detected without corresponding DNS query: 89.116.191.177
Source: unknown	TCP traffic detected without corresponding DNS query: 89.116.191.177
Source: unknown	TCP traffic detected without corresponding DNS query: 193.188.22.40
Source: unknown	TCP traffic detected without corresponding DNS query: 193.188.22.40
Source: unknown	TCP traffic detected without corresponding DNS query: 193.188.22.40
Source: unknown	TCP traffic detected without corresponding DNS query: 193.188.22.40
Source: unknown	TCP traffic detected without corresponding DNS query: 77.221.149.84
Source: unknown	TCP traffic detected without corresponding DNS query: 77.221.149.84
Source: unknown	TCP traffic detected without corresponding DNS query: 77.221.149.84
Source: unknown	TCP traffic detected without corresponding DNS query: 89.116.191.177
Source: unknown	TCP traffic detected without corresponding DNS query: 89.116.191.177
Source: unknown	TCP traffic detected without corresponding DNS query: 89.116.191.177
Source: unknown	TCP traffic detected without corresponding DNS query: 193.188.22.40
Source: unknown	TCP traffic detected without corresponding DNS query: 193.188.22.40
Source: unknown	TCP traffic detected without corresponding DNS query: 193.188.22.40
Source: unknown	TCP traffic detected without corresponding DNS query: 77.221.149.84
Source: unknown	TCP traffic detected without corresponding DNS query: 77.221.149.84
Source: unknown	TCP traffic detected without corresponding DNS query: 77.221.149.84
Source: unknown	TCP traffic detected without corresponding DNS query: 77.221.149.84
Source: unknown	TCP traffic detected without corresponding DNS query: 89.116.191.177
Source: unknown	TCP traffic detected without corresponding DNS query: 89.116.191.177

Source: MIs.exe, 00000001.00000003.2112762112.000000000699A000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1771393442.0000000006107000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1776282835.0000000005B54000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1766962431.00000000055C1000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2111575348.000000000699E000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2112045230.0000000007C9E000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1772025546.0000000005B59000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1766487852.000000000501F000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2111088801.0000000005B52000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1769409309.0000000005019000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1770783572.0000000005B5F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://.css
Source: MIs.exe, 00000001.00000003.2112762112.000000000699A000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1771393442.0000000006107000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1776282835.0000000005B54000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1766962431.00000000055C1000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2111575348.000000000699E000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2112045230.0000000007C9E000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1772025546.0000000005B59000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1766487852.000000000501F000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2111088801.0000000005B52000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1769409309.0000000005019000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1770783572.0000000005B5F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://.jpg
Source: UFh7A8CImG.exe, 00000000.00000002.1730018002.00000000032F0000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.000000000392C000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1725481449.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724528848.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.00000000037A6000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.000000000392C000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1725481449.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724528848.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.00000000037A6000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1725622209.00000000032F1000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.000000000392C000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1725481449.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724528848.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.00000000037A6000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.00000000037A6000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1725622209.00000000032F1000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.000000000392C000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1725481449.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724528848.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl04
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningCAEVR36.crl0
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0
Source: UFh7A8CImG.exe, 00000000.00000002.1730018002.00000000032F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiC
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.00000000037A6000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.000000000392C000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1725481449.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724528848.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.00000000037A6000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1725622209.00000000032F1000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.000000000392C000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1725481449.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724528848.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.00000000037A6000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.000000000392C000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1725481449.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724528848.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: UFh7A8CImG.exe, 00000000.00000002.1730018002.00000000032F0000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.000000000392C000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1725481449.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724528848.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/sha2-assured-ts.crl02
Source: UFh7A8CImG.exe, 00000000.00000002.1730018002.00000000032F0000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.000000000392C000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1725481449.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724528848.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.00000000037A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: UFh7A8CImG.exe, 00000000.00000003.1725622209.00000000032F1000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.000000000392C000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1725481449.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724528848.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0=
Source: UFh7A8CImG.exe, 00000000.00000002.1730018002.00000000032F0000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.000000000392C000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1725481449.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724528848.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/sha2-assured-ts.crl0
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningCAEVR36.crt0#
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#
Source: MIs.exe, 00000001.00000003.2112762112.000000000699A000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1771393442.0000000006107000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1776282835.0000000005B54000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1766962431.00000000055C1000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2111575348.000000000699E000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2112045230.0000000007C9E000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1772025546.0000000005B59000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1766487852.000000000501F000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2111088801.0000000005B52000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1769409309.0000000005019000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1770783572.0000000005B5F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://html4/loose.dtd
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.comodoca.com0
Source: UFh7A8CImG.exe, 00000000.00000002.1730018002.00000000032F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicer8
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.00000000037A6000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1725622209.00000000032F1000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.000000000392C000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1725481449.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724528848.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.00000000037A6000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1725622209.00000000032F1000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.000000000392C000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1725481449.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724528848.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0A
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.00000000037A6000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.000000000392C000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1725481449.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724528848.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0C
Source: UFh7A8CImG.exe, 00000000.00000002.1730018002.00000000032F0000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.000000000392C000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1725481449.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724528848.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0O
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.00000000037A6000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0X
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.sectigo.com0
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.00000000037A6000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1725622209.00000000032F1000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000002.1730018002.00000000032F0000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.000000000392C000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1725481449.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724528848.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/CPS0
Source: MIs.exe	String found in binary or memory: http://www.multi-tech.cn/
Source: MIs.exe	String found in binary or memory: http://www.multi-tech.cn/MIsetup.exe
Source: MIs.exe, 00000001.00000003.2117562696.000000007FAF0000.00000004.00001000.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2116981899.000000007EBA0000.00000004.00001000.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2116225229.000000007E700000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.openssl.org/V
Source: MIs.exe, 00000001.00000003.2116225229.000000007E700000.00000004.00001000.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2114493173.000000007ECF0000.00000004.00001000.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2115522722.000000007ED70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.openssl.org/support/faq.html
Source: MIs.exe, 00000001.00000003.2116225229.000000007E700000.00000004.00001000.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2114493173.000000007ECF0000.00000004.00001000.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2115522722.000000007ED70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.openssl.org/support/faq.htmlRAND
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.000000000392C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.virtins.com
Source: MIs.exe	String found in binary or memory: http://www.virtins.com/
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000000.1727952365.0000000000600000.00000008.00000001.01000000.00000005.sdmp	String found in binary or memory: http://www.virtins.com/-Manual-ZHCHS.pdfhttp://www.multi-tech.cn/.pdf.chm-ZHCHS-ManualHardwareManual
Source: MIs.exe	String found in binary or memory: http://www.virtins.com/MIsetup.exe
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000000.1727952365.0000000000600000.00000008.00000001.01000000.00000005.sdmp	String found in binary or memory: http://www.virtins.com/MIsetup.exehttp://www.multi-tech.cn/MIsetup.exeUpdate
Source: MIs.exe	String found in binary or memory: https://inivation.gitlab.io/dv/dv-docs/docs/update-firmware/
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sectigo.com/CPS0
Source: UFh7A8CImG.exe, 00000000.00000002.1730018002.00000000032F0000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724610247.000000000392C000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1725481449.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp, UFh7A8CImG.exe, 00000000.00000003.1724528848.0000000000AF3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.digicert.com/CPS0
Source: MIs.exe	String found in binary or memory: https://www.multi-tech.cn/applications.shtml
Source: MIs.exe	String found in binary or memory: https://www.rme-audio.de/downloads/adi24pro_e.pdf
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000000.1727952365.0000000000600000.00000008.00000001.01000000.00000005.sdmp	String found in binary or memory: https://www.rme-audio.de/downloads/adi24pro_e.pdfhttps://www.rme-audio.de/downloads/adi2profs_e.pdfR
Source: MIs.exe	String found in binary or memory: https://www.rme-audio.de/downloads/adi2profs_e.pdf
Source: MIs.exe	String found in binary or memory: https://www.virtins.com/activate.html
Source: MIs.exe	String found in binary or memory: https://www.virtins.com/applications.html
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000000.1727952365.0000000000600000.00000008.00000001.01000000.00000005.sdmp	String found in binary or memory: https://www.virtins.com/applications.htmlhttps://www.multi-tech.cn/applications.shtmlApplicationSumm
Source: MIs.exe	String found in binary or memory: https://www.virtins.com/multi-instrument.html

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 50326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50293 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 50336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50216
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50218
Source: unknown	Network traffic detected: HTTP traffic on port 50254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50219
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50212
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50211
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50213
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50328 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50229
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50228
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50222
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50224
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50239
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50230
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50232
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50235
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50249
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50248
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50241
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50240
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50242
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50245
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50247
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50246
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50250
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50306 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50338 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 50278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 50256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 50196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50316 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50202
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 50319 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50180
Source: unknown	Network traffic detected: HTTP traffic on port 50263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50182
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50185
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50188
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50189
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50190
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50193
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50195
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50194
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50196
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50199
Source: unknown	Network traffic detected: HTTP traffic on port 50332 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 50297 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 50241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50330 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50299 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 50226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50150
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50329 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034

E-Banking Fraud

PE file has a writeable .text section

Source: Yara match	File source: 00000001.00000003.1771393442.0000000006107000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1766962431.00000000055C1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2753770406.0000000004F46000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.4163904835.000000000547F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1776282835.0000000005B54000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2112045230.0000000007C9E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2111575348.000000000699E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1772025546.0000000005B59000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.4163433694.0000000004ED6000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.4163859568.00000000054E8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2672511181.0000000005485000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2675930453.0000000005476000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1766487852.000000000501F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2757410780.0000000004F43000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2111088801.0000000005B52000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2112762112.000000000699A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2677180622.0000000004933000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2682133919.000000000493C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1769409309.0000000005019000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1770783572.0000000005B5F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2756648118.00000000054E9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.4163368007.00000000049A6000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2680974566.0000000005FD0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2674638334.0000000004ED5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1767758397.0000000004A76000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2681358492.0000000004ED1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2761374837.000000000603D000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2754810471.00000000054E8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2761931254.00000000054E2000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2672015882.0000000004EE0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2115889808.0000000007C9A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1772504401.00000000060FE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2757899973.0000000005A8F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2675208046.0000000005A2A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2758858785.00000000049A7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1770179849.0000000005013000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2762777663.0000000004F4C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: MIs.exe PID: 7028, type: MEMORYSTR

System Summary

Source: FilesystemDialogsCOM.dll.0.dr

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

Code function: 8_2_6C968CD0: DeviceIoControl,DeviceIoControl,

8_2_6C968CD0

Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Code function: 0_2_00F18690	0_2_00F18690
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Code function: 0_2_010D597C	0_2_010D597C
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_00415840	8_2_00415840
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_0041F05B	8_2_0041F05B
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_0041E0DD	8_2_0041E0DD
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_004FC0D0	8_2_004FC0D0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_005B21A0	8_2_005B21A0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_00405AE0	8_2_00405AE0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_00404B60	8_2_00404B60
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_0041DC31	8_2_0041DC31
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_004ABF70	8_2_004ABF70
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_0041D785	8_2_0041D785
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C96A3D0	8_2_6C96A3D0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C969370	8_2_6C969370
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C96EE10	8_2_6C96EE10
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C98CE60	8_2_6C98CE60
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C981F00	8_2_6C981F00
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C974F50	8_2_6C974F50
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C98E89B	8_2_6C98E89B
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C96C8E0	8_2_6C96C8E0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C993A2D	8_2_6C993A2D
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C970B30	8_2_6C970B30
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C98D5B0	8_2_6C98D5B0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9A95A9	8_2_6C9A95A9
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9705F0	8_2_6C9705F0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C996510	8_2_6C996510
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C99D6D3	8_2_6C99D6D3
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9936EB	8_2_6C9936EB
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C97B070	8_2_6C97B070
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C99A189	8_2_6C99A189
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C99C1C0	8_2_6C99C1C0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C96D2A0	8_2_6C96D2A0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9A72A5	8_2_6C9A72A5
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9852C0	8_2_6C9852C0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9742F3	8_2_6C9742F3
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C98B3C0	8_2_6C98B3C0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9D2447	8_2_6C9D2447
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9E7CB3	8_2_6C9E7CB3
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9D7CED	8_2_6C9D7CED
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9D8519	8_2_6C9D8519
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9DAF9D	8_2_6C9DAF9D
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9D7F97	8_2_6C9D7F97
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9D797B	8_2_6C9D797B
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9E4AE2	8_2_6C9E4AE2
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9D5236	8_2_6C9D5236
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9D825E	8_2_6C9D825E
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9E5309	8_2_6C9E5309
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9DF330	8_2_6C9DF330
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6CF489C0	8_2_6CF489C0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6CF48B04	8_2_6CF48B04
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6C9D2447	10_2_6C9D2447
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6C9E7CB3	10_2_6C9E7CB3
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6C9D7CED	10_2_6C9D7CED
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6C9D8519	10_2_6C9D8519
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6C9DAF9D	10_2_6C9DAF9D
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6C9D7F97	10_2_6C9D7F97
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6C9D797B	10_2_6C9D797B
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6C9E4AE2	10_2_6C9E4AE2
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6C9D5236	10_2_6C9D5236
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6C9D825E	10_2_6C9D825E
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6C9E5309	10_2_6C9E5309
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6C9DF330	10_2_6C9DF330
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6CF489C0	10_2_6CF489C0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6CF48B04	10_2_6CF48B04
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6CE9C744	10_2_6CE9C744
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_7098A080	10_2_7098A080
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_709640A0	10_2_709640A0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_709630F0	10_2_709630F0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_70973030	10_2_70973030
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_7099A1B0	10_2_7099A1B0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_709791C0	10_2_709791C0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_70962170	10_2_70962170
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_7092C160	10_2_7092C160
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_709772F0	10_2_709772F0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_70955220	10_2_70955220
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_7099E380	10_2_7099E380
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_7096F3D0	10_2_7096F3D0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_709873F0	10_2_709873F0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_70981430	10_2_70981430
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_709965C0	10_2_709965C0

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\FilesystemDialogsCOM.dll BB841E22FF485EA6F79808A554BAA8FB13F8971A4549F09BC6665EFA19115F37

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: String function: 6C9887A0 appears 53 times
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: String function: 6C97DD30 appears 33 times
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: String function: 005E2A56 appears 35 times
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: String function: 6C9D4A43 appears 42 times
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: String function: 6C966050 appears 435 times
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: String function: 6CEC2CD4 appears 42 times
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: String function: 6C98F350 appears 42 times
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: String function: 005E2B3A appears 127 times
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: String function: 6C9D6190 appears 64 times
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: String function: 6C974F20 appears 90 times
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: String function: 6C971B50 appears 198 times
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: String function: 6CED3CC0 appears 35 times
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: String function: 6C9E11F0 appears 36 times

Source: Vipro.dll.0.dr

Static PE information: Resource name: RT_VERSION type: x86 executable not stripped

Source: VTDSP.dll.0.dr

Static PE information: Number of sections : 17 > 10

Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.00000000037A6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameMI.exe$ vs UFh7A8CImG.exe
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.00000000037A6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameSLABHIDDevice.dllt* vs UFh7A8CImG.exe
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.00000000037A6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameHIDtoUART.dllb! vs UFh7A8CImG.exe
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameFilesystemDialogsCOM.dlln' vs UFh7A8CImG.exe
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameXmlWrapp.dllF vs UFh7A8CImG.exe
Source: UFh7A8CImG.exe, 00000000.00000003.1724610247.000000000392C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameMI.exe vs UFh7A8CImG.exe

Source: UFh7A8CImG.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: Vipro.dll.0.dr	Static PE information: Section: 5m2xY ZLIB complexity 0.9984749571917808
Source: Vipro.dll.0.dr	Static PE information: Section: Mo1qpM ZLIB complexity 1.0035807291666667

Source: classification engine

Classification label: mal100.phis.troj.spyw.evad.winEXE@10/299@0/5

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

Code function: 8_2_6C98E170 LoadLibraryA,GetLastError,FormatMessageA,GetProcAddress,GetLastError,FormatMessageA,

8_2_6C98E170

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

Code function: 10_2_6CEB2588 GetDiskFreeSpaceW,

10_2_6CEB2588

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

Code function: 8_2_6C9D2382 LoadLibraryA,FindResourceA,LoadResource,LockResource,DialogBoxIndirectParamA,FreeResource,FreeResource,

8_2_6C9D2382

Source: C:\Users\user\Desktop\UFh7A8CImG.exe

File created: C:\Users\user\AppData\Local\Programs

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5856:120:WilError_03
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Mutant created: \Sessions\1\BaseNamedObjects\59989252

Source: C:\Users\user\Desktop\UFh7A8CImG.exe

File created: C:\Users\user\AppData\Local\Temp\TMP6AC3.tmp

Source: UFh7A8CImG.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales

Source: C:\Users\user\Desktop\UFh7A8CImG.exe

File read: C:\Users\user\Desktop\desktop.ini

Source: C:\Users\user\Desktop\UFh7A8CImG.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion RegisteredOrganization

Source: MIs.exe, 00000001.00000003.2112762112.000000000699A000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1771393442.0000000006107000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1776282835.0000000005B54000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1766962431.00000000055C1000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2111575348.000000000699E000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2112045230.0000000007C9E000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1772025546.0000000005B59000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1766487852.000000000501F000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2111088801.0000000005B52000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1769409309.0000000005019000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1770783572.0000000005B5F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
Source: MIs.exe, 00000001.00000003.2112762112.000000000699A000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1771393442.0000000006107000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1776282835.0000000005B54000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1766962431.00000000055C1000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2111575348.000000000699E000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2112045230.0000000007C9E000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1772025546.0000000005B59000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1766487852.000000000501F000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2111088801.0000000005B52000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1769409309.0000000005019000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1770783572.0000000005B5F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
Source: MIs.exe, 00000001.00000003.2112762112.000000000699A000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1771393442.0000000006107000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1776282835.0000000005B54000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1766962431.00000000055C1000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2111575348.000000000699E000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2112045230.0000000007C9E000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1772025546.0000000005B59000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1766487852.000000000501F000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2111088801.0000000005B52000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1769409309.0000000005019000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1770783572.0000000005B5F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
Source: MIs.exe, 00000001.00000003.2112762112.000000000699A000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1771393442.0000000006107000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1776282835.0000000005B54000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1766962431.00000000055C1000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2111575348.000000000699E000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2112045230.0000000007C9E000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1772025546.0000000005B59000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1766487852.000000000501F000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2111088801.0000000005B52000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1769409309.0000000005019000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1770783572.0000000005B5F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');

Source: UFh7A8CImG.exe

ReversingLabs: Detection: 52%

Source: MIs.exe	String found in binary or memory: Failed to open USB device with user-specified bus/address or serial number. This usually happens because the device is already in use by another running program.
Source: MIs.exe	String found in binary or memory: USB serial number restriction is present (%s) in addition to USB bus/address restrictions, this single candidate device didn't match it (%s).

Source: unknown	Process created: C:\Users\user\Desktop\UFh7A8CImG.exe "C:\Users\user\Desktop\UFh7A8CImG.exe"
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Process created: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe "C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe"
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe "C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe "C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe"
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Process created: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe "C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe"

Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: winusb.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: libusbk.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: hid.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: devobj.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: winusb.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: libusbk.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: hid.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: devobj.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: slabhidtouart.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: slabhiddevice.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: vtdsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: mfc42u.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: vipro.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: slabhiddevice.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: hid.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: lib_help.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: winusb.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: libusbk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: devobj.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: winusb.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: libusbk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: libjack.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: fppdes9.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: filesystemdialogscom.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: filesystemdialogs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wshunix.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: avifil32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: cryptui.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: pstorec.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wlanapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: netprofm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: npmproxy.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: mmdevapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: audioses.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: slabhidtouart.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: slabhiddevice.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: vtdsp.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: mfc42u.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: vipro.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: slabhiddevice.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: lib_help.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: hid.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: netapi32.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: winusb.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: libusbk.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: shfolder.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: devobj.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: winusb.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: libusbk.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: coremessaging.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: ntmarta.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: coremessaging.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: libjack.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: fppdes9.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: secur32.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: filesystemdialogscom.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: filesystemdialogs.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: sxs.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: textshaping.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: oleacc.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wtsapi32.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wshunix.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: slabhidtouart.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: slabhiddevice.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: vtdsp.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: mfc42u.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: vipro.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: hid.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: lib_help.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: netapi32.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: winusb.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: libusbk.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: shfolder.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: devobj.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: winusb.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: libusbk.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: libjack.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: fppdes9.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: secur32.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: filesystemdialogscom.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: filesystemdialogs.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: sxs.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: coremessaging.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: ntmarta.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: coremessaging.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: textshaping.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: oleacc.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wtsapi32.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Section loaded: wshunix.dll

Source: C:\Users\user\Desktop\UFh7A8CImG.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\InProcServer32

Detected unpacking (creates a PE file in dynamic memory)

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

Window detected: Number of UI elements: 26

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Source: UFh7A8CImG.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: UFh7A8CImG.exe

Static file information: File size 13858920 > 1048576

Source: UFh7A8CImG.exe	Static PE information: Raw size of .text is bigger than: 0x100000 < 0x2ab400
Source: UFh7A8CImG.exe	Static PE information: Raw size of .rsrc is bigger than: 0x100000 < 0x9bf400

Source: UFh7A8CImG.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source:	Binary string: C:\MCU_SCM\Development\FixedFunction\CP211x\PC_Applications\InterfaceLibrary\Windows_2K_XP_S2K3_Vista\HIDtoUART\Release\SLABHIDtoUART.pdb source: UFh7A8CImG.exe, 00000000.00000003.1724610247.00000000037A6000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: d:\jenkins-slave\workspace\SLABHIDDevice\SLABHIDDevice\Release\SLABHIDDevice.pdb source: UFh7A8CImG.exe, 00000000.00000003.1724610247.00000000037A6000.00000004.00000020.00020000.00000000.sdmp

Source: UFh7A8CImG.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: UFh7A8CImG.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: UFh7A8CImG.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: UFh7A8CImG.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: UFh7A8CImG.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Data Obfuscation

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Unpacked PE file: 8.2.MIs.exe.3070000.1.unpack
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Unpacked PE file: 10.2.MIs.exe.3110000.1.unpack

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

Code function: 8_2_6CE9223B GetModuleHandleA,LoadLibraryA,GetProcAddress,

8_2_6CE9223B

Source: initial sample

Static PE information: section where entry point is pointing to: gf5DGXU0

Source: VScopeResENUS.dll.0.dr	Static PE information: real checksum: 0x0 should be: 0x11b093
Source: FilesystemDialogsCOM.dll.0.dr	Static PE information: real checksum: 0x118149 should be: 0x11014a
Source: fppdes9.dll.0.dr	Static PE information: real checksum: 0x0 should be: 0x66690
Source: Vipro.dll.0.dr	Static PE information: real checksum: 0x63dc3 should be: 0x61a06

Source: VTDSP.dll.0.dr	Static PE information: section name: /4
Source: VTDSP.dll.0.dr	Static PE information: section name: /19
Source: VTDSP.dll.0.dr	Static PE information: section name: /31
Source: VTDSP.dll.0.dr	Static PE information: section name: /45
Source: VTDSP.dll.0.dr	Static PE information: section name: /57
Source: VTDSP.dll.0.dr	Static PE information: section name: /70
Source: VTDSP.dll.0.dr	Static PE information: section name: /81
Source: VTDSP.dll.0.dr	Static PE information: section name: /92
Source: FilesystemDialogsCOM.dll.0.dr	Static PE information: section name: .didata
Source: MIs.exe.0.dr	Static PE information: section name: 0u
Source: MIs.exe.0.dr	Static PE information: section name: xwgWeRT
Source: MIs.exe.0.dr	Static PE information: section name: nl4l
Source: MIs.exe.0.dr	Static PE information: section name: gf5DGXU0
Source: Vipro.dll.0.dr	Static PE information: section name: 5m2xY
Source: Vipro.dll.0.dr	Static PE information: section name: Gv7z8pI
Source: Vipro.dll.0.dr	Static PE information: section name: Mo1qpM
Source: Vipro.dll.0.dr	Static PE information: section name: bLHfR2
Source: Vipro.dll.0.dr	Static PE information: section name: fXfj3

Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Code function: 0_2_010CCE05 push ecx; ret	0_2_010CCE18
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_005E37A0 push eax; ret	8_2_005E37CE
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C97D1B1 push es; iretd	8_2_6C97D1B5
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9AE161 push ecx; ret	8_2_6C9AE174
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9D5FE2 push ecx; ret	8_2_6C9D5FF5
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9D898E push dword ptr [ebx]; iretd	8_2_6C9D8991
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9D61D6 push ecx; ret	8_2_6C9D61E9
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9F135D push esi; ret	8_2_6C9F1366
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6CF5CC74 push ecx; mov dword ptr [esp], edx	8_2_6CF5CC75
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6CF58DFC push ecx; mov dword ptr [esp], edx	8_2_6CF58DFD
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6CEE8DD0 push ecx; mov dword ptr [esp], eax	8_2_6CEE8DD2
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6CF62DBC push ecx; mov dword ptr [esp], edx	8_2_6CF62DBD
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6CF54EFC push ecx; mov dword ptr [esp], edx	8_2_6CF54EFD
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6CF5AFD0 push ecx; mov dword ptr [esp], edx	8_2_6CF5AFD1
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6CEA08DA push ecx; mov dword ptr [esp], edx	8_2_6CEA08DD
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6CEA0888 push ecx; mov dword ptr [esp], edx	8_2_6CEA0889
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6CEA0894 push ecx; mov dword ptr [esp], edx	8_2_6CEA0895
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6CEA087C push ecx; mov dword ptr [esp], edx	8_2_6CEA087D
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6CF0E9E0 push ecx; mov dword ptr [esp], edx	8_2_6CF0E9E1
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6CF0C9C4 push ecx; mov dword ptr [esp], edx	8_2_6CF0C9C5
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6CF5C9BC push ecx; mov dword ptr [esp], edx	8_2_6CF5C9BD
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6CEA0922 push ecx; mov dword ptr [esp], edx	8_2_6CEA0925
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6CEA0900 push ecx; mov dword ptr [esp], edx	8_2_6CEA0901
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6CED6900 push ecx; mov dword ptr [esp], edx	8_2_6CED6901
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6CEA0A2C push ecx; mov dword ptr [esp], edx	8_2_6CEA0A2D
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6CEA0A14 push ecx; mov dword ptr [esp], edx	8_2_6CEA0A15
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6CF5A4C0 push ecx; mov dword ptr [esp], ecx	8_2_6CF5A4C4
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6C9D5FE2 push ecx; ret	10_2_6C9D5FF5
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6C9D898E push dword ptr [ebx]; iretd	10_2_6C9D8991
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6C9D61D6 push ecx; ret	10_2_6C9D61E9
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6C9F135D push esi; ret	10_2_6C9F1366

Source: MIs.exe.0.dr	Static PE information: section name: gf5DGXU0 entropy: 7.241042416436075
Source: Vipro.dll.0.dr	Static PE information: section name: 5m2xY entropy: 7.997265604569775
Source: Vipro.dll.0.dr	Static PE information: section name: fXfj3 entropy: 7.952553700537808

Source: C:\Users\user\Desktop\UFh7A8CImG.exe	File created: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\fppdes9.dll	Jump to dropped file
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	File created: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\Vipro.dll	Jump to dropped file
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	File created: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\SLABHIDtoUART.dll	Jump to dropped file
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	File created: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\FilesystemDialogsCOM.dll	Jump to dropped file
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	File created: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\VTDSP.dll	Jump to dropped file
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	File created: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Jump to dropped file
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	File created: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\VScopeResENUS.dll	Jump to dropped file
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	File created: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\Lib_Help.dll	Jump to dropped file
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	File created: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\SLABHIDDevice.dll	Jump to dropped file

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run Advanced Vynil Studio			Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run Advanced Vynil Studio			Jump to behavior

Hooking and other Techniques for Hiding and Protection

Loading BitLocker PowerShell Module

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1

May use the Tor software to hide its network traffic

Source: MIs.exe, 00000001.00000003.2112762112.000000000699A000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1771393442.0000000006107000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1776282835.0000000005B54000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1766962431.00000000055C1000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2111575348.000000000699E000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2112045230.0000000007C9E000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1772025546.0000000005B59000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1766487852.000000000501F000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2111088801.0000000005B52000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1769409309.0000000005019000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1770783572.0000000005B5F000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: torConnect

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

Code function: 8_2_6C96BD80 GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,FreeLibrary,GetProcAddress,GetProcAddress,FreeLibrary,

8_2_6C96BD80

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

Key value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\MSDAIPP\Provider\{C84667C0-0F23D652-790E635B-FEA6F99B} unknown

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Windows\System32\conhost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX

Malware Analysis System Evasion

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	RDTSC instruction interceptor: First address: 659BEF second address: 659BF5 instructions: 0x00000000 rdtsc 0x00000002 mov edi, edx 0x00000004 mov ebx, eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	RDTSC instruction interceptor: First address: 659BF5 second address: 659C08 instructions: 0x00000000 rdtsc 0x00000002 cmp edi, edx 0x00000004 jne 00007FF5D4D21E26h 0x00000006 sub eax, ebx 0x00000008 mov dword ptr [ebp+0050DE69h], eax 0x0000000e mov ecx, 0000000Ah 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	RDTSC instruction interceptor: First address: 659C08 second address: 659C0E instructions: 0x00000000 rdtsc 0x00000002 mov edi, edx 0x00000004 mov ebx, eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	RDTSC instruction interceptor: First address: 659C0E second address: 659C08 instructions: 0x00000000 rdtsc 0x00000002 cmp edi, edx 0x00000004 jne 00007FF5D4D21E26h 0x00000006 sub eax, ebx 0x00000008 cmp eax, dword ptr [ebp+0050DE69h] 0x0000000e jnle 00007FF5D4D21E38h 0x00000010 mov dword ptr [ebp+0050DE69h], eax 0x00000016 dec ecx 0x00000017 jne 00007FF5D4D21E13h 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	RDTSC instruction interceptor: First address: 659C0E second address: 659C08 instructions: 0x00000000 rdtsc 0x00000002 cmp edi, edx 0x00000004 jne 00007FF5D4D21E26h 0x00000006 sub eax, ebx 0x00000008 cmp eax, dword ptr [ebp+0050DE69h] 0x0000000e jnle 00007FF5D4D21E38h 0x00000010 dec ecx 0x00000011 jne 00007FF5D4D21E13h 0x00000013 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Special instruction interceptor: First address: 659C03 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Special instruction interceptor: First address: 659C24 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\disk\Enum name: 0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosDate
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

Code function: 8_2_6C9698C0 SetupDiGetDeviceRegistryPropertyA,SetupDiGetDeviceRegistryPropertyA,_strrchr,_strrchr,SetupDiGetDeviceRegistryPropertyA,

8_2_6C9698C0

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Window / User API: threadDelayed 695	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Window / User API: threadDelayed 727	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Window / User API: threadDelayed 3539	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Window / User API: threadDelayed 3260	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Window / User API: threadDelayed 740
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5803
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 429
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Window / User API: threadDelayed 1698
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Window / User API: threadDelayed 776

Source: C:\Users\user\Desktop\UFh7A8CImG.exe

Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\VScopeResENUS.dll

Jump to dropped file

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

API coverage: 8.4 %

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe TID: 7144	Thread sleep time: -34750s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe TID: 3096	Thread sleep time: -562000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe TID: 1352	Thread sleep time: -566000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe TID: 2500	Thread sleep time: -75075s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe TID: 1352	Thread sleep time: -7078000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe TID: 3096	Thread sleep time: -6520000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe TID: 7112	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe TID: 7116	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe TID: 4412	Thread sleep count: 740 > 30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6860	Thread sleep count: 5803 > 30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6072	Thread sleep time: -2767011611056431s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6872	Thread sleep count: 429 > 30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6964	Thread sleep time: -2767011611056431s >= -30000s
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe TID: 5888	Thread sleep count: 1698 > 30
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe TID: 5888	Thread sleep time: -84900s >= -30000s
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe TID: 5888	Thread sleep count: 776 > 30

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6CE9E6FC FindFirstFileW,FindClose,	8_2_6CE9E6FC
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6CF6DA64 GetLongPathNameW,GetLongPathNameW,FindFirstFileW,FindClose,	8_2_6CF6DA64
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6CE9E6FC FindFirstFileW,FindClose,	10_2_6CE9E6FC
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6CF6DA64 GetLongPathNameW,GetLongPathNameW,FindFirstFileW,FindClose,	10_2_6CF6DA64
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6CE9E118 GetModuleHandleW,GetProcAddress,FindFirstFileW,FindClose,lstrlenW,lstrlenW,	10_2_6CE9E118

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

Code function: 8_2_6CEA0508 GetSystemInfo,

8_2_6CEA0508

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Thread delayed: delay time: 75075	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows	Jump to behavior

Source: MIs.exe	Binary or memory string: VMware
Source: MIs.exe, 00000001.00000003.1729733699.00000000008D1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
Source: MIs.exe	Binary or memory string: VMWARE
Source: UFh7A8CImG.exe, 00000000.00000002.1728596141.0000000000AB4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}y
Source: MIs.exe, 00000001.00000003.1730909053.00000000008BE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: #cdrom&ven_necvmwar&prod_vmware_sata_cd00#4&224f42ef&0&000000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}
Source: MIs.exe, 00000001.00000003.1729733699.00000000008D1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#cdrom&ven_necvmwar&prod_vmware_sata_cd00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: MIs.exe, 00000001.00000003.1729455289.00000000008C0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 000War&Prod_VMware_
Source: UFh7A8CImG.exe, 00000000.00000003.1697276774.0000000000AB4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SCSI\DISK&VEN_VMWARE&PROD_VIRTUAL_DISK\4&1656F219&0&000000
Source: MIs.exe, 00000001.00000003.1729733699.00000000008D1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#cdrom&ven_necvmwar&prod_vmware_sata_cd00#4&224f42ef&0&000000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	API call chain: ExitProcess graph end node			graph_8-85436
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	API call chain: ExitProcess graph end node			graph_10-65583

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

System information queried: ModuleInformation

Adds a directory exclusion to Windows Defender

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Source: C:\Users\user\Desktop\UFh7A8CImG.exe

Code function: 0_2_010D8158 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

0_2_010D8158

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

Code function: 8_2_6CE9223B GetModuleHandleA,LoadLibraryA,GetProcAddress,

8_2_6CE9223B

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9E1B3F mov eax, dword ptr fs:[00000030h]		8_2_6C9E1B3F
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6C9E1B3F mov eax, dword ptr fs:[00000030h]		10_2_6C9E1B3F

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

Code function: 8_2_6C9ADEC0 TlsGetValue,GetProcessHeap,HeapFree,GetProcessHeap,HeapFree,TlsSetValue,GetProcessHeap,HeapFree,

8_2_6C9ADEC0

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process token adjusted: Debug			Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug

Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Code function: 0_2_010D8158 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_010D8158
Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Code function: 0_2_010CC46F SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_010CC46F
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C991CD1 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	8_2_6C991CD1
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C98EBC8 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	8_2_6C98EBC8
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C98F1D2 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	8_2_6C98F1D2
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9D581B SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	8_2_6C9D581B
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9DA1DF IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	8_2_6C9DA1DF
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9D63FF IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	8_2_6C9D63FF
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6C9D581B SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	10_2_6C9D581B
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6C9DA1DF IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	10_2_6C9DA1DF
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6C9D63FF IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	10_2_6C9D63FF

HIPS / PFW / Operating System Protection Evasion

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe"
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe"

Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Process created: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe "C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe"

Source: MIs.exe, 00000001.00000003.2112762112.000000000699A000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1771393442.0000000006107000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1776282835.0000000005B54000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Shell_TrayWndTrayNotifyWndSysPagerToolbarWindow32U
Source: MIs.exe, 00000001.00000003.2112762112.000000000699A000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1771393442.0000000006107000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1776282835.0000000005B54000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: explorer.exeShell_TrayWnd

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

Code function: 8_2_6C9D6258 cpuid

8_2_6C9D6258

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: GetUserDefaultUILanguage,GetLocaleInfoW,	8_2_6CE9E850
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: GetUserDefaultUILanguage,GetLocaleInfoW,	10_2_6CE9E850
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: EnumSystemLocalesW,	10_2_6CEBC04C
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	10_2_6CE9DCB4
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: GetLocaleInfoW,	10_2_6CEBBE48
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: GetLocaleInfoW,	10_2_6CEB71D8
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: GetLocaleInfoW,	10_2_6CEB718C

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

Code function: 8_2_6C9698C0 SetupDiGetDeviceRegistryPropertyA,SetupDiGetDeviceRegistryPropertyA,_strrchr,_strrchr,SetupDiGetDeviceRegistryPropertyA,

8_2_6C9698C0

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion InstallDate

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion ProductId

Source: C:\Users\user\Desktop\UFh7A8CImG.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\TMP6AC3.tmp VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.Management.Infrastructure.Native\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.Native.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\UFh7A8CImG.exe

Code function: 0_2_010CCE82 GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

0_2_010CCE82

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

Code function: 8_2_6C9A0E65 GetTimeZoneInformation,

8_2_6C9A0E65

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

Code function: 8_2_6C966780 GetVersionExA,GetVersionExA,GetVersionExA,VerSetConditionMask,VerifyVersionInfoA,VerifyVersionInfoA,VerSetConditionMask,VerifyVersionInfoA,GetCurrentProcess,IsWow64Process,

8_2_6C966780

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Stealing of Sensitive Information

Tries to harvest and steal browser information (history, passwords, etc)

Source: Yara match	File source: 00000001.00000003.1771393442.0000000006107000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1766962431.00000000055C1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2753770406.0000000004F46000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.4163904835.000000000547F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1776282835.0000000005B54000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2112045230.0000000007C9E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2111575348.000000000699E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1772025546.0000000005B59000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.4163433694.0000000004ED6000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.4163859568.00000000054E8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2672511181.0000000005485000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2675930453.0000000005476000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1766487852.000000000501F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2757410780.0000000004F43000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2111088801.0000000005B52000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2112762112.000000000699A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2677180622.0000000004933000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2682133919.000000000493C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1769409309.0000000005019000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1770783572.0000000005B5F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2756648118.00000000054E9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.4163368007.00000000049A6000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2680974566.0000000005FD0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2674638334.0000000004ED5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1767758397.0000000004A76000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2681358492.0000000004ED1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2761374837.000000000603D000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2754810471.00000000054E8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2761931254.00000000054E2000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2672015882.0000000004EE0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2115889808.0000000007C9A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1772504401.00000000060FE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2757899973.0000000005A8F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2675208046.0000000005A2A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2758858785.00000000049A7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1770179849.0000000005013000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2762777663.0000000004F4C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: MIs.exe PID: 7028, type: MEMORYSTR

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior

Tries to steal Instant Messenger accounts or passwords

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

File opened: C:\Users\user\AppData\Roaming\Miranda\

Source: Yara match	File source: 00000001.00000003.1771393442.0000000006107000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1766962431.00000000055C1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2753770406.0000000004F46000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.4163904835.000000000547F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1776282835.0000000005B54000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2112045230.0000000007C9E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2111575348.000000000699E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1772025546.0000000005B59000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.4163433694.0000000004ED6000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.4163859568.00000000054E8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2672511181.0000000005485000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2675930453.0000000005476000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1766487852.000000000501F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2757410780.0000000004F43000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2111088801.0000000005B52000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2112762112.000000000699A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2677180622.0000000004933000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2682133919.000000000493C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1769409309.0000000005019000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1770783572.0000000005B5F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2756648118.00000000054E9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.4163368007.00000000049A6000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2680974566.0000000005FD0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2674638334.0000000004ED5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1767758397.0000000004A76000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2681358492.0000000004ED1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2761374837.000000000603D000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2754810471.00000000054E8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2761931254.00000000054E2000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2672015882.0000000004EE0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2115889808.0000000007C9A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1772504401.00000000060FE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2757899973.0000000005A8F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2675208046.0000000005A2A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2758858785.00000000049A7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1770179849.0000000005013000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2762777663.0000000004F4C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: MIs.exe PID: 7028, type: MEMORYSTR

Remote Access Functionality

Source: Yara match	File source: 00000001.00000003.1771393442.0000000006107000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1766962431.00000000055C1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2753770406.0000000004F46000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.4163904835.000000000547F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1776282835.0000000005B54000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2112045230.0000000007C9E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2111575348.000000000699E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1772025546.0000000005B59000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.4163433694.0000000004ED6000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.4163859568.00000000054E8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2672511181.0000000005485000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2675930453.0000000005476000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1766487852.000000000501F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2757410780.0000000004F43000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2111088801.0000000005B52000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2112762112.000000000699A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2677180622.0000000004933000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2682133919.000000000493C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1769409309.0000000005019000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1770783572.0000000005B5F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2756648118.00000000054E9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.4163368007.00000000049A6000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2680974566.0000000005FD0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2674638334.0000000004ED5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1767758397.0000000004A76000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2681358492.0000000004ED1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2761374837.000000000603D000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2754810471.00000000054E8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2761931254.00000000054E2000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2672015882.0000000004EE0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2115889808.0000000007C9A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1772504401.00000000060FE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2757899973.0000000005A8F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2675208046.0000000005A2A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2758858785.00000000049A7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1770179849.0000000005013000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2762777663.0000000004F4C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: MIs.exe PID: 7028, type: MEMORYSTR

Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 8_2_6C9D230C __ehhandler$??1_Scoped_lock@?$SafeRWList@UListEntry@details@Concurrency@@VNoCount@CollectionTypes@23@V_ReaderWriterLock@23@@details@Concurrency@@QAE@XZ,		8_2_6C9D230C
Source: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	Code function: 10_2_6C9D230C __ehhandler$??1_Scoped_lock@?$SafeRWList@UListEntry@details@Concurrency@@VNoCount@CollectionTypes@23@V_ReaderWriterLock@23@@details@Concurrency@@QAE@XZ,		10_2_6C9D230C

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	11 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	1 OS Credential Dumping	2 System Time Discovery	Remote Services	1 Archive Collected Data	12 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	1 Registry Run Keys / Startup Folder	12 Process Injection	1 Deobfuscate/Decode Files or Information	1 Credentials in Registry	3 File and Directory Discovery	Remote Desktop Protocol	1 Data from Local System	1 Multi-hop Proxy	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	2 Command and Scripting Interpreter	Logon Script (Windows)	1 Registry Run Keys / Startup Folder	3 Obfuscated Files or Information	1 Credentials In Files	288 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	12 Software Packing	NTDS	1 Query Registry	Distributed Component Object Model	Input Capture	1 Proxy	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	441 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Masquerading	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Modify Registry	DCSync	141 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	141 Virtualization/Sandbox Evasion	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	12 Process Injection	/etc/passwd and /etc/shadow	1 System Owner/User Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
UFh7A8CImG.exe	53%	ReversingLabs	Win32.Trojan.Danabot
UFh7A8CImG.exe	100%	Avira	DR/AVI.Agent.mulmd

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\Lib_Help.dll	100%	Avira	TR/Dldr.Rugmi.zfkkg
C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\Vipro.dll	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\TMP6AC3.tmp	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\FilesystemDialogsCOM.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\Lib_Help.dll	62%	ReversingLabs	Win32.Trojan.Dacic
C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe	3%	ReversingLabs
C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\SLABHIDDevice.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\SLABHIDtoUART.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\VScopeResENUS.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\VTDSP.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\Vipro.dll	5%	ReversingLabs
C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\fppdes9.dll	3%	ReversingLabs

Source	Detection	Scanner	Label
http://www.virtins.com/-Manual-ZHCHS.pdfhttp://www.multi-tech.cn/.pdf.chm-ZHCHS-ManualHardwareManual	0%	Avira URL Cloud	safe
https://www.multi-tech.cn/applications.shtml	0%	Avira URL Cloud	safe
http://www.virtins.com	0%	Avira URL Cloud	safe
http://www.multi-tech.cn/MIsetup.exe	0%	Avira URL Cloud	safe
https://www.virtins.com/activate.html	0%	Avira URL Cloud	safe
http://www.virtins.com/MIsetup.exe	0%	Avira URL Cloud	safe
https://www.virtins.com/multi-instrument.html	0%	Avira URL Cloud	safe
https://www.rme-audio.de/downloads/adi24pro_e.pdfhttps://www.rme-audio.de/downloads/adi2profs_e.pdfR	0%	Avira URL Cloud	safe
http://www.virtins.com/	0%	Avira URL Cloud	safe
http://ocsp.digicer8	0%	Avira URL Cloud	safe
https://www.virtins.com/applications.html	0%	Avira URL Cloud	safe
https://www.virtins.com/applications.htmlhttps://www.multi-tech.cn/applications.shtmlApplicationSumm	0%	Avira URL Cloud	safe
http://www.multi-tech.cn/	0%	Avira URL Cloud	safe
http://www.virtins.com/MIsetup.exehttp://www.multi-tech.cn/MIsetup.exeUpdate	0%	Avira URL Cloud	safe
https://www.rme-audio.de/downloads/adi24pro_e.pdf	0%	Avira URL Cloud	safe
https://www.rme-audio.de/downloads/adi2profs_e.pdf	0%	Avira URL Cloud	safe
https://inivation.gitlab.io/dv/dv-docs/docs/update-firmware/	0%	Avira URL Cloud	safe

Name	Source	Malicious	Antivirus Detection	Reputation
http://crl.sectigo.com/SectigoPublicCodeSigningCAEVR36.crl0	UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	false		high
http://html4/loose.dtd	MIs.exe, 00000001.00000003.2112762112.000000000699A000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1771393442.0000000006107000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1776282835.0000000005B54000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1766962431.00000000055C1000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2111575348.000000000699E000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2112045230.0000000007C9E000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1772025546.0000000005B59000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1766487852.000000000501F000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2111088801.0000000005B52000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1769409309.0000000005019000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1770783572.0000000005B5F000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.virtins.com/-Manual-ZHCHS.pdfhttp://www.multi-tech.cn/.pdf.chm-ZHCHS-ManualHardwareManual	UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000000.1727952365.0000000000600000.00000008.00000001.01000000.00000005.sdmp	false	Avira URL Cloud: safe	unknown
https://sectigo.com/CPS0	UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.multi-tech.cn/applications.shtml	MIs.exe	false	Avira URL Cloud: safe	unknown
http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#	UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0	UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	false		high
http://ocsp.sectigo.com0	UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.rme-audio.de/downloads/adi24pro_e.pdfhttps://www.rme-audio.de/downloads/adi2profs_e.pdfR	UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000000.1727952365.0000000000600000.00000008.00000001.01000000.00000005.sdmp	false	Avira URL Cloud: safe	unknown
http://www.openssl.org/V	MIs.exe, 00000001.00000003.2117562696.000000007FAF0000.00000004.00001000.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2116981899.000000007EBA0000.00000004.00001000.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2116225229.000000007E700000.00000004.00001000.00020000.00000000.sdmp	false		high
http://www.virtins.com/	MIs.exe	false	Avira URL Cloud: safe	unknown
http://crt.sectigo.com/SectigoPublicCodeSigningCAEVR36.crt0#	UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.virtins.com	UFh7A8CImG.exe, 00000000.00000003.1724610247.000000000392C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.multi-tech.cn/MIsetup.exe	MIs.exe	false	Avira URL Cloud: safe	unknown
http://www.virtins.com/MIsetup.exe	MIs.exe	false	Avira URL Cloud: safe	unknown
https://www.virtins.com/activate.html	MIs.exe	false	Avira URL Cloud: safe	unknown
https://www.virtins.com/multi-instrument.html	MIs.exe	false	Avira URL Cloud: safe	unknown
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#	UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.virtins.com/applications.htmlhttps://www.multi-tech.cn/applications.shtmlApplicationSumm	UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000000.1727952365.0000000000600000.00000008.00000001.01000000.00000005.sdmp	false	Avira URL Cloud: safe	unknown
http://.css	MIs.exe, 00000001.00000003.2112762112.000000000699A000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1771393442.0000000006107000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1776282835.0000000005B54000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1766962431.00000000055C1000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2111575348.000000000699E000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2112045230.0000000007C9E000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1772025546.0000000005B59000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1766487852.000000000501F000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2111088801.0000000005B52000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1769409309.0000000005019000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1770783572.0000000005B5F000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.openssl.org/support/faq.html	MIs.exe, 00000001.00000003.2116225229.000000007E700000.00000004.00001000.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2114493173.000000007ECF0000.00000004.00001000.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2115522722.000000007ED70000.00000004.00001000.00020000.00000000.sdmp	false		high
http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0	UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.openssl.org/support/faq.htmlRAND	MIs.exe, 00000001.00000003.2116225229.000000007E700000.00000004.00001000.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2114493173.000000007ECF0000.00000004.00001000.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2115522722.000000007ED70000.00000004.00001000.00020000.00000000.sdmp	false		high
https://www.virtins.com/applications.html	MIs.exe	false	Avira URL Cloud: safe	unknown
http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z	UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	false		high
http://ocsp.digicer8	UFh7A8CImG.exe, 00000000.00000002.1730018002.00000000032F0000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.virtins.com/MIsetup.exehttp://www.multi-tech.cn/MIsetup.exeUpdate	UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000000.1727952365.0000000000600000.00000008.00000001.01000000.00000005.sdmp	false	Avira URL Cloud: safe	unknown
http://www.multi-tech.cn/	MIs.exe	false	Avira URL Cloud: safe	unknown
http://.jpg	MIs.exe, 00000001.00000003.2112762112.000000000699A000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1771393442.0000000006107000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1776282835.0000000005B54000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1766962431.00000000055C1000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2111575348.000000000699E000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2112045230.0000000007C9E000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1772025546.0000000005B59000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1766487852.000000000501F000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.2111088801.0000000005B52000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1769409309.0000000005019000.00000004.00000020.00020000.00000000.sdmp, MIs.exe, 00000001.00000003.1770783572.0000000005B5F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://inivation.gitlab.io/dv/dv-docs/docs/update-firmware/	MIs.exe	false	Avira URL Cloud: safe	unknown
https://www.rme-audio.de/downloads/adi2profs_e.pdf	MIs.exe	false	Avira URL Cloud: safe	unknown
https://www.rme-audio.de/downloads/adi24pro_e.pdf	MIs.exe	false	Avira URL Cloud: safe	unknown
http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#	UFh7A8CImG.exe, 00000000.00000003.1724610247.0000000003406000.00000004.00000020.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
8.8.8.8	unknown	United States	15169	GOOGLEUS	false
89.116.191.177	unknown	Lithuania	15419	LRTC-ASLT	true
77.221.149.84	unknown	Russian Federation	30968	INFOBOX-ASInfoboxruAutonomousSystemRU	true
213.210.13.4	unknown	United Kingdom	8851	EDGEtaGCIComGB	true
193.188.22.40	unknown	Russian Federation	49558	LIVECOMM-ASRespublikanskayastr3k6RU	true

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1573190
Start date and time:	2024-12-11 16:18:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 12m 42s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	UFh7A8CImG.exe renamed because original name is a hash value
Original Sample Name:	807cf9e5e22a71ca4bf1e31e955c1e2dfc80f1d38decf8b52857c29aadf04b90.exe
Detection:	MAL
Classification:	mal100.phis.troj.spyw.evad.winEXE@10/299@0/5
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 60% Number of executed functions: 108 Number of non-executed functions: 241
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 20.109.210.53, 13.107.246.63
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtCreateKey calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtEnumerateKey calls found.
Report size getting too big, too many NtEnumerateValueKey calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtQueryVolumeInformationFile calls found.
Report size getting too big, too many NtReadFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: UFh7A8CImG.exe

Simulations

Behavior and APIs

Time	Type	Description
10:19:07	API Interceptor	7698224x Sleep call for process: MIs.exe modified
10:20:37	API Interceptor	9x Sleep call for process: powershell.exe modified
15:20:36	Task Scheduler	Run new task: Advanced Vynil Studio Suite path: C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
15:20:38	Autostart	Run: HKLM\Software\Microsoft\Windows\CurrentVersion\Run Advanced Vynil Studio C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
89.116.191.177	nSORtPkIOR.msi	Get hash	malicious	DanaBot	Browse
	cloudflare.msi	Get hash	malicious	DanaBot	Browse
	zDcNyG6Csn.exe	Get hash	malicious	DanaBot	Browse
77.221.149.84	zDcNyG6Csn.exe	Get hash	malicious	DanaBot	Browse
213.210.13.4	nSORtPkIOR.msi	Get hash	malicious	DanaBot	Browse
	cloudflare.msi	Get hash	malicious	DanaBot	Browse
	zDcNyG6Csn.exe	Get hash	malicious	DanaBot	Browse
193.188.22.40	nSORtPkIOR.msi	Get hash	malicious	DanaBot	Browse
	cloudflare.msi	Get hash	malicious	DanaBot	Browse
	zDcNyG6Csn.exe	Get hash	malicious	DanaBot	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
INFOBOX-ASInfoboxruAutonomousSystemRU	zDcNyG6Csn.exe	Get hash	malicious	DanaBot	Browse	77.221.149.84
	file.exe	Get hash	malicious	PureCrypter	Browse	109.120.137.89
	file.exe	Get hash	malicious	PureCrypter	Browse	109.120.137.89
	USD470900_COPY_800BLHSBC882001_NOV202024.PDF.exe	Get hash	malicious	Remcos, DBatLoader	Browse	77.221.149.38
	USD470900_COPY_800BLHSBC882001.PDF.bat	Get hash	malicious	Remcos, DBatLoader	Browse	77.221.149.38
	YDW0S5K7hi.exe	Get hash	malicious	SilverRat	Browse	109.120.138.54
	cDRgXaadjD.exe	Get hash	malicious	SilverRat	Browse	109.120.138.220
	botnet.x86.elf	Get hash	malicious	Mirai, Moobot	Browse	92.243.83.22
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse	77.221.151.63
	boatnet.mips.elf	Get hash	malicious	Mirai	Browse	77.221.151.63
LRTC-ASLT	nSORtPkIOR.msi	Get hash	malicious	DanaBot	Browse	89.116.191.177
	cloudflare.msi	Get hash	malicious	DanaBot	Browse	89.116.191.177
	zDcNyG6Csn.exe	Get hash	malicious	DanaBot	Browse	89.116.191.177
	jew.arm7.elf	Get hash	malicious	Mirai	Browse	89.117.100.57
	ET5.exe	Get hash	malicious	Unknown	Browse	89.117.55.228
	b1.exe	Get hash	malicious	PureCrypter, MicroClip	Browse	89.117.79.31
	b1.exe	Get hash	malicious	PureCrypter, MicroClip	Browse	89.117.79.31
	mipsel.elf	Get hash	malicious	Unknown	Browse	84.46.252.91
	aeI0ukq9TD.exe	Get hash	malicious	Unknown	Browse	89.117.72.231
	0ylPF4c3eF.exe	Get hash	malicious	Unknown	Browse	89.117.72.231
EDGEtaGCIComGB	nSORtPkIOR.msi	Get hash	malicious	DanaBot	Browse	213.210.13.4
	cloudflare.msi	Get hash	malicious	DanaBot	Browse	213.210.13.4
	zDcNyG6Csn.exe	Get hash	malicious	DanaBot	Browse	213.210.13.4
	Support.Client (1).exe	Get hash	malicious	ScreenConnect Tool	Browse	185.49.126.73
	Support.Client (1).exe	Get hash	malicious	ScreenConnect Tool	Browse	185.49.126.73
	la.bot.m68k.elf	Get hash	malicious	Unknown	Browse	213.210.9.89
	la.bot.powerpc.elf	Get hash	malicious	Unknown	Browse	77.107.70.202
	fvIqrxcfuL.exe	Get hash	malicious	Quasar	Browse	89.213.56.109
	la.bot.mipsel.elf	Get hash	malicious	Unknown	Browse	89.213.146.12
	arm7.elf	Get hash	malicious	Unknown	Browse	77.107.120.22

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\FilesystemDialogsCOM.dll	CEjWMdiJnR.exe	Get hash	malicious	DanaBot	Browse
	CEjWMdiJnR.exe	Get hash	malicious	DanaBot	Browse

Created / dropped Files

C:\ProgramData\0loqLkE0pHh\WindoproV6.lic

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	modified
Size (bytes):	3154
Entropy (8bit):	7.931021379081338
Encrypted:	false
SSDEEP:	48:e3Z8J5iQbyr1sOBWePdJqH2XnfloAicUSHG9SegFyPNqC0p94/kL6W72r2AT0yo9:9e1sOB3P7qcntHG/KyPgB7f72/ro+gow
MD5:	941BBC7003D311E89BE3EE437B5A8BC9
SHA1:	482B17B3831EDB69BF8AFC2C66D180B66F129712
SHA-256:	FD0F59E8753D652CAD387FA3197F5F202DD35F1735F5C2B97689BB77A3136980
SHA-512:	3C99EA6A2A0CE9453AFD8656B38F2F774D2F874B7648017CD55A249F93C20159CB5835568CDAA530008330EAE10E622B3C9C9A34363AEF7F21B51C98FD03B7A5
Malicious:	false
Reputation:	low
Preview:	.A.xR.......8.;.r....^..N....!......]..j....C..I.....7..y....N`H>4.....{.<&.Tc2...;..d..d.`...q+..q..C..m......&i.....8...q...6....'.....?.g...'....y.......h?.'#@.)........(.,...@?z'./..FO~W&...L...s.S.....5..l......M(.....[U.....O....y..2...:.e..f&.....p.h1....kh..k...+w..l..S.0.....H...N...g.3.C...k.Q.3....n.M.Uj.l..`+.v............)..0,&T.~..h......C8.......S........@...X....e.......f.~.f...3_..t..x.`=.%..c...lD..].E.]k..Z.B..i..%..v.^.8..f....(.T.0....m.I..)6..j..K...K.....nm..N.VV>..).5..{.[k..d.Plp..u.!$b.....>.fi.M..mTU.=.%/~WX...O........'......q.)$.2~......F....o8w...8._C....8.c.#....../.h.../O..`?.g.?-.JB,..).R.r....[o.w.o\|.Z <G..o.7..h.T...Iju.Q.....a.}'%.=xYb.rZ.<U..}M..>.&.....YFE.!.. Z.....R......r...7.oM..=.s..*4......9q..=.Y..o!...b....".. :.".$..xD..2y.%...V.p.V....<....?c.....\|.d.2)..)EQ.Eb}B.2q"Y.A..'FP@.....rNZ......O.7..>.&..X.8O....[.H...]..v.n.(q......]DE.....~{..{C#.t\|.f...l...}...>.g.......D...{6......

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	1168
Entropy (8bit):	5.3589204150755565
Encrypted:	false
SSDEEP:	24:3GMytZWSKco4KmZjKMs4RPT6BmFoUebIl+mZ9t7J0gt/NKqHr+t:5yjWSU4xc4RQmFoUeU+mZ9tK8NPHA
MD5:	505F1F9E1A1621F82813F943C3530EC4
SHA1:	29BDD7B01CF597F5BCCC9D117D51DD4FBC2A8C88
SHA-256:	74ACF31D9405DA2FA4321A3334A20F652E70850816655F3DF5D3E4D00E786E6D
SHA-512:	09A71A0ED000D7DC2F39146944DA56F14B4A78FDBCE907E7340556E3B3C41C7FC6B0E3050AB1D7C0DD5C70FDDA9334F4FE2D8E956807BA0EF0DF739B6662444B
Malicious:	false
Reputation:	low
Preview:	@...e.................................^..............@..........P................1]...E...........(.Microsoft.PowerShell.Commands.ManagementH...............o..b~.D.poM......... .Microsoft.PowerShell.ConsoleHost0......................C.l]..7.s........System..4....................D...{..\|f........System.Core.D...............4..7..D.#V.............System.Management.Automation<...............i..VdqF...\|...........System.ConfigurationL.................gQ?O.....x5.......#.Microsoft.Management.Infrastructure.<................t.,.lG....M...........System.Management...@................z.U..G...5.f.1........System.DirectoryServices4.................%...K... ...........System.Xml..8..................1...L..U;V.<}........System.Numerics.4.....................@.[8]'.\........System.Data.H................WY..2.M.&..g(g........Microsoft.PowerShell.Security...<...............V.}...@...i...........System.Transactions.P...............8..{...@.e..."4.......%.Microsoft.PowerShell.Com

C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\Cache\Medication.db

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	5855633
Entropy (8bit):	7.999533643530907
Encrypted:	true
SSDEEP:	98304:Ces1v06NlQ2+cO2AI/7e7eoVWn40iCXamJJOgvOBhUrB9O6bFxJvd412zRst:CX1vrlQ2+cOjI/qW40iRmJVvqhSfxDRw
MD5:	3F84C9AEBFA0B3FE8FBF59B2E18D5C23
SHA1:	A530785B6C68A62A99564D257DD40C8B9CF2B9DF
SHA-256:	9101D5A84E1FCB9F420415203163D18B606A8A2898B949B7142D8EDD95F7D1EE
SHA-512:	4963E3C1C9936827A6D23D50D96FC4E082720EDCF536660B60D9EAC8DFACD0F9026429A0FE4E3F83A3414313CB9254880910A1CF1B9807DC403D9120D5B09D70
Malicious:	false
Reputation:	low
Preview:	..B.8..2.V# Oi......................................1012546698.?=<>-! #aDGOCueNNDONZ8?=\|16TVYXZZ]\.[A@BJEDGrp.r{yx}Jqpssutw.\|x{{u\|.~TYZZ\VRTlhkjllona................m......................P........................ .......................#..............................................................<476....847688;:.9?> (#"%MIRLZEKA"/.QQSRU.RVYYSZ]\kopxqsvsHFIHJJML.Kqprzutw........na`ccedg.lhkmelon................u..................................................................a................Q....................p.g.t.2.E.n.n.p.o.f.q.[.z.j.{.j.&032 476.>;:?.?>!.#R%V'I)O+X-M/CQ4S3U W7Y}[.])_-A/C,E!G2I.K>M-O=q.sjutwvyx{.x\|.~a`cb\|dgfqhkj.ion................................................;..............................................n.......................zf!.r''x-`bpyimntqfg=}b1{.......1.6255.698.B.]...bB.A....N..K...f`..efdenh:.h.oi..vu[DGFQHKJ.IONpRsru ;$..<,..2?&.9)).)#Q.].'5.[...................................................................F........

C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\Chronicle.wav

Process:	C:\Users\user\Desktop\UFh7A8CImG.exe
File Type:	RIFF (little-endian) data, WAVE audio, Microsoft PCM, 24 bit, mono 48000 Hz
Category:	dropped
Size (bytes):	4195262
Entropy (8bit):	7.249466766230358
Encrypted:	false
SSDEEP:	98304:C+tnH7vtUwqso6cDuUb/3ndfi+LZ4Vk1TW6NWvkMxwnyfen0VPBDXp:t71UwqrFLdqO4VyTWv14yfen0V51
MD5:	95E3154C940F03D5E1172226D0AE8F08
SHA1:	5AE2A75567E74BC0FE0ACF8970B87F8ABD297703
SHA-256:	ECFF5A35AA8A50F8C83496AB624560080F7EF5DCCF3B718B2653BA5BBE261FAF
SHA-512:	3DEA51BC1608AD5872D8C324F3611861846F44D7D9886E5CB35E4A4B45907E6CF8A08DDD24433FCAB2E99623294AD8CEDA76B519E5E4BAE105987E28F3B9112B
Malicious:	false
Reputation:	low
Preview:	RIFF..@.WAVEfmt .............2........data..?.]........... ..~..\|.....L........q.......w..>t.&l..d.)W..A..2..$.%..............:..4.....H.....E..K..i..Q....(.....w..!........1...s.>f..Y..T..T.kP..J..C.j;..-.R!.{.....9.....?.....A........w.....I..3..I..}................................a..............'......%.....5..9.*C.OH.yI..N.%M..O..R.MZ.fj..n..p. t.t\|..~.Q.......O...........y.....A..?.............X....U.....5..F..Z.....%!..1.n?..E..R..Z..b.pp..u.p.....k.......................\..<.....q..]........)..'..E..G........{..k...........O........Q........u..!..3..=.....D.....~.. .......n.....6..;............@.....h..........b.......P.......L..f........h........G.....1.....v..g..Z.+V..Q./Q..M.sD..A.n<. 5..-.0,.J$..........W........!..9........m....."&..+.v+..+.P-.2/..4..9.\:..<..<.QC..@..A.;E.?B..B..?..4.@(.&.....d!....A..y .z'.`-..6.&;.2=..<.^@..J..O..[..d.Ja.V`.#\.{U..T..W.iX..Y.-T..Y..^.nc.Zb.+\..W..S..U.9T..P.kJ..I.YB..<..8..,..%.~...........q........7..&..B.....n.....#..7..

C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\FilesystemDialogsCOM.dll

Process:	C:\Users\user\Desktop\UFh7A8CImG.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1082184
Entropy (8bit):	6.651671452170415
Encrypted:	false
SSDEEP:	24576:nS279Ys6S4h+GqUWvBo9UNmctt1hLAx73:xZJZo92mctt1h+
MD5:	B3D2F2C1B613083271E85148E8C0DF5B
SHA1:	77D24CEF6C2B2118DCADE8E6E5145599BA96F9CF
SHA-256:	BB841E22FF485EA6F79808A554BAA8FB13F8971A4549F09BC6665EFA19115F37
SHA-512:	D0CA04A63FE75F2FADDB3E4AAEB7969A817157568112AF2F152AA88BBC99EC5607F76B75CE4B4104A1CD1FD5A8A3CF8240031DB427D83BDBC993AE88F99815A9
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: CEjWMdiJnR.exe, Detection: malicious, Browse Filename: CEjWMdiJnR.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L......f...........!.....R...........n.......p....@.......................... ......I.....@..........................P.......0...........P...........T..H/...p...S...................................................2..<....@..f....................text....A.......B.................. ....itext.......`.......F.............. ..`.data....@...p...B...V..............@....bss.....i...............................idata.......0......................@....didata.f....@......................@....edata.......P......................@..@.rdata..E....`......................@..@.reloc...S...p...T..................@..B.rsrc....P.......P..................@..@............. .......T..............@..@........................................................

C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\Lib_Help.dll

Process:	C:\Users\user\Desktop\UFh7A8CImG.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450056
Entropy (8bit):	6.823001455705953
Encrypted:	false
SSDEEP:	6144:kqZxsC6NGW2BhVdkPHkEFShuiFVhDz88w/fZmGxVEJJcg3D7f44ywAOcVGatlq4:35tjBrdBEQJFw/Rmyi0ajrveIa64
MD5:	7E3C43613057E96AB7FF7EDE8D995412
SHA1:	5A04EFFE29C3072102E2AF73747DE9653E38DDB8
SHA-256:	3AFE475398B0EDD6A59185008A615A77ED16C1AF49277E1A9754A5B67D032579
SHA-512:	BD4C7D1F142CE8948C52BBB0DCF352DC4F73C207F6AFE1B0F220ACDBEDDC5B168C0366DABCD254D41B5A10BE176C0B60EF9A846F6787BBDF0C506D5E33DD998A
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 62%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......7L..s-..s-..s-..8U.a-..8U..-..8U.k-.....d-.....c-.....U-..`..r-..e..}-.....q-..8U..t-..s-...-..e...-..e...r-..e.?.r-..e..r-..Richs-..................PE..L......f...........!...(.............................................................=....@......................... `.......i..P....... ................*.......>...H..8....................I.......G..@............................................text............................... ..`.rdata..ft.......v..................@..@.data...p ...........\..............@....rsrc... ............l..............@..@.reloc...>.......@...t..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe

Process:	C:\Users\user\Desktop\UFh7A8CImG.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2607448
Entropy (8bit):	6.522909241974932
Encrypted:	false
SSDEEP:	24576:igvMeNRMMfQTN3gzkRGzrQlmF03WhY0Bohn7jmckZC0LuWGfxpLtioJo9DS1ga+g:SzkdzOmF017yCau/xbilE1g+f2S
MD5:	5B219E412528752277F1118513D99D43
SHA1:	374FF5DE005C184E3451ADDDF88F01541ECB9AEE
SHA-256:	4EAC38DEDFD343F942AE6D56C36D0EF2CBE3E3F34C666F4946FB45C6F6ACB155
SHA-512:	A4F27D0531D64A7C21DD6488F1C2832CD1BEBA69A226E6DFC4C9000CFC66C95A6BB9849DFE195240816135746157F88A79469D4AB451AA906A89998359F7D367
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Preview:	MZ......................@.................!v.0..............(...........!..L.!This program cannot be run in DOS mode....$.........u.....................{.......................M........+`......p............................................................@.......Rich............................PE..L......f.....................P.......P%....... ...@..........................p(.....x.'.......................................'......p$...............'.X)....'.....................................................................................0u.................................. ...xwgWeRT....... ....... .............@...nl4l.........".......".............@...gf5DGXU0.....p$.......#.............`...........................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\SLABHIDDevice.dll

Process:	C:\Users\user\Desktop\UFh7A8CImG.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	88064
Entropy (8bit):	5.798941113099633
Encrypted:	false
SSDEEP:	1536:mI9dWjD8aSGAb9BkEwrJcbWyoMBc+s+vCrHQ6iP:n6jLoboHVAqtICrHQDP
MD5:	80FC6527A2E58A1D60E55458B5D8A2CC
SHA1:	19846C26374529E10CDA2497807ADF9F30FBF408
SHA-256:	DD12D8B9518ECEDDB24D90F84C17B12A4114250C910543DEFBF8F54117DDC775
SHA-512:	32391AF422810FC4E649646FBA9CA644B037D2C037DF63C37CEA545E19B2A63A85D89E935FCDAD923D7675945FE25241D0800FC84390F3B01E28C72ED9CB2B62
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........j...K..K..K.,.K..K.,.K...K.,.K...K..K..K...K..K..K...K.,.K..K.,.K..K.,.K..K.,.K..KRich..K........................PE..L....z.P...........!................{D....................................................@.........................@...*...t...P....@...@......................4...................................h...@...............t............................text...)........................... ..`.rdata..j7.......8..................@..@.data...@-..........................@....rsrc....@...@...B..................@..@.reloc...............@..............@..B........................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\SLABHIDtoUART.dll

Process:	C:\Users\user\Desktop\UFh7A8CImG.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	57856
Entropy (8bit):	6.070513718411458
Encrypted:	false
SSDEEP:	768:Fe+kFu/nY1XfnjjVntzhH8nQkksE1EDJnz+5hAClpt/SRqjfL:FLnOvD1cQkPfz+Zt/ScjfL
MD5:	7F50DD51ED4163564698C5B4C5AEFB04
SHA1:	0E6719426F0E310F006FA51EC9A06DE5EE5AE843
SHA-256:	4118698C1F6269E468839D20259C7572FF959A766713BC0D0E9A193C870A0BEE
SHA-512:	ADFD218A9217948F0398AACE4C50C9278437CBA7F2F247192E67592D8C80F614A58F0D490F5E28347207ABDC7879A7942AE08A0C0D9E18D75E795849BE5DE3C5
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......f.=.".S.".S.".S.9w..-.S.9w..`.S.9w..9.S.+... .S..,(.!.S.".R.z.S.9w..'.S.9w..#.S.9w..#.S.9w..#.S.Rich".S.........PE..L....sxP...........!.........\.......L.......................................0............@.....................................<.......\|.......................X...p...................................@...............@............................text...9........................... ..`.rdata...4.......6..................@..@.data...............................@....rsrc...\|...........................@..@.reloc..............................@..B........................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\VScopeResENUS.dll

Process:	C:\Users\user\Desktop\UFh7A8CImG.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1142784
Entropy (8bit):	5.858699241259881
Encrypted:	false
SSDEEP:	6144:ip93fvV2dck7CTvBmKNWZMc1cas1PS8Evk:C93fvwcyCToZb
MD5:	EE92CF2833B90659A437EBD12134D1A1
SHA1:	51AA0DFFF0B7D9FC5AE02EFEFDF073FA2A9AB017
SHA-256:	7458F08460B2A7A36F3F390A25E0A7D848B904D13EAA8A047F71A3B343EC5DAD
SHA-512:	F30CE0E9DDC828FE28630D56B7BB8BD428AE2CA5085D141DBA9248FC185B452F358708307622BF3541940FFD94247DA5C9EDCB103017CF73B97E568FCBF4E39C
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........Y...8...8...8..y'...8...8...8..y'...8..)>...8..y'...8..Rich.8..........PE..L......f...........!.........P......Y........ ...............................p....................................... ..6...0 ..<....@.......................`..L.................................................... ..,............................text............................... ..`.rdata....... ....... ..............@..@.data...L....0.......0..............@....rsrc........@... ...@..............@..@.reloc.......`.......`..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\VTDSP.dll

Process:	C:\Users\user\Desktop\UFh7A8CImG.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2318344
Entropy (8bit):	6.254342074382034
Encrypted:	false
SSDEEP:	24576:S867VzMYbcIhRnKIFU4r/4qcbbW6leVvwoGqqmZs9bE+GU1FL3EwFwzQ38/GPgO6:jfI+IFUY/jcba6leVvwOTYi
MD5:	E12230C60FEAA066716E126F615826CC
SHA1:	33190E5A43A2D7A33983DEECE4E7092B6E71C5EE
SHA-256:	F7E2C841E36BCB04BEC29FF767FADA4D824E92460561A3193C169F1A1CB18823
SHA-512:	B4BC1A2622BB06F6523CE3A2FF67AE3DF6641B997A24639C46BD900D05CED6E42698878968F54EA719DFDB3FE9F7AD2B071E75D23532F4C9ABF48823001098C0
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......W.J...>.....!...............................p..................................#....... .........................{...........................H@#.............................................................,................................text...............................`.P`.data...............................@.p..rdata...r... ...t..................@.p@.bss..................................p..edata..{............v..............@.0@.idata..............................@.0..CRT....,...........................@.0..tls.... ...........................@.0..reloc..............................@.0B/4..................................@.@B/19..... w.......x..................@..B/31.................................@..B/45.....O...........................@..B/57.................................@.0B/70..................6..............@..B/81..................8..

C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\Vipro.dll

Process:	C:\Users\user\Desktop\UFh7A8CImG.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	368128
Entropy (8bit):	7.7611150058724085
Encrypted:	false
SSDEEP:	6144:lsGPTen3VS3k/wMGs0RDDcAOZExGXxTkt04oHxXYWv4q7louZlyfY3qkQ7quKcfz:2Grq3Qkb0ZDcjExGheLfYpQuuKcfSRf0
MD5:	3BFF9554877BD01A201D6BEA3AA94C01
SHA1:	D7B54BF0DD042A34B1ADE7D57CADF9F082968FC9
SHA-256:	29080CF6981208027997B783BA3395B6B94DE1BD5931B9B29A2B7AF57DCE4870
SHA-512:	37DD5CECDF7FFF27C63D15BA9907778D747DC256681A584A332B81413A6E1EFE999EBFF8A32162C130206D2DA813406641E9944C4B403E60EFD94398BDF15E64
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 5%
Preview:	MZ......................@.....................]............. ...........!..L.!This program cannot be run in DOS mode....$.......4.Xp...p...p....7..~....7.......7..n..."...f..."...G..."...o...p......y.\|.{.......f.......q.......q.......q...p.x.q.......q...Richp...........................PE..L...d.Ef...........!.........4.......................................................=....@........................................................................................................................................................5m2xY............................... ...Gv7z8pI.@...........................@...Mo1qpM..............................@...bLHfR2..............................@...fXfj3...............................`...........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\Webinar.pak

Process:	C:\Users\user\Desktop\UFh7A8CImG.exe
File Type:	data
Category:	dropped
Size (bytes):	5855344
Entropy (8bit):	7.999533600031207
Encrypted:	true
SSDEEP:	98304:jes1v06NlQ2+cO2AI/7e7eoVWn40iCXamJJOgvOBhUrB9O6bFxJvd412zRsr:jX1vrlQ2+cOjI/qW40iRmJVvqhSfxDRY
MD5:	E52CC90D750A4AD108D7395C6620BF7E
SHA1:	D6E2EFB33B794DAD80DCD0BCCC969FFA4E334A0E
SHA-256:	D6C921C3D5886B7CB2EFDF4A797BA843A43059FB0E3F87B3AAE4FB91CA8AE312
SHA-512:	49BF21CD5EAF452C9FBF43DC39D49F744EA26A6F25EE255340390DE71D573FDE1BEE2F5F159198E6C52CFCDA9F9A06CCE176E752DBC2DF3C6CD8D31A78A3152D
Malicious:	false
Preview:	.........O.X..6.".d.................................1012546698.?=<>-! #aDGOCueNNDONZ8?=\|16TVYXZZ]\.[A@BJEDGrp.r{yx}Jqpssutw.\|x{{u\|.~TYZZ\VRTlhkjllona................m......................P........................ .......................#..............................................................<476....847688;:.9?> (#"%MIRLZEKA"/.QQSRU.RVYYSZ]\kopxqsvsHFIHJJML.Kqprzutw........na`ccedg.lhkmelon................u..................................................................a................Q....................p.g.t.2.E.n.n.p.o.f.q.[.z.j.{.j.&032 476.>;:?.?>!.#R%V'I)O+X-M/CQ4S3U W7Y}[.])_-A/C,E!G2I.K>M-O=q.sjutwvyx{.x\|.~a`cb\|dgfqhkj.ion................................................;..............................................n.......................zf!.r''x-`bpyimntqfg=}b1{.......1.6255.698.B.]...bB.A....N..K...f`..efdenh:.h.oi..vu[DGFQHKJ.IONpRsru ;$..<,..2?&.9)).)#Q.].'5.[...................................................................F........

C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\fppdes9.dll

Process:	C:\Users\user\Desktop\UFh7A8CImG.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	379392
Entropy (8bit):	6.668536992124804
Encrypted:	false
SSDEEP:	6144:022jgwY1eta3ZZrlgnP5IxRn+ppnlBwX9alZTeHQu+8gDiWboHgcZ:02RsPax5+phlBW9jw7PhiVZ
MD5:	F2A07730F45B6E91638740E8AA003863
SHA1:	E8E6FC958167DB4EE0D966B18EE0248C3FD6BA2C
SHA-256:	CDA783A83F913A6860A609408901880BAFB0967AD324F748D078757005D7EC44
SHA-512:	6EB61AA9290E0AD40907A3030A9470C376FF9682A7AD510B86C8CC21834F27068BBC9EEE843443EB24574F78F7ED1EEC621A4FCA7836F81F5FD3B64D9D9EFF65
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Preview:	MZ......................@...................................(...........!..L.!This program cannot be run in DOS mode....$.......iK..-..-..-..fR..!..fR.....fR..8...\./....:....=..........'..;........./..fR..<..-.....;...,..;...,..;.^.,..;...,..Rich-..................PE..L......f...........!...(.............?....................................................@..........................`..D....`..........\|.......................p<..8H..8....................H......xG..@............................................text............................... ..`.rdata...o.......p..................@..@.data....@...p......Z..............@....rsrc...\|...........................@..@.reloc..p<.......>..................@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aaqrtewpswwdy

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aasefeeraoidf

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aasefeeraoidf-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aeuhopaqefped

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aeuhopaqefped-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Afaepqhwhdyry

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Afwfrridstaee

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ahaaoiuwiftse

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ahpetprotheie

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aiedtswehrypi

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aihadwsihedtu

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aiqyewpdsfttp

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aiqyewpdsfttp-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aoaorwyuiyier

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aoifeedhafotd

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aoiftedtuhhyq

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Apahfisowuyht

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aqhseawefipdu

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aqhseawefipdu-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aqthapruiftqe

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aswoohhwryiup

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aswoohhwryiup-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Atapydaasfeyr

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Atdtofoyessty

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Atdtofoyessty-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Auareedhhausp

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aufethorwhhde

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ayfautyioarus

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ayfautyioarus-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dawaswafdsriy

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Defehwpd

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Deiddtuuoriuyso

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Deiddtuuoriuyso-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Deiytaoswspahuq

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dhtaqwi

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dhtaqwi-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dpodfyeeueyu

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dpodfyeeueyu-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Drihpwouttt

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Drihpwouttt-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Drtrsteefseqqif

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dsqssiiqausuus

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dtwfto

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dutuiiaeeu

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dwiteedafwo

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dyaufieui

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Earqwtph

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eataaapu

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Edpqryiqsaofydo

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Edsrditefueepuh

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eeaeqrweauiqter

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eeaeqrweauiqter-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eeoaeaps

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Efdfoedtuoayfse

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Efdfoedtuoayfse-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Efeddtpe

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Efhrpeypppyofew

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Efoydaee

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Efqeifortqeuyed

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ehqfpiet

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ehwypeuw

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eioyudytsrrdqye

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eittsefehqeyhsy

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Epffpfrs

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ephseuwihreoits

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Epqofettwrtqeta

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Erdefhef

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ereidurr

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ersefeshaouwysh

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Erwreehf

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Erwreehf-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Espyhsei

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Etiqurqw

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eusehutu

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ewqiwsoi

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ewuqdoadfewoded

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eydohriepsdieyu

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eyouefep

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Faaepo

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fddewu

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fddewu-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fdpeuh

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fduher

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fiusup

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fiwqtq

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Foiopq

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fopfuq

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fppiat

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Frhoqt

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Frsdaa

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fsdqwu

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ftpopu

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ftpopu-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fttaey

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hadsswr

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hedided

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hehuhre

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Heriyii

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hesqswe

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hhoddfi

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hhydtyp

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hhydtyp-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hiopufd

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hopohfo

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hopohfo-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hosfuet

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hqdotdy

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hqdotdy-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hshaera

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Htaahyt

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hwspqpu

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hwuqyte

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hypwuef

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hypwuef-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Iaqaftrtoey

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Iauthuodeqs

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ieetyqupite

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ifefidefhas

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Iheeyqwaita

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ioaspouwuuf

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Iohoffdsddu

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ipawuprahsw

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Iqswedhoyue

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Irowsssoqai

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Irowsssoqai-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ispuhahqruu

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Itqfoyqoets

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Iwqdfupypdt

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Iwqdfupypdt-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oapesoutiqfo

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oeaaheeeofoe

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oeuoyieyyfaf

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ofqsstueieuw

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ohqftowrtrst

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ohtiyuyiwfde

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oieefwywffpy

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oirrhrddfssr

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ooyffrrdosie

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Opuypwqieqet

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oqqayuwwerui

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oqtiwreihyrd

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Orfudffautiw

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Osiqhhpffpqd

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Osuefewwqofh

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Othwusdooaae

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oufqyshrpaod

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oyeyhfrstqud

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oyssetosofqd

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pahsotyasqidf

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Paruupuohesef

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pdhower

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pdiaseuyidu

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pfqore

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pfufsf

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Phdraee

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Phdraee-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Phoueqp

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Poiofuiuwahy

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Popqpeuaoeqi

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Popwrtoopwed

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pryaswwfo

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pryaswwfo-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Psaieeiwftwur

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Psetiwsyqsfouti

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pseuaoehftiaifh

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pseuaoehftiaifh-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Psywtwpwd

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ptarspeqwhsei

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ptfodt

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pwdaepdeerdeu

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pywiswfed

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qapqwqqsetqyih

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qduefpqsuahirs

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qessaweiyeeret

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qfeppeheuhpquo

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qraeyouqitoewy

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qrrtduuwptepup

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qsueqafhspaffd

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qthhdwyouihawr

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qtydowypyrsysd

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qyypfheueddftq

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Raesedpuwwqdo

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Reewrrhy

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Reuywoadaieuiiw

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rewtaeosotwtyth

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rfehiq

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rfehiq-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rfsasr

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rhyqihp

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rieutdtohdd

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rpeeqseowouwqee

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rqaeffoewrdure

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rrotfruawodi

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rrpeiwtedfaoutr

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rrpeiwtedfaoutr-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rrwwidafteq

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rsaaofsoaaiif

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rtwypaufd

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ruyereeuhe

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ruyphidsee

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rwuiyeqpse

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ryiofered

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rysrqeyqe

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Saqddupsyduer

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	modified
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Sesdqspp

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Sessepuwoyweywe

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Siiopsefwyr

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Spdeytyu

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Sqhqasadewwtpw

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ssiwufoduuf

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ssiwufoduuf-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Styppuqty

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Suaeosydwp

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Sweitute

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Swhyfrh

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Swihurpfoiq

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Swywaihpy

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Sypahiuqd

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\TMP6AC3.tmp

Process:	C:\Users\user\Desktop\UFh7A8CImG.exe
File Type:	7-zip archive data, version 0.4
Category:	dropped
Size (bytes):	10028649
Entropy (8bit):	7.999981396149042
Encrypted:	true
SSDEEP:	196608:Q3QvAaLnTOqmEAnUdQr5BUMpDUIWYlSfA3NJ4FiyveVqAmuISyRAh1:QuGquaQzpAIvMA3Ng2fm7Sph1
MD5:	56609925D59CED6B18DBE34DC5564E52
SHA1:	4B40E23CDB9DDE200DD59AE6FEE1A28D0C252846
SHA-256:	E6D229E3AADAEF813272FF69F738FC7FEE0EB30188639C30D5634881E854B311
SHA-512:	81CC7A87015237F35F059C06E99A8E07711F40D480721BD38FE4A491CEB61354CC59F294C8A07D03526B6A9DE96D6D56C1EE2E7D7D21B9EA52030B560A9C1696
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	7z..'....M:_$.......%..........6..........;..x%....Z.h...T.E..=?..2..k.9..x.:.. ..]..t.O.w.tt..\|...K.g.hG....;YR.F..dg..i....,.S...K..CH.o.A.5...^7_).c..t..<...8x.97..pnQ\|D.3..n..........%8.m.>......@....(;...p...&ON...q...W...6>(........`...t.^.$G.9......cU;..\|Y;k~69....."6...d...)..NGo..Ykq.x.4...;g..Nmq..=.h........7j{.Y.H...;Q..e+#)...fb....n..b(...D....p..G..^{_`.K.VG...a......5d.~.E.M4.k0.n......8AG.~..7.N...W...}....U..L+......8..(.d....G..(D.Z..yK.....W.....@..].*.."t...d.WA.X.....loqGZ..s_nmXN....`.t...H%B.x.Fi.]...V....p....<....]..5W..c..L.6..s.;o.R..m....P?....#w....V.d6{.....}....l\|p.......d..8..w....Q..^...+~.$M..j..B.[..D%.3..NDk...}..ZL.p..8.%G.m.......I...........6.a0.J...../.I..d. UE..%..-......]....`...V.7hb.....{..tc.>W.\|>.......z..j.b......8.3..~Vl...\|.....-..Y.:.k..8..4...w.."....II.YL3..4s..?.:.0.<1^.9$e...q..{auG./W...........1b..M..c`B......./L...Y?G0.I..P$.e.Sd1.^.=.Mr...F..U.v.....Hq..k\2o....w...c.z..

C:\Users\user\AppData\Local\Temp\Tdqeeoihsfphed

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tdqeeoihsfphed-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tdsedowe

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tdsedowe-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tehfoeowyyiyhii

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Thsweuo

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Toqhqrosayea

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Towiedwioyef

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tpeteddd

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Treodrharfewaud

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tsffrh

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tsqesaaysedueo

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ttqaraqaureyos

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tytqfdfar

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tytqfdfar-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Udeyyaeeqd

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Udfioqpfur

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uedqhiripp

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ueofeuefpr

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ueofeuefpr-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ueuqsyitea

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uewaisfehw

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ufepaiuuwu

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Upfryorahq

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uqusqshdii

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uqyfhtydhu

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uropaurtwa

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Urrpuoeheq

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Usytrwdsft

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Utihrqohqe

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wadrdqfuaehst

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Weiqfpey

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Weiqfpey-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wftafy

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wfuoww

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Whriuep

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wifirwthasq

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wioetdddaea

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wqiprpiyharhew

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wroeyseewtsf

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wseiieyd

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wsweawsardudsey

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wuftiwqiiq

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wuipteywyt

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wwiytewfhra

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wwpseart

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wyfedthpq

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yeydsrere

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yfesordta

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yfypoyaiu

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yiryuwyip

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yoedseyff

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yoedseyff-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ypeftipew

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yreptears

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ysfdyehdh

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ysfiwweds

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ysfiwweds-shm

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ytpudytrr

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yuhwepaut

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yushfdfhh

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yyepfowys

Process:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_1l4yyufi.lj4.ps1

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_4vemlmps.exw.psm1

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_bw52waep.15l.ps1

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_jzxpbqjw.jh3.psm1

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.8419329966357765
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	UFh7A8CImG.exe
File size:	13'858'920 bytes
MD5:	33285b33f1d7997939c34a2deb30beac
SHA1:	0a2dc41c5e470fee6a1247111b3fd0fac66ced4d
SHA256:	807cf9e5e22a71ca4bf1e31e955c1e2dfc80f1d38decf8b52857c29aadf04b90
SHA512:	62f30d1eac1e2c08a9cf21df584feb7e0ea46903f6f5fb27c94460f4863193ff90fb695ddb3a1872ec48cd040295369302f8eac06e7c7039e6382f3575e8f67a
SSDEEP:	196608:mwQZBqm3QvAaLnTOqmEAnUdQr5BUMpDUIWYlSfA3NJ4FiyveVqAmuISyRAh+:mjZPuGquaQzpAIvMA3Ng2fm7Sph+
TLSH:	3AD61282FB8781F1D983027521BA6BBF4D3E59104724C9D3DBE01DBA98226D1673F399
File Content Preview:	MZ......................@...................................@...........!..L.!This program cannot be run in DOS mode....$.......8J$q\|+J"\|+J"\|+J"7SI#i+J"7SO#.+J"7SN#`+J"...".+J"..I#e+J"..N#h+J"..O#.+J"\|+J"k+J"o.O#r+J"j.N#r+J"..N#X(J"o.N#J+J"7SK#s+J"\|+K".+J

File Icon


Icon Hash:	8ab34d96b2b291b3

Static PE Info

General

Entrypoint:	0x67bf59
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x66C89F67 [Fri Aug 23 14:40:39 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	9a90578b9405590fea289e7bfd4992ce

Authenticode Signature

Signature Valid:
Signature Issuer:
Signature Validation Error:
Error Number:
Not Before, Not After
Subject Chain
Version:
Thumbprint MD5:
Thumbprint SHA-1:
Thumbprint SHA-256:
Serial:

Entrypoint Preview

Instruction
call 00007FF5D4DB3DA6h
jmp 00007FF5D4DB2CAFh
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
cmp cl, 00000040h
jnc 00007FF5D4DB2E47h
cmp cl, 00000020h
jnc 00007FF5D4DB2E38h
shld edx, eax, cl
shl eax, cl
ret
mov edx, eax
xor eax, eax
and cl, 0000001Fh
shl edx, cl
ret
xor eax, eax
xor edx, edx
ret
int3
cmp cl, 00000040h
jnc 00007FF5D4DB2E47h
cmp cl, 00000020h
jnc 00007FF5D4DB2E38h
shrd eax, edx, cl
shr edx, cl
ret
mov eax, edx
xor edx, edx
and cl, 0000001Fh
shr eax, cl
ret
xor eax, eax
xor edx, edx
ret
push ebp
mov ebp, esp
and dword ptr [0075DF6Ch], 00000000h
sub esp, 28h
or dword ptr [0075A218h], 01h
push 0000000Ah
call dword ptr [006AD298h]
test eax, eax
je 00007FF5D4DB313Bh
push ebx
push esi
push edi
xor eax, eax
lea edi, dword ptr [ebp-28h]
xor ecx, ecx
push ebx
cpuid
mov esi, ebx
pop ebx
nop
mov dword ptr [edi], eax
mov dword ptr [edi+04h], esi
mov dword ptr [edi+08h], ecx
xor ecx, ecx
mov dword ptr [edi+0Ch], edx
mov eax, dword ptr [ebp-28h]
mov edi, dword ptr [ebp-24h]
mov dword ptr [ebp-04h], eax
xor edi, 756E6547h
mov eax, dword ptr [ebp-1Ch]
xor eax, 49656E69h
mov dword ptr [ebp-18h], eax
mov eax, dword ptr [ebp-20h]
xor eax, 6C65746Eh
mov dword ptr [ebp-14h], eax
xor eax, eax
inc eax
push ebx
cpuid
mov esi, ebx
pop ebx
nop

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x355280	0x8d4	.rdata
IMAGE_DIRECTORY_ENTRY_IMPORT	0x355b54	0xa0	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x360000	0x9bf2c2	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0xd35400	0x2868	.reloc
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xd20000	0x1bc04	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x350ac0	0x18	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x3509a0	0x40	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2ad000	0x39c	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x2ab385	0x2ab400	c38a7839491d451c424ff9d9bb7b0a88	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x2ad000	0xa9f06	0xaa000	dde21f22aed1638fd27d6f79d7c50ec1	False	0.4363439223345588	data	5.873851934453275	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x357000	0x8248	0x4600	0284252406cf4a9efd7fd159c8fb53d0	False	0.47879464285714285	data	5.4275815266420695	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x360000	0x9bf2c2	0x9bf400	2e999294b0192854ec9a9da57f0a8af8	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0xd20000	0x1bc04	0x1be00	d45c94e74783d468abea430495709282	False	0.5969468189461884	data	6.631086920747496	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	ZLIB Complexity
RT_ICON	0x3604b8	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 640	0.3225806451612903
RT_ICON	0x3607a0	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 192	0.47635135135135137
RT_ICON	0x3608c8	0x1628	Device independent bitmap graphic, 64 x 128 x 8, image size 4608	0.29231311706629054
RT_ICON	0x361ef0	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 2688	0.3763326226012793
RT_ICON	0x362d98	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1152	0.49684115523465705
RT_ICON	0x363640	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 320	0.5166184971098265
RT_ICON	0x363ba8	0x75ec	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced	0.9985755929508414
RT_ICON	0x36b194	0x94a8	Device independent bitmap graphic, 96 x 192 x 32, image size 38016	0.15813537944082404
RT_ICON	0x37463c	0x67e8	Device independent bitmap graphic, 80 x 160 x 32, image size 26560	0.1744736842105263
RT_ICON	0x37ae24	0x5488	Device independent bitmap graphic, 72 x 144 x 32, image size 21600	0.18345656192236598
RT_ICON	0x3802ac	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16896	0.19555975436939066
RT_ICON	0x3844d4	0x3a48	Device independent bitmap graphic, 60 x 120 x 32, image size 14880	0.20951742627345846
RT_ICON	0x387f1c	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9600	0.23195020746887968
RT_ICON	0x38a4c4	0x1a68	Device independent bitmap graphic, 40 x 80 x 32, image size 6720	0.25576923076923075
RT_ICON	0x38bf2c	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4224	0.29620075046904315
RT_ICON	0x38cfd4	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2400	0.3528688524590164
RT_ICON	0x38d95c	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1680	0.34767441860465115
RT_ICON	0x38e014	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	0.17819148936170212
RT_RCDATA	0x38e47c	0x990669	data	1.0003108978271484
RT_GROUP_ICON	0xd1eae8	0x102	data	0.6395348837209303
RT_VERSION	0xd1ebec	0x556	data	0.3557833089311859
RT_MANIFEST	0xd1f144	0x17e	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	0.612565445026178

Imports

DLL	Import
KERNEL32.dll	GetTempPathW, EnumResourceNamesW, GetEnvironmentVariableW, EnumResourceTypesW, lstrlenW, FindFirstFileW, SizeofResource, WriteConsoleW, GetProcessHeap, SetEnvironmentVariableW, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineW, GetCommandLineA, FindClose, HeapSize, GetTimeZoneInformation, SetEndOfFile, HeapReAlloc, EnumSystemLocalesW, GetUserDefaultLCID, IsValidLocale, GetLocaleInfoW, LCMapStringW, CompareStringW, GetTimeFormatW, GetDateFormatW, HeapFree, GetLastError, LockResource, GlobalAlloc, LoadResource, FindResourceW, WideCharToMultiByte, lstrcpyW, GetTempFileNameW, GetFileAttributesW, CreateFile2, CloseHandle, MultiByteToWideChar, IsValidCodePage, GetACP, GetOEMCP, CreateFileA, CreateFileW, GetFileAttributesA, GetFileInformationByHandle, GetFileType, GetFullPathNameW, ReadFile, WriteFile, PeekNamedPipe, GetExitCodeProcess, Sleep, GetStdHandle, SearchPathA, DuplicateHandle, SetHandleInformation, CreatePipe, GetCurrentProcess, CreateProcessA, OpenProcess, GetProcAddress, LoadLibraryA, WaitForSingleObject, SetWaitableTimer, CreateWaitableTimerA, ReleaseMutex, CreateMutexA, CreateThread, GetModuleHandleW, SetLastError, InitializeSRWLock, ReleaseSRWLockExclusive, ReleaseSRWLockShared, AcquireSRWLockExclusive, AcquireSRWLockShared, GetCurrentThreadId, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, GetModuleHandleExW, GetCurrentProcessId, GetSystemTimeAsFileTime, VirtualFree, InitializeCriticalSection, EnterCriticalSection, LeaveCriticalSection, TryEnterCriticalSection, DeleteCriticalSection, ReleaseSemaphore, GetExitCodeThread, CreateSemaphoreA, GetSystemDirectoryA, FreeLibrary, FormatMessageA, LoadLibraryW, GetSystemTime, SystemTimeToFileTime, FindNextFileW, GetConsoleMode, SetConsoleMode, ReadConsoleA, ReadConsoleW, SleepConditionVariableCS, WakeAllConditionVariable, InitializeConditionVariable, SleepEx, CreateWaitableTimerW, WaitForMultipleObjects, CancelWaitableTimer, CreateEventW, SetEvent, ResetEvent, VerifyVersionInfoA, GetQueuedCompletionStatus, PostQueuedCompletionStatus, GetVersionExA, QueryPerformanceFrequency, CancelIoEx, GetOverlappedResult, VerSetConditionMask, QueryPerformanceCounter, CreateIoCompletionPort, IsWow64Process, DeviceIoControl, LocalFree, GetLocaleInfoEx, GetStringTypeW, GetCurrentDirectoryW, FindFirstFileExW, GetFileAttributesExW, AreFileApisANSI, GetFileInformationByHandleEx, InitializeCriticalSectionEx, EncodePointer, DecodePointer, LCMapStringEx, GetCPInfo, IsProcessorFeaturePresent, UnhandledExceptionFilter, SetUnhandledExceptionFilter, TerminateProcess, InitializeSListHead, IsDebuggerPresent, GetStartupInfoW, RtlUnwind, RaiseException, InitializeCriticalSectionAndSpinCount, LoadLibraryExW, ExitProcess, SetStdHandle, SetFilePointerEx, GetConsoleOutputCP, SetConsoleCtrlHandler, ExitThread, FreeLibraryAndExitThread, GetDriveTypeW, SystemTimeToTzSpecificLocalTime, FileTimeToSystemTime, GetModuleFileNameW, GetFileSizeEx, HeapAlloc, FlushFileBuffers, CreateDirectoryW
USER32.dll	GetProcessWindowStation, MessageBoxW, GetUserObjectInformationW, MessageBoxA
SHELL32.dll	ShellExecuteW
SHLWAPI.dll	PathFileExistsW
WS2_32.dll	send, recv, WSASetLastError, getservbyname, getservbyport, gethostbyaddr, inet_ntoa, inet_addr, htons, closesocket, recvfrom, connect, WSACleanup, WSAStartup, gethostbyname, select, ntohs, getsockopt, getsockname, ioctlsocket, ntohl, htonl, setsockopt, socket, shutdown, getpeername, sendto, WSAGetLastError
CRYPT32.dll	CertGetCertificateContextProperty, CertFreeCertificateContext, CertDuplicateCertificateContext, CertFindCertificateInStore, CertEnumCertificatesInStore, CertCloseStore, CertOpenStore, CertOpenSystemStoreW
ADVAPI32.dll	CryptReleaseContext, CryptSignHashW, CryptGenRandom, DeregisterEventSource, RegisterEventSourceW, ReportEventW, CryptAcquireContextW, CryptDestroyKey, CryptSetHashParam, CryptGetProvParam, CryptGetUserKey, CryptExportKey, CryptDecrypt, CryptCreateHash, CryptDestroyHash, CryptEnumProvidersW

Exports

Name	Ordinal	Address
caerBiasCoarseFine1024FromCurrent	1	0x4acf80
caerBiasCoarseFine1024Generate	2	0x4ad0e0
caerBiasCoarseFine1024Parse	3	0x4ad0e0
caerBiasCoarseFine1024ToCurrent	4	0x4ad100
caerBiasCoarseFineFromCurrent	5	0x4be6c0
caerBiasCoarseFineGenerate	6	0x4be790
caerBiasCoarseFineParse	7	0x4be810
caerBiasCoarseFineToCurrent	8	0x4be860
caerBiasDynapseGenerate	9	0x4b6c50
caerBiasDynapseParse	10	0x4b6d30
caerBiasShiftedSourceGenerate	11	0x4be8d0
caerBiasShiftedSourceParse	12	0x4be920
caerBiasVDACGenerate	13	0x4be980
caerBiasVDACParse	14	0x4be9a0
caerDVS128InfoGet	15	0x4c4420
caerDVS132SInfoGet	16	0x4ad170
caerDVXplorerInfoGet	17	0x4b0fb0
caerDavisInfoGet	18	0x4be9c0
caerDavisROIConfigure	19	0x4bea90
caerDeviceClose	20	0x4ac920
caerDeviceConfigGet	21	0x4ac960
caerDeviceConfigGet64	22	0x4ac9a0
caerDeviceConfigSet	23	0x4acaa0
caerDeviceDataGet	24	0x4acad0
caerDeviceDataStart	25	0x4acb00
caerDeviceDataStop	26	0x4acb30
caerDeviceOpen	27	0x4acb60
caerDeviceOpenSerial	28	0x4acba0
caerDeviceSendDefaultConfig	29	0x4acbd0
caerDynapseCoreAddrToNeuronId	30	0x4b6de0
caerDynapseCoreXYToNeuronId	31	0x4b6e10
caerDynapseGenerateCamBits	32	0x4b6e40
caerDynapseGenerateSramBits	33	0x4b6e90
caerDynapseInfoGet	34	0x4b6f00
caerDynapseSendDataToUSB	35	0x4b6f70
caerDynapseSpikeEventFromXY	36	0x4b7040
caerDynapseSpikeEventGetX	37	0x4b7100
caerDynapseSpikeEventGetY	38	0x4b7130
caerDynapseWriteCam	39	0x4b7170
caerDynapseWritePoissonSpikeRate	40	0x4b71f0
caerDynapseWriteSram	41	0x4b7250
caerDynapseWriteSramN	42	0x4b72d0
caerDynapseWriteSramWords	43	0x4b7320
caerEDVSInfoGet	44	0x4acc00
caerFilterDVSNoiseApply	45	0x4c6ee0
caerFilterDVSNoiseConfigGet	46	0x4c7370
caerFilterDVSNoiseConfigSet	47	0x4c75b0
caerFilterDVSNoiseDestroy	48	0x4c77e0
caerFilterDVSNoiseGetHotPixels	49	0x4c7810
caerFilterDVSNoiseInitialize	50	0x4c7860
caerFilterDVSNoiseStatsApply	51	0x4c78d0
caerFrameUtilsContrast	52	0x4c8460
caerFrameUtilsDemosaic	53	0x4c8690
caerLog	54	0x4acc30
caerLogCallbackGet	55	0x4acc60
caerLogCallbackSet	56	0x4acc70
caerLogDisable	57	0x4acc80
caerLogDisabled	58	0x4acca0
caerLogFileDescriptorsGetFirst	59	0x4accc0
caerLogFileDescriptorsGetSecond	60	0x4accd0
caerLogFileDescriptorsSet	61	0x4acce0
caerLogLevelGet	62	0x4acd00
caerLogLevelSet	63	0x4acd10
caerLogVA	64	0x4acd20
caerLogVAFull	65	0x4acd50
caerSamsungEVKInfoGet	66	0x4ba8c0

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-11T16:20:13.305878+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49766	77.221.149.84	443	TCP
2024-12-11T16:20:13.374734+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49767	89.116.191.177	443	TCP
2024-12-11T16:20:13.429716+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49768	213.210.13.4	443	TCP
2024-12-11T16:20:13.474919+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49769	193.188.22.40	443	TCP
2024-12-11T16:20:40.249455+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49835	77.221.149.84	443	TCP
2024-12-11T16:20:40.296932+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49836	89.116.191.177	443	TCP
2024-12-11T16:20:40.356516+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49837	213.210.13.4	443	TCP
2024-12-11T16:20:40.413926+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49838	193.188.22.40	443	TCP
2024-12-11T16:20:48.811294+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49859	77.221.149.84	443	TCP
2024-12-11T16:20:48.902682+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49862	89.116.191.177	443	TCP
2024-12-11T16:20:48.969870+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49864	213.210.13.4	443	TCP
2024-12-11T16:20:49.031702+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49866	193.188.22.40	443	TCP
2024-12-11T16:20:55.417285+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49882	77.221.149.84	443	TCP
2024-12-11T16:20:55.472356+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49883	89.116.191.177	443	TCP
2024-12-11T16:20:55.517739+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49884	213.210.13.4	443	TCP
2024-12-11T16:20:55.573573+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49885	193.188.22.40	443	TCP
2024-12-11T16:20:57.928233+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49898	77.221.149.84	443	TCP
2024-12-11T16:20:57.981516+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49900	89.116.191.177	443	TCP
2024-12-11T16:20:58.043112+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49901	213.210.13.4	443	TCP
2024-12-11T16:20:58.108100+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49902	193.188.22.40	443	TCP
2024-12-11T16:21:00.609089+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49912	77.221.149.84	443	TCP
2024-12-11T16:21:00.697448+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49913	89.116.191.177	443	TCP
2024-12-11T16:21:00.749246+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49914	213.210.13.4	443	TCP
2024-12-11T16:21:00.806160+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49915	193.188.22.40	443	TCP
2024-12-11T16:21:05.261872+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49930	77.221.149.84	443	TCP
2024-12-11T16:21:05.339996+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49931	89.116.191.177	443	TCP
2024-12-11T16:21:06.439787+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49932	213.210.13.4	443	TCP
2024-12-11T16:21:06.510103+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49934	193.188.22.40	443	TCP
2024-12-11T16:21:09.045787+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49944	77.221.149.84	443	TCP
2024-12-11T16:21:09.116217+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49945	89.116.191.177	443	TCP
2024-12-11T16:21:09.165381+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49946	213.210.13.4	443	TCP
2024-12-11T16:21:09.215252+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49947	193.188.22.40	443	TCP
2024-12-11T16:21:11.524277+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49959	77.221.149.84	443	TCP
2024-12-11T16:21:11.573357+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49961	89.116.191.177	443	TCP
2024-12-11T16:21:11.625747+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49963	213.210.13.4	443	TCP
2024-12-11T16:21:11.695240+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49964	193.188.22.40	443	TCP
2024-12-11T16:21:16.026216+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49979	77.221.149.84	443	TCP
2024-12-11T16:21:16.097757+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49980	89.116.191.177	443	TCP
2024-12-11T16:21:16.154703+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49981	213.210.13.4	443	TCP
2024-12-11T16:21:16.233722+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49982	193.188.22.40	443	TCP
2024-12-11T16:21:18.701549+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49992	77.221.149.84	443	TCP
2024-12-11T16:21:18.789051+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49993	89.116.191.177	443	TCP
2024-12-11T16:21:18.867388+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49994	213.210.13.4	443	TCP
2024-12-11T16:21:18.943422+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	49995	193.188.22.40	443	TCP
2024-12-11T16:21:21.279067+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50005	77.221.149.84	443	TCP
2024-12-11T16:21:21.335371+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50006	89.116.191.177	443	TCP
2024-12-11T16:21:21.381103+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50007	213.210.13.4	443	TCP
2024-12-11T16:21:21.441685+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50008	193.188.22.40	443	TCP
2024-12-11T16:21:25.764053+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50023	77.221.149.84	443	TCP
2024-12-11T16:21:25.807240+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50024	89.116.191.177	443	TCP
2024-12-11T16:21:25.857669+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50025	213.210.13.4	443	TCP
2024-12-11T16:21:26.980132+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50026	193.188.22.40	443	TCP
2024-12-11T16:21:29.346886+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50041	77.221.149.84	443	TCP
2024-12-11T16:21:29.413996+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50042	89.116.191.177	443	TCP
2024-12-11T16:21:29.463255+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50043	213.210.13.4	443	TCP
2024-12-11T16:21:30.544801+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50044	193.188.22.40	443	TCP
2024-12-11T16:21:32.916030+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50055	77.221.149.84	443	TCP
2024-12-11T16:21:32.975659+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50056	89.116.191.177	443	TCP
2024-12-11T16:21:33.025784+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50057	213.210.13.4	443	TCP
2024-12-11T16:21:33.076558+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50058	193.188.22.40	443	TCP
2024-12-11T16:21:38.542939+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50077	77.221.149.84	443	TCP
2024-12-11T16:21:38.603029+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50078	89.116.191.177	443	TCP
2024-12-11T16:21:38.647312+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50079	213.210.13.4	443	TCP
2024-12-11T16:21:38.700116+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50080	193.188.22.40	443	TCP
2024-12-11T16:21:41.174137+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50090	77.221.149.84	443	TCP
2024-12-11T16:21:41.225588+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50091	89.116.191.177	443	TCP
2024-12-11T16:21:41.269749+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50092	213.210.13.4	443	TCP
2024-12-11T16:21:41.339466+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50093	193.188.22.40	443	TCP
2024-12-11T16:21:45.091020+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50108	77.221.149.84	443	TCP
2024-12-11T16:21:45.172326+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50109	89.116.191.177	443	TCP
2024-12-11T16:21:45.223572+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50110	213.210.13.4	443	TCP
2024-12-11T16:21:45.315281+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50111	193.188.22.40	443	TCP
2024-12-11T16:21:50.818784+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50127	77.221.149.84	443	TCP
2024-12-11T16:21:50.866471+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50128	89.116.191.177	443	TCP
2024-12-11T16:21:50.928435+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50129	213.210.13.4	443	TCP
2024-12-11T16:21:50.974114+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50130	193.188.22.40	443	TCP
2024-12-11T16:21:53.355091+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50141	77.221.149.84	443	TCP
2024-12-11T16:21:53.431566+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50142	89.116.191.177	443	TCP
2024-12-11T16:21:53.499724+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50143	213.210.13.4	443	TCP
2024-12-11T16:21:53.581869+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50144	193.188.22.40	443	TCP
2024-12-11T16:21:55.964374+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50157	77.221.149.84	443	TCP
2024-12-11T16:21:56.028077+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50158	89.116.191.177	443	TCP
2024-12-11T16:21:56.114017+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50159	213.210.13.4	443	TCP
2024-12-11T16:21:56.190222+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50160	193.188.22.40	443	TCP
2024-12-11T16:22:00.511839+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50175	77.221.149.84	443	TCP
2024-12-11T16:22:00.568737+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50176	89.116.191.177	443	TCP
2024-12-11T16:22:00.632474+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50177	213.210.13.4	443	TCP
2024-12-11T16:22:00.694060+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50178	193.188.22.40	443	TCP
2024-12-11T16:22:03.235800+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50183	77.221.149.84	443	TCP
2024-12-11T16:22:03.356885+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50184	89.116.191.177	443	TCP
2024-12-11T16:22:03.433726+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50185	213.210.13.4	443	TCP
2024-12-11T16:22:04.503353+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50186	193.188.22.40	443	TCP
2024-12-11T16:22:06.816268+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50191	77.221.149.84	443	TCP
2024-12-11T16:22:06.863207+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50192	89.116.191.177	443	TCP
2024-12-11T16:22:06.926670+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50193	213.210.13.4	443	TCP
2024-12-11T16:22:06.985789+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50194	193.188.22.40	443	TCP
2024-12-11T16:22:11.388141+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50199	77.221.149.84	443	TCP
2024-12-11T16:22:11.447227+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50200	89.116.191.177	443	TCP
2024-12-11T16:22:11.553278+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50201	213.210.13.4	443	TCP
2024-12-11T16:22:11.636891+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50202	193.188.22.40	443	TCP
2024-12-11T16:22:14.177339+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50207	77.221.149.84	443	TCP
2024-12-11T16:22:14.224586+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50208	89.116.191.177	443	TCP
2024-12-11T16:22:14.293452+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50209	213.210.13.4	443	TCP
2024-12-11T16:22:15.385976+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50210	193.188.22.40	443	TCP
2024-12-11T16:22:17.850074+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50215	77.221.149.84	443	TCP
2024-12-11T16:22:17.903702+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50216	89.116.191.177	443	TCP
2024-12-11T16:22:17.961144+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50217	213.210.13.4	443	TCP
2024-12-11T16:22:18.005001+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50218	193.188.22.40	443	TCP
2024-12-11T16:22:23.459424+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50223	77.221.149.84	443	TCP
2024-12-11T16:22:23.543431+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50224	89.116.191.177	443	TCP
2024-12-11T16:22:23.624194+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50225	213.210.13.4	443	TCP
2024-12-11T16:22:23.715503+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50226	193.188.22.40	443	TCP
2024-12-11T16:22:26.145291+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50231	77.221.149.84	443	TCP
2024-12-11T16:22:26.194549+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50232	89.116.191.177	443	TCP
2024-12-11T16:22:26.246297+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50233	213.210.13.4	443	TCP
2024-12-11T16:22:26.303831+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50234	193.188.22.40	443	TCP
2024-12-11T16:22:29.750959+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50239	77.221.149.84	443	TCP
2024-12-11T16:22:29.848780+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50240	89.116.191.177	443	TCP
2024-12-11T16:22:29.908651+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50241	213.210.13.4	443	TCP
2024-12-11T16:22:29.984237+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50242	193.188.22.40	443	TCP
2024-12-11T16:22:34.397345+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50247	77.221.149.84	443	TCP
2024-12-11T16:22:34.441002+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50248	89.116.191.177	443	TCP
2024-12-11T16:22:34.482487+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50249	213.210.13.4	443	TCP
2024-12-11T16:22:34.527081+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50250	193.188.22.40	443	TCP
2024-12-11T16:22:36.837521+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50255	77.221.149.84	443	TCP
2024-12-11T16:22:37.927518+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50256	89.116.191.177	443	TCP
2024-12-11T16:22:38.007137+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50257	213.210.13.4	443	TCP
2024-12-11T16:22:38.096671+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50258	193.188.22.40	443	TCP
2024-12-11T16:22:40.409773+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50263	77.221.149.84	443	TCP
2024-12-11T16:22:40.477896+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50264	89.116.191.177	443	TCP
2024-12-11T16:22:40.547381+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50265	213.210.13.4	443	TCP
2024-12-11T16:22:40.613426+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50266	193.188.22.40	443	TCP
2024-12-11T16:22:45.002700+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50271	77.221.149.84	443	TCP
2024-12-11T16:22:45.053376+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50272	89.116.191.177	443	TCP
2024-12-11T16:22:45.106240+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50273	213.210.13.4	443	TCP
2024-12-11T16:22:45.157359+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50274	193.188.22.40	443	TCP
2024-12-11T16:22:47.474983+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50279	77.221.149.84	443	TCP
2024-12-11T16:22:47.517256+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50280	89.116.191.177	443	TCP
2024-12-11T16:22:47.586636+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50281	213.210.13.4	443	TCP
2024-12-11T16:22:47.653835+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50282	193.188.22.40	443	TCP
2024-12-11T16:22:50.212535+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50287	77.221.149.84	443	TCP
2024-12-11T16:22:50.277971+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50288	89.116.191.177	443	TCP
2024-12-11T16:22:51.341018+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50289	213.210.13.4	443	TCP
2024-12-11T16:22:51.380732+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50290	193.188.22.40	443	TCP
2024-12-11T16:22:55.781933+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50295	77.221.149.84	443	TCP
2024-12-11T16:22:55.837136+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50296	89.116.191.177	443	TCP
2024-12-11T16:22:55.892627+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50297	213.210.13.4	443	TCP
2024-12-11T16:22:55.960918+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50298	193.188.22.40	443	TCP
2024-12-11T16:22:58.289764+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50303	77.221.149.84	443	TCP
2024-12-11T16:22:58.340916+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50304	89.116.191.177	443	TCP
2024-12-11T16:22:59.466307+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50305	213.210.13.4	443	TCP
2024-12-11T16:22:59.535549+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50306	193.188.22.40	443	TCP
2024-12-11T16:23:02.103360+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50311	77.221.149.84	443	TCP
2024-12-11T16:23:02.168133+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50312	89.116.191.177	443	TCP
2024-12-11T16:23:02.253944+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50313	213.210.13.4	443	TCP
2024-12-11T16:23:02.326257+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50314	193.188.22.40	443	TCP
2024-12-11T16:23:07.669492+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50319	77.221.149.84	443	TCP
2024-12-11T16:23:07.766860+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50320	89.116.191.177	443	TCP
2024-12-11T16:23:07.883044+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50321	213.210.13.4	443	TCP
2024-12-11T16:23:07.964061+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50322	193.188.22.40	443	TCP
2024-12-11T16:23:10.647387+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50327	77.221.149.84	443	TCP
2024-12-11T16:23:10.713144+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50328	89.116.191.177	443	TCP
2024-12-11T16:23:10.771334+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50329	213.210.13.4	443	TCP
2024-12-11T16:23:10.817376+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50330	193.188.22.40	443	TCP
2024-12-11T16:23:14.109564+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50335	77.221.149.84	443	TCP
2024-12-11T16:23:14.171886+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50336	89.116.191.177	443	TCP
2024-12-11T16:23:14.213737+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50337	213.210.13.4	443	TCP
2024-12-11T16:23:14.265123+0100	2034465	ET MALWARE Danabot Key Exchange Request	1	192.168.2.4	50338	193.188.22.40	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 11, 2024 16:19:49.474946976 CET	49736	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:19:49.474992037 CET	443	49736	77.221.149.84	192.168.2.4
Dec 11, 2024 16:19:49.475075960 CET	49736	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:19:49.519670963 CET	49736	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:19:49.519692898 CET	443	49736	77.221.149.84	192.168.2.4
Dec 11, 2024 16:19:49.519710064 CET	49736	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:19:49.519717932 CET	443	49736	77.221.149.84	192.168.2.4
Dec 11, 2024 16:19:49.519750118 CET	443	49736	77.221.149.84	192.168.2.4
Dec 11, 2024 16:19:49.525793076 CET	49737	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:19:49.525836945 CET	443	49737	89.116.191.177	192.168.2.4
Dec 11, 2024 16:19:49.525913954 CET	49737	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:19:49.582218885 CET	49737	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:19:49.582218885 CET	49737	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:19:49.582245111 CET	443	49737	89.116.191.177	192.168.2.4
Dec 11, 2024 16:19:49.582257032 CET	443	49737	89.116.191.177	192.168.2.4
Dec 11, 2024 16:19:49.582331896 CET	443	49737	89.116.191.177	192.168.2.4
Dec 11, 2024 16:19:49.585985899 CET	49738	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:19:49.586033106 CET	443	49738	213.210.13.4	192.168.2.4
Dec 11, 2024 16:19:49.586148024 CET	49738	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:19:49.638268948 CET	49738	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:19:49.638297081 CET	443	49738	213.210.13.4	192.168.2.4
Dec 11, 2024 16:19:49.638358116 CET	443	49738	213.210.13.4	192.168.2.4
Dec 11, 2024 16:19:49.638397932 CET	49738	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:19:49.638422966 CET	443	49738	213.210.13.4	192.168.2.4
Dec 11, 2024 16:19:49.644457102 CET	49739	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:19:49.644512892 CET	443	49739	193.188.22.40	192.168.2.4
Dec 11, 2024 16:19:49.644725084 CET	49739	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:19:49.695561886 CET	49739	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:19:49.695601940 CET	443	49739	193.188.22.40	192.168.2.4
Dec 11, 2024 16:19:49.695657015 CET	443	49739	193.188.22.40	192.168.2.4
Dec 11, 2024 16:19:49.695686102 CET	49739	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:19:49.695705891 CET	443	49739	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:13.253210068 CET	49766	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:13.253257990 CET	443	49766	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:13.253330946 CET	49766	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:13.305877924 CET	49766	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:13.305896997 CET	443	49766	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:13.305948019 CET	443	49766	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:13.305958986 CET	49766	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:13.305979013 CET	443	49766	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:13.309345007 CET	49767	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:13.309397936 CET	443	49767	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:13.309473038 CET	49767	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:13.374733925 CET	49767	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:13.374754906 CET	443	49767	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:13.374805927 CET	49767	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:13.374806881 CET	443	49767	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:13.374818087 CET	443	49767	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:13.378424883 CET	49768	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:13.378464937 CET	443	49768	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:13.378529072 CET	49768	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:13.429716110 CET	49768	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:13.429737091 CET	443	49768	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:13.429801941 CET	443	49768	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:13.429811954 CET	49768	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:13.429822922 CET	443	49768	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:13.433139086 CET	49769	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:13.433180094 CET	443	49769	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:13.433258057 CET	49769	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:13.474919081 CET	49769	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:13.474947929 CET	443	49769	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:13.474977970 CET	443	49769	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:13.478045940 CET	49770	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:13.478076935 CET	443	49770	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:13.478151083 CET	49770	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:13.526987076 CET	49770	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:13.527008057 CET	443	49770	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:13.527065992 CET	443	49770	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:13.527072906 CET	49770	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:13.527086020 CET	443	49770	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:13.530507088 CET	49771	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:13.530555964 CET	443	49771	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:13.530637026 CET	49771	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:13.578809023 CET	49771	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:13.578824997 CET	443	49771	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:13.578860044 CET	443	49771	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:13.578933001 CET	49771	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:13.578946114 CET	443	49771	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:13.582321882 CET	49772	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:13.582365990 CET	443	49772	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:13.582447052 CET	49772	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:13.636003017 CET	49772	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:13.636033058 CET	443	49772	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:13.636090994 CET	443	49772	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:13.636104107 CET	49772	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:13.636122942 CET	443	49772	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:13.639213085 CET	49773	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:13.639264107 CET	443	49773	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:13.639355898 CET	49773	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:13.696742058 CET	49773	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:13.696782112 CET	443	49773	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:13.696815968 CET	443	49773	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:13.696882010 CET	49773	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:13.696899891 CET	443	49773	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:14.251913071 CET	49774	53	192.168.2.4	8.8.8.8
Dec 11, 2024 16:20:14.372117043 CET	53	49774	8.8.8.8	192.168.2.4
Dec 11, 2024 16:20:14.372245073 CET	49774	53	192.168.2.4	8.8.8.8
Dec 11, 2024 16:20:17.269877911 CET	53	49774	8.8.8.8	192.168.2.4
Dec 11, 2024 16:20:17.269949913 CET	49774	53	192.168.2.4	8.8.8.8
Dec 11, 2024 16:20:40.206075907 CET	49835	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:40.206124067 CET	443	49835	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:40.206432104 CET	49835	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:40.249454975 CET	49835	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:40.249478102 CET	443	49835	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:40.249550104 CET	443	49835	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:40.252825975 CET	49836	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:40.252890110 CET	443	49836	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:40.252974987 CET	49836	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:40.296931982 CET	49836	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:40.296962023 CET	443	49836	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:40.297030926 CET	443	49836	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:40.299710989 CET	49837	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:40.299760103 CET	443	49837	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:40.299954891 CET	49837	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:40.356515884 CET	49837	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:40.356595993 CET	443	49837	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:40.356712103 CET	443	49837	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:40.359637022 CET	49838	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:40.359738111 CET	443	49838	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:40.359826088 CET	49838	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:40.413925886 CET	49838	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:40.413959026 CET	443	49838	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:40.414027929 CET	443	49838	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:48.216032982 CET	49854	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:48.216090918 CET	443	49854	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:48.216166973 CET	49854	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:48.264545918 CET	49854	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:48.264602900 CET	443	49854	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:48.264621973 CET	49854	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:48.264635086 CET	443	49854	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:48.264722109 CET	443	49854	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:48.331465006 CET	49855	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:48.331516027 CET	443	49855	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:48.331590891 CET	49855	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:48.375727892 CET	49855	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:48.375766993 CET	443	49855	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:48.375833035 CET	49855	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:48.375840902 CET	443	49855	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:48.375921011 CET	443	49855	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:48.463773966 CET	49856	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:48.463891029 CET	443	49856	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:48.463975906 CET	49856	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:48.594204903 CET	49856	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:48.594233990 CET	443	49856	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:48.594279051 CET	49856	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:48.594285011 CET	443	49856	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:48.594408989 CET	443	49856	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:48.649576902 CET	49857	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:48.649632931 CET	443	49857	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:48.649698019 CET	49857	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:48.709029913 CET	49857	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:48.709062099 CET	443	49857	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:48.709105015 CET	443	49857	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:48.709111929 CET	49857	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:48.709126949 CET	443	49857	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:48.722147942 CET	49859	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:48.722192049 CET	443	49859	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:48.722249031 CET	49859	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:48.811294079 CET	49859	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:48.811337948 CET	443	49859	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:48.811394930 CET	49859	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:48.811402082 CET	443	49859	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:48.811470032 CET	443	49859	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:48.834377050 CET	49862	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:48.834391117 CET	443	49862	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:48.835406065 CET	49862	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:48.902682066 CET	49862	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:48.902755022 CET	443	49862	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:48.902838945 CET	49862	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:48.902853966 CET	443	49862	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:48.902920961 CET	443	49862	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:48.915867090 CET	49864	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:48.915923119 CET	443	49864	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:48.916229010 CET	49864	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:48.969870090 CET	49864	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:48.969898939 CET	443	49864	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:48.969960928 CET	443	49864	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:48.971338987 CET	49864	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:48.971365929 CET	443	49864	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:48.973876953 CET	49866	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:48.973920107 CET	443	49866	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:48.973984003 CET	49866	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:49.031702042 CET	49866	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:49.031728983 CET	443	49866	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:49.031785965 CET	49866	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:49.031795979 CET	443	49866	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:49.031805038 CET	443	49866	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:53.097583055 CET	49873	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:53.097641945 CET	443	49873	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:53.097783089 CET	49873	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:53.156461000 CET	49873	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:53.156481981 CET	443	49873	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:53.156537056 CET	443	49873	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:53.156583071 CET	49873	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:53.156604052 CET	443	49873	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:53.161987066 CET	49875	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:53.162029028 CET	443	49875	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:53.162144899 CET	49875	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:53.212795973 CET	49875	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:53.212821007 CET	443	49875	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:53.212869883 CET	49875	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:53.212889910 CET	443	49875	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:53.217583895 CET	49877	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:53.217617989 CET	443	49877	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:53.217679977 CET	49877	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:53.276788950 CET	49877	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:53.276808023 CET	443	49877	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:53.276957989 CET	443	49877	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:53.277240038 CET	49877	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:53.277256012 CET	443	49877	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:53.279756069 CET	49878	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:53.279813051 CET	443	49878	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:53.279922009 CET	49878	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:53.328387022 CET	49878	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:53.328387022 CET	49878	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:53.328430891 CET	443	49878	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:53.328452110 CET	443	49878	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:53.328613043 CET	443	49878	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:55.363908052 CET	49882	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:55.363964081 CET	443	49882	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:55.364126921 CET	49882	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:55.417284966 CET	49882	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:55.417303085 CET	443	49882	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:55.417357922 CET	443	49882	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:55.420824051 CET	49883	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:55.420890093 CET	443	49883	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:55.421471119 CET	49883	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:55.472356081 CET	49883	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:55.472388029 CET	443	49883	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:55.472449064 CET	443	49883	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:55.472480059 CET	49883	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:55.472498894 CET	443	49883	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:55.475830078 CET	49884	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:55.475878954 CET	443	49884	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:55.475950003 CET	49884	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:55.517739058 CET	49884	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:55.517764091 CET	443	49884	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:55.517796040 CET	443	49884	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:55.525470018 CET	49885	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:55.525516033 CET	443	49885	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:55.525662899 CET	49885	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:55.573573112 CET	49885	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:55.573594093 CET	443	49885	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:55.573653936 CET	443	49885	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:55.576694012 CET	49888	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:55.576723099 CET	443	49888	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:55.576909065 CET	49888	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:55.636746883 CET	49888	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:55.636774063 CET	443	49888	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:55.636837959 CET	443	49888	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:55.636878967 CET	49888	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:55.636893988 CET	443	49888	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:55.660105944 CET	49890	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:55.660150051 CET	443	49890	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:55.660229921 CET	49890	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:55.713042974 CET	49890	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:55.713066101 CET	443	49890	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:55.713114023 CET	443	49890	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:55.713262081 CET	49890	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:55.713280916 CET	443	49890	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:55.720896006 CET	49891	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:55.720931053 CET	443	49891	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:55.721972942 CET	49891	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:55.786140919 CET	49891	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:55.786156893 CET	443	49891	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:55.786561012 CET	443	49891	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:55.786725044 CET	49891	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:55.786741018 CET	443	49891	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:55.795039892 CET	49893	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:55.795078039 CET	443	49893	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:55.795186996 CET	49893	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:55.840321064 CET	49893	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:55.840356112 CET	443	49893	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:55.840404987 CET	443	49893	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:57.865833998 CET	49898	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:57.865870953 CET	443	49898	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:57.866122961 CET	49898	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:57.928232908 CET	49898	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:57.928311110 CET	443	49898	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:57.928369045 CET	443	49898	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:57.928416967 CET	49898	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:20:57.928451061 CET	443	49898	77.221.149.84	192.168.2.4
Dec 11, 2024 16:20:57.932188034 CET	49900	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:57.932245016 CET	443	49900	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:57.932410002 CET	49900	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:57.981515884 CET	49900	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:20:57.981571913 CET	443	49900	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:57.981621981 CET	443	49900	89.116.191.177	192.168.2.4
Dec 11, 2024 16:20:57.992238998 CET	49901	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:57.992294073 CET	443	49901	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:57.992734909 CET	49901	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:58.043112040 CET	49901	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:20:58.043139935 CET	443	49901	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:58.043193102 CET	443	49901	213.210.13.4	192.168.2.4
Dec 11, 2024 16:20:58.046505928 CET	49902	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:58.046539068 CET	443	49902	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:58.047009945 CET	49902	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:58.108099937 CET	49902	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:58.108125925 CET	443	49902	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:58.108174086 CET	443	49902	193.188.22.40	192.168.2.4
Dec 11, 2024 16:20:58.108198881 CET	49902	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:20:58.108215094 CET	443	49902	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:00.150111914 CET	49908	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:00.150163889 CET	443	49908	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:00.150226116 CET	49908	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:00.234869957 CET	49908	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:00.234911919 CET	443	49908	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:00.234966993 CET	443	49908	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:00.234999895 CET	49908	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:00.235019922 CET	443	49908	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:00.253559113 CET	49909	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:00.253602028 CET	443	49909	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:00.253667116 CET	49909	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:00.307063103 CET	49909	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:00.307101011 CET	443	49909	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:00.307159901 CET	49909	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:00.307162046 CET	443	49909	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:00.307176113 CET	443	49909	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:00.312844038 CET	49910	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:00.312916994 CET	443	49910	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:00.312993050 CET	49910	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:00.371551037 CET	49910	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:00.371582985 CET	443	49910	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:00.371608019 CET	49910	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:00.371615887 CET	443	49910	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:00.371783018 CET	443	49910	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:00.392458916 CET	49911	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:00.392515898 CET	443	49911	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:00.392700911 CET	49911	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:00.450012922 CET	49911	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:00.450056076 CET	443	49911	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:00.450189114 CET	49911	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:00.450193882 CET	443	49911	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:00.450254917 CET	443	49911	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:00.552778959 CET	49912	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:00.552834988 CET	443	49912	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:00.552923918 CET	49912	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:00.609088898 CET	49912	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:00.609126091 CET	443	49912	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:00.609194994 CET	443	49912	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:00.609245062 CET	49912	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:00.609262943 CET	443	49912	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:00.614186049 CET	49913	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:00.614239931 CET	443	49913	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:00.614293098 CET	49913	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:00.697448015 CET	49913	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:00.697491884 CET	443	49913	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:00.697556973 CET	443	49913	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:00.697560072 CET	49913	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:00.697582006 CET	443	49913	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:00.704794884 CET	49914	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:00.704852104 CET	443	49914	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:00.704987049 CET	49914	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:00.749245882 CET	49914	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:00.749274969 CET	443	49914	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:00.749309063 CET	443	49914	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:00.754235983 CET	49915	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:00.754292965 CET	443	49915	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:00.754348993 CET	49915	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:00.806159973 CET	49915	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:00.806243896 CET	443	49915	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:00.806308985 CET	443	49915	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:00.806338072 CET	49915	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:00.806379080 CET	443	49915	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:02.831864119 CET	49921	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:02.831973076 CET	443	49921	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:02.832047939 CET	49921	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:02.949136019 CET	49921	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:02.949219942 CET	443	49921	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:02.949306965 CET	49921	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:02.949340105 CET	443	49921	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:02.949361086 CET	443	49921	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:02.968741894 CET	49922	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:02.968811035 CET	443	49922	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:02.968879938 CET	49922	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:03.044507027 CET	49922	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:03.044533968 CET	443	49922	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:03.044575930 CET	49922	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:03.044581890 CET	443	49922	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:03.044598103 CET	443	49922	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:03.059077024 CET	49923	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:03.059143066 CET	443	49923	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:03.059212923 CET	49923	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:03.119554043 CET	49923	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:03.119554996 CET	49923	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:03.119654894 CET	443	49923	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:03.119703054 CET	443	49923	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:03.119812965 CET	443	49923	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:03.125746965 CET	49924	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:03.125799894 CET	443	49924	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:03.126414061 CET	49924	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:03.169176102 CET	49924	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:03.169176102 CET	49924	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:03.169217110 CET	443	49924	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:03.169226885 CET	443	49924	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:03.169292927 CET	443	49924	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:05.209784031 CET	49930	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:05.209820032 CET	443	49930	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:05.210225105 CET	49930	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:05.261872053 CET	49930	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:05.261898994 CET	443	49930	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:05.262012959 CET	443	49930	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:05.262033939 CET	49930	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:05.262051105 CET	443	49930	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:05.265789032 CET	49931	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:05.265835047 CET	443	49931	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:05.266516924 CET	49931	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:05.339996099 CET	49931	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:05.340010881 CET	443	49931	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:05.340090036 CET	443	49931	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:05.340128899 CET	49931	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:05.340141058 CET	443	49931	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:05.344988108 CET	49932	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:05.345022917 CET	443	49932	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:05.346147060 CET	49932	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:06.439786911 CET	49932	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:06.439805031 CET	443	49932	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:06.439841986 CET	49932	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:06.439846039 CET	443	49932	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:06.439935923 CET	443	49932	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:06.445533991 CET	49934	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:06.445579052 CET	443	49934	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:06.445632935 CET	49934	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:06.510102987 CET	49934	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:06.510126114 CET	443	49934	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:06.510163069 CET	49934	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:06.510168076 CET	443	49934	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:06.510215044 CET	443	49934	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:06.515573025 CET	49935	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:06.515620947 CET	443	49935	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:06.515675068 CET	49935	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:06.580060005 CET	49935	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:06.580060005 CET	49935	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:06.580096960 CET	443	49935	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:06.580113888 CET	443	49935	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:06.580180883 CET	443	49935	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:06.584809065 CET	49936	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:06.584842920 CET	443	49936	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:06.584907055 CET	49936	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:06.655751944 CET	49936	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:06.655788898 CET	443	49936	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:06.655833960 CET	49936	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:06.655843019 CET	443	49936	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:06.655878067 CET	443	49936	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:06.677174091 CET	49937	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:06.677227974 CET	443	49937	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:06.680363894 CET	49937	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:06.799889088 CET	49937	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:06.799906969 CET	443	49937	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:06.799987078 CET	49937	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:06.799992085 CET	443	49937	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:06.800057888 CET	443	49937	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:06.806794882 CET	49941	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:06.806849003 CET	443	49941	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:06.806906939 CET	49941	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:06.891555071 CET	49941	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:06.891587973 CET	443	49941	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:06.891644001 CET	49941	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:06.891649961 CET	443	49941	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:06.891670942 CET	443	49941	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:08.931749105 CET	49944	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:08.931832075 CET	443	49944	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:08.931979895 CET	49944	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:09.045787096 CET	49944	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:09.045876980 CET	443	49944	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:09.045944929 CET	443	49944	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:09.045957088 CET	49944	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:09.045994043 CET	443	49944	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:09.051222086 CET	49945	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:09.051261902 CET	443	49945	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:09.051325083 CET	49945	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:09.116216898 CET	49945	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:09.116230011 CET	443	49945	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:09.116269112 CET	443	49945	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:09.119425058 CET	49946	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:09.119497061 CET	443	49946	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:09.119602919 CET	49946	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:09.165380955 CET	49946	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:09.165469885 CET	443	49946	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:09.165523052 CET	443	49946	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:09.169121027 CET	49947	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:09.169194937 CET	443	49947	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:09.169377089 CET	49947	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:09.215251923 CET	49947	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:09.215289116 CET	443	49947	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:09.215329885 CET	443	49947	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:11.238135099 CET	49954	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:11.238199949 CET	443	49954	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:11.238691092 CET	49954	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:11.288475037 CET	49954	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:11.288508892 CET	443	49954	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:11.288579941 CET	443	49954	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:11.294122934 CET	49955	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:11.294171095 CET	443	49955	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:11.297732115 CET	49955	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:11.343677998 CET	49955	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:11.343677998 CET	49955	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:11.343699932 CET	443	49955	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:11.343704939 CET	443	49955	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:11.343775034 CET	443	49955	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:11.350687027 CET	49956	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:11.350732088 CET	443	49956	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:11.353179932 CET	49956	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:11.393888950 CET	49956	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:11.393888950 CET	49956	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:11.393920898 CET	443	49956	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:11.393934965 CET	443	49956	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:11.393979073 CET	443	49956	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:11.397171974 CET	49957	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:11.397222042 CET	443	49957	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:11.397730112 CET	49957	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:11.462107897 CET	49957	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:11.462141037 CET	443	49957	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:11.462213993 CET	443	49957	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:11.465396881 CET	49959	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:11.465445995 CET	443	49959	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:11.465588093 CET	49959	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:11.524276972 CET	49959	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:11.524306059 CET	443	49959	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:11.524355888 CET	443	49959	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:11.524429083 CET	49959	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:11.524441004 CET	443	49959	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:11.528136015 CET	49961	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:11.528167963 CET	443	49961	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:11.529731035 CET	49961	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:11.573357105 CET	49961	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:11.573385000 CET	443	49961	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:11.573440075 CET	443	49961	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:11.573465109 CET	49961	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:11.573482037 CET	443	49961	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:11.576843977 CET	49963	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:11.576864004 CET	443	49963	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:11.577004910 CET	49963	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:11.625746965 CET	49963	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:11.625767946 CET	443	49963	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:11.625843048 CET	443	49963	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:11.625868082 CET	49963	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:11.625878096 CET	443	49963	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:11.629041910 CET	49964	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:11.629081964 CET	443	49964	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:11.629872084 CET	49964	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:11.695240021 CET	49964	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:11.695254087 CET	443	49964	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:11.695288897 CET	443	49964	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:11.695540905 CET	49964	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:11.695553064 CET	443	49964	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:13.724536896 CET	49969	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:13.724591017 CET	443	49969	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:13.724904060 CET	49969	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:13.768974066 CET	49969	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:13.769001961 CET	443	49969	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:13.769041061 CET	443	49969	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:13.769068956 CET	49969	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:13.769082069 CET	443	49969	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:13.772711039 CET	49970	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:13.772747040 CET	443	49970	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:13.773144007 CET	49970	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:13.830161095 CET	49970	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:13.830161095 CET	49970	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:13.830194950 CET	443	49970	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:13.830207109 CET	443	49970	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:13.830276012 CET	443	49970	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:13.833750963 CET	49972	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:13.833800077 CET	443	49972	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:13.834933043 CET	49972	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:13.885822058 CET	49972	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:13.885853052 CET	443	49972	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:13.885916948 CET	443	49972	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:13.886274099 CET	49972	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:13.886295080 CET	443	49972	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:13.889730930 CET	49973	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:13.889769077 CET	443	49973	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:13.890400887 CET	49973	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:13.949990988 CET	49973	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:13.949991941 CET	49973	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:13.950027943 CET	443	49973	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:13.950035095 CET	443	49973	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:13.950102091 CET	443	49973	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:15.973767042 CET	49979	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:15.973835945 CET	443	49979	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:15.974900961 CET	49979	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:16.026216030 CET	49979	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:16.026247978 CET	443	49979	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:16.026314974 CET	443	49979	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:16.026360989 CET	49979	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:16.026377916 CET	443	49979	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:16.045739889 CET	49980	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:16.045779943 CET	443	49980	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:16.046276093 CET	49980	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:16.097757101 CET	49980	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:16.097779036 CET	443	49980	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:16.097837925 CET	443	49980	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:16.098064899 CET	49980	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:16.098088026 CET	443	49980	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:16.101732016 CET	49981	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:16.101799965 CET	443	49981	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:16.102087975 CET	49981	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:16.154702902 CET	49981	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:16.154747963 CET	443	49981	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:16.154808998 CET	49981	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:16.154812098 CET	443	49981	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:16.154833078 CET	443	49981	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:16.160449982 CET	49982	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:16.160507917 CET	443	49982	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:16.160567999 CET	49982	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:16.233721972 CET	49982	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:16.233757019 CET	443	49982	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:16.233798981 CET	49982	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:16.233805895 CET	443	49982	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:16.233830929 CET	443	49982	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:16.247885942 CET	49983	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:16.247932911 CET	443	49983	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:16.247994900 CET	49983	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:16.354784966 CET	49983	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:16.354830980 CET	443	49983	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:16.354887962 CET	443	49983	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:16.354893923 CET	49983	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:16.354916096 CET	443	49983	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:16.358175039 CET	49984	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:16.358216047 CET	443	49984	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:16.358295918 CET	49984	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:16.425002098 CET	49984	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:16.425015926 CET	443	49984	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:16.425065041 CET	49984	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:16.425069094 CET	443	49984	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:16.425096989 CET	443	49984	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:16.450129986 CET	49985	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:16.450170040 CET	443	49985	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:16.450229883 CET	49985	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:16.524852991 CET	49985	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:16.524869919 CET	443	49985	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:16.524909973 CET	49985	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:16.524915934 CET	443	49985	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:16.524944067 CET	443	49985	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:16.529766083 CET	49986	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:16.529812098 CET	443	49986	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:16.529865980 CET	49986	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:16.599221945 CET	49986	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:16.599251032 CET	443	49986	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:16.599301100 CET	49986	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:16.599307060 CET	443	49986	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:16.599348068 CET	443	49986	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:18.628308058 CET	49992	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:18.628360033 CET	443	49992	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:18.628437042 CET	49992	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:18.701549053 CET	49992	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:18.701587915 CET	443	49992	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:18.701659918 CET	443	49992	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:18.701670885 CET	49992	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:18.701690912 CET	443	49992	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:18.709681988 CET	49993	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:18.709750891 CET	443	49993	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:18.709813118 CET	49993	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:18.789051056 CET	49993	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:18.789103985 CET	443	49993	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:18.789156914 CET	443	49993	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:18.792721033 CET	49994	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:18.792754889 CET	443	49994	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:18.792889118 CET	49994	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:18.867388010 CET	49994	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:18.867419958 CET	443	49994	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:18.867464066 CET	49994	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:18.867470026 CET	443	49994	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:18.867501020 CET	443	49994	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:18.870479107 CET	49995	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:18.870522976 CET	443	49995	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:18.870620966 CET	49995	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:18.943422079 CET	49995	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:18.943442106 CET	443	49995	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:18.943485022 CET	49995	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:18.943501949 CET	443	49995	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:18.943516016 CET	443	49995	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:20.971587896 CET	50001	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:20.971615076 CET	443	50001	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:20.971671104 CET	50001	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:21.025837898 CET	50001	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:21.025871038 CET	443	50001	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:21.025921106 CET	50001	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:21.025928020 CET	443	50001	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:21.025954962 CET	443	50001	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:21.029213905 CET	50002	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:21.029275894 CET	443	50002	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:21.029345989 CET	50002	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:21.076602936 CET	50002	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:21.076649904 CET	443	50002	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:21.076694965 CET	50002	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:21.076708078 CET	443	50002	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:21.076719999 CET	443	50002	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:21.083619118 CET	50003	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:21.083659887 CET	443	50003	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:21.083710909 CET	50003	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:21.146188974 CET	50003	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:21.146188974 CET	50003	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:21.146220922 CET	443	50003	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:21.146234989 CET	443	50003	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:21.146287918 CET	443	50003	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:21.147330046 CET	50003	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:21.147330046 CET	50003	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:21.147349119 CET	443	50003	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:21.147356033 CET	443	50003	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:21.151873112 CET	50004	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:21.151926041 CET	443	50004	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:21.153847933 CET	50004	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:21.194027901 CET	50004	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:21.194029093 CET	50004	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:21.194063902 CET	443	50004	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:21.194077015 CET	443	50004	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:21.194123983 CET	443	50004	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:21.197696924 CET	50005	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:21.197771072 CET	443	50005	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:21.201795101 CET	50005	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:21.279067039 CET	50005	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:21.279097080 CET	443	50005	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:21.279146910 CET	443	50005	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:21.279469967 CET	50005	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:21.279484987 CET	443	50005	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:21.284147978 CET	50006	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:21.284192085 CET	443	50006	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:21.286178112 CET	50006	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:21.335371017 CET	50006	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:21.335402966 CET	443	50006	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:21.335464001 CET	443	50006	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:21.338377953 CET	50007	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:21.338408947 CET	443	50007	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:21.338577986 CET	50007	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:21.381103039 CET	50007	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:21.381119013 CET	443	50007	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:21.381169081 CET	443	50007	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:21.381196022 CET	50007	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:21.381205082 CET	443	50007	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:21.384620905 CET	50008	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:21.384671926 CET	443	50008	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:21.385019064 CET	50008	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:21.441684961 CET	50008	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:21.441720009 CET	443	50008	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:21.441775084 CET	443	50008	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:21.441912889 CET	50008	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:21.441950083 CET	443	50008	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:23.473023891 CET	50014	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:23.473063946 CET	443	50014	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:23.473131895 CET	50014	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:23.517788887 CET	50014	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:23.517817020 CET	443	50014	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:23.517873049 CET	443	50014	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:23.521967888 CET	50015	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:23.522003889 CET	443	50015	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:23.522284031 CET	50015	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:23.569785118 CET	50015	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:23.569797993 CET	443	50015	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:23.569830894 CET	443	50015	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:23.569839001 CET	50015	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:23.569850922 CET	443	50015	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:23.573725939 CET	50016	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:23.573775053 CET	443	50016	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:23.574155092 CET	50016	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:23.624974012 CET	50016	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:23.624995947 CET	443	50016	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:23.625036955 CET	443	50016	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:23.625117064 CET	50016	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:23.625130892 CET	443	50016	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:23.629724979 CET	50017	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:23.629765034 CET	443	50017	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:23.629986048 CET	50017	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:23.670974016 CET	50017	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:23.670974016 CET	50017	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:23.671014071 CET	443	50017	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:23.671029091 CET	443	50017	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:23.671066999 CET	443	50017	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:23.673701048 CET	50017	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:23.673718929 CET	443	50017	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:25.706825018 CET	50023	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:25.706933975 CET	443	50023	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:25.707062006 CET	50023	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:25.764053106 CET	50023	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:25.764130116 CET	443	50023	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:25.764204025 CET	443	50023	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:25.767808914 CET	50024	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:25.767862082 CET	443	50024	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:25.768081903 CET	50024	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:25.807240009 CET	50024	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:25.807286024 CET	443	50024	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:25.807418108 CET	443	50024	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:25.807451010 CET	50024	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:25.807480097 CET	443	50024	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:25.810034037 CET	50025	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:25.810075998 CET	443	50025	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:25.811666965 CET	50025	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:25.857669115 CET	50025	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:25.857691050 CET	443	50025	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:25.857716084 CET	443	50025	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:25.861273050 CET	50026	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:25.861330032 CET	443	50026	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:25.861553907 CET	50026	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:26.980132103 CET	50026	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:26.980174065 CET	443	50026	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:26.980211973 CET	50026	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:26.980218887 CET	443	50026	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:26.980345964 CET	443	50026	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:26.995929956 CET	50031	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:26.995970964 CET	443	50031	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:26.996027946 CET	50031	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:27.057495117 CET	50031	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:27.057522058 CET	443	50031	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:27.057570934 CET	50031	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:27.057576895 CET	443	50031	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:27.057617903 CET	443	50031	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:27.086657047 CET	50033	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:27.086700916 CET	443	50033	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:27.086767912 CET	50033	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:27.136507034 CET	50033	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:27.136538029 CET	443	50033	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:27.136660099 CET	443	50033	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:27.137379885 CET	50033	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:27.137403011 CET	443	50033	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:27.151743889 CET	50034	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:27.151791096 CET	443	50034	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:27.152174950 CET	50034	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:27.201669931 CET	50034	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:27.201710939 CET	443	50034	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:27.201766968 CET	443	50034	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:27.209700108 CET	50035	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:27.209753036 CET	443	50035	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:27.210760117 CET	50035	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:27.265644073 CET	50035	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:27.265677929 CET	443	50035	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:27.265701056 CET	50035	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:27.265708923 CET	443	50035	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:27.265769005 CET	443	50035	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:29.299612999 CET	50041	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:29.299669981 CET	443	50041	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:29.301635027 CET	50041	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:29.346885920 CET	50041	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:29.346915007 CET	443	50041	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:29.346977949 CET	443	50041	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:29.353652954 CET	50042	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:29.353735924 CET	443	50042	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:29.354510069 CET	50042	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:29.413995981 CET	50042	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:29.414053917 CET	443	50042	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:29.414176941 CET	443	50042	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:29.414212942 CET	50042	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:29.414243937 CET	443	50042	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:29.417629957 CET	50043	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:29.417707920 CET	443	50043	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:29.419740915 CET	50043	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:29.463254929 CET	50043	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:29.463296890 CET	443	50043	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:29.463406086 CET	443	50043	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:29.463483095 CET	50043	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:29.463510036 CET	443	50043	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:29.469651937 CET	50044	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:29.469722986 CET	443	50044	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:29.470274925 CET	50044	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:30.544800997 CET	50044	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:30.544823885 CET	443	50044	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:30.544863939 CET	50044	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:30.544867992 CET	443	50044	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:30.544897079 CET	443	50044	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:32.566517115 CET	50050	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:32.566567898 CET	443	50050	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:32.566633940 CET	50050	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:32.620901108 CET	50050	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:32.620985985 CET	443	50050	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:32.621030092 CET	50050	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:32.621047020 CET	443	50050	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:32.621068954 CET	443	50050	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:32.630028009 CET	50051	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:32.630125046 CET	443	50051	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:32.630204916 CET	50051	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:32.697469950 CET	50051	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:32.697555065 CET	443	50051	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:32.697606087 CET	443	50051	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:32.697634935 CET	50051	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:32.697670937 CET	443	50051	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:32.705018044 CET	50053	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:32.705070019 CET	443	50053	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:32.705591917 CET	50053	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:32.763808966 CET	50053	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:32.763839006 CET	443	50053	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:32.763873100 CET	443	50053	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:32.763895988 CET	50053	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:32.763912916 CET	443	50053	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:32.769721985 CET	50054	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:32.769763947 CET	443	50054	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:32.769821882 CET	50054	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:32.852158070 CET	50054	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:32.852190971 CET	443	50054	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:32.852248907 CET	443	50054	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:32.852252960 CET	50054	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:32.852271080 CET	443	50054	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:32.864424944 CET	50055	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:32.864474058 CET	443	50055	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:32.864535093 CET	50055	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:32.916029930 CET	50055	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:32.916115999 CET	443	50055	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:32.916167021 CET	443	50055	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:32.916177988 CET	50055	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:32.916220903 CET	443	50055	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:32.920063972 CET	50056	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:32.920114040 CET	443	50056	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:32.920208931 CET	50056	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:32.975658894 CET	50056	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:32.975681067 CET	443	50056	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:32.975718021 CET	443	50056	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:32.975725889 CET	50056	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:32.975738049 CET	443	50056	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:32.980245113 CET	50057	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:32.980289936 CET	443	50057	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:32.980360031 CET	50057	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:33.025784016 CET	50057	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:33.025804996 CET	443	50057	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:33.025849104 CET	443	50057	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:33.025857925 CET	50057	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:33.025873899 CET	443	50057	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:33.028837919 CET	50058	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:33.028882980 CET	443	50058	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:33.029658079 CET	50058	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:33.076558113 CET	50058	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:33.076600075 CET	443	50058	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:33.076663971 CET	443	50058	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:33.076692104 CET	50058	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:33.076710939 CET	443	50058	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:35.143040895 CET	50064	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:35.143090963 CET	443	50064	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:35.144849062 CET	50064	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:35.194941998 CET	50064	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:35.194941998 CET	50064	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:35.194961071 CET	443	50064	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:35.194967985 CET	443	50064	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:35.195028067 CET	443	50064	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:35.201613903 CET	50065	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:35.201657057 CET	443	50065	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:35.202403069 CET	50065	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:35.259378910 CET	50065	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:35.259378910 CET	50065	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:35.259402990 CET	443	50065	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:35.259413958 CET	443	50065	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:35.259457111 CET	443	50065	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:35.263786077 CET	50066	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:35.263818979 CET	443	50066	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:35.264161110 CET	50066	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:35.319751024 CET	50066	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:35.319762945 CET	443	50066	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:35.322210073 CET	50066	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:35.322210073 CET	50066	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:35.322216034 CET	443	50066	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:35.322232008 CET	443	50066	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:35.323163986 CET	443	50066	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:35.328458071 CET	50068	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:35.328483105 CET	443	50068	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:35.329262018 CET	50068	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:36.455924034 CET	50068	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:36.456012011 CET	443	50068	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:36.456067085 CET	50068	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:36.456084967 CET	443	50068	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:36.456104040 CET	443	50068	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:38.487296104 CET	50077	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:38.487344980 CET	443	50077	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:38.487462997 CET	50077	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:38.542938948 CET	50077	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:38.542973042 CET	443	50077	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:38.543021917 CET	50077	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:38.543026924 CET	443	50077	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:38.543154955 CET	443	50077	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:38.547020912 CET	50078	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:38.547071934 CET	443	50078	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:38.547125101 CET	50078	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:38.603029013 CET	50078	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:38.603068113 CET	443	50078	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:38.603115082 CET	443	50078	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:38.603147984 CET	50078	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:38.603163958 CET	443	50078	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:38.605916977 CET	50079	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:38.606018066 CET	443	50079	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:38.606100082 CET	50079	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:38.647311926 CET	50079	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:38.647361040 CET	443	50079	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:38.647399902 CET	443	50079	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:38.647448063 CET	50079	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:38.647471905 CET	443	50079	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:38.650151014 CET	50080	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:38.650188923 CET	443	50080	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:38.650254011 CET	50080	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:38.700115919 CET	50080	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:38.700141907 CET	443	50080	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:38.700189114 CET	443	50080	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:38.700192928 CET	50080	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:38.700207949 CET	443	50080	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:38.707295895 CET	50081	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:38.707345009 CET	443	50081	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:38.707407951 CET	50081	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:38.789813995 CET	50081	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:38.789834023 CET	443	50081	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:38.789861917 CET	443	50081	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:38.789885044 CET	50081	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:38.789900064 CET	443	50081	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:38.795207024 CET	50082	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:38.795245886 CET	443	50082	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:38.795329094 CET	50082	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:38.865756989 CET	50082	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:38.865787983 CET	443	50082	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:38.865827084 CET	50082	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:38.865844965 CET	443	50082	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:38.865845919 CET	443	50082	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:38.870688915 CET	50083	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:38.870722055 CET	443	50083	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:38.870776892 CET	50083	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:38.933232069 CET	50083	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:38.933252096 CET	443	50083	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:38.933299065 CET	443	50083	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:38.933320045 CET	50083	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:38.933334112 CET	443	50083	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:38.937989950 CET	50084	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:38.938031912 CET	443	50084	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:38.938088894 CET	50084	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:39.072917938 CET	50084	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:39.072999001 CET	443	50084	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:39.073066950 CET	443	50084	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:39.073111057 CET	50084	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:39.073149920 CET	443	50084	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:41.109097004 CET	50090	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:41.109157085 CET	443	50090	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:41.109213114 CET	50090	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:41.174137115 CET	50090	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:41.174164057 CET	443	50090	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:41.174341917 CET	443	50090	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:41.174391985 CET	50090	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:41.174410105 CET	443	50090	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:41.178283930 CET	50091	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:41.178324938 CET	443	50091	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:41.178416967 CET	50091	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:41.225588083 CET	50091	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:41.225625038 CET	443	50091	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:41.225703001 CET	443	50091	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:41.228053093 CET	50092	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:41.228159904 CET	443	50092	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:41.229722023 CET	50092	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:41.269748926 CET	50092	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:41.269829988 CET	443	50092	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:41.269889116 CET	443	50092	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:41.272111893 CET	50093	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:41.272167921 CET	443	50093	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:41.273240089 CET	50093	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:41.339466095 CET	50093	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:41.339512110 CET	443	50093	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:41.339601040 CET	443	50093	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:41.339634895 CET	50093	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:41.339659929 CET	443	50093	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:43.540523052 CET	50099	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:43.540580034 CET	443	50099	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:43.543452978 CET	50099	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:43.739033937 CET	50099	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:43.739080906 CET	443	50099	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:43.739159107 CET	443	50099	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:43.784887075 CET	50100	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:43.784950018 CET	443	50100	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:43.785626888 CET	50100	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:43.833511114 CET	50100	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:43.833540916 CET	443	50100	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:43.833600044 CET	443	50100	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:43.833615065 CET	50100	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:43.833637953 CET	443	50100	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:43.841562033 CET	50101	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:43.841608047 CET	443	50101	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:43.841880083 CET	50101	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:43.914251089 CET	50101	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:43.914251089 CET	50101	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:43.914329052 CET	443	50101	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:43.914375067 CET	443	50101	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:43.914408922 CET	443	50101	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:43.922945976 CET	50103	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:43.922983885 CET	443	50103	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:43.923263073 CET	50103	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:45.015916109 CET	50103	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:45.015948057 CET	443	50103	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:45.016010046 CET	443	50103	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:45.016024113 CET	50103	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:45.016040087 CET	443	50103	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:45.021023989 CET	50108	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:45.021095037 CET	443	50108	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:45.021162987 CET	50108	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:45.091020107 CET	50108	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:45.091065884 CET	443	50108	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:45.091133118 CET	50108	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:45.091130972 CET	443	50108	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:45.091160059 CET	443	50108	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:45.095978022 CET	50109	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:45.096020937 CET	443	50109	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:45.096074104 CET	50109	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:45.172326088 CET	50109	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:45.172343016 CET	443	50109	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:45.172395945 CET	443	50109	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:45.172405005 CET	50109	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:45.172427893 CET	443	50109	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:45.176655054 CET	50110	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:45.176769972 CET	443	50110	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:45.176857948 CET	50110	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:45.223572016 CET	50110	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:45.223634005 CET	443	50110	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:45.223690987 CET	443	50110	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:45.229592085 CET	50111	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:45.229691029 CET	443	50111	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:45.233787060 CET	50111	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:45.315280914 CET	50111	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:45.315325022 CET	443	50111	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:45.315401077 CET	50111	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:45.315407991 CET	443	50111	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:45.315459013 CET	443	50111	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:47.409478903 CET	50117	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:47.409535885 CET	443	50117	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:47.410317898 CET	50117	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:47.459002972 CET	50117	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:47.459002972 CET	50117	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:47.459042072 CET	443	50117	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:47.459055901 CET	443	50117	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:47.459115028 CET	443	50117	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:47.465651989 CET	50118	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:47.465693951 CET	443	50118	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:47.475004911 CET	50118	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:48.537125111 CET	50118	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:48.537151098 CET	443	50118	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:48.537204981 CET	443	50118	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:48.537255049 CET	50118	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:48.537273884 CET	443	50118	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:48.544131994 CET	50120	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:48.544173002 CET	443	50120	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:48.544651031 CET	50120	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:48.632426023 CET	50120	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:48.632458925 CET	443	50120	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:48.632474899 CET	50120	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:48.632483959 CET	443	50120	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:48.632508993 CET	443	50120	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:48.638070107 CET	50121	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:48.638111115 CET	443	50121	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:48.638165951 CET	50121	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:48.747028112 CET	50121	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:48.747056961 CET	443	50121	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:48.747103930 CET	50121	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:48.747109890 CET	443	50121	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:48.747126102 CET	443	50121	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:50.768060923 CET	50127	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:50.768121958 CET	443	50127	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:50.768198013 CET	50127	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:50.818783998 CET	50127	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:50.818846941 CET	443	50127	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:50.818908930 CET	443	50127	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:50.818936110 CET	50127	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:50.818972111 CET	443	50127	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:50.822160959 CET	50128	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:50.822189093 CET	443	50128	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:50.823124886 CET	50128	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:50.866471052 CET	50128	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:50.866513968 CET	443	50128	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:50.866574049 CET	443	50128	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:50.866625071 CET	50128	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:50.866647959 CET	443	50128	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:50.870285988 CET	50129	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:50.870340109 CET	443	50129	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:50.870431900 CET	50129	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:50.928435087 CET	50129	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:50.928471088 CET	443	50129	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:50.928539038 CET	443	50129	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:50.928572893 CET	50129	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:50.928591013 CET	443	50129	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:50.931751013 CET	50130	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:50.931804895 CET	443	50130	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:50.931906939 CET	50130	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:50.974113941 CET	50130	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:50.974149942 CET	443	50130	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:50.974211931 CET	443	50130	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:50.977221966 CET	50131	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:50.977273941 CET	443	50131	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:50.977575064 CET	50131	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:51.046201944 CET	50131	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:51.046219110 CET	443	50131	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:51.046288013 CET	443	50131	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:51.049698114 CET	50133	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:51.049736977 CET	443	50133	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:51.049912930 CET	50133	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:51.093882084 CET	50133	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:51.093919039 CET	443	50133	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:51.093934059 CET	50133	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:51.093940973 CET	443	50133	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:51.093983889 CET	443	50133	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:51.097789049 CET	50134	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:51.097830057 CET	443	50134	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:51.097893000 CET	50134	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:51.151058912 CET	50134	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:51.151093960 CET	443	50134	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:51.151151896 CET	443	50134	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:51.151163101 CET	50134	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:51.151185036 CET	443	50134	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:51.155368090 CET	50135	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:51.155416012 CET	443	50135	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:51.155567884 CET	50135	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:51.215393066 CET	50135	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:51.215413094 CET	443	50135	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:51.215446949 CET	50135	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:51.215451956 CET	443	50135	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:51.215477943 CET	443	50135	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:53.239978075 CET	50141	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:53.240022898 CET	443	50141	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:53.240080118 CET	50141	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:53.355091095 CET	50141	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:53.355108023 CET	443	50141	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:53.355178118 CET	443	50141	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:53.355232000 CET	50141	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:53.355249882 CET	443	50141	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:53.376693964 CET	50142	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:53.376737118 CET	443	50142	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:53.376796007 CET	50142	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:53.431566000 CET	50142	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:53.431577921 CET	443	50142	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:53.431622982 CET	50142	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:53.431631088 CET	443	50142	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:53.431646109 CET	443	50142	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:53.439335108 CET	50143	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:53.439366102 CET	443	50143	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:53.439425945 CET	50143	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:53.499723911 CET	50143	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:53.499744892 CET	443	50143	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:53.499787092 CET	50143	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:53.499789000 CET	443	50143	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:53.499806881 CET	443	50143	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:53.505315065 CET	50144	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:53.505342960 CET	443	50144	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:53.505403042 CET	50144	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:53.581868887 CET	50144	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:53.581895113 CET	443	50144	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:53.581949949 CET	443	50144	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:53.581979990 CET	50144	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:53.581996918 CET	443	50144	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:55.612817049 CET	50150	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:55.612879992 CET	443	50150	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:55.613058090 CET	50150	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:55.678864002 CET	50150	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:55.678932905 CET	443	50150	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:55.678994894 CET	50150	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:55.678992987 CET	443	50150	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:55.679032087 CET	443	50150	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:55.682668924 CET	50151	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:55.682773113 CET	443	50151	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:55.682845116 CET	50151	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:55.760318041 CET	50151	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:55.760360003 CET	443	50151	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:55.760421991 CET	50151	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:55.760428905 CET	443	50151	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:55.760448933 CET	443	50151	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:55.764863968 CET	50152	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:55.764911890 CET	443	50152	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:55.764971018 CET	50152	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:55.820113897 CET	50152	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:55.820152044 CET	443	50152	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:55.820173979 CET	50152	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:55.820182085 CET	443	50152	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:55.820244074 CET	443	50152	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:55.827994108 CET	50155	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:55.828092098 CET	443	50155	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:55.828172922 CET	50155	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:55.898089886 CET	50155	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:55.898188114 CET	443	50155	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:55.898246050 CET	443	50155	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:55.898268938 CET	50155	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:55.898310900 CET	443	50155	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:55.902537107 CET	50157	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:55.902575016 CET	443	50157	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:55.902623892 CET	50157	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:55.964374065 CET	50157	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:55.964390039 CET	443	50157	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:55.964432001 CET	50157	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:55.964437008 CET	443	50157	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:55.964466095 CET	443	50157	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:55.968427896 CET	50158	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:55.968485117 CET	443	50158	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:55.968539000 CET	50158	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:56.028076887 CET	50158	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:56.028115988 CET	443	50158	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:56.028157949 CET	443	50158	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:56.028207064 CET	50158	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:56.028224945 CET	443	50158	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:56.031106949 CET	50159	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:56.031148911 CET	443	50159	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:56.031234026 CET	50159	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:56.114017010 CET	50159	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:56.114033937 CET	443	50159	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:56.114077091 CET	50159	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:56.114084959 CET	443	50159	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:56.114092112 CET	443	50159	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:56.119383097 CET	50160	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:56.119415045 CET	443	50160	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:56.119472980 CET	50160	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:56.190222025 CET	50160	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:56.190251112 CET	443	50160	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:56.190303087 CET	50160	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:56.190306902 CET	443	50160	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:56.190443039 CET	443	50160	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:58.225822926 CET	50166	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:58.225860119 CET	443	50166	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:58.229360104 CET	50166	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:58.286936045 CET	50166	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:58.286936045 CET	50166	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:21:58.286966085 CET	443	50166	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:58.286976099 CET	443	50166	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:58.287106991 CET	443	50166	77.221.149.84	192.168.2.4
Dec 11, 2024 16:21:58.290302992 CET	50167	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:58.290384054 CET	443	50167	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:58.291800022 CET	50167	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:58.333530903 CET	50167	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:21:58.333571911 CET	443	50167	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:58.333677053 CET	443	50167	89.116.191.177	192.168.2.4
Dec 11, 2024 16:21:58.336534977 CET	50168	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:58.336580038 CET	443	50168	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:58.343697071 CET	50168	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:58.380518913 CET	50168	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:58.380518913 CET	50168	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:21:58.380542994 CET	443	50168	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:58.380558968 CET	443	50168	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:58.380660057 CET	443	50168	213.210.13.4	192.168.2.4
Dec 11, 2024 16:21:58.385495901 CET	50169	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:58.385543108 CET	443	50169	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:58.385956049 CET	50169	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:58.425154924 CET	50169	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:21:58.425231934 CET	443	50169	193.188.22.40	192.168.2.4
Dec 11, 2024 16:21:58.425290108 CET	443	50169	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:00.461179018 CET	50175	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:00.461240053 CET	443	50175	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:00.461590052 CET	50175	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:00.511838913 CET	50175	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:00.511889935 CET	443	50175	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:00.511949062 CET	443	50175	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:00.516614914 CET	50176	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:00.516665936 CET	443	50176	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:00.521462917 CET	50176	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:00.568737030 CET	50176	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:00.568763018 CET	443	50176	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:00.568804026 CET	443	50176	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:00.572348118 CET	50177	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:00.572391033 CET	443	50177	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:00.573012114 CET	50177	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:00.632473946 CET	50177	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:00.632509947 CET	443	50177	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:00.632582903 CET	443	50177	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:00.635114908 CET	50178	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:00.635189056 CET	443	50178	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:00.635540009 CET	50178	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:00.694060087 CET	50178	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:00.694145918 CET	443	50178	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:00.694210052 CET	443	50178	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:00.697491884 CET	50179	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:00.697596073 CET	443	50179	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:00.697727919 CET	50179	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:00.759083033 CET	50179	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:00.759177923 CET	443	50179	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:00.759227991 CET	50179	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:00.759246111 CET	443	50179	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:00.759274960 CET	443	50179	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:00.763117075 CET	50180	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:00.763161898 CET	443	50180	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:00.763928890 CET	50180	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:00.818855047 CET	50180	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:00.818855047 CET	50180	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:00.818881989 CET	443	50180	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:00.818897009 CET	443	50180	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:00.818941116 CET	443	50180	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:00.821991920 CET	50181	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:00.822041035 CET	443	50181	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:00.825579882 CET	50181	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:00.873485088 CET	50181	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:00.873512983 CET	443	50181	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:00.873568058 CET	443	50181	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:00.873599052 CET	50181	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:00.873620987 CET	443	50181	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:00.888953924 CET	50182	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:00.889003038 CET	443	50182	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:00.889271975 CET	50182	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:00.967272997 CET	50182	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:00.967295885 CET	443	50182	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:00.967351913 CET	443	50182	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:03.189992905 CET	50183	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:03.190026999 CET	443	50183	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:03.190217018 CET	50183	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:03.235800028 CET	50183	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:03.235816002 CET	443	50183	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:03.235858917 CET	50183	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:03.235876083 CET	443	50183	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:03.242499113 CET	50184	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:03.242522955 CET	443	50184	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:03.244210958 CET	50184	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:03.356884956 CET	50184	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:03.356900930 CET	443	50184	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:03.356939077 CET	50184	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:03.356945038 CET	443	50184	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:03.356967926 CET	443	50184	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:03.360831976 CET	50185	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:03.360877037 CET	443	50185	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:03.360928059 CET	50185	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:03.433726072 CET	50185	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:03.433747053 CET	443	50185	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:03.433819056 CET	443	50185	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:03.438472986 CET	50186	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:03.438514948 CET	443	50186	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:03.438879013 CET	50186	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:04.503353119 CET	50186	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:04.503370047 CET	443	50186	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:04.503421068 CET	443	50186	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:04.505439997 CET	50186	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:04.505456924 CET	443	50186	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:06.539446115 CET	50187	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:06.539504051 CET	443	50187	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:06.539633989 CET	50187	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:06.589472055 CET	50187	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:06.589500904 CET	443	50187	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:06.589593887 CET	50187	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:06.589600086 CET	443	50187	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:06.589776039 CET	443	50187	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:06.593470097 CET	50187	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:06.593470097 CET	50187	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:06.593492985 CET	443	50187	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:06.593504906 CET	443	50187	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:06.598592997 CET	50188	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:06.598690033 CET	443	50188	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:06.598995924 CET	50188	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:06.642111063 CET	50188	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:06.642194986 CET	443	50188	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:06.642455101 CET	443	50188	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:06.642487049 CET	50188	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:06.642519951 CET	443	50188	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:06.645476103 CET	50189	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:06.645509005 CET	443	50189	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:06.647099972 CET	50189	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:06.704612970 CET	50189	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:06.704639912 CET	443	50189	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:06.704854012 CET	443	50189	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:06.708534956 CET	50190	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:06.708586931 CET	443	50190	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:06.711318016 CET	50190	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:06.761435986 CET	50190	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:06.761462927 CET	443	50190	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:06.761563063 CET	443	50190	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:06.765074968 CET	50191	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:06.765117884 CET	443	50191	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:06.765585899 CET	50191	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:06.816267967 CET	50191	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:06.816307068 CET	443	50191	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:06.816445112 CET	443	50191	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:06.821480989 CET	50192	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:06.821521044 CET	443	50192	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:06.822104931 CET	50192	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:06.863207102 CET	50192	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:06.863238096 CET	443	50192	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:06.863279104 CET	443	50192	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:06.866126060 CET	50193	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:06.866161108 CET	443	50193	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:06.866286039 CET	50193	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:06.926670074 CET	50193	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:06.926702976 CET	443	50193	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:06.926808119 CET	443	50193	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:06.929771900 CET	50194	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:06.929816008 CET	443	50194	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:06.929959059 CET	50194	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:06.985789061 CET	50194	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:06.985815048 CET	443	50194	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:06.985867023 CET	443	50194	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:06.985901117 CET	50194	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:06.985912085 CET	443	50194	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:09.021533012 CET	50195	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:09.021644115 CET	443	50195	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:09.022023916 CET	50195	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:09.085463047 CET	50195	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:09.085546970 CET	443	50195	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:09.085588932 CET	443	50195	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:09.085654020 CET	50195	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:09.085689068 CET	443	50195	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:09.089426994 CET	50196	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:09.089468956 CET	443	50196	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:09.089709997 CET	50196	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:09.140357018 CET	50196	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:09.140386105 CET	443	50196	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:09.140424967 CET	50196	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:09.140434027 CET	443	50196	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:09.140537024 CET	443	50196	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:09.145030022 CET	50197	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:09.145075083 CET	443	50197	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:09.145198107 CET	50197	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:09.215265989 CET	50197	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:09.215265989 CET	50197	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:09.215295076 CET	443	50197	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:09.215305090 CET	443	50197	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:09.215374947 CET	443	50197	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:09.218348026 CET	50198	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:09.218389034 CET	443	50198	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:09.218466043 CET	50198	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:09.297215939 CET	50198	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:09.297241926 CET	443	50198	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:09.297291040 CET	50198	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:09.297297955 CET	443	50198	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:09.297308922 CET	443	50198	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:11.330624104 CET	50199	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:11.330672979 CET	443	50199	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:11.330735922 CET	50199	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:11.388140917 CET	50199	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:11.388170958 CET	443	50199	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:11.388219118 CET	50199	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:11.388228893 CET	443	50199	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:11.388235092 CET	443	50199	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:11.393939972 CET	50200	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:11.393989086 CET	443	50200	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:11.394046068 CET	50200	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:11.447227001 CET	50200	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:11.447261095 CET	443	50200	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:11.447329044 CET	50200	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:11.447335958 CET	443	50200	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:11.447586060 CET	443	50200	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:11.451756954 CET	50201	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:11.451790094 CET	443	50201	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:11.452260971 CET	50201	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:11.553277969 CET	50201	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:11.553298950 CET	443	50201	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:11.553369999 CET	50201	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:11.553374052 CET	443	50201	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:11.553523064 CET	443	50201	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:11.562128067 CET	50202	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:11.562172890 CET	443	50202	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:11.562237978 CET	50202	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:11.636890888 CET	50202	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:11.636919022 CET	443	50202	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:11.636992931 CET	50202	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:11.636998892 CET	443	50202	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:11.637027025 CET	443	50202	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:11.644016981 CET	50203	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:11.644052029 CET	443	50203	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:11.644229889 CET	50203	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:11.772346973 CET	50203	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:11.772367001 CET	443	50203	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:11.772413015 CET	50203	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:11.772417068 CET	443	50203	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:11.772500038 CET	443	50203	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:11.777709961 CET	50204	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:11.777808905 CET	443	50204	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:11.777900934 CET	50204	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:11.915904999 CET	50204	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:11.915905952 CET	50204	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:11.916004896 CET	443	50204	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:11.916042089 CET	443	50204	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:11.916085958 CET	443	50204	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:11.920876026 CET	50205	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:11.920917988 CET	443	50205	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:11.920979977 CET	50205	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:11.990539074 CET	50205	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:11.990560055 CET	443	50205	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:11.990576982 CET	50205	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:11.990581989 CET	443	50205	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:11.990622044 CET	443	50205	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:11.995510101 CET	50206	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:11.995539904 CET	443	50206	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:11.995598078 CET	50206	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:12.077523947 CET	50206	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:12.077543974 CET	443	50206	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:12.077583075 CET	443	50206	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:12.077600956 CET	50206	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:12.077611923 CET	443	50206	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:14.114134073 CET	50207	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:14.114181995 CET	443	50207	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:14.114248037 CET	50207	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:14.177339077 CET	50207	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:14.177357912 CET	443	50207	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:14.177400112 CET	50207	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:14.177403927 CET	443	50207	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:14.177419901 CET	443	50207	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:14.181267977 CET	50208	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:14.181302071 CET	443	50208	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:14.181351900 CET	50208	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:14.224586010 CET	50208	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:14.224615097 CET	443	50208	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:14.224661112 CET	50208	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:14.224664927 CET	443	50208	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:14.224678993 CET	443	50208	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:14.228343010 CET	50209	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:14.228427887 CET	443	50209	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:14.228503942 CET	50209	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:14.293452024 CET	50209	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:14.293507099 CET	443	50209	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:14.293564081 CET	443	50209	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:14.297161102 CET	50210	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:14.297204018 CET	443	50210	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:14.303464890 CET	50210	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:15.385976076 CET	50210	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:15.386068106 CET	443	50210	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:15.386125088 CET	443	50210	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:15.386137009 CET	50210	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:15.386177063 CET	443	50210	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:17.409154892 CET	50211	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:17.409215927 CET	443	50211	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:17.409284115 CET	50211	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:17.483155012 CET	50211	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:17.483198881 CET	443	50211	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:17.483246088 CET	50211	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:17.483253002 CET	443	50211	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:17.483298063 CET	443	50211	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:17.491038084 CET	50212	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:17.491080999 CET	443	50212	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:17.491147995 CET	50212	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:17.599401951 CET	50212	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:17.599431992 CET	443	50212	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:17.599474907 CET	50212	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:17.599483967 CET	443	50212	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:17.599517107 CET	443	50212	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:17.612783909 CET	50213	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:17.612838030 CET	443	50213	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:17.612962961 CET	50213	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:17.697972059 CET	50213	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:17.697999954 CET	443	50213	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:17.698050976 CET	50213	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:17.698072910 CET	443	50213	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:17.705735922 CET	50214	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:17.705786943 CET	443	50214	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:17.705857992 CET	50214	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:17.773305893 CET	50214	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:17.773339987 CET	443	50214	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:17.773377895 CET	443	50214	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:17.773394108 CET	50214	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:17.773411989 CET	443	50214	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:17.779690981 CET	50215	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:17.779738903 CET	443	50215	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:17.779798985 CET	50215	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:17.850074053 CET	50215	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:17.850100040 CET	443	50215	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:17.850138903 CET	443	50215	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:17.850147009 CET	50215	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:17.850164890 CET	443	50215	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:17.853146076 CET	50216	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:17.853180885 CET	443	50216	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:17.853247881 CET	50216	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:17.903702021 CET	50216	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:17.903732061 CET	443	50216	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:17.903774977 CET	50216	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:17.903796911 CET	443	50216	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:17.903840065 CET	443	50216	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:17.907125950 CET	50217	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:17.907174110 CET	443	50217	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:17.907344103 CET	50217	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:17.961143970 CET	50217	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:17.961162090 CET	443	50217	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:17.961230040 CET	443	50217	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:17.961247921 CET	50217	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:17.961262941 CET	443	50217	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:17.963282108 CET	50218	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:17.963336945 CET	443	50218	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:17.963413000 CET	50218	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:18.005001068 CET	50218	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:18.005043030 CET	443	50218	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:18.005100965 CET	50218	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:18.005120993 CET	443	50218	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:18.005136967 CET	443	50218	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:20.037365913 CET	50219	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:20.037409067 CET	443	50219	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:20.037466049 CET	50219	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:20.103737116 CET	50219	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:20.103761911 CET	443	50219	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:20.103827953 CET	443	50219	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:20.103836060 CET	50219	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:20.103852987 CET	443	50219	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:20.135607004 CET	50220	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:20.135639906 CET	443	50220	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:20.135711908 CET	50220	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:20.222641945 CET	50220	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:20.222671986 CET	443	50220	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:20.222726107 CET	50220	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:20.222732067 CET	443	50220	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:20.222759008 CET	443	50220	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:20.226975918 CET	50221	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:20.227025986 CET	443	50221	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:20.227094889 CET	50221	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:20.273367882 CET	50221	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:20.273401976 CET	443	50221	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:20.273438931 CET	443	50221	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:20.277393103 CET	50221	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:20.277426004 CET	443	50221	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:20.281383991 CET	50222	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:20.281440020 CET	443	50222	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:20.285553932 CET	50222	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:21.369733095 CET	50222	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:21.369771957 CET	443	50222	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:21.369836092 CET	443	50222	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:21.369947910 CET	50222	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:21.369980097 CET	443	50222	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:23.393667936 CET	50223	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:23.393727064 CET	443	50223	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:23.393790007 CET	50223	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:23.459424019 CET	50223	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:23.459451914 CET	443	50223	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:23.459502935 CET	50223	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:23.459506989 CET	443	50223	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:23.459522963 CET	443	50223	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:23.462367058 CET	50224	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:23.462399006 CET	443	50224	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:23.462459087 CET	50224	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:23.543431044 CET	50224	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:23.543453932 CET	443	50224	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:23.543507099 CET	50224	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:23.543512106 CET	443	50224	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:23.543556929 CET	443	50224	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:23.564001083 CET	50225	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:23.564047098 CET	443	50225	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:23.564116001 CET	50225	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:23.624193907 CET	50225	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:23.624224901 CET	443	50225	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:23.624281883 CET	50225	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:23.624289989 CET	443	50225	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:23.624330044 CET	443	50225	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:23.632152081 CET	50226	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:23.632201910 CET	443	50226	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:23.632263899 CET	50226	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:23.715502977 CET	50226	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:23.715538979 CET	443	50226	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:23.715605021 CET	50226	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:23.715610027 CET	443	50226	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:23.715791941 CET	443	50226	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:23.718502045 CET	50227	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:23.718558073 CET	443	50227	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:23.718635082 CET	50227	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:23.799241066 CET	50227	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:23.799276114 CET	443	50227	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:23.799331903 CET	50227	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:23.799343109 CET	443	50227	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:23.799370050 CET	443	50227	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:23.822552919 CET	50228	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:23.822598934 CET	443	50228	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:23.822647095 CET	50228	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:23.931046963 CET	50228	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:23.931071997 CET	443	50228	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:23.931103945 CET	50228	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:23.931109905 CET	443	50228	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:23.931128979 CET	443	50228	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:23.939575911 CET	50229	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:23.939619064 CET	443	50229	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:23.939680099 CET	50229	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:23.998974085 CET	50229	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:23.999003887 CET	443	50229	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:23.999018908 CET	50229	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:23.999027014 CET	443	50229	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:23.999270916 CET	443	50229	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:24.004915953 CET	50230	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:24.004965067 CET	443	50230	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:24.005022049 CET	50230	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:24.067065954 CET	50230	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:24.067092896 CET	443	50230	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:24.067137003 CET	50230	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:24.067143917 CET	443	50230	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:24.067152023 CET	443	50230	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:26.095959902 CET	50231	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:26.096004963 CET	443	50231	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:26.096937895 CET	50231	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:26.145291090 CET	50231	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:26.145311117 CET	443	50231	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:26.145391941 CET	443	50231	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:26.145437956 CET	50231	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:26.145452023 CET	443	50231	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:26.148144960 CET	50232	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:26.148201942 CET	443	50232	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:26.148279905 CET	50232	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:26.194549084 CET	50232	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:26.194567919 CET	443	50232	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:26.194644928 CET	443	50232	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:26.194645882 CET	50232	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:26.194658995 CET	443	50232	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:26.199002028 CET	50233	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:26.199050903 CET	443	50233	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:26.199127913 CET	50233	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:26.246296883 CET	50233	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:26.246315956 CET	443	50233	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:26.246372938 CET	50233	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:26.246377945 CET	443	50233	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:26.246402025 CET	443	50233	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:26.249834061 CET	50234	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:26.249874115 CET	443	50234	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:26.249955893 CET	50234	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:26.303831100 CET	50234	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:26.303857088 CET	443	50234	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:26.303926945 CET	443	50234	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:26.303952932 CET	50234	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:26.303972006 CET	443	50234	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:28.331471920 CET	50235	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:28.331526041 CET	443	50235	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:28.336148024 CET	50235	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:28.389271975 CET	50235	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:28.389297009 CET	443	50235	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:28.389377117 CET	443	50235	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:28.389411926 CET	50235	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:28.389425993 CET	443	50235	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:28.408263922 CET	50236	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:28.408363104 CET	443	50236	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:28.409126997 CET	50236	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:28.472171068 CET	50236	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:28.472218037 CET	443	50236	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:28.472269058 CET	50236	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:28.472281933 CET	443	50236	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:28.498343945 CET	50237	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:28.498378992 CET	443	50237	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:28.501416922 CET	50237	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:29.586744070 CET	50237	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:29.586832047 CET	443	50237	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:29.586895943 CET	443	50237	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:29.586904049 CET	50237	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:29.586941004 CET	443	50237	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:29.591002941 CET	50238	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:29.591042042 CET	443	50238	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:29.591088057 CET	50238	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:29.665983915 CET	50238	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:29.666002035 CET	443	50238	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:29.666033030 CET	50238	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:29.666038036 CET	443	50238	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:29.666110039 CET	443	50238	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:29.670248032 CET	50239	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:29.670315981 CET	443	50239	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:29.670387983 CET	50239	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:29.750958920 CET	50239	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:29.750998974 CET	443	50239	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:29.751126051 CET	50239	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:29.751135111 CET	443	50239	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:29.751334906 CET	443	50239	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:29.768656015 CET	50240	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:29.768701077 CET	443	50240	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:29.768757105 CET	50240	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:29.848779917 CET	50240	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:29.848815918 CET	443	50240	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:29.848874092 CET	50240	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:29.848881006 CET	443	50240	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:29.848934889 CET	443	50240	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:29.853209972 CET	50241	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:29.853265047 CET	443	50241	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:29.853317976 CET	50241	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:29.908651114 CET	50241	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:29.908674002 CET	443	50241	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:29.908720970 CET	50241	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:29.908725023 CET	443	50241	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:29.908796072 CET	443	50241	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:29.912517071 CET	50242	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:29.912568092 CET	443	50242	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:29.912631035 CET	50242	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:29.984236956 CET	50242	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:29.984262943 CET	443	50242	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:29.984308958 CET	50242	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:29.984313011 CET	443	50242	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:29.984325886 CET	443	50242	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:32.019993067 CET	50243	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:32.020040989 CET	443	50243	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:32.020097971 CET	50243	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:32.095891953 CET	50243	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:32.095912933 CET	443	50243	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:32.095956087 CET	50243	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:32.095959902 CET	443	50243	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:32.096018076 CET	443	50243	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:32.100128889 CET	50244	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:32.100187063 CET	443	50244	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:32.100255013 CET	50244	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:32.154109001 CET	50244	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:32.154197931 CET	443	50244	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:32.154267073 CET	50244	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:32.154294968 CET	443	50244	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:32.164392948 CET	50245	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:32.164453030 CET	443	50245	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:32.164566040 CET	50245	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:32.246732950 CET	50245	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:32.246817112 CET	443	50245	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:32.246855021 CET	50245	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:32.246877909 CET	443	50245	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:32.250356913 CET	50246	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:32.250374079 CET	443	50246	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:32.250432968 CET	50246	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:32.299622059 CET	50246	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:32.299649000 CET	443	50246	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:32.299669027 CET	50246	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:32.299676895 CET	443	50246	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:32.299721956 CET	443	50246	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:34.331893921 CET	50247	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:34.332020044 CET	443	50247	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:34.337439060 CET	50247	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:34.397345066 CET	50247	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:34.397434950 CET	443	50247	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:34.397484064 CET	443	50247	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:34.399727106 CET	50248	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:34.399739027 CET	443	50248	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:34.401463985 CET	50248	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:34.441001892 CET	50248	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:34.441042900 CET	443	50248	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:34.441093922 CET	443	50248	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:34.443747044 CET	50249	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:34.443783998 CET	443	50249	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:34.443887949 CET	50249	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:34.482486963 CET	50249	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:34.482508898 CET	443	50249	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:34.482530117 CET	443	50249	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:34.482834101 CET	50249	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:34.482850075 CET	443	50249	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:34.485117912 CET	50250	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:34.485229015 CET	443	50250	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:34.485591888 CET	50250	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:34.527081013 CET	50250	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:34.527134895 CET	443	50250	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:34.527158022 CET	443	50250	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:34.529977083 CET	50251	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:34.530023098 CET	443	50251	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:34.530203104 CET	50251	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:34.585243940 CET	50251	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:34.585243940 CET	50251	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:34.585268021 CET	443	50251	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:34.585277081 CET	443	50251	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:34.585304976 CET	443	50251	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:34.589855909 CET	50252	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:34.589905977 CET	443	50252	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:34.594391108 CET	50252	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:34.648911953 CET	50252	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:34.648936987 CET	443	50252	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:34.649008989 CET	443	50252	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:34.653320074 CET	50253	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:34.653352022 CET	443	50253	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:34.654406071 CET	50253	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:34.696557999 CET	50253	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:34.696599960 CET	443	50253	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:34.696635962 CET	443	50253	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:34.696665049 CET	50253	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:34.696690083 CET	443	50253	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:34.701133013 CET	50254	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:34.701191902 CET	443	50254	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:34.701879978 CET	50254	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:34.745472908 CET	50254	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:34.745474100 CET	50254	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:34.745506048 CET	443	50254	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:34.745520115 CET	443	50254	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:34.745548010 CET	443	50254	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:36.773320913 CET	50255	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:36.773365974 CET	443	50255	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:36.779891968 CET	50255	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:36.837521076 CET	50255	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:36.837551117 CET	443	50255	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:36.837585926 CET	443	50255	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:36.845328093 CET	50256	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:36.845371962 CET	443	50256	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:36.846210957 CET	50256	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:37.927517891 CET	50256	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:37.927545071 CET	443	50256	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:37.927614927 CET	443	50256	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:37.927673101 CET	50256	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:37.927697897 CET	443	50256	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:37.939771891 CET	50257	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:37.939827919 CET	443	50257	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:37.939915895 CET	50257	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:38.007137060 CET	50257	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:38.007160902 CET	443	50257	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:38.007221937 CET	443	50257	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:38.007260084 CET	50257	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:38.007289886 CET	443	50257	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:38.015197992 CET	50258	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:38.015252113 CET	443	50258	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:38.015310049 CET	50258	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:38.096671104 CET	50258	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:38.096709013 CET	443	50258	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:38.096761942 CET	443	50258	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:38.096812963 CET	50258	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:38.096832037 CET	443	50258	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:40.159142017 CET	50259	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:40.159189939 CET	443	50259	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:40.159280062 CET	50259	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:40.199125051 CET	50259	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:40.199125051 CET	50259	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:40.199139118 CET	443	50259	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:40.199151039 CET	443	50259	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:40.199186087 CET	443	50259	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:40.204461098 CET	50260	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:40.204509974 CET	443	50260	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:40.204567909 CET	50260	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:40.244302034 CET	50260	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:40.244302034 CET	50260	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:40.244330883 CET	443	50260	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:40.244342089 CET	443	50260	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:40.244421005 CET	443	50260	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:40.250174046 CET	50261	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:40.250222921 CET	443	50261	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:40.250282049 CET	50261	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:40.307329893 CET	50261	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:40.307329893 CET	50261	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:40.307368040 CET	443	50261	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:40.307374954 CET	443	50261	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:40.307449102 CET	443	50261	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:40.311562061 CET	50262	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:40.311619043 CET	443	50262	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:40.311700106 CET	50262	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:40.360560894 CET	50262	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:40.360582113 CET	443	50262	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:40.360635996 CET	443	50262	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:40.360672951 CET	50262	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:40.360693932 CET	443	50262	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:40.363523960 CET	50263	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:40.363569975 CET	443	50263	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:40.364182949 CET	50263	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:40.409773111 CET	50263	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:40.409807920 CET	443	50263	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:40.409852028 CET	443	50263	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:40.413331032 CET	50264	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:40.413383007 CET	443	50264	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:40.413592100 CET	50264	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:40.477895975 CET	50264	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:40.477911949 CET	443	50264	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:40.477976084 CET	443	50264	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:40.480873108 CET	50265	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:40.480915070 CET	443	50265	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:40.481021881 CET	50265	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:40.547380924 CET	50265	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:40.547465086 CET	443	50265	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:40.547655106 CET	443	50265	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:40.554599047 CET	50266	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:40.554645061 CET	443	50266	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:40.555356026 CET	50266	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:40.613425970 CET	50266	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:40.613440037 CET	443	50266	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:40.613485098 CET	443	50266	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:42.643028021 CET	50267	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:42.643074989 CET	443	50267	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:42.643229008 CET	50267	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:42.694067001 CET	50267	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:42.694098949 CET	443	50267	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:42.694189072 CET	443	50267	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:42.697000027 CET	50268	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:42.697014093 CET	443	50268	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:42.697266102 CET	50268	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:42.742264032 CET	50268	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:42.742288113 CET	443	50268	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:42.742341042 CET	443	50268	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:42.747200012 CET	50269	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:42.747248888 CET	443	50269	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:42.747524977 CET	50269	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:42.789884090 CET	50269	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:42.789901018 CET	443	50269	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:42.789963007 CET	443	50269	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:42.793261051 CET	50270	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:42.793308973 CET	443	50270	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:42.793781042 CET	50270	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:42.839860916 CET	50270	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:42.839862108 CET	50270	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:42.839879036 CET	443	50270	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:42.839888096 CET	443	50270	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:42.839940071 CET	443	50270	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:44.957422972 CET	50271	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:44.957469940 CET	443	50271	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:44.959398031 CET	50271	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:45.002700090 CET	50271	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:45.002739906 CET	443	50271	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:45.002826929 CET	443	50271	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:45.002898932 CET	50271	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:45.002919912 CET	443	50271	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:45.012856007 CET	50272	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:45.012898922 CET	443	50272	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:45.013060093 CET	50272	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:45.053375959 CET	50272	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:45.053394079 CET	443	50272	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:45.053462982 CET	443	50272	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:45.053509951 CET	50272	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:45.053523064 CET	443	50272	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:45.056978941 CET	50273	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:45.057029963 CET	443	50273	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:45.057214022 CET	50273	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:45.106240034 CET	50273	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:45.106301069 CET	443	50273	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:45.106381893 CET	50273	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:45.106388092 CET	443	50273	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:45.106451988 CET	443	50273	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:45.109488964 CET	50274	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:45.109530926 CET	443	50274	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:45.109842062 CET	50274	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:45.157358885 CET	50274	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:45.157393932 CET	443	50274	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:45.157479048 CET	443	50274	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:45.157936096 CET	50274	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:45.157964945 CET	443	50274	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:45.161272049 CET	50275	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:45.161325932 CET	443	50275	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:45.161835909 CET	50275	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:45.210597992 CET	50275	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:45.210700035 CET	443	50275	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:45.210972071 CET	443	50275	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:45.211041927 CET	50275	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:45.211110115 CET	443	50275	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:45.214724064 CET	50276	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:45.214761972 CET	443	50276	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:45.214952946 CET	50276	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:45.258660078 CET	50276	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:45.258691072 CET	443	50276	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:45.258780003 CET	443	50276	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:45.260634899 CET	50277	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:45.260678053 CET	443	50277	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:45.261137962 CET	50277	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:45.301861048 CET	50277	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:45.301861048 CET	50277	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:45.301903963 CET	443	50277	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:45.301922083 CET	443	50277	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:45.301948071 CET	443	50277	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:45.304141998 CET	50278	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:45.304217100 CET	443	50278	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:45.304426908 CET	50278	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:45.386015892 CET	50278	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:45.386065960 CET	443	50278	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:45.386112928 CET	443	50278	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:45.386140108 CET	50278	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:45.386161089 CET	443	50278	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:47.410667896 CET	50279	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:47.410769939 CET	443	50279	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:47.410866022 CET	50279	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:47.474982977 CET	50279	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:47.475023031 CET	443	50279	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:47.475100040 CET	443	50279	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:47.475188017 CET	50279	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:47.475210905 CET	443	50279	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:47.477907896 CET	50280	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:47.478015900 CET	443	50280	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:47.478111982 CET	50280	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:47.517256021 CET	50280	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:47.517354965 CET	443	50280	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:47.517431021 CET	443	50280	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:47.517544031 CET	50280	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:47.517585039 CET	443	50280	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:47.519984007 CET	50281	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:47.520031929 CET	443	50281	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:47.520088911 CET	50281	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:47.586636066 CET	50281	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:47.586678028 CET	443	50281	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:47.586743116 CET	50281	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:47.586750984 CET	443	50281	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:47.586889982 CET	443	50281	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:47.592693090 CET	50282	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:47.592730045 CET	443	50282	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:47.592777967 CET	50282	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:47.653835058 CET	50282	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:47.653856993 CET	443	50282	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:47.653892040 CET	50282	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:47.653898954 CET	443	50282	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:47.653970003 CET	443	50282	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:49.690746069 CET	50283	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:49.690788984 CET	443	50283	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:49.690856934 CET	50283	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:49.849410057 CET	50283	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:49.849447012 CET	443	50283	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:49.849493027 CET	50283	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:49.849498034 CET	443	50283	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:49.849570990 CET	443	50283	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:49.855242014 CET	50284	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:49.855289936 CET	443	50284	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:49.855343103 CET	50284	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:49.920845985 CET	50284	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:49.920877934 CET	443	50284	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:49.920901060 CET	50284	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:49.920907974 CET	443	50284	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:49.920974970 CET	443	50284	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:49.927678108 CET	50285	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:49.927721977 CET	443	50285	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:49.927779913 CET	50285	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:50.038559914 CET	50285	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:50.038584948 CET	443	50285	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:50.038651943 CET	50285	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:50.038655043 CET	443	50285	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:50.038669109 CET	443	50285	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:50.041454077 CET	50286	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:50.041497946 CET	443	50286	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:50.041640997 CET	50286	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:50.120116949 CET	50286	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:50.120150089 CET	443	50286	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:50.120220900 CET	443	50286	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:50.120270967 CET	50286	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:50.120290995 CET	443	50286	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:50.125664949 CET	50287	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:50.125710011 CET	443	50287	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:50.125778913 CET	50287	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:50.212534904 CET	50287	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:50.212558031 CET	443	50287	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:50.212640047 CET	50287	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:50.212646961 CET	443	50287	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:50.212654114 CET	443	50287	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:50.226200104 CET	50288	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:50.226227999 CET	443	50288	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:50.226283073 CET	50288	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:50.277971029 CET	50288	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:50.277985096 CET	443	50288	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:50.278055906 CET	50288	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:50.278064013 CET	443	50288	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:50.278063059 CET	443	50288	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:50.282329082 CET	50289	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:50.282382965 CET	443	50289	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:50.282576084 CET	50289	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:51.341017962 CET	50289	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:51.341037989 CET	443	50289	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:51.341078997 CET	50289	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:51.341087103 CET	443	50289	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:51.341341019 CET	443	50289	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:51.343462944 CET	50290	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:51.343497992 CET	443	50290	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:51.343556881 CET	50290	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:51.380732059 CET	50290	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:51.380767107 CET	443	50290	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:51.380830050 CET	50290	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:51.380836010 CET	443	50290	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:51.380858898 CET	443	50290	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:53.408128977 CET	50291	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:53.408178091 CET	443	50291	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:53.408252954 CET	50291	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:53.478892088 CET	50291	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:53.478933096 CET	443	50291	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:53.479049921 CET	50291	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:53.479055882 CET	443	50291	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:53.479068041 CET	443	50291	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:53.484647036 CET	50292	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:53.484711885 CET	443	50292	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:53.484776020 CET	50292	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:53.549887896 CET	50292	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:53.549926043 CET	443	50292	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:53.549990892 CET	50292	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:53.550010920 CET	443	50292	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:53.550025940 CET	443	50292	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:53.555511951 CET	50293	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:53.555591106 CET	443	50293	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:53.555696964 CET	50293	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:53.625375986 CET	50293	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:53.625416994 CET	443	50293	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:53.625435114 CET	50293	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:53.625443935 CET	443	50293	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:53.625622988 CET	443	50293	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:53.630624056 CET	50294	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:53.630671024 CET	443	50294	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:53.630729914 CET	50294	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:53.707551003 CET	50294	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:53.707551956 CET	50294	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:53.707626104 CET	443	50294	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:53.707659960 CET	443	50294	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:53.707739115 CET	443	50294	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:55.736751080 CET	50295	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:55.736856937 CET	443	50295	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:55.736943007 CET	50295	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:55.781933069 CET	50295	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:55.782012939 CET	443	50295	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:55.782067060 CET	50295	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:55.782074928 CET	443	50295	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:55.782110929 CET	443	50295	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:55.785121918 CET	50296	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:55.785223007 CET	443	50296	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:55.785309076 CET	50296	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:55.837136030 CET	50296	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:55.837219000 CET	443	50296	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:55.837261915 CET	443	50296	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:55.837285042 CET	50296	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:55.837327003 CET	443	50296	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:55.840432882 CET	50297	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:55.840471029 CET	443	50297	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:55.840625048 CET	50297	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:55.892627001 CET	50297	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:55.892651081 CET	443	50297	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:55.892695904 CET	443	50297	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:55.892781019 CET	50297	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:55.892792940 CET	443	50297	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:55.895715952 CET	50298	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:55.895816088 CET	443	50298	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:55.895904064 CET	50298	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:55.960917950 CET	50298	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:55.960979939 CET	443	50298	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:55.961029053 CET	443	50298	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:55.961064100 CET	50298	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:55.961092949 CET	443	50298	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:55.964226961 CET	50299	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:55.964267969 CET	443	50299	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:55.964329004 CET	50299	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:56.011627913 CET	50299	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:56.011627913 CET	50299	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:56.011647940 CET	443	50299	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:56.011658907 CET	443	50299	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:56.011712074 CET	443	50299	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:56.019334078 CET	50300	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:56.019377947 CET	443	50300	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:56.019531965 CET	50300	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:56.091052055 CET	50300	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:56.091078997 CET	443	50300	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:56.091135979 CET	443	50300	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:56.091250896 CET	50300	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:56.091267109 CET	443	50300	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:56.095048904 CET	50301	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:56.095101118 CET	443	50301	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:56.095160961 CET	50301	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:56.157922029 CET	50301	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:56.157955885 CET	443	50301	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:56.158034086 CET	443	50301	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:56.161087036 CET	50302	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:56.161144018 CET	443	50302	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:56.161236048 CET	50302	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:56.207375050 CET	50302	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:56.207412004 CET	443	50302	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:56.207477093 CET	443	50302	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:58.236527920 CET	50303	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:58.236571074 CET	443	50303	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:58.236629963 CET	50303	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:58.289763927 CET	50303	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:22:58.289798975 CET	443	50303	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:58.289907932 CET	443	50303	77.221.149.84	192.168.2.4
Dec 11, 2024 16:22:58.292743921 CET	50304	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:58.292853117 CET	443	50304	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:58.293263912 CET	50304	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:58.340915918 CET	50304	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:58.340945005 CET	443	50304	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:58.341012955 CET	443	50304	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:58.341031075 CET	50304	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:22:58.341048956 CET	443	50304	89.116.191.177	192.168.2.4
Dec 11, 2024 16:22:58.345814943 CET	50305	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:58.345864058 CET	443	50305	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:58.347862005 CET	50305	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:59.466306925 CET	50305	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:59.466329098 CET	443	50305	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:59.466372013 CET	50305	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:22:59.466377974 CET	443	50305	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:59.466476917 CET	443	50305	213.210.13.4	192.168.2.4
Dec 11, 2024 16:22:59.471041918 CET	50306	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:59.471081018 CET	443	50306	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:59.471142054 CET	50306	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:59.535548925 CET	50306	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:59.535572052 CET	443	50306	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:59.535624981 CET	50306	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:59.535659075 CET	443	50306	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:59.535733938 CET	443	50306	193.188.22.40	192.168.2.4
Dec 11, 2024 16:22:59.536710024 CET	50306	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:22:59.536724091 CET	443	50306	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:01.687252045 CET	50307	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:01.687293053 CET	443	50307	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:01.687347889 CET	50307	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:01.795305967 CET	50307	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:01.795305967 CET	50307	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:01.795360088 CET	443	50307	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:01.795373917 CET	443	50307	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:01.795512915 CET	443	50307	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:01.799666882 CET	50308	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:01.799705029 CET	443	50308	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:01.799801111 CET	50308	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:01.846311092 CET	50308	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:01.846338034 CET	443	50308	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:01.846383095 CET	50308	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:01.846389055 CET	443	50308	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:01.846519947 CET	443	50308	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:01.852041960 CET	50309	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:01.852092028 CET	443	50309	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:01.852143049 CET	50309	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:01.959031105 CET	50309	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:01.959068060 CET	443	50309	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:01.959119081 CET	50309	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:01.959127903 CET	443	50309	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:01.959141016 CET	443	50309	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:01.964381933 CET	50310	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:01.964430094 CET	443	50310	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:01.964551926 CET	50310	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:02.025101900 CET	50310	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:02.025135994 CET	443	50310	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:02.025218964 CET	443	50310	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:02.025232077 CET	50310	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:02.025250912 CET	443	50310	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:02.036961079 CET	50311	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:02.037000895 CET	443	50311	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:02.037101984 CET	50311	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:02.103359938 CET	50311	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:02.103394032 CET	443	50311	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:02.103441954 CET	50311	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:02.103456020 CET	443	50311	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:02.107528925 CET	50312	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:02.107575893 CET	443	50312	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:02.107636929 CET	50312	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:02.168133020 CET	50312	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:02.168168068 CET	443	50312	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:02.168229103 CET	50312	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:02.168241978 CET	443	50312	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:02.168247938 CET	443	50312	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:02.173666954 CET	50313	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:02.173706055 CET	443	50313	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:02.173759937 CET	50313	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:02.253943920 CET	50313	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:02.253977060 CET	443	50313	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:02.254020929 CET	50313	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:02.254026890 CET	443	50313	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:02.254163027 CET	443	50313	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:02.258212090 CET	50314	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:02.258270979 CET	443	50314	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:02.258343935 CET	50314	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:02.326256990 CET	50314	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:02.326298952 CET	443	50314	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:02.326366901 CET	443	50314	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:02.326535940 CET	50314	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:02.326554060 CET	443	50314	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:04.346889019 CET	50315	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:04.346944094 CET	443	50315	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:04.347347975 CET	50315	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:04.391377926 CET	50315	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:04.391391993 CET	443	50315	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:04.391455889 CET	443	50315	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:04.401177883 CET	50316	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:04.401228905 CET	443	50316	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:04.409168959 CET	50316	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:04.448771000 CET	50316	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:04.448793888 CET	443	50316	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:04.448838949 CET	443	50316	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:04.453171968 CET	50317	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:04.453206062 CET	443	50317	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:04.461174011 CET	50317	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:05.506876945 CET	50317	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:05.506920099 CET	443	50317	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:05.506937981 CET	50317	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:05.506946087 CET	443	50317	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:05.506970882 CET	443	50317	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:05.509766102 CET	50318	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:05.509843111 CET	443	50318	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:05.509932041 CET	50318	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:05.565871000 CET	50318	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:05.565892935 CET	443	50318	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:05.565939903 CET	50318	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:05.565948963 CET	443	50318	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:07.597248077 CET	50319	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:07.597352028 CET	443	50319	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:07.597429037 CET	50319	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:07.669492006 CET	50319	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:07.669531107 CET	443	50319	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:07.669584036 CET	443	50319	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:07.669610977 CET	50319	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:07.669627905 CET	443	50319	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:07.675723076 CET	50320	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:07.675753117 CET	443	50320	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:07.675859928 CET	50320	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:07.766860008 CET	50320	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:07.766885042 CET	443	50320	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:07.766932964 CET	443	50320	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:07.766935110 CET	50320	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:07.766947985 CET	443	50320	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:07.773844957 CET	50321	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:07.773895025 CET	443	50321	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:07.773958921 CET	50321	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:07.883044004 CET	50321	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:07.883070946 CET	443	50321	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:07.883131981 CET	50321	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:07.883138895 CET	443	50321	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:07.886751890 CET	50322	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:07.886790037 CET	443	50322	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:07.886858940 CET	50322	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:07.964061022 CET	50322	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:07.964076042 CET	443	50322	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:07.964111090 CET	443	50322	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:07.964119911 CET	50322	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:07.964139938 CET	443	50322	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:07.968915939 CET	50323	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:07.968966007 CET	443	50323	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:07.969022036 CET	50323	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:08.031332016 CET	50323	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:08.031361103 CET	443	50323	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:08.031378031 CET	50323	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:08.031383991 CET	443	50323	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:08.031424999 CET	443	50323	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:08.037211895 CET	50324	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:08.037246943 CET	443	50324	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:08.037298918 CET	50324	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:08.140410900 CET	50324	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:08.140424013 CET	443	50324	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:08.140477896 CET	50324	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:08.140476942 CET	443	50324	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:08.140490055 CET	443	50324	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:08.146056890 CET	50325	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:08.146104097 CET	443	50325	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:08.146164894 CET	50325	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:08.222956896 CET	50325	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:08.222997904 CET	443	50325	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:08.223032951 CET	50325	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:08.223042011 CET	443	50325	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:08.223064899 CET	443	50325	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:08.227066994 CET	50326	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:08.227118015 CET	443	50326	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:08.227346897 CET	50326	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:08.307341099 CET	50326	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:08.307377100 CET	443	50326	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:08.307426929 CET	443	50326	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:08.307452917 CET	50326	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:08.307471991 CET	443	50326	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:10.596163034 CET	50327	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:10.596214056 CET	443	50327	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:10.596426964 CET	50327	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:10.647387028 CET	50327	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:10.647423983 CET	443	50327	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:10.647497892 CET	443	50327	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:10.647531033 CET	50327	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:10.647552013 CET	443	50327	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:10.651684046 CET	50328	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:10.651732922 CET	443	50328	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:10.651896000 CET	50328	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:10.713144064 CET	50328	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:10.713180065 CET	443	50328	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:10.713246107 CET	443	50328	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:10.717256069 CET	50329	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:10.717304945 CET	443	50329	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:10.717664957 CET	50329	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:10.771333933 CET	50329	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:10.771358013 CET	443	50329	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:10.771429062 CET	443	50329	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:10.775310040 CET	50330	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:10.775372982 CET	443	50330	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:10.775505066 CET	50330	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:10.817375898 CET	50330	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:10.817409992 CET	443	50330	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:10.817468882 CET	443	50330	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:10.817611933 CET	50330	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:10.817630053 CET	443	50330	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:12.861133099 CET	50331	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:12.861183882 CET	443	50331	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:12.861931086 CET	50331	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:12.905144930 CET	50331	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:12.905144930 CET	50331	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:12.905164003 CET	443	50331	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:12.905177116 CET	443	50331	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:12.905226946 CET	443	50331	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:12.913120031 CET	50332	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:12.913175106 CET	443	50332	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:12.921124935 CET	50332	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:13.968528032 CET	50332	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:13.968549967 CET	443	50332	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:13.968638897 CET	443	50332	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:13.972332954 CET	50333	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:13.972407103 CET	443	50333	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:13.972487926 CET	50333	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:14.009917021 CET	50333	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:14.009947062 CET	443	50333	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:14.010005951 CET	50333	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:14.010015965 CET	443	50333	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:14.010031939 CET	443	50333	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:14.011084080 CET	50334	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:14.011131048 CET	443	50334	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:14.013175011 CET	50334	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:14.057167053 CET	50334	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:14.057197094 CET	443	50334	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:14.057243109 CET	50334	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:14.057262897 CET	443	50334	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:14.057274103 CET	443	50334	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:14.058455944 CET	50335	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:14.058495998 CET	443	50335	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:14.058578014 CET	50335	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:14.109564066 CET	50335	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:14.109599113 CET	443	50335	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:14.109658003 CET	443	50335	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:14.109762907 CET	50335	443	192.168.2.4	77.221.149.84
Dec 11, 2024 16:23:14.109776020 CET	443	50335	77.221.149.84	192.168.2.4
Dec 11, 2024 16:23:14.110790014 CET	50336	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:14.110830069 CET	443	50336	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:14.111540079 CET	50336	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:14.171885967 CET	50336	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:14.171921015 CET	443	50336	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:14.171982050 CET	50336	443	192.168.2.4	89.116.191.177
Dec 11, 2024 16:23:14.171991110 CET	443	50336	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:14.171998024 CET	443	50336	89.116.191.177	192.168.2.4
Dec 11, 2024 16:23:14.173110008 CET	50337	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:14.173216105 CET	443	50337	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:14.173310041 CET	50337	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:14.213737011 CET	50337	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:14.213792086 CET	443	50337	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:14.213840008 CET	443	50337	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:14.213856936 CET	50337	443	192.168.2.4	213.210.13.4
Dec 11, 2024 16:23:14.213875055 CET	443	50337	213.210.13.4	192.168.2.4
Dec 11, 2024 16:23:14.215337992 CET	50338	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:14.215378046 CET	443	50338	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:14.216180086 CET	50338	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:14.265122890 CET	50338	443	192.168.2.4	193.188.22.40
Dec 11, 2024 16:23:14.265153885 CET	443	50338	193.188.22.40	192.168.2.4
Dec 11, 2024 16:23:14.265208960 CET	443	50338	193.188.22.40	192.168.2.4

Target ID:	0
Start time:	10:19:04
Start date:	11/12/2024
Path:	C:\Users\user\Desktop\UFh7A8CImG.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\UFh7A8CImG.exe"
Imagebase:	0xe50000
File size:	13'858'920 bytes
MD5 hash:	33285B33F1D7997939C34A2DEB30BEAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Target ID:	1
Start time:	10:19:07
Start date:	11/12/2024
Path:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe"
Imagebase:	0x400000
File size:	2'607'448 bytes
MD5 hash:	5B219E412528752277F1118513D99D43
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1771393442.0000000006107000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000001.00000003.1771393442.0000000006107000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1766962431.00000000055C1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000001.00000003.1766962431.00000000055C1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1776282835.0000000005B54000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000001.00000003.1776282835.0000000005B54000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.2112045230.0000000007C9E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000001.00000003.2112045230.0000000007C9E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.2111575348.000000000699E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000001.00000003.2111575348.000000000699E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1772025546.0000000005B59000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000001.00000003.1772025546.0000000005B59000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1766487852.000000000501F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000001.00000003.1766487852.000000000501F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.2111088801.0000000005B52000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000001.00000003.2111088801.0000000005B52000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.2112762112.000000000699A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000001.00000003.2112762112.000000000699A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1769409309.0000000005019000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000001.00000003.1769409309.0000000005019000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1770783572.0000000005B5F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000001.00000003.1770783572.0000000005B5F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1767758397.0000000004A76000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000001.00000003.1767758397.0000000004A76000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.2115889808.0000000007C9A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000001.00000003.2115889808.0000000007C9A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1772504401.00000000060FE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000001.00000003.1772504401.00000000060FE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1770179849.0000000005013000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000001.00000003.1770179849.0000000005013000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 3%, ReversingLabs
Reputation:	low
Has exited:	false

Target ID:	6
Start time:	10:20:36
Start date:	11/12/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\cmd.exe /c powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe"
Imagebase:	0x240000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	7
Start time:	10:20:36
Start date:	11/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	8
Start time:	10:20:36
Start date:	11/12/2024
Path:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe"
Imagebase:	0x400000
File size:	2'607'448 bytes
MD5 hash:	5B219E412528752277F1118513D99D43
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000002.4163904835.000000000547F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000008.00000002.4163904835.000000000547F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000002.4163433694.0000000004ED6000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000008.00000002.4163433694.0000000004ED6000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000003.2672511181.0000000005485000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000008.00000003.2672511181.0000000005485000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000003.2675930453.0000000005476000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000008.00000003.2675930453.0000000005476000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000003.2677180622.0000000004933000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000008.00000003.2677180622.0000000004933000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000003.2682133919.000000000493C000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000008.00000003.2682133919.000000000493C000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000003.2680974566.0000000005FD0000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000008.00000003.2680974566.0000000005FD0000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000003.2674638334.0000000004ED5000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000008.00000003.2674638334.0000000004ED5000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000003.2681358492.0000000004ED1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000008.00000003.2681358492.0000000004ED1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000003.2672015882.0000000004EE0000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000008.00000003.2672015882.0000000004EE0000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000003.2675208046.0000000005A2A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 00000008.00000003.2675208046.0000000005A2A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Target ID:	9
Start time:	10:20:36
Start date:	11/12/2024
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe"
Imagebase:	0xd10000
File size:	433'152 bytes
MD5 hash:	C32CA4ACFCC635EC1EA6ED8A34DF5FAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	10
Start time:	10:20:46
Start date:	11/12/2024
Path:	C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Programs\VIRTINS UART Manager\MIs.exe"
Imagebase:	0x400000
File size:	2'607'448 bytes
MD5 hash:	5B219E412528752277F1118513D99D43
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.2753770406.0000000004F46000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 0000000A.00000003.2753770406.0000000004F46000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000002.4163859568.00000000054E8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 0000000A.00000002.4163859568.00000000054E8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.2757410780.0000000004F43000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 0000000A.00000003.2757410780.0000000004F43000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.2756648118.00000000054E9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 0000000A.00000003.2756648118.00000000054E9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000002.4163368007.00000000049A6000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 0000000A.00000002.4163368007.00000000049A6000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.2761374837.000000000603D000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 0000000A.00000003.2761374837.000000000603D000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.2754810471.00000000054E8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 0000000A.00000003.2754810471.00000000054E8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.2761931254.00000000054E2000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 0000000A.00000003.2761931254.00000000054E2000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.2757899973.0000000005A8F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 0000000A.00000003.2757899973.0000000005A8F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.2758858785.00000000049A7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 0000000A.00000003.2758858785.00000000049A7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.2762777663.0000000004F4C000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll, Description: Yara detected DanaBot stealer dll, Source: 0000000A.00000003.2762777663.0000000004F4C000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false